| Server IP : 103.4.122.14 / Your IP : 216.73.216.103 Web Server : Apache/2.4.62 (Unix) OpenSSL/1.0.2k-fips System : Linux cwp2.slnet.com.au 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64 User : statewid ( 1251) PHP Version : 8.3.31 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON Directory : /usr/local/apache/domlogs/ |
Upload File : |
[Mon Nov 10 18:27:27.608404 2025] [autoindex:error] [pid 3347:tid 3387] [client 196.251.85.129:53456] AH01276: Cannot serve directory /home/baldivis/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Mon Nov 10 18:31:51.796592 2025] [rewrite:trace3] [pid 5671:tid 5678] mod_rewrite.c(505): [client 192.178.4.101:41499] 192.178.4.101 - - [paramountbaldivis.com/sid#1c09dd8][rid#7fb1b001f700/initial] [perdir /home/baldivis/public_html/] strip per-dir prefix: /home/baldivis/public_html/ ->
[Mon Nov 10 18:31:51.796645 2025] [rewrite:trace3] [pid 5671:tid 5678] mod_rewrite.c(505): [client 192.178.4.101:41499] 192.178.4.101 - - [paramountbaldivis.com/sid#1c09dd8][rid#7fb1b001f700/initial] [perdir /home/baldivis/public_html/] applying pattern '^index\\.php$' to uri ''
[Mon Nov 10 18:31:51.796658 2025] [rewrite:trace3] [pid 5671:tid 5678] mod_rewrite.c(505): [client 192.178.4.101:41499] 192.178.4.101 - - [paramountbaldivis.com/sid#1c09dd8][rid#7fb1b001f700/initial] [perdir /home/baldivis/public_html/] strip per-dir prefix: /home/baldivis/public_html/ ->
[Mon Nov 10 18:31:51.796667 2025] [rewrite:trace3] [pid 5671:tid 5678] mod_rewrite.c(505): [client 192.178.4.101:41499] 192.178.4.101 - - [paramountbaldivis.com/sid#1c09dd8][rid#7fb1b001f700/initial] [perdir /home/baldivis/public_html/] applying pattern '.' to uri ''
[Mon Nov 10 18:31:51.796676 2025] [rewrite:trace1] [pid 5671:tid 5678] mod_rewrite.c(505): [client 192.178.4.101:41499] 192.178.4.101 - - [paramountbaldivis.com/sid#1c09dd8][rid#7fb1b001f700/initial] [perdir /home/baldivis/public_html/] pass through /home/baldivis/public_html/
[Mon Nov 10 18:31:51.796745 2025] [rewrite:trace3] [pid 5671:tid 5678] mod_rewrite.c(505): [client 192.178.4.101:41499] 192.178.4.101 - - [paramountbaldivis.com/sid#1c09dd8][rid#7fb1b00d7b00/subreq] [perdir /home/baldivis/public_html/] strip per-dir prefix: /home/baldivis/public_html/index.php -> index.php
[Mon Nov 10 18:31:51.796768 2025] [rewrite:trace3] [pid 5671:tid 5678] mod_rewrite.c(505): [client 192.178.4.101:41499] 192.178.4.101 - - [paramountbaldivis.com/sid#1c09dd8][rid#7fb1b00d7b00/subreq] [perdir /home/baldivis/public_html/] applying pattern '^index\\.php$' to uri 'index.php'
[Mon Nov 10 18:31:51.796780 2025] [rewrite:trace1] [pid 5671:tid 5678] mod_rewrite.c(505): [client 192.178.4.101:41499] 192.178.4.101 - - [paramountbaldivis.com/sid#1c09dd8][rid#7fb1b00d7b00/subreq] [perdir /home/baldivis/public_html/] pass through /home/baldivis/public_html/index.php
[Mon Nov 10 18:32:03.838597 2025] [rewrite:trace3] [pid 5671:tid 5689] mod_rewrite.c(505): [client 192.178.4.103:43828] 192.178.4.103 - - [paramountbaldivis.com/sid#1c09dd8][rid#7fb1940c1890/initial] [perdir /home/baldivis/public_html/] strip per-dir prefix: /home/baldivis/public_html/ ->
[Mon Nov 10 18:32:03.838652 2025] [rewrite:trace3] [pid 5671:tid 5689] mod_rewrite.c(505): [client 192.178.4.103:43828] 192.178.4.103 - - [paramountbaldivis.com/sid#1c09dd8][rid#7fb1940c1890/initial] [perdir /home/baldivis/public_html/] applying pattern '^index\\.php$' to uri ''
[Mon Nov 10 18:32:03.838665 2025] [rewrite:trace3] [pid 5671:tid 5689] mod_rewrite.c(505): [client 192.178.4.103:43828] 192.178.4.103 - - [paramountbaldivis.com/sid#1c09dd8][rid#7fb1940c1890/initial] [perdir /home/baldivis/public_html/] strip per-dir prefix: /home/baldivis/public_html/ ->
[Mon Nov 10 18:32:03.838674 2025] [rewrite:trace3] [pid 5671:tid 5689] mod_rewrite.c(505): [client 192.178.4.103:43828] 192.178.4.103 - - [paramountbaldivis.com/sid#1c09dd8][rid#7fb1940c1890/initial] [perdir /home/baldivis/public_html/] applying pattern '.' to uri ''
[Mon Nov 10 18:32:03.838684 2025] [rewrite:trace1] [pid 5671:tid 5689] mod_rewrite.c(505): [client 192.178.4.103:43828] 192.178.4.103 - - [paramountbaldivis.com/sid#1c09dd8][rid#7fb1940c1890/initial] [perdir /home/baldivis/public_html/] pass through /home/baldivis/public_html/
[Mon Nov 10 18:32:03.838792 2025] [rewrite:trace3] [pid 5671:tid 5689] mod_rewrite.c(505): [client 192.178.4.103:43828] 192.178.4.103 - - [paramountbaldivis.com/sid#1c09dd8][rid#7fb15c0abb30/subreq] [perdir /home/baldivis/public_html/] strip per-dir prefix: /home/baldivis/public_html/index.php -> index.php
[Mon Nov 10 18:32:03.838813 2025] [rewrite:trace3] [pid 5671:tid 5689] mod_rewrite.c(505): [client 192.178.4.103:43828] 192.178.4.103 - - [paramountbaldivis.com/sid#1c09dd8][rid#7fb15c0abb30/subreq] [perdir /home/baldivis/public_html/] applying pattern '^index\\.php$' to uri 'index.php'
[Mon Nov 10 18:32:03.838826 2025] [rewrite:trace1] [pid 5671:tid 5689] mod_rewrite.c(505): [client 192.178.4.103:43828] 192.178.4.103 - - [paramountbaldivis.com/sid#1c09dd8][rid#7fb15c0abb30/subreq] [perdir /home/baldivis/public_html/] pass through /home/baldivis/public_html/index.php
[Mon Nov 10 18:36:14.684950 2025] [rewrite:trace3] [pid 8162:tid 8181] mod_rewrite.c(505): [client 192.178.4.103:60413] 192.178.4.103 - - [paramountbaldivis.com/sid#25dcdd8][rid#7f47740175b0/initial] [perdir /home/baldivis/public_html/] strip per-dir prefix: /home/baldivis/public_html/ ->
[Mon Nov 10 18:36:14.684986 2025] [rewrite:trace3] [pid 8162:tid 8181] mod_rewrite.c(505): [client 192.178.4.103:60413] 192.178.4.103 - - [paramountbaldivis.com/sid#25dcdd8][rid#7f47740175b0/initial] [perdir /home/baldivis/public_html/] applying pattern '^index\\.php$' to uri ''
[Mon Nov 10 18:36:14.684997 2025] [rewrite:trace3] [pid 8162:tid 8181] mod_rewrite.c(505): [client 192.178.4.103:60413] 192.178.4.103 - - [paramountbaldivis.com/sid#25dcdd8][rid#7f47740175b0/initial] [perdir /home/baldivis/public_html/] strip per-dir prefix: /home/baldivis/public_html/ ->
[Mon Nov 10 18:36:14.685006 2025] [rewrite:trace3] [pid 8162:tid 8181] mod_rewrite.c(505): [client 192.178.4.103:60413] 192.178.4.103 - - [paramountbaldivis.com/sid#25dcdd8][rid#7f47740175b0/initial] [perdir /home/baldivis/public_html/] applying pattern '.' to uri ''
[Mon Nov 10 18:36:14.685016 2025] [rewrite:trace1] [pid 8162:tid 8181] mod_rewrite.c(505): [client 192.178.4.103:60413] 192.178.4.103 - - [paramountbaldivis.com/sid#25dcdd8][rid#7f47740175b0/initial] [perdir /home/baldivis/public_html/] pass through /home/baldivis/public_html/
[Mon Nov 10 18:36:14.685078 2025] [rewrite:trace3] [pid 8162:tid 8181] mod_rewrite.c(505): [client 192.178.4.103:60413] 192.178.4.103 - - [paramountbaldivis.com/sid#25dcdd8][rid#7f47740cf9b0/subreq] [perdir /home/baldivis/public_html/] strip per-dir prefix: /home/baldivis/public_html/index.php -> index.php
[Mon Nov 10 18:36:14.685096 2025] [rewrite:trace3] [pid 8162:tid 8181] mod_rewrite.c(505): [client 192.178.4.103:60413] 192.178.4.103 - - [paramountbaldivis.com/sid#25dcdd8][rid#7f47740cf9b0/subreq] [perdir /home/baldivis/public_html/] applying pattern '^index\\.php$' to uri 'index.php'
[Mon Nov 10 18:36:14.685107 2025] [rewrite:trace1] [pid 8162:tid 8181] mod_rewrite.c(505): [client 192.178.4.103:60413] 192.178.4.103 - - [paramountbaldivis.com/sid#25dcdd8][rid#7f47740cf9b0/subreq] [perdir /home/baldivis/public_html/] pass through /home/baldivis/public_html/index.php
[Mon Nov 10 18:36:24.046241 2025] [rewrite:trace3] [pid 8171:tid 8248] mod_rewrite.c(505): [client 192.178.4.102:39277] 192.178.4.102 - - [paramountbaldivis.com/sid#25dcdd8][rid#7f4768017800/initial] [perdir /home/baldivis/public_html/] strip per-dir prefix: /home/baldivis/public_html/ ->
[Mon Nov 10 18:36:24.046304 2025] [rewrite:trace3] [pid 8171:tid 8248] mod_rewrite.c(505): [client 192.178.4.102:39277] 192.178.4.102 - - [paramountbaldivis.com/sid#25dcdd8][rid#7f4768017800/initial] [perdir /home/baldivis/public_html/] applying pattern '^index\\.php$' to uri ''
[Mon Nov 10 18:36:24.046351 2025] [rewrite:trace3] [pid 8171:tid 8248] mod_rewrite.c(505): [client 192.178.4.102:39277] 192.178.4.102 - - [paramountbaldivis.com/sid#25dcdd8][rid#7f4768017800/initial] [perdir /home/baldivis/public_html/] strip per-dir prefix: /home/baldivis/public_html/ ->
[Mon Nov 10 18:36:24.046382 2025] [rewrite:trace3] [pid 8171:tid 8248] mod_rewrite.c(505): [client 192.178.4.102:39277] 192.178.4.102 - - [paramountbaldivis.com/sid#25dcdd8][rid#7f4768017800/initial] [perdir /home/baldivis/public_html/] applying pattern '.' to uri ''
[Mon Nov 10 18:36:24.046393 2025] [rewrite:trace1] [pid 8171:tid 8248] mod_rewrite.c(505): [client 192.178.4.102:39277] 192.178.4.102 - - [paramountbaldivis.com/sid#25dcdd8][rid#7f4768017800/initial] [perdir /home/baldivis/public_html/] pass through /home/baldivis/public_html/
[Mon Nov 10 18:36:24.046484 2025] [rewrite:trace3] [pid 8171:tid 8248] mod_rewrite.c(505): [client 192.178.4.102:39277] 192.178.4.102 - - [paramountbaldivis.com/sid#25dcdd8][rid#7f47680cfc00/subreq] [perdir /home/baldivis/public_html/] strip per-dir prefix: /home/baldivis/public_html/index.php -> index.php
[Mon Nov 10 18:36:24.046489 2025] [rewrite:trace3] [pid 8171:tid 8248] mod_rewrite.c(505): [client 192.178.4.102:39277] 192.178.4.102 - - [paramountbaldivis.com/sid#25dcdd8][rid#7f47680cfc00/subreq] [perdir /home/baldivis/public_html/] applying pattern '^index\\.php$' to uri 'index.php'
[Mon Nov 10 18:36:24.046489 2025] [rewrite:trace1] [pid 8171:tid 8248] mod_rewrite.c(505): [client 192.178.4.102:39277] 192.178.4.102 - - [paramountbaldivis.com/sid#25dcdd8][rid#7f47680cfc00/subreq] [perdir /home/baldivis/public_html/] pass through /home/baldivis/public_html/index.php
[Mon Nov 10 18:36:42.380454 2025] [rewrite:trace3] [pid 8171:tid 8251] mod_rewrite.c(505): [client 192.178.4.101:48467] 192.178.4.101 - - [paramountbaldivis.com/sid#25dcdd8][rid#7f47800420e0/initial] [perdir /home/baldivis/public_html/] strip per-dir prefix: /home/baldivis/public_html/ ->
[Mon Nov 10 18:36:42.380535 2025] [rewrite:trace3] [pid 8171:tid 8251] mod_rewrite.c(505): [client 192.178.4.101:48467] 192.178.4.101 - - [paramountbaldivis.com/sid#25dcdd8][rid#7f47800420e0/initial] [perdir /home/baldivis/public_html/] applying pattern '^index\\.php$' to uri ''
[Mon Nov 10 18:36:42.380551 2025] [rewrite:trace3] [pid 8171:tid 8251] mod_rewrite.c(505): [client 192.178.4.101:48467] 192.178.4.101 - - [paramountbaldivis.com/sid#25dcdd8][rid#7f47800420e0/initial] [perdir /home/baldivis/public_html/] strip per-dir prefix: /home/baldivis/public_html/ ->
[Mon Nov 10 18:36:42.380561 2025] [rewrite:trace3] [pid 8171:tid 8251] mod_rewrite.c(505): [client 192.178.4.101:48467] 192.178.4.101 - - [paramountbaldivis.com/sid#25dcdd8][rid#7f47800420e0/initial] [perdir /home/baldivis/public_html/] applying pattern '.' to uri ''
[Mon Nov 10 18:36:42.380570 2025] [rewrite:trace1] [pid 8171:tid 8251] mod_rewrite.c(505): [client 192.178.4.101:48467] 192.178.4.101 - - [paramountbaldivis.com/sid#25dcdd8][rid#7f47800420e0/initial] [perdir /home/baldivis/public_html/] pass through /home/baldivis/public_html/
[Mon Nov 10 18:36:42.380690 2025] [rewrite:trace3] [pid 8171:tid 8251] mod_rewrite.c(505): [client 192.178.4.101:48467] 192.178.4.101 - - [paramountbaldivis.com/sid#25dcdd8][rid#7f47800e7740/subreq] [perdir /home/baldivis/public_html/] strip per-dir prefix: /home/baldivis/public_html/index.php -> index.php
[Mon Nov 10 18:36:42.380700 2025] [rewrite:trace3] [pid 8171:tid 8251] mod_rewrite.c(505): [client 192.178.4.101:48467] 192.178.4.101 - - [paramountbaldivis.com/sid#25dcdd8][rid#7f47800e7740/subreq] [perdir /home/baldivis/public_html/] applying pattern '^index\\.php$' to uri 'index.php'
[Mon Nov 10 18:36:42.380711 2025] [rewrite:trace1] [pid 8171:tid 8251] mod_rewrite.c(505): [client 192.178.4.101:48467] 192.178.4.101 - - [paramountbaldivis.com/sid#25dcdd8][rid#7f47800e7740/subreq] [perdir /home/baldivis/public_html/] pass through /home/baldivis/public_html/index.php
[Mon Nov 10 18:36:48.813515 2025] [rewrite:trace3] [pid 8261:tid 8289] mod_rewrite.c(505): [client 192.178.4.101:45192] 192.178.4.101 - - [paramountbaldivis.com/sid#25dcdd8][rid#7f4794046220/initial] [perdir /home/baldivis/public_html/] strip per-dir prefix: /home/baldivis/public_html/ ->
[Mon Nov 10 18:36:48.813580 2025] [rewrite:trace3] [pid 8261:tid 8289] mod_rewrite.c(505): [client 192.178.4.101:45192] 192.178.4.101 - - [paramountbaldivis.com/sid#25dcdd8][rid#7f4794046220/initial] [perdir /home/baldivis/public_html/] applying pattern '^index\\.php$' to uri ''
[Mon Nov 10 18:36:48.813594 2025] [rewrite:trace3] [pid 8261:tid 8289] mod_rewrite.c(505): [client 192.178.4.101:45192] 192.178.4.101 - - [paramountbaldivis.com/sid#25dcdd8][rid#7f4794046220/initial] [perdir /home/baldivis/public_html/] strip per-dir prefix: /home/baldivis/public_html/ ->
[Mon Nov 10 18:36:48.813603 2025] [rewrite:trace3] [pid 8261:tid 8289] mod_rewrite.c(505): [client 192.178.4.101:45192] 192.178.4.101 - - [paramountbaldivis.com/sid#25dcdd8][rid#7f4794046220/initial] [perdir /home/baldivis/public_html/] applying pattern '.' to uri ''
[Mon Nov 10 18:36:48.813612 2025] [rewrite:trace1] [pid 8261:tid 8289] mod_rewrite.c(505): [client 192.178.4.101:45192] 192.178.4.101 - - [paramountbaldivis.com/sid#25dcdd8][rid#7f4794046220/initial] [perdir /home/baldivis/public_html/] pass through /home/baldivis/public_html/
[Mon Nov 10 18:36:48.813690 2025] [rewrite:trace3] [pid 8261:tid 8289] mod_rewrite.c(505): [client 192.178.4.101:45192] 192.178.4.101 - - [paramountbaldivis.com/sid#25dcdd8][rid#7f47940d7490/subreq] [perdir /home/baldivis/public_html/] strip per-dir prefix: /home/baldivis/public_html/index.php -> index.php
[Mon Nov 10 18:36:48.813704 2025] [rewrite:trace3] [pid 8261:tid 8289] mod_rewrite.c(505): [client 192.178.4.101:45192] 192.178.4.101 - - [paramountbaldivis.com/sid#25dcdd8][rid#7f47940d7490/subreq] [perdir /home/baldivis/public_html/] applying pattern '^index\\.php$' to uri 'index.php'
[Mon Nov 10 18:36:48.813716 2025] [rewrite:trace1] [pid 8261:tid 8289] mod_rewrite.c(505): [client 192.178.4.101:45192] 192.178.4.101 - - [paramountbaldivis.com/sid#25dcdd8][rid#7f47940d7490/subreq] [perdir /home/baldivis/public_html/] pass through /home/baldivis/public_html/index.php
[Mon Nov 10 18:37:30.883456 2025] [rewrite:trace3] [pid 8734:tid 8804] mod_rewrite.c(505): [client 192.178.4.101:62500] 192.178.4.101 - - [paramountbaldivis.com/sid#1b58dd8][rid#7f74e40175a0/initial] [perdir /home/baldivis/public_html/] strip per-dir prefix: /home/baldivis/public_html/ ->
[Mon Nov 10 18:37:30.883462 2025] [rewrite:trace3] [pid 8734:tid 8804] mod_rewrite.c(505): [client 192.178.4.101:62500] 192.178.4.101 - - [paramountbaldivis.com/sid#1b58dd8][rid#7f74e40175a0/initial] [perdir /home/baldivis/public_html/] applying pattern '^index\\.php$' to uri ''
[Mon Nov 10 18:37:30.883475 2025] [rewrite:trace3] [pid 8734:tid 8804] mod_rewrite.c(505): [client 192.178.4.101:62500] 192.178.4.101 - - [paramountbaldivis.com/sid#1b58dd8][rid#7f74e40175a0/initial] [perdir /home/baldivis/public_html/] strip per-dir prefix: /home/baldivis/public_html/ ->
[Mon Nov 10 18:37:30.883642 2025] [rewrite:trace3] [pid 8734:tid 8804] mod_rewrite.c(505): [client 192.178.4.101:62500] 192.178.4.101 - - [paramountbaldivis.com/sid#1b58dd8][rid#7f74e40175a0/initial] [perdir /home/baldivis/public_html/] applying pattern '.' to uri ''
[Mon Nov 10 18:37:30.883656 2025] [rewrite:trace1] [pid 8734:tid 8804] mod_rewrite.c(505): [client 192.178.4.101:62500] 192.178.4.101 - - [paramountbaldivis.com/sid#1b58dd8][rid#7f74e40175a0/initial] [perdir /home/baldivis/public_html/] pass through /home/baldivis/public_html/
[Mon Nov 10 18:37:30.883656 2025] [rewrite:trace3] [pid 8734:tid 8804] mod_rewrite.c(505): [client 192.178.4.101:62500] 192.178.4.101 - - [paramountbaldivis.com/sid#1b58dd8][rid#7f74e40cf9a0/subreq] [perdir /home/baldivis/public_html/] strip per-dir prefix: /home/baldivis/public_html/index.php -> index.php
[Mon Nov 10 18:37:30.883656 2025] [rewrite:trace3] [pid 8734:tid 8804] mod_rewrite.c(505): [client 192.178.4.101:62500] 192.178.4.101 - - [paramountbaldivis.com/sid#1b58dd8][rid#7f74e40cf9a0/subreq] [perdir /home/baldivis/public_html/] applying pattern '^index\\.php$' to uri 'index.php'
[Mon Nov 10 18:37:30.883656 2025] [rewrite:trace1] [pid 8734:tid 8804] mod_rewrite.c(505): [client 192.178.4.101:62500] 192.178.4.101 - - [paramountbaldivis.com/sid#1b58dd8][rid#7f74e40cf9a0/subreq] [perdir /home/baldivis/public_html/] pass through /home/baldivis/public_html/index.php
[Mon Nov 10 18:37:42.999347 2025] [rewrite:trace3] [pid 8734:tid 8814] mod_rewrite.c(505): [client 192.178.4.101:62965] 192.178.4.101 - - [paramountbaldivis.com/sid#1b58dd8][rid#7f750803d350/initial] [perdir /home/baldivis/public_html/] strip per-dir prefix: /home/baldivis/public_html/ ->
[Mon Nov 10 18:37:42.999830 2025] [rewrite:trace3] [pid 8734:tid 8814] mod_rewrite.c(505): [client 192.178.4.101:62965] 192.178.4.101 - - [paramountbaldivis.com/sid#1b58dd8][rid#7f750803d350/initial] [perdir /home/baldivis/public_html/] applying pattern '^index\\.php$' to uri ''
[Mon Nov 10 18:37:42.999837 2025] [rewrite:trace3] [pid 8734:tid 8814] mod_rewrite.c(505): [client 192.178.4.101:62965] 192.178.4.101 - - [paramountbaldivis.com/sid#1b58dd8][rid#7f750803d350/initial] [perdir /home/baldivis/public_html/] strip per-dir prefix: /home/baldivis/public_html/ ->
[Mon Nov 10 18:37:42.999837 2025] [rewrite:trace3] [pid 8734:tid 8814] mod_rewrite.c(505): [client 192.178.4.101:62965] 192.178.4.101 - - [paramountbaldivis.com/sid#1b58dd8][rid#7f750803d350/initial] [perdir /home/baldivis/public_html/] applying pattern '.' to uri ''
[Mon Nov 10 18:37:42.999840 2025] [rewrite:trace1] [pid 8734:tid 8814] mod_rewrite.c(505): [client 192.178.4.101:62965] 192.178.4.101 - - [paramountbaldivis.com/sid#1b58dd8][rid#7f750803d350/initial] [perdir /home/baldivis/public_html/] pass through /home/baldivis/public_html/
[Mon Nov 10 18:37:42.999927 2025] [rewrite:trace3] [pid 8734:tid 8814] mod_rewrite.c(505): [client 192.178.4.101:62965] 192.178.4.101 - - [paramountbaldivis.com/sid#1b58dd8][rid#7f751401f870/subreq] [perdir /home/baldivis/public_html/] strip per-dir prefix: /home/baldivis/public_html/index.php -> index.php
[Mon Nov 10 18:37:42.999945 2025] [rewrite:trace3] [pid 8734:tid 8814] mod_rewrite.c(505): [client 192.178.4.101:62965] 192.178.4.101 - - [paramountbaldivis.com/sid#1b58dd8][rid#7f751401f870/subreq] [perdir /home/baldivis/public_html/] applying pattern '^index\\.php$' to uri 'index.php'
[Mon Nov 10 18:37:42.999970 2025] [rewrite:trace1] [pid 8734:tid 8814] mod_rewrite.c(505): [client 192.178.4.101:62965] 192.178.4.101 - - [paramountbaldivis.com/sid#1b58dd8][rid#7f751401f870/subreq] [perdir /home/baldivis/public_html/] pass through /home/baldivis/public_html/index.php
[Mon Nov 10 18:37:54.308807 2025] [rewrite:trace3] [pid 8823:tid 8847] mod_rewrite.c(505): [client 192.178.4.101:53211] 192.178.4.101 - - [paramountbaldivis.com/sid#1b58dd8][rid#7f75100d4080/initial] [perdir /home/baldivis/public_html/] strip per-dir prefix: /home/baldivis/public_html/ ->
[Mon Nov 10 18:37:54.308869 2025] [rewrite:trace3] [pid 8823:tid 8847] mod_rewrite.c(505): [client 192.178.4.101:53211] 192.178.4.101 - - [paramountbaldivis.com/sid#1b58dd8][rid#7f75100d4080/initial] [perdir /home/baldivis/public_html/] applying pattern '^index\\.php$' to uri ''
[Mon Nov 10 18:37:54.308895 2025] [rewrite:trace3] [pid 8823:tid 8847] mod_rewrite.c(505): [client 192.178.4.101:53211] 192.178.4.101 - - [paramountbaldivis.com/sid#1b58dd8][rid#7f75100d4080/initial] [perdir /home/baldivis/public_html/] strip per-dir prefix: /home/baldivis/public_html/ ->
[Mon Nov 10 18:37:54.308913 2025] [rewrite:trace3] [pid 8823:tid 8847] mod_rewrite.c(505): [client 192.178.4.101:53211] 192.178.4.101 - - [paramountbaldivis.com/sid#1b58dd8][rid#7f75100d4080/initial] [perdir /home/baldivis/public_html/] applying pattern '.' to uri ''
[Mon Nov 10 18:37:54.308930 2025] [rewrite:trace1] [pid 8823:tid 8847] mod_rewrite.c(505): [client 192.178.4.101:53211] 192.178.4.101 - - [paramountbaldivis.com/sid#1b58dd8][rid#7f75100d4080/initial] [perdir /home/baldivis/public_html/] pass through /home/baldivis/public_html/
[Mon Nov 10 18:37:54.309047 2025] [rewrite:trace3] [pid 8823:tid 8847] mod_rewrite.c(505): [client 192.178.4.101:53211] 192.178.4.101 - - [paramountbaldivis.com/sid#1b58dd8][rid#7f75100f5e60/subreq] [perdir /home/baldivis/public_html/] strip per-dir prefix: /home/baldivis/public_html/index.php -> index.php
[Mon Nov 10 18:37:54.309089 2025] [rewrite:trace3] [pid 8823:tid 8847] mod_rewrite.c(505): [client 192.178.4.101:53211] 192.178.4.101 - - [paramountbaldivis.com/sid#1b58dd8][rid#7f75100f5e60/subreq] [perdir /home/baldivis/public_html/] applying pattern '^index\\.php$' to uri 'index.php'
[Mon Nov 10 18:37:54.309108 2025] [rewrite:trace1] [pid 8823:tid 8847] mod_rewrite.c(505): [client 192.178.4.101:53211] 192.178.4.101 - - [paramountbaldivis.com/sid#1b58dd8][rid#7f75100f5e60/subreq] [perdir /home/baldivis/public_html/] pass through /home/baldivis/public_html/index.php
[Mon Nov 10 18:38:35.371933 2025] [rewrite:trace3] [pid 9353:tid 9363] mod_rewrite.c(505): [client 54.225.148.123:57115] 54.225.148.123 - - [paramountbaldivis.com/sid#18dedd8][rid#7f5d940177e0/initial] [perdir /home/baldivis/public_html/] strip per-dir prefix: /home/baldivis/public_html/1234 slot.aspx -> 1234 slot.aspx
[Mon Nov 10 18:38:35.372019 2025] [rewrite:trace3] [pid 9353:tid 9363] mod_rewrite.c(505): [client 54.225.148.123:57115] 54.225.148.123 - - [paramountbaldivis.com/sid#18dedd8][rid#7f5d940177e0/initial] [perdir /home/baldivis/public_html/] applying pattern '^index\\.php$' to uri '1234 slot.aspx'
[Mon Nov 10 18:38:35.372032 2025] [rewrite:trace3] [pid 9353:tid 9363] mod_rewrite.c(505): [client 54.225.148.123:57115] 54.225.148.123 - - [paramountbaldivis.com/sid#18dedd8][rid#7f5d940177e0/initial] [perdir /home/baldivis/public_html/] strip per-dir prefix: /home/baldivis/public_html/1234 slot.aspx -> 1234 slot.aspx
[Mon Nov 10 18:38:35.372041 2025] [rewrite:trace3] [pid 9353:tid 9363] mod_rewrite.c(505): [client 54.225.148.123:57115] 54.225.148.123 - - [paramountbaldivis.com/sid#18dedd8][rid#7f5d940177e0/initial] [perdir /home/baldivis/public_html/] applying pattern '.' to uri '1234 slot.aspx'
[Mon Nov 10 18:38:35.372063 2025] [rewrite:trace4] [pid 9353:tid 9363] mod_rewrite.c(505): [client 54.225.148.123:57115] 54.225.148.123 - - [paramountbaldivis.com/sid#18dedd8][rid#7f5d940177e0/initial] [perdir /home/baldivis/public_html/] RewriteCond: input='/home/baldivis/public_html/1234 slot.aspx' pattern='!-f' => matched
[Mon Nov 10 18:38:35.372076 2025] [rewrite:trace4] [pid 9353:tid 9363] mod_rewrite.c(505): [client 54.225.148.123:57115] 54.225.148.123 - - [paramountbaldivis.com/sid#18dedd8][rid#7f5d940177e0/initial] [perdir /home/baldivis/public_html/] RewriteCond: input='/home/baldivis/public_html/1234 slot.aspx' pattern='!-d' => matched
[Mon Nov 10 18:38:35.372086 2025] [rewrite:trace2] [pid 9353:tid 9363] mod_rewrite.c(505): [client 54.225.148.123:57115] 54.225.148.123 - - [paramountbaldivis.com/sid#18dedd8][rid#7f5d940177e0/initial] [perdir /home/baldivis/public_html/] rewrite '1234 slot.aspx' -> '/index.php'
[Mon Nov 10 18:38:35.372100 2025] [rewrite:trace2] [pid 9353:tid 9363] mod_rewrite.c(505): [client 54.225.148.123:57115] 54.225.148.123 - - [paramountbaldivis.com/sid#18dedd8][rid#7f5d940177e0/initial] [perdir /home/baldivis/public_html/] setting lastsub to rule with output /index.php
[Mon Nov 10 18:38:35.372110 2025] [rewrite:trace2] [pid 9353:tid 9363] mod_rewrite.c(505): [client 54.225.148.123:57115] 54.225.148.123 - - [paramountbaldivis.com/sid#18dedd8][rid#7f5d940177e0/initial] [perdir /home/baldivis/public_html/] trying to replace prefix /home/baldivis/public_html/ with /
[Mon Nov 10 18:38:35.372121 2025] [rewrite:trace2] [pid 9353:tid 9363] mod_rewrite.c(505): [client 54.225.148.123:57115] 54.225.148.123 - - [paramountbaldivis.com/sid#18dedd8][rid#7f5d940177e0/initial] [perdir /home/baldivis/public_html/] trying to replace context docroot /home/baldivis/public_html with context prefix
[Mon Nov 10 18:38:35.372129 2025] [rewrite:trace1] [pid 9353:tid 9363] mod_rewrite.c(505): [client 54.225.148.123:57115] 54.225.148.123 - - [paramountbaldivis.com/sid#18dedd8][rid#7f5d940177e0/initial] [perdir /home/baldivis/public_html/] internal redirect with /index.php [INTERNAL REDIRECT]
[Mon Nov 10 18:38:36.381979 2025] [rewrite:trace3] [pid 9353:tid 9364] mod_rewrite.c(505): [client 44.193.102.198:6118] 44.193.102.198 - - [paramountbaldivis.com/sid#18dedd8][rid#7f5d8c016b00/initial] [perdir /home/baldivis/public_html/] strip per-dir prefix: /home/baldivis/public_html/pgslotgame.aspx -> pgslotgame.aspx
[Mon Nov 10 18:38:36.382075 2025] [rewrite:trace3] [pid 9353:tid 9364] mod_rewrite.c(505): [client 44.193.102.198:6118] 44.193.102.198 - - [paramountbaldivis.com/sid#18dedd8][rid#7f5d8c016b00/initial] [perdir /home/baldivis/public_html/] applying pattern '^index\\.php$' to uri 'pgslotgame.aspx'
[Mon Nov 10 18:38:36.382089 2025] [rewrite:trace3] [pid 9353:tid 9364] mod_rewrite.c(505): [client 44.193.102.198:6118] 44.193.102.198 - - [paramountbaldivis.com/sid#18dedd8][rid#7f5d8c016b00/initial] [perdir /home/baldivis/public_html/] strip per-dir prefix: /home/baldivis/public_html/pgslotgame.aspx -> pgslotgame.aspx
[Mon Nov 10 18:38:36.382098 2025] [rewrite:trace3] [pid 9353:tid 9364] mod_rewrite.c(505): [client 44.193.102.198:6118] 44.193.102.198 - - [paramountbaldivis.com/sid#18dedd8][rid#7f5d8c016b00/initial] [perdir /home/baldivis/public_html/] applying pattern '.' to uri 'pgslotgame.aspx'
[Mon Nov 10 18:38:36.382117 2025] [rewrite:trace4] [pid 9353:tid 9364] mod_rewrite.c(505): [client 44.193.102.198:6118] 44.193.102.198 - - [paramountbaldivis.com/sid#18dedd8][rid#7f5d8c016b00/initial] [perdir /home/baldivis/public_html/] RewriteCond: input='/home/baldivis/public_html/pgslotgame.aspx' pattern='!-f' => matched
[Mon Nov 10 18:38:36.382129 2025] [rewrite:trace4] [pid 9353:tid 9364] mod_rewrite.c(505): [client 44.193.102.198:6118] 44.193.102.198 - - [paramountbaldivis.com/sid#18dedd8][rid#7f5d8c016b00/initial] [perdir /home/baldivis/public_html/] RewriteCond: input='/home/baldivis/public_html/pgslotgame.aspx' pattern='!-d' => matched
[Mon Nov 10 18:38:36.382138 2025] [rewrite:trace2] [pid 9353:tid 9364] mod_rewrite.c(505): [client 44.193.102.198:6118] 44.193.102.198 - - [paramountbaldivis.com/sid#18dedd8][rid#7f5d8c016b00/initial] [perdir /home/baldivis/public_html/] rewrite 'pgslotgame.aspx' -> '/index.php'
[Mon Nov 10 18:38:36.382152 2025] [rewrite:trace2] [pid 9353:tid 9364] mod_rewrite.c(505): [client 44.193.102.198:6118] 44.193.102.198 - - [paramountbaldivis.com/sid#18dedd8][rid#7f5d8c016b00/initial] [perdir /home/baldivis/public_html/] setting lastsub to rule with output /index.php
[Mon Nov 10 18:38:36.382162 2025] [rewrite:trace2] [pid 9353:tid 9364] mod_rewrite.c(505): [client 44.193.102.198:6118] 44.193.102.198 - - [paramountbaldivis.com/sid#18dedd8][rid#7f5d8c016b00/initial] [perdir /home/baldivis/public_html/] trying to replace prefix /home/baldivis/public_html/ with /
[Mon Nov 10 18:38:36.382171 2025] [rewrite:trace2] [pid 9353:tid 9364] mod_rewrite.c(505): [client 44.193.102.198:6118] 44.193.102.198 - - [paramountbaldivis.com/sid#18dedd8][rid#7f5d8c016b00/initial] [perdir /home/baldivis/public_html/] trying to replace context docroot /home/baldivis/public_html with context prefix
[Mon Nov 10 18:38:36.382180 2025] [rewrite:trace1] [pid 9353:tid 9364] mod_rewrite.c(505): [client 44.193.102.198:6118] 44.193.102.198 - - [paramountbaldivis.com/sid#18dedd8][rid#7f5d8c016b00/initial] [perdir /home/baldivis/public_html/] internal redirect with /index.php [INTERNAL REDIRECT]
[Mon Nov 10 18:38:40.305494 2025] [rewrite:trace3] [pid 9262:tid 9268] mod_rewrite.c(505): [client 52.4.76.156:46345] 52.4.76.156 - - [paramountbaldivis.com/sid#18dedd8][rid#7f5dbc0c4260/initial] [perdir /home/baldivis/public_html/] strip per-dir prefix: /home/baldivis/public_html/789gbet.aspx -> 789gbet.aspx
[Mon Nov 10 18:38:40.305567 2025] [rewrite:trace3] [pid 9262:tid 9268] mod_rewrite.c(505): [client 52.4.76.156:46345] 52.4.76.156 - - [paramountbaldivis.com/sid#18dedd8][rid#7f5dbc0c4260/initial] [perdir /home/baldivis/public_html/] applying pattern '^index\\.php$' to uri '789gbet.aspx'
[Mon Nov 10 18:38:40.305581 2025] [rewrite:trace3] [pid 9262:tid 9268] mod_rewrite.c(505): [client 52.4.76.156:46345] 52.4.76.156 - - [paramountbaldivis.com/sid#18dedd8][rid#7f5dbc0c4260/initial] [perdir /home/baldivis/public_html/] strip per-dir prefix: /home/baldivis/public_html/789gbet.aspx -> 789gbet.aspx
[Mon Nov 10 18:38:40.305606 2025] [rewrite:trace3] [pid 9262:tid 9268] mod_rewrite.c(505): [client 52.4.76.156:46345] 52.4.76.156 - - [paramountbaldivis.com/sid#18dedd8][rid#7f5dbc0c4260/initial] [perdir /home/baldivis/public_html/] applying pattern '.' to uri '789gbet.aspx'
[Mon Nov 10 18:38:40.305627 2025] [rewrite:trace4] [pid 9262:tid 9268] mod_rewrite.c(505): [client 52.4.76.156:46345] 52.4.76.156 - - [paramountbaldivis.com/sid#18dedd8][rid#7f5dbc0c4260/initial] [perdir /home/baldivis/public_html/] RewriteCond: input='/home/baldivis/public_html/789gbet.aspx' pattern='!-f' => matched
[Mon Nov 10 18:38:40.305640 2025] [rewrite:trace4] [pid 9262:tid 9268] mod_rewrite.c(505): [client 52.4.76.156:46345] 52.4.76.156 - - [paramountbaldivis.com/sid#18dedd8][rid#7f5dbc0c4260/initial] [perdir /home/baldivis/public_html/] RewriteCond: input='/home/baldivis/public_html/789gbet.aspx' pattern='!-d' => matched
[Mon Nov 10 18:38:40.305649 2025] [rewrite:trace2] [pid 9262:tid 9268] mod_rewrite.c(505): [client 52.4.76.156:46345] 52.4.76.156 - - [paramountbaldivis.com/sid#18dedd8][rid#7f5dbc0c4260/initial] [perdir /home/baldivis/public_html/] rewrite '789gbet.aspx' -> '/index.php'
[Mon Nov 10 18:38:40.305663 2025] [rewrite:trace2] [pid 9262:tid 9268] mod_rewrite.c(505): [client 52.4.76.156:46345] 52.4.76.156 - - [paramountbaldivis.com/sid#18dedd8][rid#7f5dbc0c4260/initial] [perdir /home/baldivis/public_html/] setting lastsub to rule with output /index.php
[Mon Nov 10 18:38:40.305674 2025] [rewrite:trace2] [pid 9262:tid 9268] mod_rewrite.c(505): [client 52.4.76.156:46345] 52.4.76.156 - - [paramountbaldivis.com/sid#18dedd8][rid#7f5dbc0c4260/initial] [perdir /home/baldivis/public_html/] trying to replace prefix /home/baldivis/public_html/ with /
[Mon Nov 10 18:38:40.305684 2025] [rewrite:trace2] [pid 9262:tid 9268] mod_rewrite.c(505): [client 52.4.76.156:46345] 52.4.76.156 - - [paramountbaldivis.com/sid#18dedd8][rid#7f5dbc0c4260/initial] [perdir /home/baldivis/public_html/] trying to replace context docroot /home/baldivis/public_html with context prefix
[Mon Nov 10 18:38:40.305693 2025] [rewrite:trace1] [pid 9262:tid 9268] mod_rewrite.c(505): [client 52.4.76.156:46345] 52.4.76.156 - - [paramountbaldivis.com/sid#18dedd8][rid#7f5dbc0c4260/initial] [perdir /home/baldivis/public_html/] internal redirect with /index.php [INTERNAL REDIRECT]
[Mon Nov 10 18:38:42.932204 2025] [rewrite:trace3] [pid 9353:tid 9380] mod_rewrite.c(505): [client 192.178.4.102:50474] 192.178.4.102 - - [paramountbaldivis.com/sid#18dedd8][rid#7f5da81810c0/initial] [perdir /home/baldivis/public_html/] strip per-dir prefix: /home/baldivis/public_html/ ->
[Mon Nov 10 18:38:42.932326 2025] [rewrite:trace3] [pid 9353:tid 9380] mod_rewrite.c(505): [client 192.178.4.102:50474] 192.178.4.102 - - [paramountbaldivis.com/sid#18dedd8][rid#7f5da81810c0/initial] [perdir /home/baldivis/public_html/] applying pattern '^index\\.php$' to uri ''
[Mon Nov 10 18:38:42.932326 2025] [rewrite:trace3] [pid 9353:tid 9380] mod_rewrite.c(505): [client 192.178.4.102:50474] 192.178.4.102 - - [paramountbaldivis.com/sid#18dedd8][rid#7f5da81810c0/initial] [perdir /home/baldivis/public_html/] strip per-dir prefix: /home/baldivis/public_html/ ->
[Mon Nov 10 18:38:42.932326 2025] [rewrite:trace3] [pid 9353:tid 9380] mod_rewrite.c(505): [client 192.178.4.102:50474] 192.178.4.102 - - [paramountbaldivis.com/sid#18dedd8][rid#7f5da81810c0/initial] [perdir /home/baldivis/public_html/] applying pattern '.' to uri ''
[Mon Nov 10 18:38:42.932326 2025] [rewrite:trace1] [pid 9353:tid 9380] mod_rewrite.c(505): [client 192.178.4.102:50474] 192.178.4.102 - - [paramountbaldivis.com/sid#18dedd8][rid#7f5da81810c0/initial] [perdir /home/baldivis/public_html/] pass through /home/baldivis/public_html/
[Mon Nov 10 18:38:42.932409 2025] [rewrite:trace3] [pid 9353:tid 9380] mod_rewrite.c(505): [client 192.178.4.102:50474] 192.178.4.102 - - [paramountbaldivis.com/sid#18dedd8][rid#7f5dcd44b0b0/subreq] [perdir /home/baldivis/public_html/] strip per-dir prefix: /home/baldivis/public_html/index.php -> index.php
[Mon Nov 10 18:38:42.932456 2025] [rewrite:trace3] [pid 9353:tid 9380] mod_rewrite.c(505): [client 192.178.4.102:50474] 192.178.4.102 - - [paramountbaldivis.com/sid#18dedd8][rid#7f5dcd44b0b0/subreq] [perdir /home/baldivis/public_html/] applying pattern '^index\\.php$' to uri 'index.php'
[Mon Nov 10 18:38:42.932469 2025] [rewrite:trace1] [pid 9353:tid 9380] mod_rewrite.c(505): [client 192.178.4.102:50474] 192.178.4.102 - - [paramountbaldivis.com/sid#18dedd8][rid#7f5dcd44b0b0/subreq] [perdir /home/baldivis/public_html/] pass through /home/baldivis/public_html/index.php
[Mon Nov 10 18:38:46.404457 2025] [rewrite:trace3] [pid 9262:tid 9282] mod_rewrite.c(505): [client 18.205.127.11:41883] 18.205.127.11 - - [paramountbaldivis.com/sid#18dedd8][rid#7f5da8017850/initial] [perdir /home/baldivis/public_html/] strip per-dir prefix: /home/baldivis/public_html/\xe0\xb9\x80\xe0\xb8\x84\xe0\xb8\xa3\xe0\xb8\x94\xe0\xb8\xb4\xe0\xb8\x95\xe0\xb8\x9f\xe0\xb8\xa3\xe0\xb8\xb5 \xe0\xb8\x81\xe0\xb8\x94\xe0\xb8\xa3\xe0\xb8\xb1\xe0\xb8\x9a\xe0\xb9\x80\xe0\xb8\xad\xe0\xb8\x87 30.aspx -> \xe0\xb9\x80\xe0\xb8\x84\xe0\xb8\xa3\xe0\xb8\x94\xe0\xb8\xb4\xe0\xb8\x95\xe0\xb8\x9f\xe0\xb8\xa3\xe0\xb8\xb5 \xe0\xb8\x81\xe0\xb8\x94\xe0\xb8\xa3\xe0\xb8\xb1\xe0\xb8\x9a\xe0\xb9\x80\xe0\xb8\xad\xe0\xb8\x87 30.aspx
[Mon Nov 10 18:38:46.404508 2025] [rewrite:trace3] [pid 9262:tid 9282] mod_rewrite.c(505): [client 18.205.127.11:41883] 18.205.127.11 - - [paramountbaldivis.com/sid#18dedd8][rid#7f5da8017850/initial] [perdir /home/baldivis/public_html/] applying pattern '^index\\.php$' to uri '\xe0\xb9\x80\xe0\xb8\x84\xe0\xb8\xa3\xe0\xb8\x94\xe0\xb8\xb4\xe0\xb8\x95\xe0\xb8\x9f\xe0\xb8\xa3\xe0\xb8\xb5 \xe0\xb8\x81\xe0\xb8\x94\xe0\xb8\xa3\xe0\xb8\xb1\xe0\xb8\x9a\xe0\xb9\x80\xe0\xb8\xad\xe0\xb8\x87 30.aspx'
[Mon Nov 10 18:38:46.404522 2025] [rewrite:trace3] [pid 9262:tid 9282] mod_rewrite.c(505): [client 18.205.127.11:41883] 18.205.127.11 - - [paramountbaldivis.com/sid#18dedd8][rid#7f5da8017850/initial] [perdir /home/baldivis/public_html/] strip per-dir prefix: /home/baldivis/public_html/\xe0\xb9\x80\xe0\xb8\x84\xe0\xb8\xa3\xe0\xb8\x94\xe0\xb8\xb4\xe0\xb8\x95\xe0\xb8\x9f\xe0\xb8\xa3\xe0\xb8\xb5 \xe0\xb8\x81\xe0\xb8\x94\xe0\xb8\xa3\xe0\xb8\xb1\xe0\xb8\x9a\xe0\xb9\x80\xe0\xb8\xad\xe0\xb8\x87 30.aspx -> \xe0\xb9\x80\xe0\xb8\x84\xe0\xb8\xa3\xe0\xb8\x94\xe0\xb8\xb4\xe0\xb8\x95\xe0\xb8\x9f\xe0\xb8\xa3\xe0\xb8\xb5 \xe0\xb8\x81\xe0\xb8\x94\xe0\xb8\xa3\xe0\xb8\xb1\xe0\xb8\x9a\xe0\xb9\x80\xe0\xb8\xad\xe0\xb8\x87 30.aspx
[Mon Nov 10 18:38:46.404532 2025] [rewrite:trace3] [pid 9262:tid 9282] mod_rewrite.c(505): [client 18.205.127.11:41883] 18.205.127.11 - - [paramountbaldivis.com/sid#18dedd8][rid#7f5da8017850/initial] [perdir /home/baldivis/public_html/] applying pattern '.' to uri '\xe0\xb9\x80\xe0\xb8\x84\xe0\xb8\xa3\xe0\xb8\x94\xe0\xb8\xb4\xe0\xb8\x95\xe0\xb8\x9f\xe0\xb8\xa3\xe0\xb8\xb5 \xe0\xb8\x81\xe0\xb8\x94\xe0\xb8\xa3\xe0\xb8\xb1\xe0\xb8\x9a\xe0\xb9\x80\xe0\xb8\xad\xe0\xb8\x87 30.aspx'
[Mon Nov 10 18:38:46.404551 2025] [rewrite:trace4] [pid 9262:tid 9282] mod_rewrite.c(505): [client 18.205.127.11:41883] 18.205.127.11 - - [paramountbaldivis.com/sid#18dedd8][rid#7f5da8017850/initial] [perdir /home/baldivis/public_html/] RewriteCond: input='/home/baldivis/public_html/\xe0\xb9\x80\xe0\xb8\x84\xe0\xb8\xa3\xe0\xb8\x94\xe0\xb8\xb4\xe0\xb8\x95\xe0\xb8\x9f\xe0\xb8\xa3\xe0\xb8\xb5 \xe0\xb8\x81\xe0\xb8\x94\xe0\xb8\xa3\xe0\xb8\xb1\xe0\xb8\x9a\xe0\xb9\x80\xe0\xb8\xad\xe0\xb8\x87 30.aspx' pattern='!-f' => matched
[Mon Nov 10 18:38:46.404566 2025] [rewrite:trace4] [pid 9262:tid 9282] mod_rewrite.c(505): [client 18.205.127.11:41883] 18.205.127.11 - - [paramountbaldivis.com/sid#18dedd8][rid#7f5da8017850/initial] [perdir /home/baldivis/public_html/] RewriteCond: input='/home/baldivis/public_html/\xe0\xb9\x80\xe0\xb8\x84\xe0\xb8\xa3\xe0\xb8\x94\xe0\xb8\xb4\xe0\xb8\x95\xe0\xb8\x9f\xe0\xb8\xa3\xe0\xb8\xb5 \xe0\xb8\x81\xe0\xb8\x94\xe0\xb8\xa3\xe0\xb8\xb1\xe0\xb8\x9a\xe0\xb9\x80\xe0\xb8\xad\xe0\xb8\x87 30.aspx' pattern='!-d' => matched
[Mon Nov 10 18:38:46.404633 2025] [rewrite:trace2] [pid 9262:tid 9282] mod_rewrite.c(505): [client 18.205.127.11:41883] 18.205.127.11 - - [paramountbaldivis.com/sid#18dedd8][rid#7f5da8017850/initial] [perdir /home/baldivis/public_html/] rewrite '\xe0\xb9\x80\xe0\xb8\x84\xe0\xb8\xa3\xe0\xb8\x94\xe0\xb8\xb4\xe0\xb8\x95\xe0\xb8\x9f\xe0\xb8\xa3\xe0\xb8\xb5 \xe0\xb8\x81\xe0\xb8\x94\xe0\xb8\xa3\xe0\xb8\xb1\xe0\xb8\x9a\xe0\xb9\x80\xe0\xb8\xad\xe0\xb8\x87 30.aspx' -> '/index.php'
[Mon Nov 10 18:38:46.404656 2025] [rewrite:trace2] [pid 9262:tid 9282] mod_rewrite.c(505): [client 18.205.127.11:41883] 18.205.127.11 - - [paramountbaldivis.com/sid#18dedd8][rid#7f5da8017850/initial] [perdir /home/baldivis/public_html/] setting lastsub to rule with output /index.php
[Mon Nov 10 18:38:46.404656 2025] [rewrite:trace2] [pid 9262:tid 9282] mod_rewrite.c(505): [client 18.205.127.11:41883] 18.205.127.11 - - [paramountbaldivis.com/sid#18dedd8][rid#7f5da8017850/initial] [perdir /home/baldivis/public_html/] trying to replace prefix /home/baldivis/public_html/ with /
[Mon Nov 10 18:38:46.404673 2025] [rewrite:trace2] [pid 9262:tid 9282] mod_rewrite.c(505): [client 18.205.127.11:41883] 18.205.127.11 - - [paramountbaldivis.com/sid#18dedd8][rid#7f5da8017850/initial] [perdir /home/baldivis/public_html/] trying to replace context docroot /home/baldivis/public_html with context prefix
[Mon Nov 10 18:38:46.404688 2025] [rewrite:trace1] [pid 9262:tid 9282] mod_rewrite.c(505): [client 18.205.127.11:41883] 18.205.127.11 - - [paramountbaldivis.com/sid#18dedd8][rid#7f5da8017850/initial] [perdir /home/baldivis/public_html/] internal redirect with /index.php [INTERNAL REDIRECT]
[Mon Nov 10 18:38:47.287354 2025] [rewrite:trace3] [pid 9353:tid 9372] mod_rewrite.c(505): [client 98.82.40.168:35054] 98.82.40.168 - - [paramountbaldivis.com/sid#18dedd8][rid#7f5d60015990/initial] [perdir /home/baldivis/public_html/] strip per-dir prefix: /home/baldivis/public_html/\xe0\xb8\x88\xe0\xb8\xb5\xe0\xb8\x84\xe0\xb8\xa5\xe0\xb8\xb1\xe0\xb8\x9a\xe0\xb8\xaa\xe0\xb8\xa5\xe0\xb9\x87\xe0\xb8\xad\xe0\xb8\x95.aspx -> \xe0\xb8\x88\xe0\xb8\xb5\xe0\xb8\x84\xe0\xb8\xa5\xe0\xb8\xb1\xe0\xb8\x9a\xe0\xb8\xaa\xe0\xb8\xa5\xe0\xb9\x87\xe0\xb8\xad\xe0\xb8\x95.aspx
[Mon Nov 10 18:38:47.287446 2025] [rewrite:trace3] [pid 9353:tid 9372] mod_rewrite.c(505): [client 98.82.40.168:35054] 98.82.40.168 - - [paramountbaldivis.com/sid#18dedd8][rid#7f5d60015990/initial] [perdir /home/baldivis/public_html/] applying pattern '^index\\.php$' to uri '\xe0\xb8\x88\xe0\xb8\xb5\xe0\xb8\x84\xe0\xb8\xa5\xe0\xb8\xb1\xe0\xb8\x9a\xe0\xb8\xaa\xe0\xb8\xa5\xe0\xb9\x87\xe0\xb8\xad\xe0\xb8\x95.aspx'
[Mon Nov 10 18:38:47.287468 2025] [rewrite:trace3] [pid 9353:tid 9372] mod_rewrite.c(505): [client 98.82.40.168:35054] 98.82.40.168 - - [paramountbaldivis.com/sid#18dedd8][rid#7f5d60015990/initial] [perdir /home/baldivis/public_html/] strip per-dir prefix: /home/baldivis/public_html/\xe0\xb8\x88\xe0\xb8\xb5\xe0\xb8\x84\xe0\xb8\xa5\xe0\xb8\xb1\xe0\xb8\x9a\xe0\xb8\xaa\xe0\xb8\xa5\xe0\xb9\x87\xe0\xb8\xad\xe0\xb8\x95.aspx -> \xe0\xb8\x88\xe0\xb8\xb5\xe0\xb8\x84\xe0\xb8\xa5\xe0\xb8\xb1\xe0\xb8\x9a\xe0\xb8\xaa\xe0\xb8\xa5\xe0\xb9\x87\xe0\xb8\xad\xe0\xb8\x95.aspx
[Mon Nov 10 18:38:47.287485 2025] [rewrite:trace3] [pid 9353:tid 9372] mod_rewrite.c(505): [client 98.82.40.168:35054] 98.82.40.168 - - [paramountbaldivis.com/sid#18dedd8][rid#7f5d60015990/initial] [perdir /home/baldivis/public_html/] applying pattern '.' to uri '\xe0\xb8\x88\xe0\xb8\xb5\xe0\xb8\x84\xe0\xb8\xa5\xe0\xb8\xb1\xe0\xb8\x9a\xe0\xb8\xaa\xe0\xb8\xa5\xe0\xb9\x87\xe0\xb8\xad\xe0\xb8\x95.aspx'
[Mon Nov 10 18:38:47.287514 2025] [rewrite:trace4] [pid 9353:tid 9372] mod_rewrite.c(505): [client 98.82.40.168:35054] 98.82.40.168 - - [paramountbaldivis.com/sid#18dedd8][rid#7f5d60015990/initial] [perdir /home/baldivis/public_html/] RewriteCond: input='/home/baldivis/public_html/\xe0\xb8\x88\xe0\xb8\xb5\xe0\xb8\x84\xe0\xb8\xa5\xe0\xb8\xb1\xe0\xb8\x9a\xe0\xb8\xaa\xe0\xb8\xa5\xe0\xb9\x87\xe0\xb8\xad\xe0\xb8\x95.aspx' pattern='!-f' => matched
[Mon Nov 10 18:38:47.287562 2025] [rewrite:trace4] [pid 9353:tid 9372] mod_rewrite.c(505): [client 98.82.40.168:35054] 98.82.40.168 - - [paramountbaldivis.com/sid#18dedd8][rid#7f5d60015990/initial] [perdir /home/baldivis/public_html/] RewriteCond: input='/home/baldivis/public_html/\xe0\xb8\x88\xe0\xb8\xb5\xe0\xb8\x84\xe0\xb8\xa5\xe0\xb8\xb1\xe0\xb8\x9a\xe0\xb8\xaa\xe0\xb8\xa5\xe0\xb9\x87\xe0\xb8\xad\xe0\xb8\x95.aspx' pattern='!-d' => matched
[Mon Nov 10 18:38:47.287583 2025] [rewrite:trace2] [pid 9353:tid 9372] mod_rewrite.c(505): [client 98.82.40.168:35054] 98.82.40.168 - - [paramountbaldivis.com/sid#18dedd8][rid#7f5d60015990/initial] [perdir /home/baldivis/public_html/] rewrite '\xe0\xb8\x88\xe0\xb8\xb5\xe0\xb8\x84\xe0\xb8\xa5\xe0\xb8\xb1\xe0\xb8\x9a\xe0\xb8\xaa\xe0\xb8\xa5\xe0\xb9\x87\xe0\xb8\xad\xe0\xb8\x95.aspx' -> '/index.php'
[Mon Nov 10 18:38:47.287607 2025] [rewrite:trace2] [pid 9353:tid 9372] mod_rewrite.c(505): [client 98.82.40.168:35054] 98.82.40.168 - - [paramountbaldivis.com/sid#18dedd8][rid#7f5d60015990/initial] [perdir /home/baldivis/public_html/] setting lastsub to rule with output /index.php
[Mon Nov 10 18:38:47.287625 2025] [rewrite:trace2] [pid 9353:tid 9372] mod_rewrite.c(505): [client 98.82.40.168:35054] 98.82.40.168 - - [paramountbaldivis.com/sid#18dedd8][rid#7f5d60015990/initial] [perdir /home/baldivis/public_html/] trying to replace prefix /home/baldivis/public_html/ with /
[Mon Nov 10 18:38:47.287642 2025] [rewrite:trace2] [pid 9353:tid 9372] mod_rewrite.c(505): [client 98.82.40.168:35054] 98.82.40.168 - - [paramountbaldivis.com/sid#18dedd8][rid#7f5d60015990/initial] [perdir /home/baldivis/public_html/] trying to replace context docroot /home/baldivis/public_html with context prefix
[Mon Nov 10 18:38:47.287657 2025] [rewrite:trace1] [pid 9353:tid 9372] mod_rewrite.c(505): [client 98.82.40.168:35054] 98.82.40.168 - - [paramountbaldivis.com/sid#18dedd8][rid#7f5d60015990/initial] [perdir /home/baldivis/public_html/] internal redirect with /index.php [INTERNAL REDIRECT]
[Mon Nov 10 18:38:51.493574 2025] [rewrite:trace3] [pid 9264:tid 9342] mod_rewrite.c(505): [client 192.178.4.101:56397] 192.178.4.101 - - [paramountbaldivis.com/sid#18dedd8][rid#7f5da80d6870/initial] [perdir /home/baldivis/public_html/] strip per-dir prefix: /home/baldivis/public_html/ ->
[Mon Nov 10 18:38:51.493641 2025] [rewrite:trace3] [pid 9264:tid 9342] mod_rewrite.c(505): [client 192.178.4.101:56397] 192.178.4.101 - - [paramountbaldivis.com/sid#18dedd8][rid#7f5da80d6870/initial] [perdir /home/baldivis/public_html/] applying pattern '^index\\.php$' to uri ''
[Mon Nov 10 18:38:51.493654 2025] [rewrite:trace3] [pid 9264:tid 9342] mod_rewrite.c(505): [client 192.178.4.101:56397] 192.178.4.101 - - [paramountbaldivis.com/sid#18dedd8][rid#7f5da80d6870/initial] [perdir /home/baldivis/public_html/] strip per-dir prefix: /home/baldivis/public_html/ ->
[Mon Nov 10 18:38:51.493663 2025] [rewrite:trace3] [pid 9264:tid 9342] mod_rewrite.c(505): [client 192.178.4.101:56397] 192.178.4.101 - - [paramountbaldivis.com/sid#18dedd8][rid#7f5da80d6870/initial] [perdir /home/baldivis/public_html/] applying pattern '.' to uri ''
[Mon Nov 10 18:38:51.493673 2025] [rewrite:trace1] [pid 9264:tid 9342] mod_rewrite.c(505): [client 192.178.4.101:56397] 192.178.4.101 - - [paramountbaldivis.com/sid#18dedd8][rid#7f5da80d6870/initial] [perdir /home/baldivis/public_html/] pass through /home/baldivis/public_html/
[Mon Nov 10 18:38:51.493804 2025] [rewrite:trace3] [pid 9264:tid 9342] mod_rewrite.c(505): [client 192.178.4.101:56397] 192.178.4.101 - - [paramountbaldivis.com/sid#18dedd8][rid#7f5da80dc8a0/subreq] [perdir /home/baldivis/public_html/] strip per-dir prefix: /home/baldivis/public_html/index.php -> index.php
[Mon Nov 10 18:38:51.493804 2025] [rewrite:trace3] [pid 9264:tid 9342] mod_rewrite.c(505): [client 192.178.4.101:56397] 192.178.4.101 - - [paramountbaldivis.com/sid#18dedd8][rid#7f5da80dc8a0/subreq] [perdir /home/baldivis/public_html/] applying pattern '^index\\.php$' to uri 'index.php'
[Mon Nov 10 18:38:51.493818 2025] [rewrite:trace1] [pid 9264:tid 9342] mod_rewrite.c(505): [client 192.178.4.101:56397] 192.178.4.101 - - [paramountbaldivis.com/sid#18dedd8][rid#7f5da80dc8a0/subreq] [perdir /home/baldivis/public_html/] pass through /home/baldivis/public_html/index.php
[Mon Nov 10 18:38:52.355966 2025] [rewrite:trace3] [pid 9263:tid 9303] mod_rewrite.c(505): [client 54.210.155.69:50966] 54.210.155.69 - - [paramountbaldivis.com/sid#18dedd8][rid#7f5da40537f0/initial] [perdir /home/baldivis/public_html/] strip per-dir prefix: /home/baldivis/public_html/\xe0\xb8\x97\xe0\xb8\x94\xe0\xb8\xa5\xe0\xb8\xad\xe0\xb8\x87\xe0\xb9\x80\xe0\xb8\xa5\xe0\xb9\x88\xe0\xb8\x99\xe0\xb8\xaa\xe0\xb8\xa5\xe0\xb9\x87\xe0\xb8\xad\xe0\xb8\x95 pg \xe0\xb9\x84\xe0\xb8\xa1\xe0\xb9\x88 \xe0\xb9\x80\xe0\xb8\x94\xe0\xb9\x89\xe0\xb8\x87.aspx -> \xe0\xb8\x97\xe0\xb8\x94\xe0\xb8\xa5\xe0\xb8\xad\xe0\xb8\x87\xe0\xb9\x80\xe0\xb8\xa5\xe0\xb9\x88\xe0\xb8\x99\xe0\xb8\xaa\xe0\xb8\xa5\xe0\xb9\x87\xe0\xb8\xad\xe0\xb8\x95 pg \xe0\xb9\x84\xe0\xb8\xa1\xe0\xb9\x88 \xe0\xb9\x80\xe0\xb8\x94\xe0\xb9\x89\xe0\xb8\x87.aspx
[Mon Nov 10 18:38:52.356032 2025] [rewrite:trace3] [pid 9263:tid 9303] mod_rewrite.c(505): [client 54.210.155.69:50966] 54.210.155.69 - - [paramountbaldivis.com/sid#18dedd8][rid#7f5da40537f0/initial] [perdir /home/baldivis/public_html/] applying pattern '^index\\.php$' to uri '\xe0\xb8\x97\xe0\xb8\x94\xe0\xb8\xa5\xe0\xb8\xad\xe0\xb8\x87\xe0\xb9\x80\xe0\xb8\xa5\xe0\xb9\x88\xe0\xb8\x99\xe0\xb8\xaa\xe0\xb8\xa5\xe0\xb9\x87\xe0\xb8\xad\xe0\xb8\x95 pg \xe0\xb9\x84\xe0\xb8\xa1\xe0\xb9\x88 \xe0\xb9\x80\xe0\xb8\x94\xe0\xb9\x89\xe0\xb8\x87.aspx'
[Mon Nov 10 18:38:52.356047 2025] [rewrite:trace3] [pid 9263:tid 9303] mod_rewrite.c(505): [client 54.210.155.69:50966] 54.210.155.69 - - [paramountbaldivis.com/sid#18dedd8][rid#7f5da40537f0/initial] [perdir /home/baldivis/public_html/] strip per-dir prefix: /home/baldivis/public_html/\xe0\xb8\x97\xe0\xb8\x94\xe0\xb8\xa5\xe0\xb8\xad\xe0\xb8\x87\xe0\xb9\x80\xe0\xb8\xa5\xe0\xb9\x88\xe0\xb8\x99\xe0\xb8\xaa\xe0\xb8\xa5\xe0\xb9\x87\xe0\xb8\xad\xe0\xb8\x95 pg \xe0\xb9\x84\xe0\xb8\xa1\xe0\xb9\x88 \xe0\xb9\x80\xe0\xb8\x94\xe0\xb9\x89\xe0\xb8\x87.aspx -> \xe0\xb8\x97\xe0\xb8\x94\xe0\xb8\xa5\xe0\xb8\xad\xe0\xb8\x87\xe0\xb9\x80\xe0\xb8\xa5\xe0\xb9\x88\xe0\xb8\x99\xe0\xb8\xaa\xe0\xb8\xa5\xe0\xb9\x87\xe0\xb8\xad\xe0\xb8\x95 pg \xe0\xb9\x84\xe0\xb8\xa1\xe0\xb9\x88 \xe0\xb9\x80\xe0\xb8\x94\xe0\xb9\x89\xe0\xb8\x87.aspx
[Mon Nov 10 18:38:52.356059 2025] [rewrite:trace3] [pid 9263:tid 9303] mod_rewrite.c(505): [client 54.210.155.69:50966] 54.210.155.69 - - [paramountbaldivis.com/sid#18dedd8][rid#7f5da40537f0/initial] [perdir /home/baldivis/public_html/] applying pattern '.' to uri '\xe0\xb8\x97\xe0\xb8\x94\xe0\xb8\xa5\xe0\xb8\xad\xe0\xb8\x87\xe0\xb9\x80\xe0\xb8\xa5\xe0\xb9\x88\xe0\xb8\x99\xe0\xb8\xaa\xe0\xb8\xa5\xe0\xb9\x87\xe0\xb8\xad\xe0\xb8\x95 pg \xe0\xb9\x84\xe0\xb8\xa1\xe0\xb9\x88 \xe0\xb9\x80\xe0\xb8\x94\xe0\xb9\x89\xe0\xb8\x87.aspx'
[Mon Nov 10 18:38:52.356081 2025] [rewrite:trace4] [pid 9263:tid 9303] mod_rewrite.c(505): [client 54.210.155.69:50966] 54.210.155.69 - - [paramountbaldivis.com/sid#18dedd8][rid#7f5da40537f0/initial] [perdir /home/baldivis/public_html/] RewriteCond: input='/home/baldivis/public_html/\xe0\xb8\x97\xe0\xb8\x94\xe0\xb8\xa5\xe0\xb8\xad\xe0\xb8\x87\xe0\xb9\x80\xe0\xb8\xa5\xe0\xb9\x88\xe0\xb8\x99\xe0\xb8\xaa\xe0\xb8\xa5\xe0\xb9\x87\xe0\xb8\xad\xe0\xb8\x95 pg \xe0\xb9\x84\xe0\xb8\xa1\xe0\xb9\x88 \xe0\xb9\x80\xe0\xb8\x94\xe0\xb9\x89\xe0\xb8\x87.aspx' pattern='!-f' => matched
[Mon Nov 10 18:38:52.356096 2025] [rewrite:trace4] [pid 9263:tid 9303] mod_rewrite.c(505): [client 54.210.155.69:50966] 54.210.155.69 - - [paramountbaldivis.com/sid#18dedd8][rid#7f5da40537f0/initial] [perdir /home/baldivis/public_html/] RewriteCond: input='/home/baldivis/public_html/\xe0\xb8\x97\xe0\xb8\x94\xe0\xb8\xa5\xe0\xb8\xad\xe0\xb8\x87\xe0\xb9\x80\xe0\xb8\xa5\xe0\xb9\x88\xe0\xb8\x99\xe0\xb8\xaa\xe0\xb8\xa5\xe0\xb9\x87\xe0\xb8\xad\xe0\xb8\x95 pg \xe0\xb9\x84\xe0\xb8\xa1\xe0\xb9\x88 \xe0\xb9\x80\xe0\xb8\x94\xe0\xb9\x89\xe0\xb8\x87.aspx' pattern='!-d' => matched
[Mon Nov 10 18:38:52.356107 2025] [rewrite:trace2] [pid 9263:tid 9303] mod_rewrite.c(505): [client 54.210.155.69:50966] 54.210.155.69 - - [paramountbaldivis.com/sid#18dedd8][rid#7f5da40537f0/initial] [perdir /home/baldivis/public_html/] rewrite '\xe0\xb8\x97\xe0\xb8\x94\xe0\xb8\xa5\xe0\xb8\xad\xe0\xb8\x87\xe0\xb9\x80\xe0\xb8\xa5\xe0\xb9\x88\xe0\xb8\x99\xe0\xb8\xaa\xe0\xb8\xa5\xe0\xb9\x87\xe0\xb8\xad\xe0\xb8\x95 pg \xe0\xb9\x84\xe0\xb8\xa1\xe0\xb9\x88 \xe0\xb9\x80\xe0\xb8\x94\xe0\xb9\x89\xe0\xb8\x87.aspx' -> '/index.php'
[Mon Nov 10 18:38:52.356140 2025] [rewrite:trace2] [pid 9263:tid 9303] mod_rewrite.c(505): [client 54.210.155.69:50966] 54.210.155.69 - - [paramountbaldivis.com/sid#18dedd8][rid#7f5da40537f0/initial] [perdir /home/baldivis/public_html/] setting lastsub to rule with output /index.php
[Mon Nov 10 18:38:52.356151 2025] [rewrite:trace2] [pid 9263:tid 9303] mod_rewrite.c(505): [client 54.210.155.69:50966] 54.210.155.69 - - [paramountbaldivis.com/sid#18dedd8][rid#7f5da40537f0/initial] [perdir /home/baldivis/public_html/] trying to replace prefix /home/baldivis/public_html/ with /
[Mon Nov 10 18:38:52.356162 2025] [rewrite:trace2] [pid 9263:tid 9303] mod_rewrite.c(505): [client 54.210.155.69:50966] 54.210.155.69 - - [paramountbaldivis.com/sid#18dedd8][rid#7f5da40537f0/initial] [perdir /home/baldivis/public_html/] trying to replace context docroot /home/baldivis/public_html with context prefix
[Mon Nov 10 18:38:52.356185 2025] [rewrite:trace1] [pid 9263:tid 9303] mod_rewrite.c(505): [client 54.210.155.69:50966] 54.210.155.69 - - [paramountbaldivis.com/sid#18dedd8][rid#7f5da40537f0/initial] [perdir /home/baldivis/public_html/] internal redirect with /index.php [INTERNAL REDIRECT]
[Mon Nov 10 18:38:58.256530 2025] [rewrite:trace3] [pid 9264:tid 9331] mod_rewrite.c(505): [client 54.83.240.58:7662] 54.83.240.58 - - [paramountbaldivis.com/sid#18dedd8][rid#7f5da80c1100/initial] [perdir /home/baldivis/public_html/] strip per-dir prefix: /home/baldivis/public_html/\xe0\xb8\xaa\xe0\xb8\xa5\xe0\xb9\x87\xe0\xb8\xad\xe0\xb8\x95888 pg \xe0\xb8\x97\xe0\xb8\xb2\xe0\xb8\x87\xe0\xb9\x80\xe0\xb8\x82\xe0\xb9\x89\xe0\xb8\xb2.aspx -> \xe0\xb8\xaa\xe0\xb8\xa5\xe0\xb9\x87\xe0\xb8\xad\xe0\xb8\x95888 pg \xe0\xb8\x97\xe0\xb8\xb2\xe0\xb8\x87\xe0\xb9\x80\xe0\xb8\x82\xe0\xb9\x89\xe0\xb8\xb2.aspx
[Mon Nov 10 18:38:58.256595 2025] [rewrite:trace3] [pid 9264:tid 9331] mod_rewrite.c(505): [client 54.83.240.58:7662] 54.83.240.58 - - [paramountbaldivis.com/sid#18dedd8][rid#7f5da80c1100/initial] [perdir /home/baldivis/public_html/] applying pattern '^index\\.php$' to uri '\xe0\xb8\xaa\xe0\xb8\xa5\xe0\xb9\x87\xe0\xb8\xad\xe0\xb8\x95888 pg \xe0\xb8\x97\xe0\xb8\xb2\xe0\xb8\x87\xe0\xb9\x80\xe0\xb8\x82\xe0\xb9\x89\xe0\xb8\xb2.aspx'
[Mon Nov 10 18:38:58.256608 2025] [rewrite:trace3] [pid 9264:tid 9331] mod_rewrite.c(505): [client 54.83.240.58:7662] 54.83.240.58 - - [paramountbaldivis.com/sid#18dedd8][rid#7f5da80c1100/initial] [perdir /home/baldivis/public_html/] strip per-dir prefix: /home/baldivis/public_html/\xe0\xb8\xaa\xe0\xb8\xa5\xe0\xb9\x87\xe0\xb8\xad\xe0\xb8\x95888 pg \xe0\xb8\x97\xe0\xb8\xb2\xe0\xb8\x87\xe0\xb9\x80\xe0\xb8\x82\xe0\xb9\x89\xe0\xb8\xb2.aspx -> \xe0\xb8\xaa\xe0\xb8\xa5\xe0\xb9\x87\xe0\xb8\xad\xe0\xb8\x95888 pg \xe0\xb8\x97\xe0\xb8\xb2\xe0\xb8\x87\xe0\xb9\x80\xe0\xb8\x82\xe0\xb9\x89\xe0\xb8\xb2.aspx
[Mon Nov 10 18:38:58.256619 2025] [rewrite:trace3] [pid 9264:tid 9331] mod_rewrite.c(505): [client 54.83.240.58:7662] 54.83.240.58 - - [paramountbaldivis.com/sid#18dedd8][rid#7f5da80c1100/initial] [perdir /home/baldivis/public_html/] applying pattern '.' to uri '\xe0\xb8\xaa\xe0\xb8\xa5\xe0\xb9\x87\xe0\xb8\xad\xe0\xb8\x95888 pg \xe0\xb8\x97\xe0\xb8\xb2\xe0\xb8\x87\xe0\xb9\x80\xe0\xb8\x82\xe0\xb9\x89\xe0\xb8\xb2.aspx'
[Mon Nov 10 18:38:58.256638 2025] [rewrite:trace4] [pid 9264:tid 9331] mod_rewrite.c(505): [client 54.83.240.58:7662] 54.83.240.58 - - [paramountbaldivis.com/sid#18dedd8][rid#7f5da80c1100/initial] [perdir /home/baldivis/public_html/] RewriteCond: input='/home/baldivis/public_html/\xe0\xb8\xaa\xe0\xb8\xa5\xe0\xb9\x87\xe0\xb8\xad\xe0\xb8\x95888 pg \xe0\xb8\x97\xe0\xb8\xb2\xe0\xb8\x87\xe0\xb9\x80\xe0\xb8\x82\xe0\xb9\x89\xe0\xb8\xb2.aspx' pattern='!-f' => matched
[Mon Nov 10 18:38:58.256668 2025] [rewrite:trace4] [pid 9264:tid 9331] mod_rewrite.c(505): [client 54.83.240.58:7662] 54.83.240.58 - - [paramountbaldivis.com/sid#18dedd8][rid#7f5da80c1100/initial] [perdir /home/baldivis/public_html/] RewriteCond: input='/home/baldivis/public_html/\xe0\xb8\xaa\xe0\xb8\xa5\xe0\xb9\x87\xe0\xb8\xad\xe0\xb8\x95888 pg \xe0\xb8\x97\xe0\xb8\xb2\xe0\xb8\x87\xe0\xb9\x80\xe0\xb8\x82\xe0\xb9\x89\xe0\xb8\xb2.aspx' pattern='!-d' => matched
[Mon Nov 10 18:38:58.256680 2025] [rewrite:trace2] [pid 9264:tid 9331] mod_rewrite.c(505): [client 54.83.240.58:7662] 54.83.240.58 - - [paramountbaldivis.com/sid#18dedd8][rid#7f5da80c1100/initial] [perdir /home/baldivis/public_html/] rewrite '\xe0\xb8\xaa\xe0\xb8\xa5\xe0\xb9\x87\xe0\xb8\xad\xe0\xb8\x95888 pg \xe0\xb8\x97\xe0\xb8\xb2\xe0\xb8\x87\xe0\xb9\x80\xe0\xb8\x82\xe0\xb9\x89\xe0\xb8\xb2.aspx' -> '/index.php'
[Mon Nov 10 18:38:58.256694 2025] [rewrite:trace2] [pid 9264:tid 9331] mod_rewrite.c(505): [client 54.83.240.58:7662] 54.83.240.58 - - [paramountbaldivis.com/sid#18dedd8][rid#7f5da80c1100/initial] [perdir /home/baldivis/public_html/] setting lastsub to rule with output /index.php
[Mon Nov 10 18:38:58.256704 2025] [rewrite:trace2] [pid 9264:tid 9331] mod_rewrite.c(505): [client 54.83.240.58:7662] 54.83.240.58 - - [paramountbaldivis.com/sid#18dedd8][rid#7f5da80c1100/initial] [perdir /home/baldivis/public_html/] trying to replace prefix /home/baldivis/public_html/ with /
[Mon Nov 10 18:38:58.256713 2025] [rewrite:trace2] [pid 9264:tid 9331] mod_rewrite.c(505): [client 54.83.240.58:7662] 54.83.240.58 - - [paramountbaldivis.com/sid#18dedd8][rid#7f5da80c1100/initial] [perdir /home/baldivis/public_html/] trying to replace context docroot /home/baldivis/public_html with context prefix
[Mon Nov 10 18:38:58.256722 2025] [rewrite:trace1] [pid 9264:tid 9331] mod_rewrite.c(505): [client 54.83.240.58:7662] 54.83.240.58 - - [paramountbaldivis.com/sid#18dedd8][rid#7f5da80c1100/initial] [perdir /home/baldivis/public_html/] internal redirect with /index.php [INTERNAL REDIRECT]
[Mon Nov 10 18:38:58.633716 2025] [rewrite:trace3] [pid 9353:tid 9370] mod_rewrite.c(505): [client 52.70.123.241:36921] 52.70.123.241 - - [paramountbaldivis.com/sid#18dedd8][rid#7f5d9c0c5970/initial] [perdir /home/baldivis/public_html/] strip per-dir prefix: /home/baldivis/public_html/u31.com \xe0\xb9\x80\xe0\xb8\x82\xe0\xb9\x89\xe0\xb8\xb2\xe0\xb8\xaa\xe0\xb8\xb9\xe0\xb9\x88\xe0\xb8\xa3\xe0\xb8\xb0\xe0\xb8\x9a\xe0\xb8\x9a.aspx -> u31.com \xe0\xb9\x80\xe0\xb8\x82\xe0\xb9\x89\xe0\xb8\xb2\xe0\xb8\xaa\xe0\xb8\xb9\xe0\xb9\x88\xe0\xb8\xa3\xe0\xb8\xb0\xe0\xb8\x9a\xe0\xb8\x9a.aspx
[Mon Nov 10 18:38:58.633780 2025] [rewrite:trace3] [pid 9353:tid 9370] mod_rewrite.c(505): [client 52.70.123.241:36921] 52.70.123.241 - - [paramountbaldivis.com/sid#18dedd8][rid#7f5d9c0c5970/initial] [perdir /home/baldivis/public_html/] applying pattern '^index\\.php$' to uri 'u31.com \xe0\xb9\x80\xe0\xb8\x82\xe0\xb9\x89\xe0\xb8\xb2\xe0\xb8\xaa\xe0\xb8\xb9\xe0\xb9\x88\xe0\xb8\xa3\xe0\xb8\xb0\xe0\xb8\x9a\xe0\xb8\x9a.aspx'
[Mon Nov 10 18:38:58.633793 2025] [rewrite:trace3] [pid 9353:tid 9370] mod_rewrite.c(505): [client 52.70.123.241:36921] 52.70.123.241 - - [paramountbaldivis.com/sid#18dedd8][rid#7f5d9c0c5970/initial] [perdir /home/baldivis/public_html/] strip per-dir prefix: /home/baldivis/public_html/u31.com \xe0\xb9\x80\xe0\xb8\x82\xe0\xb9\x89\xe0\xb8\xb2\xe0\xb8\xaa\xe0\xb8\xb9\xe0\xb9\x88\xe0\xb8\xa3\xe0\xb8\xb0\xe0\xb8\x9a\xe0\xb8\x9a.aspx -> u31.com \xe0\xb9\x80\xe0\xb8\x82\xe0\xb9\x89\xe0\xb8\xb2\xe0\xb8\xaa\xe0\xb8\xb9\xe0\xb9\x88\xe0\xb8\xa3\xe0\xb8\xb0\xe0\xb8\x9a\xe0\xb8\x9a.aspx
[Mon Nov 10 18:38:58.633803 2025] [rewrite:trace3] [pid 9353:tid 9370] mod_rewrite.c(505): [client 52.70.123.241:36921] 52.70.123.241 - - [paramountbaldivis.com/sid#18dedd8][rid#7f5d9c0c5970/initial] [perdir /home/baldivis/public_html/] applying pattern '.' to uri 'u31.com \xe0\xb9\x80\xe0\xb8\x82\xe0\xb9\x89\xe0\xb8\xb2\xe0\xb8\xaa\xe0\xb8\xb9\xe0\xb9\x88\xe0\xb8\xa3\xe0\xb8\xb0\xe0\xb8\x9a\xe0\xb8\x9a.aspx'
[Mon Nov 10 18:38:58.633882 2025] [rewrite:trace4] [pid 9353:tid 9370] mod_rewrite.c(505): [client 52.70.123.241:36921] 52.70.123.241 - - [paramountbaldivis.com/sid#18dedd8][rid#7f5d9c0c5970/initial] [perdir /home/baldivis/public_html/] RewriteCond: input='/home/baldivis/public_html/u31.com \xe0\xb9\x80\xe0\xb8\x82\xe0\xb9\x89\xe0\xb8\xb2\xe0\xb8\xaa\xe0\xb8\xb9\xe0\xb9\x88\xe0\xb8\xa3\xe0\xb8\xb0\xe0\xb8\x9a\xe0\xb8\x9a.aspx' pattern='!-f' => matched
[Mon Nov 10 18:38:58.633882 2025] [rewrite:trace4] [pid 9353:tid 9370] mod_rewrite.c(505): [client 52.70.123.241:36921] 52.70.123.241 - - [paramountbaldivis.com/sid#18dedd8][rid#7f5d9c0c5970/initial] [perdir /home/baldivis/public_html/] RewriteCond: input='/home/baldivis/public_html/u31.com \xe0\xb9\x80\xe0\xb8\x82\xe0\xb9\x89\xe0\xb8\xb2\xe0\xb8\xaa\xe0\xb8\xb9\xe0\xb9\x88\xe0\xb8\xa3\xe0\xb8\xb0\xe0\xb8\x9a\xe0\xb8\x9a.aspx' pattern='!-d' => matched
[Mon Nov 10 18:38:58.633882 2025] [rewrite:trace2] [pid 9353:tid 9370] mod_rewrite.c(505): [client 52.70.123.241:36921] 52.70.123.241 - - [paramountbaldivis.com/sid#18dedd8][rid#7f5d9c0c5970/initial] [perdir /home/baldivis/public_html/] rewrite 'u31.com \xe0\xb9\x80\xe0\xb8\x82\xe0\xb9\x89\xe0\xb8\xb2\xe0\xb8\xaa\xe0\xb8\xb9\xe0\xb9\x88\xe0\xb8\xa3\xe0\xb8\xb0\xe0\xb8\x9a\xe0\xb8\x9a.aspx' -> '/index.php'
[Mon Nov 10 18:38:58.633882 2025] [rewrite:trace2] [pid 9353:tid 9370] mod_rewrite.c(505): [client 52.70.123.241:36921] 52.70.123.241 - - [paramountbaldivis.com/sid#18dedd8][rid#7f5d9c0c5970/initial] [perdir /home/baldivis/public_html/] setting lastsub to rule with output /index.php
[Mon Nov 10 18:38:58.633889 2025] [rewrite:trace2] [pid 9353:tid 9370] mod_rewrite.c(505): [client 52.70.123.241:36921] 52.70.123.241 - - [paramountbaldivis.com/sid#18dedd8][rid#7f5d9c0c5970/initial] [perdir /home/baldivis/public_html/] trying to replace prefix /home/baldivis/public_html/ with /
[Mon Nov 10 18:38:58.633898 2025] [rewrite:trace2] [pid 9353:tid 9370] mod_rewrite.c(505): [client 52.70.123.241:36921] 52.70.123.241 - - [paramountbaldivis.com/sid#18dedd8][rid#7f5d9c0c5970/initial] [perdir /home/baldivis/public_html/] trying to replace context docroot /home/baldivis/public_html with context prefix
[Mon Nov 10 18:38:58.633907 2025] [rewrite:trace1] [pid 9353:tid 9370] mod_rewrite.c(505): [client 52.70.123.241:36921] 52.70.123.241 - - [paramountbaldivis.com/sid#18dedd8][rid#7f5d9c0c5970/initial] [perdir /home/baldivis/public_html/] internal redirect with /index.php [INTERNAL REDIRECT]
[Mon Nov 10 18:38:59.326599 2025] [rewrite:trace3] [pid 9264:tid 9336] mod_rewrite.c(505): [client 192.178.4.101:34919] 192.178.4.101 - - [paramountbaldivis.com/sid#18dedd8][rid#7f5da400ff80/initial] [perdir /home/baldivis/public_html/] strip per-dir prefix: /home/baldivis/public_html/ ->
[Mon Nov 10 18:38:59.326636 2025] [rewrite:trace3] [pid 9264:tid 9336] mod_rewrite.c(505): [client 192.178.4.101:34919] 192.178.4.101 - - [paramountbaldivis.com/sid#18dedd8][rid#7f5da400ff80/initial] [perdir /home/baldivis/public_html/] applying pattern '^index\\.php$' to uri ''
[Mon Nov 10 18:38:59.326658 2025] [rewrite:trace3] [pid 9264:tid 9336] mod_rewrite.c(505): [client 192.178.4.101:34919] 192.178.4.101 - - [paramountbaldivis.com/sid#18dedd8][rid#7f5da400ff80/initial] [perdir /home/baldivis/public_html/] strip per-dir prefix: /home/baldivis/public_html/ ->
[Mon Nov 10 18:38:59.326668 2025] [rewrite:trace3] [pid 9264:tid 9336] mod_rewrite.c(505): [client 192.178.4.101:34919] 192.178.4.101 - - [paramountbaldivis.com/sid#18dedd8][rid#7f5da400ff80/initial] [perdir /home/baldivis/public_html/] applying pattern '.' to uri ''
[Mon Nov 10 18:38:59.326677 2025] [rewrite:trace1] [pid 9264:tid 9336] mod_rewrite.c(505): [client 192.178.4.101:34919] 192.178.4.101 - - [paramountbaldivis.com/sid#18dedd8][rid#7f5da400ff80/initial] [perdir /home/baldivis/public_html/] pass through /home/baldivis/public_html/
[Mon Nov 10 18:38:59.326797 2025] [rewrite:trace3] [pid 9264:tid 9336] mod_rewrite.c(505): [client 192.178.4.101:34919] 192.178.4.101 - - [paramountbaldivis.com/sid#18dedd8][rid#7f5d8c17ae60/subreq] [perdir /home/baldivis/public_html/] strip per-dir prefix: /home/baldivis/public_html/index.php -> index.php
[Mon Nov 10 18:38:59.326851 2025] [rewrite:trace3] [pid 9264:tid 9336] mod_rewrite.c(505): [client 192.178.4.101:34919] 192.178.4.101 - - [paramountbaldivis.com/sid#18dedd8][rid#7f5d8c17ae60/subreq] [perdir /home/baldivis/public_html/] applying pattern '^index\\.php$' to uri 'index.php'
[Mon Nov 10 18:38:59.326851 2025] [rewrite:trace1] [pid 9264:tid 9336] mod_rewrite.c(505): [client 192.178.4.101:34919] 192.178.4.101 - - [paramountbaldivis.com/sid#18dedd8][rid#7f5d8c17ae60/subreq] [perdir /home/baldivis/public_html/] pass through /home/baldivis/public_html/index.php
[Mon Nov 10 18:39:44.184607 2025] [rewrite:trace3] [pid 9711:tid 9759] mod_rewrite.c(505): [client 192.178.4.101:35856] 192.178.4.101 - - [paramountbaldivis.com/sid#31e6dd8][rid#7f57f009bcd0/initial] [perdir /home/baldivis/public_html/] strip per-dir prefix: /home/baldivis/public_html/ ->
[Mon Nov 10 18:39:44.184673 2025] [rewrite:trace3] [pid 9711:tid 9759] mod_rewrite.c(505): [client 192.178.4.101:35856] 192.178.4.101 - - [paramountbaldivis.com/sid#31e6dd8][rid#7f57f009bcd0/initial] [perdir /home/baldivis/public_html/] applying pattern '^index\\.php$' to uri ''
[Mon Nov 10 18:39:44.184686 2025] [rewrite:trace3] [pid 9711:tid 9759] mod_rewrite.c(505): [client 192.178.4.101:35856] 192.178.4.101 - - [paramountbaldivis.com/sid#31e6dd8][rid#7f57f009bcd0/initial] [perdir /home/baldivis/public_html/] strip per-dir prefix: /home/baldivis/public_html/ ->
[Mon Nov 10 18:39:44.184696 2025] [rewrite:trace3] [pid 9711:tid 9759] mod_rewrite.c(505): [client 192.178.4.101:35856] 192.178.4.101 - - [paramountbaldivis.com/sid#31e6dd8][rid#7f57f009bcd0/initial] [perdir /home/baldivis/public_html/] applying pattern '.' to uri ''
[Mon Nov 10 18:39:44.184705 2025] [rewrite:trace1] [pid 9711:tid 9759] mod_rewrite.c(505): [client 192.178.4.101:35856] 192.178.4.101 - - [paramountbaldivis.com/sid#31e6dd8][rid#7f57f009bcd0/initial] [perdir /home/baldivis/public_html/] pass through /home/baldivis/public_html/
[Mon Nov 10 18:39:44.184784 2025] [rewrite:trace3] [pid 9711:tid 9759] mod_rewrite.c(505): [client 192.178.4.101:35856] 192.178.4.101 - - [paramountbaldivis.com/sid#31e6dd8][rid#7f57f00038d0/subreq] [perdir /home/baldivis/public_html/] strip per-dir prefix: /home/baldivis/public_html/index.php -> index.php
[Mon Nov 10 18:39:44.184844 2025] [rewrite:trace3] [pid 9711:tid 9759] mod_rewrite.c(505): [client 192.178.4.101:35856] 192.178.4.101 - - [paramountbaldivis.com/sid#31e6dd8][rid#7f57f00038d0/subreq] [perdir /home/baldivis/public_html/] applying pattern '^index\\.php$' to uri 'index.php'
[Mon Nov 10 18:39:44.184847 2025] [rewrite:trace1] [pid 9711:tid 9759] mod_rewrite.c(505): [client 192.178.4.101:35856] 192.178.4.101 - - [paramountbaldivis.com/sid#31e6dd8][rid#7f57f00038d0/subreq] [perdir /home/baldivis/public_html/] pass through /home/baldivis/public_html/index.php
[Mon Nov 10 18:39:58.964850 2025] [rewrite:trace3] [pid 9801:tid 9822] mod_rewrite.c(505): [client 192.178.4.101:36918] 192.178.4.101 - - [paramountbaldivis.com/sid#31e6dd8][rid#7f580c0c6590/initial] [perdir /home/baldivis/public_html/] strip per-dir prefix: /home/baldivis/public_html/ ->
[Mon Nov 10 18:39:58.964902 2025] [rewrite:trace3] [pid 9801:tid 9822] mod_rewrite.c(505): [client 192.178.4.101:36918] 192.178.4.101 - - [paramountbaldivis.com/sid#31e6dd8][rid#7f580c0c6590/initial] [perdir /home/baldivis/public_html/] applying pattern '^index\\.php$' to uri ''
[Mon Nov 10 18:39:58.964915 2025] [rewrite:trace3] [pid 9801:tid 9822] mod_rewrite.c(505): [client 192.178.4.101:36918] 192.178.4.101 - - [paramountbaldivis.com/sid#31e6dd8][rid#7f580c0c6590/initial] [perdir /home/baldivis/public_html/] strip per-dir prefix: /home/baldivis/public_html/ ->
[Mon Nov 10 18:39:58.964924 2025] [rewrite:trace3] [pid 9801:tid 9822] mod_rewrite.c(505): [client 192.178.4.101:36918] 192.178.4.101 - - [paramountbaldivis.com/sid#31e6dd8][rid#7f580c0c6590/initial] [perdir /home/baldivis/public_html/] applying pattern '.' to uri ''
[Mon Nov 10 18:39:58.964967 2025] [rewrite:trace1] [pid 9801:tid 9822] mod_rewrite.c(505): [client 192.178.4.101:36918] 192.178.4.101 - - [paramountbaldivis.com/sid#31e6dd8][rid#7f580c0c6590/initial] [perdir /home/baldivis/public_html/] pass through /home/baldivis/public_html/
[Mon Nov 10 18:39:58.965047 2025] [rewrite:trace3] [pid 9801:tid 9822] mod_rewrite.c(505): [client 192.178.4.101:36918] 192.178.4.101 - - [paramountbaldivis.com/sid#31e6dd8][rid#7f580c0d9cf0/subreq] [perdir /home/baldivis/public_html/] strip per-dir prefix: /home/baldivis/public_html/index.php -> index.php
[Mon Nov 10 18:39:58.965062 2025] [rewrite:trace3] [pid 9801:tid 9822] mod_rewrite.c(505): [client 192.178.4.101:36918] 192.178.4.101 - - [paramountbaldivis.com/sid#31e6dd8][rid#7f580c0d9cf0/subreq] [perdir /home/baldivis/public_html/] applying pattern '^index\\.php$' to uri 'index.php'
[Mon Nov 10 18:39:58.965074 2025] [rewrite:trace1] [pid 9801:tid 9822] mod_rewrite.c(505): [client 192.178.4.101:36918] 192.178.4.101 - - [paramountbaldivis.com/sid#31e6dd8][rid#7f580c0d9cf0/subreq] [perdir /home/baldivis/public_html/] pass through /home/baldivis/public_html/index.php
[Mon Nov 10 18:40:23.248151 2025] [rewrite:trace3] [pid 10210:tid 10249] mod_rewrite.c(505): [client 192.178.4.102:53753] 192.178.4.102 - - [paramountbaldivis.com/sid#2e7ddd8][rid#7ff578021820/initial] [perdir /home/baldivis/public_html/] strip per-dir prefix: /home/baldivis/public_html/ ->
[Mon Nov 10 18:40:23.248237 2025] [rewrite:trace3] [pid 10210:tid 10249] mod_rewrite.c(505): [client 192.178.4.102:53753] 192.178.4.102 - - [paramountbaldivis.com/sid#2e7ddd8][rid#7ff578021820/initial] [perdir /home/baldivis/public_html/] applying pattern '^index\\.php$' to uri ''
[Mon Nov 10 18:40:23.248282 2025] [rewrite:trace3] [pid 10210:tid 10249] mod_rewrite.c(505): [client 192.178.4.102:53753] 192.178.4.102 - - [paramountbaldivis.com/sid#2e7ddd8][rid#7ff578021820/initial] [perdir /home/baldivis/public_html/] strip per-dir prefix: /home/baldivis/public_html/ ->
[Mon Nov 10 18:40:23.248293 2025] [rewrite:trace3] [pid 10210:tid 10249] mod_rewrite.c(505): [client 192.178.4.102:53753] 192.178.4.102 - - [paramountbaldivis.com/sid#2e7ddd8][rid#7ff578021820/initial] [perdir /home/baldivis/public_html/] applying pattern '.' to uri ''
[Mon Nov 10 18:40:23.248293 2025] [rewrite:trace1] [pid 10210:tid 10249] mod_rewrite.c(505): [client 192.178.4.102:53753] 192.178.4.102 - - [paramountbaldivis.com/sid#2e7ddd8][rid#7ff578021820/initial] [perdir /home/baldivis/public_html/] pass through /home/baldivis/public_html/
[Mon Nov 10 18:40:23.248410 2025] [rewrite:trace3] [pid 10210:tid 10249] mod_rewrite.c(505): [client 192.178.4.102:53753] 192.178.4.102 - - [paramountbaldivis.com/sid#2e7ddd8][rid#7ff56c0b68f0/subreq] [perdir /home/baldivis/public_html/] strip per-dir prefix: /home/baldivis/public_html/index.php -> index.php
[Mon Nov 10 18:40:23.248434 2025] [rewrite:trace3] [pid 10210:tid 10249] mod_rewrite.c(505): [client 192.178.4.102:53753] 192.178.4.102 - - [paramountbaldivis.com/sid#2e7ddd8][rid#7ff56c0b68f0/subreq] [perdir /home/baldivis/public_html/] applying pattern '^index\\.php$' to uri 'index.php'
[Mon Nov 10 18:40:23.248448 2025] [rewrite:trace1] [pid 10210:tid 10249] mod_rewrite.c(505): [client 192.178.4.102:53753] 192.178.4.102 - - [paramountbaldivis.com/sid#2e7ddd8][rid#7ff56c0b68f0/subreq] [perdir /home/baldivis/public_html/] pass through /home/baldivis/public_html/index.php
[Mon Nov 10 18:40:32.242553 2025] [rewrite:trace3] [pid 10300:tid 10325] mod_rewrite.c(505): [client 192.178.4.101:62089] 192.178.4.101 - - [paramountbaldivis.com/sid#2e7ddd8][rid#7ff57c0c94c0/initial] [perdir /home/baldivis/public_html/] strip per-dir prefix: /home/baldivis/public_html/ ->
[Mon Nov 10 18:40:32.242627 2025] [rewrite:trace3] [pid 10300:tid 10325] mod_rewrite.c(505): [client 192.178.4.101:62089] 192.178.4.101 - - [paramountbaldivis.com/sid#2e7ddd8][rid#7ff57c0c94c0/initial] [perdir /home/baldivis/public_html/] applying pattern '^index\\.php$' to uri ''
[Mon Nov 10 18:40:32.242653 2025] [rewrite:trace3] [pid 10300:tid 10325] mod_rewrite.c(505): [client 192.178.4.101:62089] 192.178.4.101 - - [paramountbaldivis.com/sid#2e7ddd8][rid#7ff57c0c94c0/initial] [perdir /home/baldivis/public_html/] strip per-dir prefix: /home/baldivis/public_html/ ->
[Mon Nov 10 18:40:32.242663 2025] [rewrite:trace3] [pid 10300:tid 10325] mod_rewrite.c(505): [client 192.178.4.101:62089] 192.178.4.101 - - [paramountbaldivis.com/sid#2e7ddd8][rid#7ff57c0c94c0/initial] [perdir /home/baldivis/public_html/] applying pattern '.' to uri ''
[Mon Nov 10 18:40:32.242672 2025] [rewrite:trace1] [pid 10300:tid 10325] mod_rewrite.c(505): [client 192.178.4.101:62089] 192.178.4.101 - - [paramountbaldivis.com/sid#2e7ddd8][rid#7ff57c0c94c0/initial] [perdir /home/baldivis/public_html/] pass through /home/baldivis/public_html/
[Mon Nov 10 18:40:32.242744 2025] [rewrite:trace3] [pid 10300:tid 10325] mod_rewrite.c(505): [client 192.178.4.101:62089] 192.178.4.101 - - [paramountbaldivis.com/sid#2e7ddd8][rid#7ff5580c3070/subreq] [perdir /home/baldivis/public_html/] strip per-dir prefix: /home/baldivis/public_html/index.php -> index.php
[Mon Nov 10 18:40:32.242760 2025] [rewrite:trace3] [pid 10300:tid 10325] mod_rewrite.c(505): [client 192.178.4.101:62089] 192.178.4.101 - - [paramountbaldivis.com/sid#2e7ddd8][rid#7ff5580c3070/subreq] [perdir /home/baldivis/public_html/] applying pattern '^index\\.php$' to uri 'index.php'
[Mon Nov 10 18:40:32.242775 2025] [rewrite:trace1] [pid 10300:tid 10325] mod_rewrite.c(505): [client 192.178.4.101:62089] 192.178.4.101 - - [paramountbaldivis.com/sid#2e7ddd8][rid#7ff5580c3070/subreq] [perdir /home/baldivis/public_html/] pass through /home/baldivis/public_html/index.php
[Mon Nov 10 18:40:40.759709 2025] [rewrite:trace3] [pid 10209:tid 10216] mod_rewrite.c(505): [client 192.178.4.101:57948] 192.178.4.101 - - [paramountbaldivis.com/sid#2e7ddd8][rid#7ff56c0f1b20/initial] [perdir /home/baldivis/public_html/] strip per-dir prefix: /home/baldivis/public_html/ ->
[Mon Nov 10 18:40:40.759737 2025] [rewrite:trace3] [pid 10209:tid 10216] mod_rewrite.c(505): [client 192.178.4.101:57948] 192.178.4.101 - - [paramountbaldivis.com/sid#2e7ddd8][rid#7ff56c0f1b20/initial] [perdir /home/baldivis/public_html/] applying pattern '^index\\.php$' to uri ''
[Mon Nov 10 18:40:40.759749 2025] [rewrite:trace3] [pid 10209:tid 10216] mod_rewrite.c(505): [client 192.178.4.101:57948] 192.178.4.101 - - [paramountbaldivis.com/sid#2e7ddd8][rid#7ff56c0f1b20/initial] [perdir /home/baldivis/public_html/] strip per-dir prefix: /home/baldivis/public_html/ ->
[Mon Nov 10 18:40:40.759758 2025] [rewrite:trace3] [pid 10209:tid 10216] mod_rewrite.c(505): [client 192.178.4.101:57948] 192.178.4.101 - - [paramountbaldivis.com/sid#2e7ddd8][rid#7ff56c0f1b20/initial] [perdir /home/baldivis/public_html/] applying pattern '.' to uri ''
[Mon Nov 10 18:40:40.759767 2025] [rewrite:trace1] [pid 10209:tid 10216] mod_rewrite.c(505): [client 192.178.4.101:57948] 192.178.4.101 - - [paramountbaldivis.com/sid#2e7ddd8][rid#7ff56c0f1b20/initial] [perdir /home/baldivis/public_html/] pass through /home/baldivis/public_html/
[Mon Nov 10 18:40:40.759836 2025] [rewrite:trace3] [pid 10209:tid 10216] mod_rewrite.c(505): [client 192.178.4.101:57948] 192.178.4.101 - - [paramountbaldivis.com/sid#2e7ddd8][rid#7ff57c0cd7d0/subreq] [perdir /home/baldivis/public_html/] strip per-dir prefix: /home/baldivis/public_html/index.php -> index.php
[Mon Nov 10 18:40:40.759850 2025] [rewrite:trace3] [pid 10209:tid 10216] mod_rewrite.c(505): [client 192.178.4.101:57948] 192.178.4.101 - - [paramountbaldivis.com/sid#2e7ddd8][rid#7ff57c0cd7d0/subreq] [perdir /home/baldivis/public_html/] applying pattern '^index\\.php$' to uri 'index.php'
[Mon Nov 10 18:40:40.759862 2025] [rewrite:trace1] [pid 10209:tid 10216] mod_rewrite.c(505): [client 192.178.4.101:57948] 192.178.4.101 - - [paramountbaldivis.com/sid#2e7ddd8][rid#7ff57c0cd7d0/subreq] [perdir /home/baldivis/public_html/] pass through /home/baldivis/public_html/index.php
[Mon Nov 10 18:41:01.824990 2025] [rewrite:trace3] [pid 10209:tid 10231] mod_rewrite.c(505): [client 192.178.4.101:43907] 192.178.4.101 - - [paramountbaldivis.com/sid#2e7ddd8][rid#7ff56c0fbb70/initial] [perdir /home/baldivis/public_html/] strip per-dir prefix: /home/baldivis/public_html/ ->
[Mon Nov 10 18:41:01.825064 2025] [rewrite:trace3] [pid 10209:tid 10231] mod_rewrite.c(505): [client 192.178.4.101:43907] 192.178.4.101 - - [paramountbaldivis.com/sid#2e7ddd8][rid#7ff56c0fbb70/initial] [perdir /home/baldivis/public_html/] applying pattern '^index\\.php$' to uri ''
[Mon Nov 10 18:41:01.825080 2025] [rewrite:trace3] [pid 10209:tid 10231] mod_rewrite.c(505): [client 192.178.4.101:43907] 192.178.4.101 - - [paramountbaldivis.com/sid#2e7ddd8][rid#7ff56c0fbb70/initial] [perdir /home/baldivis/public_html/] strip per-dir prefix: /home/baldivis/public_html/ ->
[Mon Nov 10 18:41:01.825088 2025] [rewrite:trace3] [pid 10209:tid 10231] mod_rewrite.c(505): [client 192.178.4.101:43907] 192.178.4.101 - - [paramountbaldivis.com/sid#2e7ddd8][rid#7ff56c0fbb70/initial] [perdir /home/baldivis/public_html/] applying pattern '.' to uri ''
[Mon Nov 10 18:41:01.825096 2025] [rewrite:trace1] [pid 10209:tid 10231] mod_rewrite.c(505): [client 192.178.4.101:43907] 192.178.4.101 - - [paramountbaldivis.com/sid#2e7ddd8][rid#7ff56c0fbb70/initial] [perdir /home/baldivis/public_html/] pass through /home/baldivis/public_html/
[Mon Nov 10 18:41:01.825167 2025] [rewrite:trace3] [pid 10209:tid 10231] mod_rewrite.c(505): [client 192.178.4.101:43907] 192.178.4.101 - - [paramountbaldivis.com/sid#2e7ddd8][rid#7ff56c0f1b20/subreq] [perdir /home/baldivis/public_html/] strip per-dir prefix: /home/baldivis/public_html/index.php -> index.php
[Mon Nov 10 18:41:01.825183 2025] [rewrite:trace3] [pid 10209:tid 10231] mod_rewrite.c(505): [client 192.178.4.101:43907] 192.178.4.101 - - [paramountbaldivis.com/sid#2e7ddd8][rid#7ff56c0f1b20/subreq] [perdir /home/baldivis/public_html/] applying pattern '^index\\.php$' to uri 'index.php'
[Mon Nov 10 18:41:01.825198 2025] [rewrite:trace1] [pid 10209:tid 10231] mod_rewrite.c(505): [client 192.178.4.101:43907] 192.178.4.101 - - [paramountbaldivis.com/sid#2e7ddd8][rid#7ff56c0f1b20/subreq] [perdir /home/baldivis/public_html/] pass through /home/baldivis/public_html/index.php
[Mon Nov 10 18:41:21.505193 2025] [rewrite:trace3] [pid 10674:tid 10685] mod_rewrite.c(505): [client 192.178.4.102:63267] 192.178.4.102 - - [paramountbaldivis.com/sid#1bf8dd8][rid#7f1d680175b0/initial] [perdir /home/baldivis/public_html/] strip per-dir prefix: /home/baldivis/public_html/ ->
[Mon Nov 10 18:41:21.505247 2025] [rewrite:trace3] [pid 10674:tid 10685] mod_rewrite.c(505): [client 192.178.4.102:63267] 192.178.4.102 - - [paramountbaldivis.com/sid#1bf8dd8][rid#7f1d680175b0/initial] [perdir /home/baldivis/public_html/] applying pattern '^index\\.php$' to uri ''
[Mon Nov 10 18:41:21.505260 2025] [rewrite:trace3] [pid 10674:tid 10685] mod_rewrite.c(505): [client 192.178.4.102:63267] 192.178.4.102 - - [paramountbaldivis.com/sid#1bf8dd8][rid#7f1d680175b0/initial] [perdir /home/baldivis/public_html/] strip per-dir prefix: /home/baldivis/public_html/ ->
[Mon Nov 10 18:41:21.505269 2025] [rewrite:trace3] [pid 10674:tid 10685] mod_rewrite.c(505): [client 192.178.4.102:63267] 192.178.4.102 - - [paramountbaldivis.com/sid#1bf8dd8][rid#7f1d680175b0/initial] [perdir /home/baldivis/public_html/] applying pattern '.' to uri ''
[Mon Nov 10 18:41:21.505278 2025] [rewrite:trace1] [pid 10674:tid 10685] mod_rewrite.c(505): [client 192.178.4.102:63267] 192.178.4.102 - - [paramountbaldivis.com/sid#1bf8dd8][rid#7f1d680175b0/initial] [perdir /home/baldivis/public_html/] pass through /home/baldivis/public_html/
[Mon Nov 10 18:41:21.505402 2025] [rewrite:trace3] [pid 10674:tid 10685] mod_rewrite.c(505): [client 192.178.4.102:63267] 192.178.4.102 - - [paramountbaldivis.com/sid#1bf8dd8][rid#7f1d680cf9b0/subreq] [perdir /home/baldivis/public_html/] strip per-dir prefix: /home/baldivis/public_html/index.php -> index.php
[Mon Nov 10 18:41:21.505428 2025] [rewrite:trace3] [pid 10674:tid 10685] mod_rewrite.c(505): [client 192.178.4.102:63267] 192.178.4.102 - - [paramountbaldivis.com/sid#1bf8dd8][rid#7f1d680cf9b0/subreq] [perdir /home/baldivis/public_html/] applying pattern '^index\\.php$' to uri 'index.php'
[Mon Nov 10 18:41:21.505453 2025] [rewrite:trace1] [pid 10674:tid 10685] mod_rewrite.c(505): [client 192.178.4.102:63267] 192.178.4.102 - - [paramountbaldivis.com/sid#1bf8dd8][rid#7f1d680cf9b0/subreq] [perdir /home/baldivis/public_html/] pass through /home/baldivis/public_html/index.php
[Mon Nov 10 18:41:50.804109 2025] [rewrite:trace3] [pid 10676:tid 10750] mod_rewrite.c(505): [client 192.178.4.101:44769] 192.178.4.101 - - [paramountbaldivis.com/sid#1bf8dd8][rid#7f1d90049750/initial] [perdir /home/baldivis/public_html/] strip per-dir prefix: /home/baldivis/public_html/ ->
[Mon Nov 10 18:41:50.804183 2025] [rewrite:trace3] [pid 10676:tid 10750] mod_rewrite.c(505): [client 192.178.4.101:44769] 192.178.4.101 - - [paramountbaldivis.com/sid#1bf8dd8][rid#7f1d90049750/initial] [perdir /home/baldivis/public_html/] applying pattern '^index\\.php$' to uri ''
[Mon Nov 10 18:41:50.804199 2025] [rewrite:trace3] [pid 10676:tid 10750] mod_rewrite.c(505): [client 192.178.4.101:44769] 192.178.4.101 - - [paramountbaldivis.com/sid#1bf8dd8][rid#7f1d90049750/initial] [perdir /home/baldivis/public_html/] strip per-dir prefix: /home/baldivis/public_html/ ->
[Mon Nov 10 18:41:50.804208 2025] [rewrite:trace3] [pid 10676:tid 10750] mod_rewrite.c(505): [client 192.178.4.101:44769] 192.178.4.101 - - [paramountbaldivis.com/sid#1bf8dd8][rid#7f1d90049750/initial] [perdir /home/baldivis/public_html/] applying pattern '.' to uri ''
[Mon Nov 10 18:41:50.804218 2025] [rewrite:trace1] [pid 10676:tid 10750] mod_rewrite.c(505): [client 192.178.4.101:44769] 192.178.4.101 - - [paramountbaldivis.com/sid#1bf8dd8][rid#7f1d90049750/initial] [perdir /home/baldivis/public_html/] pass through /home/baldivis/public_html/
[Mon Nov 10 18:41:50.804384 2025] [rewrite:trace3] [pid 10676:tid 10750] mod_rewrite.c(505): [client 192.178.4.101:44769] 192.178.4.101 - - [paramountbaldivis.com/sid#1bf8dd8][rid#7f1d7c0c0b40/subreq] [perdir /home/baldivis/public_html/] strip per-dir prefix: /home/baldivis/public_html/index.php -> index.php
[Mon Nov 10 18:41:50.804404 2025] [rewrite:trace3] [pid 10676:tid 10750] mod_rewrite.c(505): [client 192.178.4.101:44769] 192.178.4.101 - - [paramountbaldivis.com/sid#1bf8dd8][rid#7f1d7c0c0b40/subreq] [perdir /home/baldivis/public_html/] applying pattern '^index\\.php$' to uri 'index.php'
[Mon Nov 10 18:41:50.804418 2025] [rewrite:trace1] [pid 10676:tid 10750] mod_rewrite.c(505): [client 192.178.4.101:44769] 192.178.4.101 - - [paramountbaldivis.com/sid#1bf8dd8][rid#7f1d7c0c0b40/subreq] [perdir /home/baldivis/public_html/] pass through /home/baldivis/public_html/index.php
[Mon Nov 10 18:42:21.444971 2025] [rewrite:trace3] [pid 11081:tid 11091] mod_rewrite.c(505): [client 192.178.4.102:45074] 192.178.4.102 - - [paramountbaldivis.com/sid#3821dd8][rid#7fe8f40175a0/initial] [perdir /home/baldivis/public_html/] strip per-dir prefix: /home/baldivis/public_html/ ->
[Mon Nov 10 18:42:21.445034 2025] [rewrite:trace3] [pid 11081:tid 11091] mod_rewrite.c(505): [client 192.178.4.102:45074] 192.178.4.102 - - [paramountbaldivis.com/sid#3821dd8][rid#7fe8f40175a0/initial] [perdir /home/baldivis/public_html/] applying pattern '^index\\.php$' to uri ''
[Mon Nov 10 18:42:21.445046 2025] [rewrite:trace3] [pid 11081:tid 11091] mod_rewrite.c(505): [client 192.178.4.102:45074] 192.178.4.102 - - [paramountbaldivis.com/sid#3821dd8][rid#7fe8f40175a0/initial] [perdir /home/baldivis/public_html/] strip per-dir prefix: /home/baldivis/public_html/ ->
[Mon Nov 10 18:42:21.445055 2025] [rewrite:trace3] [pid 11081:tid 11091] mod_rewrite.c(505): [client 192.178.4.102:45074] 192.178.4.102 - - [paramountbaldivis.com/sid#3821dd8][rid#7fe8f40175a0/initial] [perdir /home/baldivis/public_html/] applying pattern '.' to uri ''
[Mon Nov 10 18:42:21.445069 2025] [rewrite:trace1] [pid 11081:tid 11091] mod_rewrite.c(505): [client 192.178.4.102:45074] 192.178.4.102 - - [paramountbaldivis.com/sid#3821dd8][rid#7fe8f40175a0/initial] [perdir /home/baldivis/public_html/] pass through /home/baldivis/public_html/
[Mon Nov 10 18:42:21.445156 2025] [rewrite:trace3] [pid 11081:tid 11091] mod_rewrite.c(505): [client 192.178.4.102:45074] 192.178.4.102 - - [paramountbaldivis.com/sid#3821dd8][rid#7fe8f40cf9a0/subreq] [perdir /home/baldivis/public_html/] strip per-dir prefix: /home/baldivis/public_html/index.php -> index.php
[Mon Nov 10 18:42:21.445175 2025] [rewrite:trace3] [pid 11081:tid 11091] mod_rewrite.c(505): [client 192.178.4.102:45074] 192.178.4.102 - - [paramountbaldivis.com/sid#3821dd8][rid#7fe8f40cf9a0/subreq] [perdir /home/baldivis/public_html/] applying pattern '^index\\.php$' to uri 'index.php'
[Mon Nov 10 18:42:21.445187 2025] [rewrite:trace1] [pid 11081:tid 11091] mod_rewrite.c(505): [client 192.178.4.102:45074] 192.178.4.102 - - [paramountbaldivis.com/sid#3821dd8][rid#7fe8f40cf9a0/subreq] [perdir /home/baldivis/public_html/] pass through /home/baldivis/public_html/index.php
[Mon Nov 10 18:42:38.668055 2025] [:error] [pid 11083:tid 11154] [client 103.89.235.69:61871] [client 103.89.235.69] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.89.235.69, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aRHBnlxhY_WsLAGPEGzpsgAAAIs"]
[Mon Nov 10 18:42:38.673657 2025] [rewrite:trace3] [pid 11083:tid 11154] mod_rewrite.c(505): [client 103.89.235.69:61871] 103.89.235.69 - - [paramountbaldivis.com/sid#3821dd8][rid#7fe91c01da60/initial] [perdir /home/baldivis/public_html/] strip per-dir prefix: /home/baldivis/public_html/xmlrpc.php -> xmlrpc.php
[Mon Nov 10 18:42:38.673687 2025] [rewrite:trace3] [pid 11083:tid 11154] mod_rewrite.c(505): [client 103.89.235.69:61871] 103.89.235.69 - - [paramountbaldivis.com/sid#3821dd8][rid#7fe91c01da60/initial] [perdir /home/baldivis/public_html/] applying pattern '^index\\.php$' to uri 'xmlrpc.php'
[Mon Nov 10 18:42:38.673702 2025] [rewrite:trace3] [pid 11083:tid 11154] mod_rewrite.c(505): [client 103.89.235.69:61871] 103.89.235.69 - - [paramountbaldivis.com/sid#3821dd8][rid#7fe91c01da60/initial] [perdir /home/baldivis/public_html/] strip per-dir prefix: /home/baldivis/public_html/xmlrpc.php -> xmlrpc.php
[Mon Nov 10 18:42:38.673712 2025] [rewrite:trace3] [pid 11083:tid 11154] mod_rewrite.c(505): [client 103.89.235.69:61871] 103.89.235.69 - - [paramountbaldivis.com/sid#3821dd8][rid#7fe91c01da60/initial] [perdir /home/baldivis/public_html/] applying pattern '.' to uri 'xmlrpc.php'
[Mon Nov 10 18:42:38.673732 2025] [rewrite:trace4] [pid 11083:tid 11154] mod_rewrite.c(505): [client 103.89.235.69:61871] 103.89.235.69 - - [paramountbaldivis.com/sid#3821dd8][rid#7fe91c01da60/initial] [perdir /home/baldivis/public_html/] RewriteCond: input='/home/baldivis/public_html/xmlrpc.php' pattern='!-f' => not-matched
[Mon Nov 10 18:42:38.673743 2025] [rewrite:trace1] [pid 11083:tid 11154] mod_rewrite.c(505): [client 103.89.235.69:61871] 103.89.235.69 - - [paramountbaldivis.com/sid#3821dd8][rid#7fe91c01da60/initial] [perdir /home/baldivis/public_html/] pass through /home/baldivis/public_html/xmlrpc.php
[Mon Nov 10 18:42:41.955869 2025] [rewrite:trace3] [pid 11171:tid 11184] mod_rewrite.c(505): [client 192.178.4.101:65215] 192.178.4.101 - - [paramountbaldivis.com/sid#3821dd8][rid#7fe908032e70/initial] [perdir /home/baldivis/public_html/] strip per-dir prefix: /home/baldivis/public_html/ ->
[Mon Nov 10 18:42:41.955964 2025] [rewrite:trace3] [pid 11171:tid 11184] mod_rewrite.c(505): [client 192.178.4.101:65215] 192.178.4.101 - - [paramountbaldivis.com/sid#3821dd8][rid#7fe908032e70/initial] [perdir /home/baldivis/public_html/] applying pattern '^index\\.php$' to uri ''
[Mon Nov 10 18:42:41.955964 2025] [rewrite:trace3] [pid 11171:tid 11184] mod_rewrite.c(505): [client 192.178.4.101:65215] 192.178.4.101 - - [paramountbaldivis.com/sid#3821dd8][rid#7fe908032e70/initial] [perdir /home/baldivis/public_html/] strip per-dir prefix: /home/baldivis/public_html/ ->
[Mon Nov 10 18:42:41.955983 2025] [rewrite:trace3] [pid 11171:tid 11184] mod_rewrite.c(505): [client 192.178.4.101:65215] 192.178.4.101 - - [paramountbaldivis.com/sid#3821dd8][rid#7fe908032e70/initial] [perdir /home/baldivis/public_html/] applying pattern '.' to uri ''
[Mon Nov 10 18:42:41.956001 2025] [rewrite:trace1] [pid 11171:tid 11184] mod_rewrite.c(505): [client 192.178.4.101:65215] 192.178.4.101 - - [paramountbaldivis.com/sid#3821dd8][rid#7fe908032e70/initial] [perdir /home/baldivis/public_html/] pass through /home/baldivis/public_html/
[Mon Nov 10 18:42:41.956110 2025] [rewrite:trace3] [pid 11171:tid 11184] mod_rewrite.c(505): [client 192.178.4.101:65215] 192.178.4.101 - - [paramountbaldivis.com/sid#3821dd8][rid#7fe91005e180/subreq] [perdir /home/baldivis/public_html/] strip per-dir prefix: /home/baldivis/public_html/index.php -> index.php
[Mon Nov 10 18:42:41.956162 2025] [rewrite:trace3] [pid 11171:tid 11184] mod_rewrite.c(505): [client 192.178.4.101:65215] 192.178.4.101 - - [paramountbaldivis.com/sid#3821dd8][rid#7fe91005e180/subreq] [perdir /home/baldivis/public_html/] applying pattern '^index\\.php$' to uri 'index.php'
[Mon Nov 10 18:42:41.956162 2025] [rewrite:trace1] [pid 11171:tid 11184] mod_rewrite.c(505): [client 192.178.4.101:65215] 192.178.4.101 - - [paramountbaldivis.com/sid#3821dd8][rid#7fe91005e180/subreq] [perdir /home/baldivis/public_html/] pass through /home/baldivis/public_html/index.php
[Mon Nov 10 18:42:56.965770 2025] [rewrite:trace3] [pid 11171:tid 11197] mod_rewrite.c(505): [client 192.178.4.101:42833] 192.178.4.101 - - [paramountbaldivis.com/sid#3821dd8][rid#7fe91c0505c0/initial] [perdir /home/baldivis/public_html/] strip per-dir prefix: /home/baldivis/public_html/ ->
[Mon Nov 10 18:42:56.965832 2025] [rewrite:trace3] [pid 11171:tid 11197] mod_rewrite.c(505): [client 192.178.4.101:42833] 192.178.4.101 - - [paramountbaldivis.com/sid#3821dd8][rid#7fe91c0505c0/initial] [perdir /home/baldivis/public_html/] applying pattern '^index\\.php$' to uri ''
[Mon Nov 10 18:42:56.965846 2025] [rewrite:trace3] [pid 11171:tid 11197] mod_rewrite.c(505): [client 192.178.4.101:42833] 192.178.4.101 - - [paramountbaldivis.com/sid#3821dd8][rid#7fe91c0505c0/initial] [perdir /home/baldivis/public_html/] strip per-dir prefix: /home/baldivis/public_html/ ->
[Mon Nov 10 18:42:56.965855 2025] [rewrite:trace3] [pid 11171:tid 11197] mod_rewrite.c(505): [client 192.178.4.101:42833] 192.178.4.101 - - [paramountbaldivis.com/sid#3821dd8][rid#7fe91c0505c0/initial] [perdir /home/baldivis/public_html/] applying pattern '.' to uri ''
[Mon Nov 10 18:42:56.965864 2025] [rewrite:trace1] [pid 11171:tid 11197] mod_rewrite.c(505): [client 192.178.4.101:42833] 192.178.4.101 - - [paramountbaldivis.com/sid#3821dd8][rid#7fe91c0505c0/initial] [perdir /home/baldivis/public_html/] pass through /home/baldivis/public_html/
[Mon Nov 10 18:42:56.965957 2025] [rewrite:trace3] [pid 11171:tid 11197] mod_rewrite.c(505): [client 192.178.4.101:42833] 192.178.4.101 - - [paramountbaldivis.com/sid#3821dd8][rid#7fe91c0de7b0/subreq] [perdir /home/baldivis/public_html/] strip per-dir prefix: /home/baldivis/public_html/index.php -> index.php
[Mon Nov 10 18:42:56.965978 2025] [rewrite:trace3] [pid 11171:tid 11197] mod_rewrite.c(505): [client 192.178.4.101:42833] 192.178.4.101 - - [paramountbaldivis.com/sid#3821dd8][rid#7fe91c0de7b0/subreq] [perdir /home/baldivis/public_html/] applying pattern '^index\\.php$' to uri 'index.php'
[Mon Nov 10 18:42:56.965991 2025] [rewrite:trace1] [pid 11171:tid 11197] mod_rewrite.c(505): [client 192.178.4.101:42833] 192.178.4.101 - - [paramountbaldivis.com/sid#3821dd8][rid#7fe91c0de7b0/subreq] [perdir /home/baldivis/public_html/] pass through /home/baldivis/public_html/index.php
[Mon Nov 10 18:43:23.107468 2025] [rewrite:trace3] [pid 11494:tid 11515] mod_rewrite.c(505): [client 192.178.4.101:36132] 192.178.4.101 - - [paramountbaldivis.com/sid#2bcddd8][rid#7f3838049920/initial] [perdir /home/baldivis/public_html/] strip per-dir prefix: /home/baldivis/public_html/ ->
[Mon Nov 10 18:43:23.107556 2025] [rewrite:trace3] [pid 11494:tid 11515] mod_rewrite.c(505): [client 192.178.4.101:36132] 192.178.4.101 - - [paramountbaldivis.com/sid#2bcddd8][rid#7f3838049920/initial] [perdir /home/baldivis/public_html/] applying pattern '^index\\.php$' to uri ''
[Mon Nov 10 18:43:23.107570 2025] [rewrite:trace3] [pid 11494:tid 11515] mod_rewrite.c(505): [client 192.178.4.101:36132] 192.178.4.101 - - [paramountbaldivis.com/sid#2bcddd8][rid#7f3838049920/initial] [perdir /home/baldivis/public_html/] strip per-dir prefix: /home/baldivis/public_html/ ->
[Mon Nov 10 18:43:23.107579 2025] [rewrite:trace3] [pid 11494:tid 11515] mod_rewrite.c(505): [client 192.178.4.101:36132] 192.178.4.101 - - [paramountbaldivis.com/sid#2bcddd8][rid#7f3838049920/initial] [perdir /home/baldivis/public_html/] applying pattern '.' to uri ''
[Mon Nov 10 18:43:23.107588 2025] [rewrite:trace1] [pid 11494:tid 11515] mod_rewrite.c(505): [client 192.178.4.101:36132] 192.178.4.101 - - [paramountbaldivis.com/sid#2bcddd8][rid#7f3838049920/initial] [perdir /home/baldivis/public_html/] pass through /home/baldivis/public_html/
[Mon Nov 10 18:43:23.107659 2025] [rewrite:trace3] [pid 11494:tid 11515] mod_rewrite.c(505): [client 192.178.4.101:36132] 192.178.4.101 - - [paramountbaldivis.com/sid#2bcddd8][rid#7f3838111d50/subreq] [perdir /home/baldivis/public_html/] strip per-dir prefix: /home/baldivis/public_html/index.php -> index.php
[Mon Nov 10 18:43:23.107672 2025] [rewrite:trace3] [pid 11494:tid 11515] mod_rewrite.c(505): [client 192.178.4.101:36132] 192.178.4.101 - - [paramountbaldivis.com/sid#2bcddd8][rid#7f3838111d50/subreq] [perdir /home/baldivis/public_html/] applying pattern '^index\\.php$' to uri 'index.php'
[Mon Nov 10 18:43:23.107684 2025] [rewrite:trace1] [pid 11494:tid 11515] mod_rewrite.c(505): [client 192.178.4.101:36132] 192.178.4.101 - - [paramountbaldivis.com/sid#2bcddd8][rid#7f3838111d50/subreq] [perdir /home/baldivis/public_html/] pass through /home/baldivis/public_html/index.php
[Mon Nov 10 18:43:30.570603 2025] [rewrite:trace3] [pid 11496:tid 11572] mod_rewrite.c(505): [client 192.178.4.101:43784] 192.178.4.101 - - [paramountbaldivis.com/sid#2bcddd8][rid#7f38400109e0/initial] [perdir /home/baldivis/public_html/] strip per-dir prefix: /home/baldivis/public_html/ ->
[Mon Nov 10 18:43:30.570663 2025] [rewrite:trace3] [pid 11496:tid 11572] mod_rewrite.c(505): [client 192.178.4.101:43784] 192.178.4.101 - - [paramountbaldivis.com/sid#2bcddd8][rid#7f38400109e0/initial] [perdir /home/baldivis/public_html/] applying pattern '^index\\.php$' to uri ''
[Mon Nov 10 18:43:30.570676 2025] [rewrite:trace3] [pid 11496:tid 11572] mod_rewrite.c(505): [client 192.178.4.101:43784] 192.178.4.101 - - [paramountbaldivis.com/sid#2bcddd8][rid#7f38400109e0/initial] [perdir /home/baldivis/public_html/] strip per-dir prefix: /home/baldivis/public_html/ ->
[Mon Nov 10 18:43:30.570685 2025] [rewrite:trace3] [pid 11496:tid 11572] mod_rewrite.c(505): [client 192.178.4.101:43784] 192.178.4.101 - - [paramountbaldivis.com/sid#2bcddd8][rid#7f38400109e0/initial] [perdir /home/baldivis/public_html/] applying pattern '.' to uri ''
[Mon Nov 10 18:43:30.570695 2025] [rewrite:trace1] [pid 11496:tid 11572] mod_rewrite.c(505): [client 192.178.4.101:43784] 192.178.4.101 - - [paramountbaldivis.com/sid#2bcddd8][rid#7f38400109e0/initial] [perdir /home/baldivis/public_html/] pass through /home/baldivis/public_html/
[Mon Nov 10 18:43:30.570776 2025] [rewrite:trace3] [pid 11496:tid 11572] mod_rewrite.c(505): [client 192.178.4.101:43784] 192.178.4.101 - - [paramountbaldivis.com/sid#2bcddd8][rid#7f3840004130/subreq] [perdir /home/baldivis/public_html/] strip per-dir prefix: /home/baldivis/public_html/index.php -> index.php
[Mon Nov 10 18:43:30.570790 2025] [rewrite:trace3] [pid 11496:tid 11572] mod_rewrite.c(505): [client 192.178.4.101:43784] 192.178.4.101 - - [paramountbaldivis.com/sid#2bcddd8][rid#7f3840004130/subreq] [perdir /home/baldivis/public_html/] applying pattern '^index\\.php$' to uri 'index.php'
[Mon Nov 10 18:43:30.570801 2025] [rewrite:trace1] [pid 11496:tid 11572] mod_rewrite.c(505): [client 192.178.4.101:43784] 192.178.4.101 - - [paramountbaldivis.com/sid#2bcddd8][rid#7f3840004130/subreq] [perdir /home/baldivis/public_html/] pass through /home/baldivis/public_html/index.php
[Mon Nov 10 18:43:40.275698 2025] [rewrite:trace3] [pid 11582:tid 11595] mod_rewrite.c(505): [client 192.178.4.101:35147] 192.178.4.101 - - [paramountbaldivis.com/sid#2bcddd8][rid#7f384c045e40/initial] [perdir /home/baldivis/public_html/] strip per-dir prefix: /home/baldivis/public_html/ ->
[Mon Nov 10 18:43:40.275770 2025] [rewrite:trace3] [pid 11582:tid 11595] mod_rewrite.c(505): [client 192.178.4.101:35147] 192.178.4.101 - - [paramountbaldivis.com/sid#2bcddd8][rid#7f384c045e40/initial] [perdir /home/baldivis/public_html/] applying pattern '^index\\.php$' to uri ''
[Mon Nov 10 18:43:40.275783 2025] [rewrite:trace3] [pid 11582:tid 11595] mod_rewrite.c(505): [client 192.178.4.101:35147] 192.178.4.101 - - [paramountbaldivis.com/sid#2bcddd8][rid#7f384c045e40/initial] [perdir /home/baldivis/public_html/] strip per-dir prefix: /home/baldivis/public_html/ ->
[Mon Nov 10 18:43:40.275792 2025] [rewrite:trace3] [pid 11582:tid 11595] mod_rewrite.c(505): [client 192.178.4.101:35147] 192.178.4.101 - - [paramountbaldivis.com/sid#2bcddd8][rid#7f384c045e40/initial] [perdir /home/baldivis/public_html/] applying pattern '.' to uri ''
[Mon Nov 10 18:43:40.275801 2025] [rewrite:trace1] [pid 11582:tid 11595] mod_rewrite.c(505): [client 192.178.4.101:35147] 192.178.4.101 - - [paramountbaldivis.com/sid#2bcddd8][rid#7f384c045e40/initial] [perdir /home/baldivis/public_html/] pass through /home/baldivis/public_html/
[Mon Nov 10 18:43:40.275865 2025] [rewrite:trace3] [pid 11582:tid 11595] mod_rewrite.c(505): [client 192.178.4.101:35147] 192.178.4.101 - - [paramountbaldivis.com/sid#2bcddd8][rid#7f384c1a73c0/subreq] [perdir /home/baldivis/public_html/] strip per-dir prefix: /home/baldivis/public_html/index.php -> index.php
[Mon Nov 10 18:43:40.275878 2025] [rewrite:trace3] [pid 11582:tid 11595] mod_rewrite.c(505): [client 192.178.4.101:35147] 192.178.4.101 - - [paramountbaldivis.com/sid#2bcddd8][rid#7f384c1a73c0/subreq] [perdir /home/baldivis/public_html/] applying pattern '^index\\.php$' to uri 'index.php'
[Mon Nov 10 18:43:40.275890 2025] [rewrite:trace1] [pid 11582:tid 11595] mod_rewrite.c(505): [client 192.178.4.101:35147] 192.178.4.101 - - [paramountbaldivis.com/sid#2bcddd8][rid#7f384c1a73c0/subreq] [perdir /home/baldivis/public_html/] pass through /home/baldivis/public_html/index.php
[Mon Nov 10 18:44:04.829358 2025] [rewrite:trace3] [pid 11494:tid 11499] mod_rewrite.c(505): [client 192.178.4.101:63698] 192.178.4.101 - - [paramountbaldivis.com/sid#2bcddd8][rid#7f383c04e450/initial] [perdir /home/baldivis/public_html/] strip per-dir prefix: /home/baldivis/public_html/ ->
[Mon Nov 10 18:44:04.829409 2025] [rewrite:trace3] [pid 11494:tid 11499] mod_rewrite.c(505): [client 192.178.4.101:63698] 192.178.4.101 - - [paramountbaldivis.com/sid#2bcddd8][rid#7f383c04e450/initial] [perdir /home/baldivis/public_html/] applying pattern '^index\\.php$' to uri ''
[Mon Nov 10 18:44:04.829422 2025] [rewrite:trace3] [pid 11494:tid 11499] mod_rewrite.c(505): [client 192.178.4.101:63698] 192.178.4.101 - - [paramountbaldivis.com/sid#2bcddd8][rid#7f383c04e450/initial] [perdir /home/baldivis/public_html/] strip per-dir prefix: /home/baldivis/public_html/ ->
[Mon Nov 10 18:44:04.829431 2025] [rewrite:trace3] [pid 11494:tid 11499] mod_rewrite.c(505): [client 192.178.4.101:63698] 192.178.4.101 - - [paramountbaldivis.com/sid#2bcddd8][rid#7f383c04e450/initial] [perdir /home/baldivis/public_html/] applying pattern '.' to uri ''
[Mon Nov 10 18:44:04.829440 2025] [rewrite:trace1] [pid 11494:tid 11499] mod_rewrite.c(505): [client 192.178.4.101:63698] 192.178.4.101 - - [paramountbaldivis.com/sid#2bcddd8][rid#7f383c04e450/initial] [perdir /home/baldivis/public_html/] pass through /home/baldivis/public_html/
[Mon Nov 10 18:44:04.829506 2025] [rewrite:trace3] [pid 11494:tid 11499] mod_rewrite.c(505): [client 192.178.4.101:63698] 192.178.4.101 - - [paramountbaldivis.com/sid#2bcddd8][rid#7f383c0ce640/subreq] [perdir /home/baldivis/public_html/] strip per-dir prefix: /home/baldivis/public_html/index.php -> index.php
[Mon Nov 10 18:44:04.829530 2025] [rewrite:trace3] [pid 11494:tid 11499] mod_rewrite.c(505): [client 192.178.4.101:63698] 192.178.4.101 - - [paramountbaldivis.com/sid#2bcddd8][rid#7f383c0ce640/subreq] [perdir /home/baldivis/public_html/] applying pattern '^index\\.php$' to uri 'index.php'
[Mon Nov 10 18:44:04.829543 2025] [rewrite:trace1] [pid 11494:tid 11499] mod_rewrite.c(505): [client 192.178.4.101:63698] 192.178.4.101 - - [paramountbaldivis.com/sid#2bcddd8][rid#7f383c0ce640/subreq] [perdir /home/baldivis/public_html/] pass through /home/baldivis/public_html/index.php
[Mon Nov 10 18:44:21.554692 2025] [rewrite:trace3] [pid 11952:tid 11976] mod_rewrite.c(505): [client 192.178.4.101:47010] 192.178.4.101 - - [paramountbaldivis.com/sid#2e84dd8][rid#7ff2740175a0/initial] [perdir /home/baldivis/public_html/] strip per-dir prefix: /home/baldivis/public_html/ ->
[Mon Nov 10 18:44:21.554745 2025] [rewrite:trace3] [pid 11952:tid 11976] mod_rewrite.c(505): [client 192.178.4.101:47010] 192.178.4.101 - - [paramountbaldivis.com/sid#2e84dd8][rid#7ff2740175a0/initial] [perdir /home/baldivis/public_html/] applying pattern '^index\\.php$' to uri ''
[Mon Nov 10 18:44:21.554766 2025] [rewrite:trace3] [pid 11952:tid 11976] mod_rewrite.c(505): [client 192.178.4.101:47010] 192.178.4.101 - - [paramountbaldivis.com/sid#2e84dd8][rid#7ff2740175a0/initial] [perdir /home/baldivis/public_html/] strip per-dir prefix: /home/baldivis/public_html/ ->
[Mon Nov 10 18:44:21.554766 2025] [rewrite:trace3] [pid 11952:tid 11976] mod_rewrite.c(505): [client 192.178.4.101:47010] 192.178.4.101 - - [paramountbaldivis.com/sid#2e84dd8][rid#7ff2740175a0/initial] [perdir /home/baldivis/public_html/] applying pattern '.' to uri ''
[Mon Nov 10 18:44:21.554790 2025] [rewrite:trace1] [pid 11952:tid 11976] mod_rewrite.c(505): [client 192.178.4.101:47010] 192.178.4.101 - - [paramountbaldivis.com/sid#2e84dd8][rid#7ff2740175a0/initial] [perdir /home/baldivis/public_html/] pass through /home/baldivis/public_html/
[Mon Nov 10 18:44:21.554891 2025] [rewrite:trace3] [pid 11952:tid 11976] mod_rewrite.c(505): [client 192.178.4.101:47010] 192.178.4.101 - - [paramountbaldivis.com/sid#2e84dd8][rid#7ff2740cf9a0/subreq] [perdir /home/baldivis/public_html/] strip per-dir prefix: /home/baldivis/public_html/index.php -> index.php
[Mon Nov 10 18:44:21.554910 2025] [rewrite:trace3] [pid 11952:tid 11976] mod_rewrite.c(505): [client 192.178.4.101:47010] 192.178.4.101 - - [paramountbaldivis.com/sid#2e84dd8][rid#7ff2740cf9a0/subreq] [perdir /home/baldivis/public_html/] applying pattern '^index\\.php$' to uri 'index.php'
[Mon Nov 10 18:44:21.554913 2025] [rewrite:trace1] [pid 11952:tid 11976] mod_rewrite.c(505): [client 192.178.4.101:47010] 192.178.4.101 - - [paramountbaldivis.com/sid#2e84dd8][rid#7ff2740cf9a0/subreq] [perdir /home/baldivis/public_html/] pass through /home/baldivis/public_html/index.php
[Mon Nov 10 18:44:41.711917 2025] [rewrite:trace3] [pid 11953:tid 11993] mod_rewrite.c(505): [client 192.178.4.101:58919] 192.178.4.101 - - [paramountbaldivis.com/sid#2e84dd8][rid#7ff2d804dc20/initial] [perdir /home/baldivis/public_html/] strip per-dir prefix: /home/baldivis/public_html/ ->
[Mon Nov 10 18:44:41.711973 2025] [rewrite:trace3] [pid 11953:tid 11993] mod_rewrite.c(505): [client 192.178.4.101:58919] 192.178.4.101 - - [paramountbaldivis.com/sid#2e84dd8][rid#7ff2d804dc20/initial] [perdir /home/baldivis/public_html/] applying pattern '^index\\.php$' to uri ''
[Mon Nov 10 18:44:41.711985 2025] [rewrite:trace3] [pid 11953:tid 11993] mod_rewrite.c(505): [client 192.178.4.101:58919] 192.178.4.101 - - [paramountbaldivis.com/sid#2e84dd8][rid#7ff2d804dc20/initial] [perdir /home/baldivis/public_html/] strip per-dir prefix: /home/baldivis/public_html/ ->
[Mon Nov 10 18:44:41.711994 2025] [rewrite:trace3] [pid 11953:tid 11993] mod_rewrite.c(505): [client 192.178.4.101:58919] 192.178.4.101 - - [paramountbaldivis.com/sid#2e84dd8][rid#7ff2d804dc20/initial] [perdir /home/baldivis/public_html/] applying pattern '.' to uri ''
[Mon Nov 10 18:44:41.712020 2025] [rewrite:trace1] [pid 11953:tid 11993] mod_rewrite.c(505): [client 192.178.4.101:58919] 192.178.4.101 - - [paramountbaldivis.com/sid#2e84dd8][rid#7ff2d804dc20/initial] [perdir /home/baldivis/public_html/] pass through /home/baldivis/public_html/
[Mon Nov 10 18:44:41.712083 2025] [rewrite:trace3] [pid 11953:tid 11993] mod_rewrite.c(505): [client 192.178.4.101:58919] 192.178.4.101 - - [paramountbaldivis.com/sid#2e84dd8][rid#7ff2d80dbe10/subreq] [perdir /home/baldivis/public_html/] strip per-dir prefix: /home/baldivis/public_html/index.php -> index.php
[Mon Nov 10 18:44:41.712096 2025] [rewrite:trace3] [pid 11953:tid 11993] mod_rewrite.c(505): [client 192.178.4.101:58919] 192.178.4.101 - - [paramountbaldivis.com/sid#2e84dd8][rid#7ff2d80dbe10/subreq] [perdir /home/baldivis/public_html/] applying pattern '^index\\.php$' to uri 'index.php'
[Mon Nov 10 18:44:41.712107 2025] [rewrite:trace1] [pid 11953:tid 11993] mod_rewrite.c(505): [client 192.178.4.101:58919] 192.178.4.101 - - [paramountbaldivis.com/sid#2e84dd8][rid#7ff2d80dbe10/subreq] [perdir /home/baldivis/public_html/] pass through /home/baldivis/public_html/index.php
[Mon Nov 10 18:44:45.457131 2025] [rewrite:trace3] [pid 11953:tid 11987] mod_rewrite.c(505): [client 192.178.4.101:58919] 192.178.4.101 - - [paramountbaldivis.com/sid#2e84dd8][rid#7ff2d8017a20/initial] [perdir /home/baldivis/public_html/] strip per-dir prefix: /home/baldivis/public_html/ ->
[Mon Nov 10 18:44:45.457169 2025] [rewrite:trace3] [pid 11953:tid 11987] mod_rewrite.c(505): [client 192.178.4.101:58919] 192.178.4.101 - - [paramountbaldivis.com/sid#2e84dd8][rid#7ff2d8017a20/initial] [perdir /home/baldivis/public_html/] applying pattern '^index\\.php$' to uri ''
[Mon Nov 10 18:44:45.457183 2025] [rewrite:trace3] [pid 11953:tid 11987] mod_rewrite.c(505): [client 192.178.4.101:58919] 192.178.4.101 - - [paramountbaldivis.com/sid#2e84dd8][rid#7ff2d8017a20/initial] [perdir /home/baldivis/public_html/] strip per-dir prefix: /home/baldivis/public_html/ ->
[Mon Nov 10 18:44:45.457201 2025] [rewrite:trace3] [pid 11953:tid 11987] mod_rewrite.c(505): [client 192.178.4.101:58919] 192.178.4.101 - - [paramountbaldivis.com/sid#2e84dd8][rid#7ff2d8017a20/initial] [perdir /home/baldivis/public_html/] applying pattern '.' to uri ''
[Mon Nov 10 18:44:45.457219 2025] [rewrite:trace1] [pid 11953:tid 11987] mod_rewrite.c(505): [client 192.178.4.101:58919] 192.178.4.101 - - [paramountbaldivis.com/sid#2e84dd8][rid#7ff2d8017a20/initial] [perdir /home/baldivis/public_html/] pass through /home/baldivis/public_html/
[Mon Nov 10 18:44:45.457366 2025] [rewrite:trace3] [pid 11953:tid 11987] mod_rewrite.c(505): [client 192.178.4.101:58919] 192.178.4.101 - - [paramountbaldivis.com/sid#2e84dd8][rid#7ff2d804dc20/subreq] [perdir /home/baldivis/public_html/] strip per-dir prefix: /home/baldivis/public_html/index.php -> index.php
[Mon Nov 10 18:44:45.457427 2025] [rewrite:trace3] [pid 11953:tid 11987] mod_rewrite.c(505): [client 192.178.4.101:58919] 192.178.4.101 - - [paramountbaldivis.com/sid#2e84dd8][rid#7ff2d804dc20/subreq] [perdir /home/baldivis/public_html/] applying pattern '^index\\.php$' to uri 'index.php'
[Mon Nov 10 18:44:45.457427 2025] [rewrite:trace1] [pid 11953:tid 11987] mod_rewrite.c(505): [client 192.178.4.101:58919] 192.178.4.101 - - [paramountbaldivis.com/sid#2e84dd8][rid#7ff2d804dc20/subreq] [perdir /home/baldivis/public_html/] pass through /home/baldivis/public_html/index.php
[Mon Nov 10 18:45:28.164185 2025] [rewrite:trace3] [pid 12498:tid 12554] mod_rewrite.c(505): [client 192.178.4.101:48921] 192.178.4.101 - - [paramountbaldivis.com/sid#35a6dd8][rid#7f80b801f890/initial] [perdir /home/baldivis/public_html/] strip per-dir prefix: /home/baldivis/public_html/ ->
[Mon Nov 10 18:45:28.164357 2025] [rewrite:trace3] [pid 12498:tid 12554] mod_rewrite.c(505): [client 192.178.4.101:48921] 192.178.4.101 - - [paramountbaldivis.com/sid#35a6dd8][rid#7f80b801f890/initial] [perdir /home/baldivis/public_html/] applying pattern '^index\\.php$' to uri ''
[Mon Nov 10 18:45:28.164397 2025] [rewrite:trace3] [pid 12498:tid 12554] mod_rewrite.c(505): [client 192.178.4.101:48921] 192.178.4.101 - - [paramountbaldivis.com/sid#35a6dd8][rid#7f80b801f890/initial] [perdir /home/baldivis/public_html/] strip per-dir prefix: /home/baldivis/public_html/ ->
[Mon Nov 10 18:45:28.164397 2025] [rewrite:trace3] [pid 12498:tid 12554] mod_rewrite.c(505): [client 192.178.4.101:48921] 192.178.4.101 - - [paramountbaldivis.com/sid#35a6dd8][rid#7f80b801f890/initial] [perdir /home/baldivis/public_html/] applying pattern '.' to uri ''
[Mon Nov 10 18:45:28.164406 2025] [rewrite:trace1] [pid 12498:tid 12554] mod_rewrite.c(505): [client 192.178.4.101:48921] 192.178.4.101 - - [paramountbaldivis.com/sid#35a6dd8][rid#7f80b801f890/initial] [perdir /home/baldivis/public_html/] pass through /home/baldivis/public_html/
[Mon Nov 10 18:45:28.164550 2025] [rewrite:trace3] [pid 12498:tid 12554] mod_rewrite.c(505): [client 192.178.4.101:48921] 192.178.4.101 - - [paramountbaldivis.com/sid#35a6dd8][rid#7f80b80d7c90/subreq] [perdir /home/baldivis/public_html/] strip per-dir prefix: /home/baldivis/public_html/index.php -> index.php
[Mon Nov 10 18:45:28.164585 2025] [rewrite:trace3] [pid 12498:tid 12554] mod_rewrite.c(505): [client 192.178.4.101:48921] 192.178.4.101 - - [paramountbaldivis.com/sid#35a6dd8][rid#7f80b80d7c90/subreq] [perdir /home/baldivis/public_html/] applying pattern '^index\\.php$' to uri 'index.php'
[Mon Nov 10 18:45:28.164585 2025] [rewrite:trace1] [pid 12498:tid 12554] mod_rewrite.c(505): [client 192.178.4.101:48921] 192.178.4.101 - - [paramountbaldivis.com/sid#35a6dd8][rid#7f80b80d7c90/subreq] [perdir /home/baldivis/public_html/] pass through /home/baldivis/public_html/index.php
[Mon Nov 10 18:45:46.080151 2025] [rewrite:trace3] [pid 12496:tid 12503] mod_rewrite.c(505): [client 192.178.4.101:39936] 192.178.4.101 - - [paramountbaldivis.com/sid#35a6dd8][rid#7f808c0120a0/initial] [perdir /home/baldivis/public_html/] strip per-dir prefix: /home/baldivis/public_html/ ->
[Mon Nov 10 18:45:46.080197 2025] [rewrite:trace3] [pid 12496:tid 12503] mod_rewrite.c(505): [client 192.178.4.101:39936] 192.178.4.101 - - [paramountbaldivis.com/sid#35a6dd8][rid#7f808c0120a0/initial] [perdir /home/baldivis/public_html/] applying pattern '^index\\.php$' to uri ''
[Mon Nov 10 18:45:46.080210 2025] [rewrite:trace3] [pid 12496:tid 12503] mod_rewrite.c(505): [client 192.178.4.101:39936] 192.178.4.101 - - [paramountbaldivis.com/sid#35a6dd8][rid#7f808c0120a0/initial] [perdir /home/baldivis/public_html/] strip per-dir prefix: /home/baldivis/public_html/ ->
[Mon Nov 10 18:45:46.080219 2025] [rewrite:trace3] [pid 12496:tid 12503] mod_rewrite.c(505): [client 192.178.4.101:39936] 192.178.4.101 - - [paramountbaldivis.com/sid#35a6dd8][rid#7f808c0120a0/initial] [perdir /home/baldivis/public_html/] applying pattern '.' to uri ''
[Mon Nov 10 18:45:46.080230 2025] [rewrite:trace1] [pid 12496:tid 12503] mod_rewrite.c(505): [client 192.178.4.101:39936] 192.178.4.101 - - [paramountbaldivis.com/sid#35a6dd8][rid#7f808c0120a0/initial] [perdir /home/baldivis/public_html/] pass through /home/baldivis/public_html/
[Mon Nov 10 18:45:46.080297 2025] [rewrite:trace3] [pid 12496:tid 12503] mod_rewrite.c(505): [client 192.178.4.101:39936] 192.178.4.101 - - [paramountbaldivis.com/sid#35a6dd8][rid#7f80ac0ba610/subreq] [perdir /home/baldivis/public_html/] strip per-dir prefix: /home/baldivis/public_html/index.php -> index.php
[Mon Nov 10 18:45:46.080340 2025] [rewrite:trace3] [pid 12496:tid 12503] mod_rewrite.c(505): [client 192.178.4.101:39936] 192.178.4.101 - - [paramountbaldivis.com/sid#35a6dd8][rid#7f80ac0ba610/subreq] [perdir /home/baldivis/public_html/] applying pattern '^index\\.php$' to uri 'index.php'
[Mon Nov 10 18:45:46.080361 2025] [rewrite:trace1] [pid 12496:tid 12503] mod_rewrite.c(505): [client 192.178.4.101:39936] 192.178.4.101 - - [paramountbaldivis.com/sid#35a6dd8][rid#7f80ac0ba610/subreq] [perdir /home/baldivis/public_html/] pass through /home/baldivis/public_html/index.php
[Mon Nov 10 18:45:47.531599 2025] [rewrite:trace3] [pid 12496:tid 12520] mod_rewrite.c(505): [client 192.178.4.101:39936] 192.178.4.101 - - [paramountbaldivis.com/sid#35a6dd8][rid#7f80cc0aaab0/initial] [perdir /home/baldivis/public_html/] strip per-dir prefix: /home/baldivis/public_html/ ->
[Mon Nov 10 18:45:47.531677 2025] [rewrite:trace3] [pid 12496:tid 12520] mod_rewrite.c(505): [client 192.178.4.101:39936] 192.178.4.101 - - [paramountbaldivis.com/sid#35a6dd8][rid#7f80cc0aaab0/initial] [perdir /home/baldivis/public_html/] applying pattern '^index\\.php$' to uri ''
[Mon Nov 10 18:45:47.531691 2025] [rewrite:trace3] [pid 12496:tid 12520] mod_rewrite.c(505): [client 192.178.4.101:39936] 192.178.4.101 - - [paramountbaldivis.com/sid#35a6dd8][rid#7f80cc0aaab0/initial] [perdir /home/baldivis/public_html/] strip per-dir prefix: /home/baldivis/public_html/ ->
[Mon Nov 10 18:45:47.531700 2025] [rewrite:trace3] [pid 12496:tid 12520] mod_rewrite.c(505): [client 192.178.4.101:39936] 192.178.4.101 - - [paramountbaldivis.com/sid#35a6dd8][rid#7f80cc0aaab0/initial] [perdir /home/baldivis/public_html/] applying pattern '.' to uri ''
[Mon Nov 10 18:45:47.531736 2025] [rewrite:trace1] [pid 12496:tid 12520] mod_rewrite.c(505): [client 192.178.4.101:39936] 192.178.4.101 - - [paramountbaldivis.com/sid#35a6dd8][rid#7f80cc0aaab0/initial] [perdir /home/baldivis/public_html/] pass through /home/baldivis/public_html/
[Mon Nov 10 18:45:47.531783 2025] [rewrite:trace3] [pid 12496:tid 12520] mod_rewrite.c(505): [client 192.178.4.101:39936] 192.178.4.101 - - [paramountbaldivis.com/sid#35a6dd8][rid#7f80ac10abb0/subreq] [perdir /home/baldivis/public_html/] strip per-dir prefix: /home/baldivis/public_html/index.php -> index.php
[Mon Nov 10 18:45:47.531797 2025] [rewrite:trace3] [pid 12496:tid 12520] mod_rewrite.c(505): [client 192.178.4.101:39936] 192.178.4.101 - - [paramountbaldivis.com/sid#35a6dd8][rid#7f80ac10abb0/subreq] [perdir /home/baldivis/public_html/] applying pattern '^index\\.php$' to uri 'index.php'
[Mon Nov 10 18:45:47.531809 2025] [rewrite:trace1] [pid 12496:tid 12520] mod_rewrite.c(505): [client 192.178.4.101:39936] 192.178.4.101 - - [paramountbaldivis.com/sid#35a6dd8][rid#7f80ac10abb0/subreq] [perdir /home/baldivis/public_html/] pass through /home/baldivis/public_html/index.php
[Mon Nov 10 18:46:02.467805 2025] [rewrite:trace3] [pid 12496:tid 12511] mod_rewrite.c(505): [client 192.178.4.101:63571] 192.178.4.101 - - [paramountbaldivis.com/sid#35a6dd8][rid#7f80b401a1f0/initial] [perdir /home/baldivis/public_html/] strip per-dir prefix: /home/baldivis/public_html/ ->
[Mon Nov 10 18:46:02.467871 2025] [rewrite:trace3] [pid 12496:tid 12511] mod_rewrite.c(505): [client 192.178.4.101:63571] 192.178.4.101 - - [paramountbaldivis.com/sid#35a6dd8][rid#7f80b401a1f0/initial] [perdir /home/baldivis/public_html/] applying pattern '^index\\.php$' to uri ''
[Mon Nov 10 18:46:02.467883 2025] [rewrite:trace3] [pid 12496:tid 12511] mod_rewrite.c(505): [client 192.178.4.101:63571] 192.178.4.101 - - [paramountbaldivis.com/sid#35a6dd8][rid#7f80b401a1f0/initial] [perdir /home/baldivis/public_html/] strip per-dir prefix: /home/baldivis/public_html/ ->
[Mon Nov 10 18:46:02.467893 2025] [rewrite:trace3] [pid 12496:tid 12511] mod_rewrite.c(505): [client 192.178.4.101:63571] 192.178.4.101 - - [paramountbaldivis.com/sid#35a6dd8][rid#7f80b401a1f0/initial] [perdir /home/baldivis/public_html/] applying pattern '.' to uri ''
[Mon Nov 10 18:46:02.467903 2025] [rewrite:trace1] [pid 12496:tid 12511] mod_rewrite.c(505): [client 192.178.4.101:63571] 192.178.4.101 - - [paramountbaldivis.com/sid#35a6dd8][rid#7f80b401a1f0/initial] [perdir /home/baldivis/public_html/] pass through /home/baldivis/public_html/
[Mon Nov 10 18:46:02.467964 2025] [rewrite:trace3] [pid 12496:tid 12511] mod_rewrite.c(505): [client 192.178.4.101:63571] 192.178.4.101 - - [paramountbaldivis.com/sid#35a6dd8][rid#7f80b4050560/subreq] [perdir /home/baldivis/public_html/] strip per-dir prefix: /home/baldivis/public_html/index.php -> index.php
[Mon Nov 10 18:46:02.467978 2025] [rewrite:trace3] [pid 12496:tid 12511] mod_rewrite.c(505): [client 192.178.4.101:63571] 192.178.4.101 - - [paramountbaldivis.com/sid#35a6dd8][rid#7f80b4050560/subreq] [perdir /home/baldivis/public_html/] applying pattern '^index\\.php$' to uri 'index.php'
[Mon Nov 10 18:46:02.468001 2025] [rewrite:trace1] [pid 12496:tid 12511] mod_rewrite.c(505): [client 192.178.4.101:63571] 192.178.4.101 - - [paramountbaldivis.com/sid#35a6dd8][rid#7f80b4050560/subreq] [perdir /home/baldivis/public_html/] pass through /home/baldivis/public_html/index.php
[Mon Nov 10 19:29:29.211666 2025] [:error] [pid 37526:tid 37548] [client 159.223.226.118:53522] [client 159.223.226.118] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.223.226.118, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRHMmcHWif08oAb6wS3hVQAAANM"]
[Mon Nov 10 20:48:29.074437 2025] [:error] [pid 34820:tid 34830] [client 90.156.142.31:15820] [client 90.156.142.31] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 90.156.142.31, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRHfHWK3qvhYIA1ghWDDeQAAAQg"]
[Mon Nov 10 22:07:49.583536 2025] [:error] [pid 31031:tid 31118] [client 103.174.102.133:47358] [client 103.174.102.133] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.174.102.133, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRHxtXI8L5KZTd8nCaaUXwAAAI8"]
[Mon Nov 10 23:04:13.471473 2025] [proxy_fcgi:error] [pid 31136:tid 31161] (70007)The timeout specified has expired: [client 192.178.4.103:51163] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 00:53:04.306638 2025] [:error] [pid 24354:tid 24366] [client 35.198.41.118:42924] [client 35.198.41.118] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 35.198.41.118, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRIYcCiUwEIL0MTd44PVwQAAAog"]
[Tue Nov 11 01:19:40.786402 2025] [:error] [pid 41839:tid 41915] [client 91.92.242.56:56200] [client 91.92.242.56] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||paramountbaldivis.com|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "paramountbaldivis.com"] [uri "/wp-content/debug.log"] [unique_id "aRIerDGxg5uCD9Nfh5W_pQAAAIE"]
[Tue Nov 11 01:22:40.633705 2025] [:error] [pid 24225:tid 24251] [client 182.44.8.254:44400] [client 182.44.8.254] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||paramountbaldivis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRIfYJ2rrdiHvhXEioVyrQAAAlI"]
[Tue Nov 11 01:51:06.622375 2025] [:error] [pid 41816:tid 41880] [client 91.92.242.56:53990] [client 91.92.242.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/usc-e-shop/functions/content-log.php"] [unique_id "aRImCkQR8XSNQpgkeuQaqAAAABQ"]
[Tue Nov 11 01:55:40.553187 2025] [:error] [pid 24817:tid 24839] [client 91.92.242.56:53938] [client 91.92.242.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/post-pdf-export/dompdf/dompdf.php"] [unique_id "aRInHOBo1Juuc7yq76DU3gAAAxQ"]
[Tue Nov 11 01:55:41.628528 2025] [:error] [pid 41978:tid 42016] [client 91.92.242.56:61135] [client 91.92.242.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/web-portal-lite-client-portal-secure-file-sharing-private-messaging/includes/libs/pdf/dompdf.php"] [unique_id "aRInHZTXUiwDnS4PcJ9NhAAAANY"]
[Tue Nov 11 01:55:42.701721 2025] [:error] [pid 31985:tid 32030] [client 91.92.242.56:52318] [client 91.92.242.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/wp-ecommerce-shop-styling/includes/download.php"] [unique_id "aRInHpeXIbTtCYJNJFCHzwAAARQ"]
[Tue Nov 11 01:55:43.790351 2025] [:error] [pid 24225:tid 24240] [client 91.92.242.56:57933] [client 91.92.242.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "aRInH52rrdiHvhXEioV-LwAAAkc"]
[Tue Nov 11 01:55:44.888324 2025] [:error] [pid 24225:tid 24251] [client 91.92.242.56:65181] [client 91.92.242.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/cherry-plugin/admin/import-export/download-content.php"] [unique_id "aRInIJ2rrdiHvhXEioV-NQAAAlI"]
[Tue Nov 11 01:55:46.004941 2025] [:error] [pid 31985:tid 32028] [client 91.92.242.56:57351] [client 91.92.242.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "aRInIpeXIbTtCYJNJFCH1QAAARI"]
[Tue Nov 11 01:55:47.070095 2025] [:error] [pid 41825:tid 41894] [client 91.92.242.56:54173] [client 91.92.242.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "aRInI4r5hkwmQG_pQgAaTAAAAEc"]
[Tue Nov 11 01:55:48.180215 2025] [:error] [pid 24817:tid 24825] [client 91.92.242.56:62607] [client 91.92.242.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/mapsvg/gm_download.php"] [unique_id "aRInJOBo1Juuc7yq76DU4gAAAwY"]
[Tue Nov 11 01:55:49.269201 2025] [:error] [pid 14120:tid 14124] [client 91.92.242.56:58872] [client 91.92.242.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/mapsvg-lite-interactive-vector-maps/gm_download.php"] [unique_id "aRInJST8OKKuPaCGMt0sRgAAAUI"]
[Tue Nov 11 04:49:17.805002 2025] [:error] [pid 43437:tid 43517] [client 90.156.169.111:33398] [client 90.156.169.111] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 90.156.169.111, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRJPzQLPT6kbVOb_pwuMMgAAAJY"]
[Tue Nov 11 06:02:47.867091 2025] [:error] [pid 33932:tid 33970] [client 59.125.102.226:45768] [client 59.125.102.226] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 59.125.102.226, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRJhB5dn2hP2rg5PoHJFRAAAAUM"]
[Tue Nov 11 07:10:11.399361 2025] [:error] [pid 33888:tid 33903] [client 141.94.206.106:48840] [client 141.94.206.106] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.94.206.106, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRJw04hA0uVBNwBRvPoFYAAAAIw"]
[Tue Nov 11 08:35:07.267682 2025] [:error] [pid 18828:tid 18845] [client 91.92.242.56:50673] [client 91.92.242.56] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||paramountbaldivis.com|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "paramountbaldivis.com"] [uri "/wp-content/debug.log"] [unique_id "aRKEuxPP-hmbFD1dOrqbRAAAAM4"]
[Tue Nov 11 08:57:57.810454 2025] [:error] [pid 43300:tid 43322] [client 192.178.4.101:51447] [client 192.178.4.101] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "103.101.161.220_bec5a1ca15e7bd5f87964e2a44ce97b8a3b46508"): Internal error (specific information not available) [hostname "paramountbaldivis.com"] [uri "/index.php"] [unique_id "aRKKESJLyMix3KFpV51p-gAAABE"]
[Tue Nov 11 09:02:18.471875 2025] [:error] [pid 53449:tid 53463] [client 192.178.4.101:52250] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKLGtpz08j5NoUSzp-fQwAAAUk"]
[Tue Nov 11 09:02:19.414755 2025] [:error] [pid 53355:tid 53372] [client 192.178.4.101:50207] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKLG4B5X5A3rMc4_nDAnAAAAA4"]
[Tue Nov 11 09:02:22.364315 2025] [:error] [pid 53355:tid 53382] [client 192.178.4.101:57227] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKLHoB5X5A3rMc4_nDAnwAAABg"]
[Tue Nov 11 09:02:30.108968 2025] [:error] [pid 53449:tid 53463] [client 192.178.4.101:56193] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKLJtpz08j5NoUSzp-fVgAAAUk"]
[Tue Nov 11 09:02:39.070222 2025] [:error] [pid 53414:tid 53440] [client 192.178.4.101:48650] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKLLws6pHd_Z5oc1efzQwAAARg"]
[Tue Nov 11 09:02:46.476027 2025] [:error] [pid 53356:tid 53402] [client 192.178.4.101:61010] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKLNukdmt0kzjVcUN8ruQAAAFE"]
[Tue Nov 11 09:02:52.812999 2025] [:error] [pid 53355:tid 53369] [client 192.178.4.101:49780] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKLPIB5X5A3rMc4_nDAvQAAAAs"]
[Tue Nov 11 09:02:55.386820 2025] [:error] [pid 53449:tid 53466] [client 192.178.4.101:53592] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKLP9pz08j5NoUSzp-fkQAAAUw"]
[Tue Nov 11 09:03:10.052943 2025] [:error] [pid 53356:tid 53385] [client 192.178.4.101:60849] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKLTukdmt0kzjVcUN8rzgAAAEA"]
[Tue Nov 11 09:04:39.043553 2025] [:error] [pid 53449:tid 53478] [client 192.178.4.101:64284] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKLp9pz08j5NoUSzp-g0AAAAVg"]
[Tue Nov 11 09:04:48.214901 2025] [:error] [pid 53355:tid 53377] [client 192.178.4.101:47319] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKLsIB5X5A3rMc4_nDBXwAAABM"]
[Tue Nov 11 09:04:52.309424 2025] [:error] [pid 53356:tid 53387] [client 192.178.4.101:40212] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKLtOkdmt0kzjVcUN8sZgAAAEI"]
[Tue Nov 11 09:04:54.797934 2025] [:error] [pid 53356:tid 53401] [client 192.178.4.101:57334] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKLtukdmt0kzjVcUN8saQAAAFA"]
[Tue Nov 11 09:05:18.808048 2025] [:error] [pid 53356:tid 53404] [client 192.178.4.101:45963] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKLzukdmt0kzjVcUN8siQAAAFM"]
[Tue Nov 11 09:05:22.287471 2025] [:error] [pid 53355:tid 53375] [client 192.178.4.101:41232] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKL0oB5X5A3rMc4_nDBfAAAABE"]
[Tue Nov 11 09:06:47.905604 2025] [:error] [pid 53449:tid 53472] [client 192.178.4.101:53371] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKMJ9pz08j5NoUSzp-hsQAAAVI"]
[Tue Nov 11 09:06:53.751833 2025] [:error] [pid 53449:tid 53467] [client 192.178.4.101:39361] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKMLdpz08j5NoUSzp-hvwAAAU0"]
[Tue Nov 11 09:06:55.309886 2025] [:error] [pid 53355:tid 53381] [client 192.178.4.101:36633] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKML4B5X5A3rMc4_nDB0AAAABc"]
[Tue Nov 11 09:06:58.472548 2025] [:error] [pid 53356:tid 53402] [client 192.178.4.101:40801] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKMMukdmt0kzjVcUN8tBwAAAFE"]
[Tue Nov 11 09:06:59.169174 2025] [:error] [pid 53356:tid 53385] [client 192.178.4.101:41283] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKMM-kdmt0kzjVcUN8tCQAAAEA"]
[Tue Nov 11 09:07:01.385607 2025] [:error] [pid 53449:tid 53454] [client 192.178.4.101:54461] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKMNdpz08j5NoUSzp-hyQAAAUA"]
[Tue Nov 11 09:07:03.034030 2025] [:error] [pid 53356:tid 53404] [client 192.178.4.101:47963] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKMN-kdmt0kzjVcUN8tDwAAAFM"]
[Tue Nov 11 09:07:07.288793 2025] [:error] [pid 53414:tid 53428] [client 192.178.4.101:46474] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKMOws6pHd_Z5oc1ef0cgAAAQw"]
[Tue Nov 11 09:07:10.276185 2025] [:error] [pid 53355:tid 53367] [client 192.178.4.101:38540] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKMPoB5X5A3rMc4_nDB3gAAAAk"]
[Tue Nov 11 09:07:18.368356 2025] [:error] [pid 53356:tid 53401] [client 192.178.4.101:41183] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKMRukdmt0kzjVcUN8tIAAAAFA"]
[Tue Nov 11 09:07:21.489575 2025] [:error] [pid 53355:tid 53368] [client 192.178.4.101:49250] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKMSYB5X5A3rMc4_nDB7AAAAAo"]
[Tue Nov 11 09:07:22.661522 2025] [:error] [pid 53449:tid 53458] [client 192.178.4.101:54263] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKMStpz08j5NoUSzp-h9wAAAUQ"]
[Tue Nov 11 09:07:24.110647 2025] [:error] [pid 53449:tid 53468] [client 192.178.4.101:44341] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKMTNpz08j5NoUSzp-h_gAAAU4"]
[Tue Nov 11 09:07:25.464678 2025] [:error] [pid 53449:tid 53461] [client 192.178.4.101:39859] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKMTdpz08j5NoUSzp-iAQAAAUc"]
[Tue Nov 11 09:07:26.931423 2025] [:error] [pid 53356:tid 53399] [client 192.178.4.101:56606] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKMTukdmt0kzjVcUN8tLgAAAE4"]
[Tue Nov 11 09:07:28.240458 2025] [:error] [pid 53414:tid 53431] [client 192.178.4.101:58306] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKMUAs6pHd_Z5oc1ef0jAAAAQ8"]
[Tue Nov 11 09:07:28.916963 2025] [:error] [pid 53356:tid 53391] [client 192.178.4.101:56751] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKMUOkdmt0kzjVcUN8tMQAAAEY"]
[Tue Nov 11 09:07:29.681859 2025] [:error] [pid 53414:tid 53432] [client 192.178.4.101:53382] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKMUQs6pHd_Z5oc1ef0jgAAARA"]
[Tue Nov 11 09:07:30.359036 2025] [:error] [pid 53414:tid 53427] [client 192.178.4.101:60186] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKMUgs6pHd_Z5oc1ef0kAAAAQs"]
[Tue Nov 11 09:07:31.037754 2025] [:error] [pid 53414:tid 53440] [client 192.178.4.101:61861] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKMUws6pHd_Z5oc1ef0kgAAARg"]
[Tue Nov 11 09:07:31.708303 2025] [:error] [pid 53356:tid 53408] [client 192.178.4.101:42417] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKMU-kdmt0kzjVcUN8tMgAAAFc"]
[Tue Nov 11 09:07:32.389698 2025] [:error] [pid 53414:tid 53439] [client 192.178.4.101:64572] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKMVAs6pHd_Z5oc1ef0kwAAARc"]
[Tue Nov 11 09:07:33.053958 2025] [:error] [pid 53356:tid 53402] [client 192.178.4.101:50780] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKMVekdmt0kzjVcUN8tMwAAAFE"]
[Tue Nov 11 09:07:37.246162 2025] [:error] [pid 53449:tid 53461] [client 192.178.4.101:45473] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKMWdpz08j5NoUSzp-iEgAAAUc"]
[Tue Nov 11 09:07:38.317609 2025] [:error] [pid 53355:tid 53363] [client 192.178.4.101:45077] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKMWoB5X5A3rMc4_nDCAgAAAAU"]
[Tue Nov 11 09:08:07.497420 2025] [:error] [pid 53449:tid 53465] [client 192.178.4.101:57514] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKMd9pz08j5NoUSzp-ibwAAAUs"]
[Tue Nov 11 09:08:08.964186 2025] [:error] [pid 53449:tid 53462] [client 192.178.4.101:39270] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKMeNpz08j5NoUSzp-icwAAAUg"]
[Tue Nov 11 09:08:10.452952 2025] [:error] [pid 53449:tid 53457] [client 192.178.4.101:49062] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKMetpz08j5NoUSzp-idAAAAUM"]
[Tue Nov 11 09:08:11.087018 2025] [:error] [pid 53355:tid 53368] [client 192.178.4.101:47822] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKMe4B5X5A3rMc4_nDCIQAAAAo"]
[Tue Nov 11 09:08:13.976394 2025] [:error] [pid 53414:tid 53430] [client 192.178.4.101:63610] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKMfQs6pHd_Z5oc1ef0xAAAAQ4"]
[Tue Nov 11 09:08:17.797141 2025] [:error] [pid 53449:tid 53467] [client 192.178.4.101:56285] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKMgdpz08j5NoUSzp-ifQAAAU0"]
[Tue Nov 11 09:08:18.828173 2025] [:error] [pid 53356:tid 53401] [client 192.178.4.101:50579] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKMgukdmt0kzjVcUN8tcgAAAFA"]
[Tue Nov 11 09:08:25.027359 2025] [:error] [pid 53449:tid 53477] [client 192.178.4.101:54012] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKMidpz08j5NoUSzp-ilgAAAVc"]
[Tue Nov 11 09:08:27.155195 2025] [:error] [pid 53449:tid 53469] [client 192.178.4.101:35940] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKMi9pz08j5NoUSzp-imQAAAU8"]
[Tue Nov 11 09:08:28.355572 2025] [:error] [pid 53449:tid 53456] [client 192.178.4.101:53767] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKMjNpz08j5NoUSzp-inQAAAUI"]
[Tue Nov 11 09:08:29.551595 2025] [:error] [pid 53356:tid 53391] [client 192.178.4.101:43115] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKMjekdmt0kzjVcUN8tegAAAEY"]
[Tue Nov 11 09:08:30.318643 2025] [:error] [pid 53414:tid 53429] [client 192.178.4.101:47391] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKMjgs6pHd_Z5oc1ef00wAAAQ0"]
[Tue Nov 11 09:08:31.023239 2025] [:error] [pid 53414:tid 53433] [client 192.178.4.101:41610] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKMjws6pHd_Z5oc1ef01AAAARE"]
[Tue Nov 11 09:08:32.415208 2025] [:error] [pid 53356:tid 53405] [client 192.178.4.101:51285] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKMkOkdmt0kzjVcUN8tfgAAAFQ"]
[Tue Nov 11 09:08:33.724640 2025] [:error] [pid 53356:tid 53398] [client 192.178.4.101:38554] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKMkekdmt0kzjVcUN8tgQAAAE0"]
[Tue Nov 11 09:08:34.730998 2025] [:error] [pid 53449:tid 53469] [client 192.178.4.101:34999] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKMktpz08j5NoUSzp-iowAAAU8"]
[Tue Nov 11 09:08:35.762758 2025] [:error] [pid 53449:tid 53457] [client 192.178.4.101:38055] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKMk9pz08j5NoUSzp-ipwAAAUM"]
[Tue Nov 11 09:08:35.884856 2025] [:error] [pid 53355:tid 53367] [client 192.178.4.101:64345] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKMk4B5X5A3rMc4_nDCQwAAAAk"]
[Tue Nov 11 09:08:37.202636 2025] [:error] [pid 53414:tid 53418] [client 192.178.4.101:57599] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKMlQs6pHd_Z5oc1ef02QAAAQI"]
[Tue Nov 11 09:08:38.232588 2025] [:error] [pid 53414:tid 53424] [client 192.178.4.101:60262] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKMlgs6pHd_Z5oc1ef02wAAAQg"]
[Tue Nov 11 09:08:38.576587 2025] [:error] [pid 53449:tid 53467] [client 192.178.4.101:49693] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKMltpz08j5NoUSzp-iqwAAAU0"]
[Tue Nov 11 09:08:39.903354 2025] [:error] [pid 53449:tid 53478] [client 192.178.4.101:37818] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKMl9pz08j5NoUSzp-irwAAAVg"]
[Tue Nov 11 09:08:40.933252 2025] [:error] [pid 53449:tid 53475] [client 192.178.4.101:42880] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKMmNpz08j5NoUSzp-isQAAAVU"]
[Tue Nov 11 09:08:41.529147 2025] [:error] [pid 53449:tid 53454] [client 192.178.4.101:36856] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKMmdpz08j5NoUSzp-itAAAAUA"]
[Tue Nov 11 09:08:41.893612 2025] [:error] [pid 53449:tid 53466] [client 192.178.4.101:46697] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKMmdpz08j5NoUSzp-itQAAAUw"]
[Tue Nov 11 09:08:42.581964 2025] [:error] [pid 53449:tid 53457] [client 192.178.4.101:42499] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKMmtpz08j5NoUSzp-itwAAAUM"]
[Tue Nov 11 09:08:45.219590 2025] [:error] [pid 53449:tid 53474] [client 192.178.4.101:52793] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKMndpz08j5NoUSzp-ivgAAAVQ"]
[Tue Nov 11 09:08:46.445733 2025] [:error] [pid 53355:tid 53377] [client 192.178.4.101:37967] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKMnoB5X5A3rMc4_nDCRwAAABM"]
[Tue Nov 11 09:08:47.431532 2025] [:error] [pid 53355:tid 53364] [client 192.178.4.101:44263] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKMn4B5X5A3rMc4_nDCSgAAAAY"]
[Tue Nov 11 09:08:52.824890 2025] [:error] [pid 53355:tid 53363] [client 192.178.4.101:53991] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKMpIB5X5A3rMc4_nDCTQAAAAU"]
[Tue Nov 11 09:08:54.877270 2025] [:error] [pid 53414:tid 53417] [client 192.178.4.101:38584] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKMpgs6pHd_Z5oc1ef0-gAAAQE"]
[Tue Nov 11 09:08:55.839328 2025] [:error] [pid 53355:tid 53378] [client 192.178.4.101:61170] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKMp4B5X5A3rMc4_nDCVgAAABQ"]
[Tue Nov 11 09:08:56.358688 2025] [:error] [pid 53356:tid 53407] [client 192.178.4.101:38978] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKMqOkdmt0kzjVcUN8toQAAAFY"]
[Tue Nov 11 09:08:56.776561 2025] [:error] [pid 53356:tid 53392] [client 192.178.4.101:49854] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKMqOkdmt0kzjVcUN8togAAAEc"]
[Tue Nov 11 09:08:57.366720 2025] [:error] [pid 53355:tid 53379] [client 192.178.4.101:58949] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKMqYB5X5A3rMc4_nDCWgAAABU"]
[Tue Nov 11 09:08:58.396596 2025] [:error] [pid 53414:tid 53430] [client 192.178.4.101:41586] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKMqgs6pHd_Z5oc1ef1AgAAAQ4"]
[Tue Nov 11 09:08:59.349816 2025] [:error] [pid 53449:tid 53463] [client 192.178.4.101:44219] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKMq9pz08j5NoUSzp-i7wAAAUk"]
[Tue Nov 11 09:09:00.357835 2025] [:error] [pid 53449:tid 53454] [client 192.178.4.101:55995] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKMrNpz08j5NoUSzp-i8gAAAUA"]
[Tue Nov 11 09:09:02.262123 2025] [:error] [pid 53414:tid 53425] [client 192.178.4.101:61155] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKMrgs6pHd_Z5oc1ef1BAAAAQk"]
[Tue Nov 11 09:09:02.522747 2025] [:error] [pid 53414:tid 53420] [client 192.178.4.101:47396] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKMrgs6pHd_Z5oc1ef1BQAAAQQ"]
[Tue Nov 11 09:09:03.196733 2025] [:error] [pid 53356:tid 53388] [client 192.178.4.101:52675] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKMr-kdmt0kzjVcUN8tpAAAAEM"]
[Tue Nov 11 09:09:03.555055 2025] [:error] [pid 53355:tid 53361] [client 192.178.4.101:59952] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKMr4B5X5A3rMc4_nDCWwAAAAM"]
[Tue Nov 11 09:09:04.205545 2025] [:error] [pid 53356:tid 53391] [client 192.178.4.101:63118] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKMsOkdmt0kzjVcUN8tpQAAAEY"]
[Tue Nov 11 09:09:21.390239 2025] [:error] [pid 53414:tid 53439] [client 192.178.4.101:35245] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKMwQs6pHd_Z5oc1ef1GgAAARc"]
[Tue Nov 11 09:09:21.611058 2025] [:error] [pid 53356:tid 53386] [client 192.178.4.101:41705] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKMwekdmt0kzjVcUN8ttgAAAEE"]
[Tue Nov 11 09:09:22.504501 2025] [:error] [pid 53449:tid 53457] [client 192.178.4.101:37092] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKMwtpz08j5NoUSzp-jGQAAAUM"]
[Tue Nov 11 09:09:22.812820 2025] [:error] [pid 53356:tid 53393] [client 192.178.4.101:60018] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKMwukdmt0kzjVcUN8tuQAAAEg"]
[Tue Nov 11 09:09:23.507976 2025] [:error] [pid 53355:tid 53359] [client 192.178.4.101:36187] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKMw4B5X5A3rMc4_nDCYwAAAAE"]
[Tue Nov 11 09:09:24.018281 2025] [:error] [pid 53355:tid 53375] [client 192.178.4.101:54827] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKMxIB5X5A3rMc4_nDCZQAAABE"]
[Tue Nov 11 09:09:24.742236 2025] [:error] [pid 53449:tid 53455] [client 192.178.4.101:43494] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKMxNpz08j5NoUSzp-jHAAAAUE"]
[Tue Nov 11 09:09:25.393735 2025] [:error] [pid 53449:tid 53474] [client 192.178.4.101:40613] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKMxdpz08j5NoUSzp-jHwAAAVQ"]
[Tue Nov 11 09:09:26.683724 2025] [:error] [pid 53355:tid 53361] [client 192.178.4.101:65358] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKMxoB5X5A3rMc4_nDCZwAAAAM"]
[Tue Nov 11 09:09:27.885057 2025] [:error] [pid 53356:tid 53392] [client 192.178.4.101:54426] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKMx-kdmt0kzjVcUN8txQAAAEc"]
[Tue Nov 11 09:09:28.527497 2025] [:error] [pid 53414:tid 53428] [client 192.178.4.101:52942] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKMyAs6pHd_Z5oc1ef1IQAAAQw"]
[Tue Nov 11 09:09:29.867155 2025] [:error] [pid 53414:tid 53424] [client 192.178.4.101:64800] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKMyQs6pHd_Z5oc1ef1IwAAAQg"]
[Tue Nov 11 09:09:30.820963 2025] [:error] [pid 53449:tid 53455] [client 192.178.4.101:45474] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKMytpz08j5NoUSzp-jNgAAAUE"]
[Tue Nov 11 09:09:31.828912 2025] [:error] [pid 53356:tid 53397] [client 192.178.4.101:38114] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKMy-kdmt0kzjVcUN8t0AAAAEw"]
[Tue Nov 11 09:09:33.728549 2025] [:error] [pid 53356:tid 53392] [client 192.178.4.101:43643] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKMzekdmt0kzjVcUN8t1QAAAEc"]
[Tue Nov 11 09:09:34.734398 2025] [:error] [pid 53414:tid 53438] [client 192.178.4.101:61625] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKMzgs6pHd_Z5oc1ef1KgAAARY"]
[Tue Nov 11 09:09:35.764691 2025] [:error] [pid 53355:tid 53359] [client 192.178.4.101:44069] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKMz4B5X5A3rMc4_nDCbwAAAAE"]
[Tue Nov 11 09:09:36.794935 2025] [:error] [pid 53414:tid 53439] [client 192.178.4.101:58584] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKM0As6pHd_Z5oc1ef1LgAAARc"]
[Tue Nov 11 09:09:38.704916 2025] [:error] [pid 53414:tid 53434] [client 192.178.4.101:55143] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKM0gs6pHd_Z5oc1ef1OQAAARI"]
[Tue Nov 11 09:09:39.739236 2025] [:error] [pid 53355:tid 53375] [client 192.178.4.101:58106] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKM04B5X5A3rMc4_nDCcAAAABE"]
[Tue Nov 11 09:09:40.699956 2025] [:error] [pid 53449:tid 53458] [client 192.178.4.101:50881] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKM1Npz08j5NoUSzp-jTQAAAUQ"]
[Tue Nov 11 09:09:41.839082 2025] [:error] [pid 53414:tid 53439] [client 192.178.4.101:57221] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKM1Qs6pHd_Z5oc1ef1PAAAARc"]
[Tue Nov 11 09:09:42.660702 2025] [:error] [pid 53355:tid 53361] [client 192.178.4.101:50393] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKM1oB5X5A3rMc4_nDCcgAAAAM"]
[Tue Nov 11 09:09:42.791243 2025] [:error] [pid 53414:tid 53424] [client 192.178.4.101:65176] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKM1gs6pHd_Z5oc1ef1PgAAAQg"]
[Tue Nov 11 09:09:43.622173 2025] [:error] [pid 53449:tid 53456] [client 192.178.4.101:44902] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKM19pz08j5NoUSzp-jUgAAAUI"]
[Tue Nov 11 09:09:43.893192 2025] [:error] [pid 53414:tid 53421] [client 192.178.4.101:35296] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKM1ws6pHd_Z5oc1ef1PwAAAQU"]
[Tue Nov 11 09:09:44.630776 2025] [:error] [pid 53355:tid 53371] [client 192.178.4.101:55035] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKM2IB5X5A3rMc4_nDCdAAAAA0"]
[Tue Nov 11 09:09:45.530630 2025] [:error] [pid 53449:tid 53473] [client 192.178.4.101:65487] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKM2dpz08j5NoUSzp-jUwAAAVM"]
[Tue Nov 11 09:09:46.303475 2025] [:error] [pid 53355:tid 53368] [client 192.178.4.101:64677] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKM2oB5X5A3rMc4_nDCdgAAAAo"]
[Tue Nov 11 09:09:47.520729 2025] [:error] [pid 53449:tid 53455] [client 192.178.4.101:64754] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKM29pz08j5NoUSzp-jVAAAAUE"]
[Tue Nov 11 09:09:48.184373 2025] [:error] [pid 53449:tid 53476] [client 192.178.4.101:61793] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKM3Npz08j5NoUSzp-jVgAAAVY"]
[Tue Nov 11 09:09:54.969534 2025] [:error] [pid 53355:tid 53360] [client 192.178.4.101:39863] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKM4oB5X5A3rMc4_nDCfQAAAAI"]
[Tue Nov 11 09:09:56.987231 2025] [:error] [pid 53414:tid 53418] [client 192.178.4.101:44336] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKM5As6pHd_Z5oc1ef1SQAAAQI"]
[Tue Nov 11 09:10:03.851492 2025] [:error] [pid 53356:tid 53407] [client 192.178.4.101:59751] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKM6-kdmt0kzjVcUN8uGAAAAFY"]
[Tue Nov 11 09:10:13.870233 2025] [:error] [pid 53449:tid 53466] [client 192.178.4.101:39169] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKM9dpz08j5NoUSzp-jdAAAAUw"]
[Tue Nov 11 09:10:15.754261 2025] [:error] [pid 53414:tid 53436] [client 192.178.4.101:64732] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKM9ws6pHd_Z5oc1ef1WwAAARQ"]
[Tue Nov 11 09:10:17.746786 2025] [:error] [pid 53414:tid 53419] [client 192.178.4.101:37714] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKM-Qs6pHd_Z5oc1ef1XQAAAQM"]
[Tue Nov 11 09:10:18.582514 2025] [:error] [pid 53414:tid 53428] [client 192.178.4.101:55806] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKM-gs6pHd_Z5oc1ef1XgAAAQw"]
[Tue Nov 11 09:10:18.838678 2025] [:error] [pid 53414:tid 53420] [client 192.178.4.101:62332] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKM-gs6pHd_Z5oc1ef1XwAAAQQ"]
[Tue Nov 11 09:10:19.516485 2025] [:error] [pid 53355:tid 53361] [client 192.178.4.101:54995] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKM-4B5X5A3rMc4_nDCmAAAAAM"]
[Tue Nov 11 09:10:36.009925 2025] [:error] [pid 53355:tid 53372] [client 192.178.4.101:49457] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKNDIB5X5A3rMc4_nDCqQAAAA4"]
[Tue Nov 11 09:10:36.715528 2025] [:error] [pid 53449:tid 53459] [client 192.178.4.101:63039] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKNDNpz08j5NoUSzp-jkgAAAUU"]
[Tue Nov 11 09:10:36.967781 2025] [:error] [pid 53356:tid 53389] [client 192.178.4.101:62651] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKNDOkdmt0kzjVcUN8uNQAAAEQ"]
[Tue Nov 11 09:10:38.486907 2025] [:error] [pid 53356:tid 53404] [client 192.178.4.101:48261] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKNDukdmt0kzjVcUN8uNgAAAFM"]
[Tue Nov 11 09:10:40.041756 2025] [:error] [pid 53414:tid 53431] [client 192.178.4.101:58914] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKNEAs6pHd_Z5oc1ef1bwAAAQ8"]
[Tue Nov 11 09:10:41.962359 2025] [:error] [pid 53449:tid 53476] [client 192.178.4.101:53053] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKNEdpz08j5NoUSzp-jmQAAAVY"]
[Tue Nov 11 09:10:42.918067 2025] [:error] [pid 53414:tid 53438] [client 192.178.4.101:35765] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKNEgs6pHd_Z5oc1ef1cQAAARY"]
[Tue Nov 11 09:10:43.855562 2025] [:error] [pid 53414:tid 53430] [client 192.178.4.101:39259] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKNEws6pHd_Z5oc1ef1cwAAAQ4"]
[Tue Nov 11 09:10:44.794587 2025] [:error] [pid 53414:tid 53419] [client 192.178.4.101:62379] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKNFAs6pHd_Z5oc1ef1dAAAAQM"]
[Tue Nov 11 09:10:48.376240 2025] [:error] [pid 53355:tid 53363] [client 192.178.4.101:57394] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKNGIB5X5A3rMc4_nDCqwAAAAU"]
[Tue Nov 11 09:10:50.532590 2025] [:error] [pid 53449:tid 53469] [client 192.178.4.101:58957] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKNGtpz08j5NoUSzp-jpwAAAU8"]
[Tue Nov 11 09:10:51.496608 2025] [:error] [pid 53414:tid 53417] [client 192.178.4.101:40628] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKNGws6pHd_Z5oc1ef1dgAAAQE"]
[Tue Nov 11 09:10:52.504931 2025] [:error] [pid 53355:tid 53371] [client 192.178.4.101:39852] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKNHIB5X5A3rMc4_nDCsgAAAA0"]
[Tue Nov 11 09:10:53.462994 2025] [:error] [pid 53356:tid 53392] [client 192.178.4.101:45470] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKNHekdmt0kzjVcUN8uPgAAAEc"]
[Tue Nov 11 09:10:57.774665 2025] [:error] [pid 53356:tid 53390] [client 192.178.4.101:41770] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKNIekdmt0kzjVcUN8uSgAAAEU"]
[Tue Nov 11 09:10:58.372375 2025] [:error] [pid 53414:tid 53430] [client 192.178.4.101:46189] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKNIgs6pHd_Z5oc1ef1hQAAAQ4"]
[Tue Nov 11 09:10:59.376974 2025] [:error] [pid 53414:tid 53419] [client 192.178.4.101:46489] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKNIws6pHd_Z5oc1ef1hwAAAQM"]
[Tue Nov 11 09:11:00.334422 2025] [:error] [pid 53355:tid 53361] [client 192.178.4.101:51968] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKNJIB5X5A3rMc4_nDC1QAAAAM"]
[Tue Nov 11 09:11:01.341940 2025] [:error] [pid 53356:tid 53403] [client 192.178.4.101:49272] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKNJekdmt0kzjVcUN8uTgAAAFI"]
[Tue Nov 11 09:11:03.231845 2025] [:error] [pid 53356:tid 53394] [client 192.178.4.101:59652] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKNJ-kdmt0kzjVcUN8uUAAAAEk"]
[Tue Nov 11 09:11:04.157294 2025] [:error] [pid 53414:tid 53429] [client 192.178.4.101:54908] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKNKAs6pHd_Z5oc1ef1jgAAAQ0"]
[Tue Nov 11 09:11:09.179024 2025] [:error] [pid 53449:tid 53476] [client 192.178.4.101:35838] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKNLdpz08j5NoUSzp-juwAAAVY"]
[Tue Nov 11 09:11:10.114140 2025] [:error] [pid 53414:tid 53418] [client 192.178.4.101:54272] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKNLgs6pHd_Z5oc1ef1kgAAAQI"]
[Tue Nov 11 09:11:10.976669 2025] [:error] [pid 53356:tid 53397] [client 192.178.4.101:54256] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKNLukdmt0kzjVcUN8uWAAAAEw"]
[Tue Nov 11 09:11:11.090665 2025] [:error] [pid 53414:tid 53417] [client 192.178.4.101:55573] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKNLws6pHd_Z5oc1ef1kwAAAQE"]
[Tue Nov 11 09:11:12.129078 2025] [:error] [pid 53414:tid 53439] [client 192.178.4.101:59416] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKNMAs6pHd_Z5oc1ef1lAAAARc"]
[Tue Nov 11 09:11:13.169179 2025] [:error] [pid 53355:tid 53363] [client 192.178.4.101:49571] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKNMYB5X5A3rMc4_nDC3QAAAAU"]
[Tue Nov 11 09:11:16.470431 2025] [:error] [pid 53355:tid 53359] [client 192.178.4.101:52030] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKNNIB5X5A3rMc4_nDC4QAAAAE"]
[Tue Nov 11 09:11:19.921853 2025] [:error] [pid 53449:tid 53476] [client 192.178.4.101:57544] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKNN9pz08j5NoUSzp-jwQAAAVY"]
[Tue Nov 11 09:11:20.856372 2025] [:error] [pid 53449:tid 53469] [client 192.178.4.101:46711] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKNONpz08j5NoUSzp-jwwAAAU8"]
[Tue Nov 11 09:11:21.793881 2025] [:error] [pid 53355:tid 53377] [client 192.178.4.101:38201] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKNOYB5X5A3rMc4_nDC5QAAABM"]
[Tue Nov 11 09:11:23.678306 2025] [:error] [pid 53449:tid 53474] [client 192.178.4.101:58675] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKNO9pz08j5NoUSzp-jyAAAAVQ"]
[Tue Nov 11 09:11:57.976274 2025] [:error] [pid 53356:tid 53396] [client 192.178.4.101:38167] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKNXekdmt0kzjVcUN8ufAAAAEs"]
[Tue Nov 11 09:11:59.340598 2025] [:error] [pid 53355:tid 53363] [client 192.178.4.101:52819] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKNX4B5X5A3rMc4_nDDMQAAAAU"]
[Tue Nov 11 09:12:00.279558 2025] [:error] [pid 53414:tid 53428] [client 192.178.4.101:64734] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKNYAs6pHd_Z5oc1ef11gAAAQw"]
[Tue Nov 11 09:12:00.631736 2025] [:error] [pid 53449:tid 53464] [client 192.178.4.101:58841] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKNYNpz08j5NoUSzp-kDgAAAUo"]
[Tue Nov 11 09:12:01.562326 2025] [:error] [pid 53449:tid 53473] [client 192.178.4.101:58348] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKNYdpz08j5NoUSzp-kEAAAAVM"]
[Tue Nov 11 09:12:02.575150 2025] [:error] [pid 53449:tid 53467] [client 192.178.4.101:37721] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKNYtpz08j5NoUSzp-kEQAAAU0"]
[Tue Nov 11 09:12:08.401426 2025] [:error] [pid 53356:tid 53394] [client 192.178.4.101:63570] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKNaOkdmt0kzjVcUN8ugQAAAEk"]
[Tue Nov 11 09:12:09.810675 2025] [:error] [pid 53356:tid 53401] [client 192.178.4.101:50132] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKNaekdmt0kzjVcUN8ugwAAAFA"]
[Tue Nov 11 09:12:10.741748 2025] [:error] [pid 53449:tid 53473] [client 192.178.4.101:57545] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKNatpz08j5NoUSzp-kHQAAAVM"]
[Tue Nov 11 09:12:11.376129 2025] [:error] [pid 53356:tid 53407] [client 192.178.4.101:50504] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKNa-kdmt0kzjVcUN8uhQAAAFY"]
[Tue Nov 11 09:12:11.909502 2025] [:error] [pid 53414:tid 53433] [client 192.178.4.101:42005] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKNaws6pHd_Z5oc1ef13QAAARE"]
[Tue Nov 11 09:12:13.072620 2025] [:error] [pid 53356:tid 53408] [client 192.178.4.101:55439] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKNbekdmt0kzjVcUN8uhgAAAFc"]
[Tue Nov 11 09:12:13.712957 2025] [:error] [pid 53414:tid 53429] [client 192.178.4.101:55904] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKNbQs6pHd_Z5oc1ef14gAAAQ0"]
[Tue Nov 11 09:12:15.653858 2025] [:error] [pid 53356:tid 53405] [client 192.178.4.101:51788] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKNb-kdmt0kzjVcUN8uiAAAAFQ"]
[Tue Nov 11 09:12:16.927993 2025] [:error] [pid 53449:tid 53476] [client 192.178.4.101:53053] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKNcNpz08j5NoUSzp-kIwAAAVY"]
[Tue Nov 11 09:12:18.182929 2025] [:error] [pid 53356:tid 53388] [client 192.178.4.101:44218] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKNcukdmt0kzjVcUN8uiQAAAEM"]
[Tue Nov 11 09:12:20.139525 2025] [:error] [pid 53356:tid 53398] [client 192.178.4.101:55506] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKNdOkdmt0kzjVcUN8ujAAAAE0"]
[Tue Nov 11 09:12:27.300687 2025] [:error] [pid 53414:tid 53436] [client 192.178.4.101:58828] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKNews6pHd_Z5oc1ef17wAAARQ"]
[Tue Nov 11 09:12:31.889208 2025] [:error] [pid 53414:tid 53437] [client 192.178.4.101:60205] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKNfws6pHd_Z5oc1ef2DgAAARU"]
[Tue Nov 11 09:12:34.792640 2025] [:error] [pid 53449:tid 53458] [client 192.178.4.101:53020] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKNgtpz08j5NoUSzp-keQAAAUQ"]
[Tue Nov 11 09:12:35.728046 2025] [:error] [pid 53449:tid 53465] [client 192.178.4.101:58776] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKNg9pz08j5NoUSzp-kfAAAAUs"]
[Tue Nov 11 09:12:36.733241 2025] [:error] [pid 53356:tid 53388] [client 192.178.4.101:54301] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKNhOkdmt0kzjVcUN8ulgAAAEM"]
[Tue Nov 11 09:12:37.615485 2025] [:error] [pid 53449:tid 53467] [client 192.178.4.101:47991] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKNhdpz08j5NoUSzp-kfwAAAU0"]
[Tue Nov 11 09:12:38.566774 2025] [:error] [pid 53449:tid 53460] [client 192.178.4.101:54108] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKNhtpz08j5NoUSzp-kgAAAAUY"]
[Tue Nov 11 09:12:39.771254 2025] [:error] [pid 53414:tid 53432] [client 192.178.4.101:37405] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKNhws6pHd_Z5oc1ef2VAAAARA"]
[Tue Nov 11 09:12:40.727325 2025] [:error] [pid 53355:tid 53375] [client 192.178.4.101:38990] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKNiIB5X5A3rMc4_nDDSgAAABE"]
[Tue Nov 11 09:12:41.732527 2025] [:error] [pid 53449:tid 53461] [client 192.178.4.101:60459] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKNidpz08j5NoUSzp-khgAAAUc"]
[Tue Nov 11 09:12:43.699422 2025] [:error] [pid 53355:tid 53371] [client 192.178.4.101:54785] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKNi4B5X5A3rMc4_nDDTQAAAA0"]
[Tue Nov 11 09:12:45.372949 2025] [:error] [pid 53449:tid 53467] [client 192.178.4.101:62192] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKNjdpz08j5NoUSzp-kkAAAAU0"]
[Tue Nov 11 09:12:46.328799 2025] [:error] [pid 53449:tid 53476] [client 192.178.4.101:45126] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKNjtpz08j5NoUSzp-kkQAAAVY"]
[Tue Nov 11 09:12:52.448086 2025] [:error] [pid 53355:tid 53371] [client 192.178.4.101:56103] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKNlIB5X5A3rMc4_nDDXAAAAA0"]
[Tue Nov 11 09:13:18.281264 2025] [:error] [pid 53449:tid 53460] [client 192.178.4.101:50788] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKNrtpz08j5NoUSzp-k1gAAAUY"]
[Tue Nov 11 09:13:20.215233 2025] [:error] [pid 53449:tid 53456] [client 192.178.4.101:60410] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKNsNpz08j5NoUSzp-k5gAAAUI"]
[Tue Nov 11 09:13:20.860040 2025] [:error] [pid 53449:tid 53468] [client 192.178.4.101:62943] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKNsNpz08j5NoUSzp-k5wAAAU4"]
[Tue Nov 11 09:13:22.099056 2025] [:error] [pid 53355:tid 53365] [client 192.178.4.101:50456] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKNsoB5X5A3rMc4_nDECgAAAAc"]
[Tue Nov 11 09:13:23.009499 2025] [:error] [pid 53449:tid 53478] [client 192.178.4.101:65262] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKNs9pz08j5NoUSzp-k6AAAAVg"]
[Tue Nov 11 09:13:23.450403 2025] [:error] [pid 53449:tid 53465] [client 192.178.4.101:37756] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKNs9pz08j5NoUSzp-k6QAAAUs"]
[Tue Nov 11 09:13:24.109407 2025] [:error] [pid 53414:tid 53433] [client 192.178.4.101:42923] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKNtAs6pHd_Z5oc1ef2rgAAARE"]
[Tue Nov 11 09:13:25.382009 2025] [:error] [pid 53414:tid 53421] [client 192.178.4.101:38639] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKNtQs6pHd_Z5oc1ef2sAAAAQU"]
[Tue Nov 11 09:13:26.013041 2025] [:error] [pid 53414:tid 53425] [client 192.178.4.101:41195] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKNtgs6pHd_Z5oc1ef2swAAAQk"]
[Tue Nov 11 09:13:27.187999 2025] [:error] [pid 53356:tid 53395] [client 192.178.4.101:45244] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKNt-kdmt0kzjVcUN8vHgAAAEo"]
[Tue Nov 11 09:13:30.683446 2025] [:error] [pid 53449:tid 53460] [client 192.178.4.101:62605] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKNutpz08j5NoUSzp-k8AAAAUY"]
[Tue Nov 11 09:13:31.244577 2025] [:error] [pid 53449:tid 53454] [client 192.178.4.101:57529] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKNu9pz08j5NoUSzp-k8QAAAUA"]
[Tue Nov 11 09:13:31.615562 2025] [:error] [pid 53355:tid 53382] [client 192.178.4.101:37806] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKNu4B5X5A3rMc4_nDEEAAAABg"]
[Tue Nov 11 09:13:32.174508 2025] [:error] [pid 53355:tid 53371] [client 192.178.4.101:50852] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKNvIB5X5A3rMc4_nDEEQAAAA0"]
[Tue Nov 11 09:13:32.550402 2025] [:error] [pid 53356:tid 53402] [client 192.178.4.101:52858] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKNvOkdmt0kzjVcUN8vIQAAAFE"]
[Tue Nov 11 09:13:33.006857 2025] [:error] [pid 53356:tid 53403] [client 192.178.4.101:59119] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKNvekdmt0kzjVcUN8vIgAAAFI"]
[Tue Nov 11 09:13:33.937221 2025] [:error] [pid 53355:tid 53380] [client 192.178.4.101:49166] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKNvYB5X5A3rMc4_nDEEwAAABY"]
[Tue Nov 11 09:13:34.865925 2025] [:error] [pid 53355:tid 53372] [client 192.178.4.101:46715] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKNvoB5X5A3rMc4_nDEFgAAAA4"]
[Tue Nov 11 09:13:35.796493 2025] [:error] [pid 53414:tid 53420] [client 192.178.4.101:56381] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKNvws6pHd_Z5oc1ef2uQAAAQQ"]
[Tue Nov 11 09:13:37.665650 2025] [:error] [pid 53414:tid 53440] [client 192.178.4.101:47497] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKNwQs6pHd_Z5oc1ef2vwAAARg"]
[Tue Nov 11 09:13:37.857378 2025] [:error] [pid 53414:tid 53421] [client 192.178.4.101:48963] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKNwQs6pHd_Z5oc1ef2wQAAAQU"]
[Tue Nov 11 09:13:38.790744 2025] [:error] [pid 53449:tid 53461] [client 192.178.4.101:51496] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKNwtpz08j5NoUSzp-k-AAAAUc"]
[Tue Nov 11 09:13:39.723479 2025] [:error] [pid 53356:tid 53390] [client 192.178.4.101:46259] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKNw-kdmt0kzjVcUN8vJwAAAEU"]
[Tue Nov 11 09:13:40.452927 2025] [:error] [pid 53356:tid 53409] [client 192.178.4.101:41950] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKNxOkdmt0kzjVcUN8vKAAAAFg"]
[Tue Nov 11 09:13:40.558504 2025] [:error] [pid 53449:tid 53474] [client 192.178.4.101:40484] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKNxNpz08j5NoUSzp-k_QAAAVQ"]
[Tue Nov 11 09:13:41.382563 2025] [:error] [pid 53449:tid 53456] [client 192.178.4.101:36814] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKNxdpz08j5NoUSzp-lAAAAAUI"]
[Tue Nov 11 09:13:42.320409 2025] [:error] [pid 53414:tid 53418] [client 192.178.4.101:40818] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKNxgs6pHd_Z5oc1ef2zAAAAQI"]
[Tue Nov 11 09:13:42.587973 2025] [:error] [pid 53449:tid 53471] [client 192.178.4.101:58550] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKNxtpz08j5NoUSzp-lMgAAAVE"]
[Tue Nov 11 09:13:43.769522 2025] [:error] [pid 53355:tid 53359] [client 192.178.4.101:41548] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKNx4B5X5A3rMc4_nDEHAAAAAE"]
[Tue Nov 11 09:13:44.776409 2025] [:error] [pid 53449:tid 53477] [client 192.178.4.101:42250] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKNyNpz08j5NoUSzp-lSQAAAVc"]
[Tue Nov 11 09:13:49.157676 2025] [:error] [pid 53449:tid 53461] [client 192.178.4.101:60534] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKNzdpz08j5NoUSzp-lXAAAAUc"]
[Tue Nov 11 09:13:51.031339 2025] [:error] [pid 53414:tid 53419] [client 192.178.4.101:36507] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKNzws6pHd_Z5oc1ef23gAAAQM"]
[Tue Nov 11 09:13:51.296811 2025] [:error] [pid 53355:tid 53361] [client 192.178.4.101:45171] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKNz4B5X5A3rMc4_nDEKgAAAAM"]
[Tue Nov 11 09:13:52.038581 2025] [:error] [pid 53449:tid 53463] [client 192.178.4.101:42051] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKN0Npz08j5NoUSzp-laQAAAUk"]
[Tue Nov 11 09:13:52.254267 2025] [:error] [pid 53449:tid 53466] [client 192.178.4.101:61640] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKN0Npz08j5NoUSzp-lawAAAUw"]
[Tue Nov 11 09:13:52.998275 2025] [:error] [pid 53449:tid 53461] [client 192.178.4.101:44073] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKN0Npz08j5NoUSzp-lbQAAAUc"]
[Tue Nov 11 09:13:53.264925 2025] [:error] [pid 53414:tid 53416] [client 192.178.4.101:52666] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKN0Qs6pHd_Z5oc1ef26AAAAQA"]
[Tue Nov 11 09:13:54.294445 2025] [:error] [pid 53449:tid 53458] [client 192.178.4.101:44177] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKN0tpz08j5NoUSzp-loQAAAUQ"]
[Tue Nov 11 09:13:55.325552 2025] [:error] [pid 53449:tid 53478] [client 192.178.4.101:60119] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKN09pz08j5NoUSzp-lqgAAAVg"]
[Tue Nov 11 09:13:56.082515 2025] [:error] [pid 53449:tid 53468] [client 192.178.4.101:47844] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKN1Npz08j5NoUSzp-lrwAAAU4"]
[Tue Nov 11 09:13:56.291063 2025] [:error] [pid 53355:tid 53379] [client 192.178.4.101:42326] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKN1IB5X5A3rMc4_nDELwAAABU"]
[Tue Nov 11 09:13:57.022820 2025] [:error] [pid 53356:tid 53387] [client 192.178.4.101:34853] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKN1ekdmt0kzjVcUN8vOAAAAEI"]
[Tue Nov 11 09:14:27.521218 2025] [:error] [pid 53449:tid 53468] [client 192.178.4.101:59314] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKN89pz08j5NoUSzp-mBgAAAU4"]
[Tue Nov 11 09:14:28.579361 2025] [:error] [pid 53449:tid 53471] [client 192.178.4.101:63496] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKN9Npz08j5NoUSzp-mDQAAAVE"]
[Tue Nov 11 09:14:29.946531 2025] [:error] [pid 53449:tid 53475] [client 192.178.4.101:34952] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKN9dpz08j5NoUSzp-mEwAAAVU"]
[Tue Nov 11 09:14:30.676213 2025] [:error] [pid 53414:tid 53427] [client 192.178.4.101:40849] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKN9gs6pHd_Z5oc1ef3LwAAAQs"]
[Tue Nov 11 09:14:34.333319 2025] [:error] [pid 53449:tid 53468] [client 192.178.4.101:50709] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKN-tpz08j5NoUSzp-mJwAAAU4"]
[Tue Nov 11 09:14:35.262734 2025] [:error] [pid 53356:tid 53403] [client 192.178.4.101:40623] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKN--kdmt0kzjVcUN8vcAAAAFI"]
[Tue Nov 11 09:14:36.199038 2025] [:error] [pid 53414:tid 53435] [client 192.178.4.101:44443] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKN_As6pHd_Z5oc1ef3NQAAARM"]
[Tue Nov 11 09:14:36.696805 2025] [:error] [pid 53449:tid 53462] [client 192.178.4.101:41561] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKN_Npz08j5NoUSzp-mLwAAAUg"]
[Tue Nov 11 09:14:37.627963 2025] [:error] [pid 53356:tid 53406] [client 192.178.4.101:52097] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKN_ekdmt0kzjVcUN8vcwAAAFU"]
[Tue Nov 11 09:14:40.187695 2025] [:error] [pid 53449:tid 53455] [client 192.178.4.101:49703] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKOANpz08j5NoUSzp-mMQAAAUE"]
[Tue Nov 11 09:14:41.088394 2025] [:error] [pid 53449:tid 53471] [client 192.178.4.101:42387] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKOAdpz08j5NoUSzp-mNAAAAVE"]
[Tue Nov 11 09:14:41.342109 2025] [:error] [pid 53449:tid 53473] [client 192.178.4.101:41734] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKOAdpz08j5NoUSzp-mNQAAAVM"]
[Tue Nov 11 09:14:42.297370 2025] [:error] [pid 53355:tid 53377] [client 192.178.4.101:56737] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKOAoB5X5A3rMc4_nDEoQAAABM"]
[Tue Nov 11 09:14:43.032227 2025] [:error] [pid 53355:tid 53364] [client 192.178.4.101:51671] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKOA4B5X5A3rMc4_nDEogAAAAY"]
[Tue Nov 11 09:14:43.230919 2025] [:error] [pid 53449:tid 53456] [client 192.178.4.101:61320] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKOA9pz08j5NoUSzp-mNwAAAUI"]
[Tue Nov 11 09:14:44.184543 2025] [:error] [pid 53449:tid 53454] [client 192.178.4.101:53249] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKOBNpz08j5NoUSzp-mOQAAAUA"]
[Tue Nov 11 09:14:45.516287 2025] [:error] [pid 53449:tid 53474] [client 192.178.4.101:58699] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKOBdpz08j5NoUSzp-mOwAAAVQ"]
[Tue Nov 11 09:14:46.643780 2025] [:error] [pid 53355:tid 53374] [client 192.178.4.101:45783] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKOBoB5X5A3rMc4_nDEpwAAABA"]
[Tue Nov 11 09:14:47.575972 2025] [:error] [pid 53449:tid 53468] [client 192.178.4.101:46527] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKOB9pz08j5NoUSzp-mPwAAAU4"]
[Tue Nov 11 09:14:51.669604 2025] [:error] [pid 53449:tid 53473] [client 192.178.4.101:55847] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKOC9pz08j5NoUSzp-mWAAAAVM"]
[Tue Nov 11 09:14:52.604217 2025] [:error] [pid 53449:tid 53469] [client 192.178.4.101:45398] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKODNpz08j5NoUSzp-mWQAAAU8"]
[Tue Nov 11 09:14:53.804672 2025] [:error] [pid 53414:tid 53430] [client 192.178.4.101:59689] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKODQs6pHd_Z5oc1ef3PAAAAQ4"]
[Tue Nov 11 09:14:54.834063 2025] [:error] [pid 53414:tid 53423] [client 192.178.4.101:52221] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKODgs6pHd_Z5oc1ef3PQAAAQc"]
[Tue Nov 11 09:14:56.640022 2025] [:error] [pid 53355:tid 53374] [client 192.178.4.101:46860] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKOEIB5X5A3rMc4_nDEsQAAABA"]
[Tue Nov 11 09:15:05.333172 2025] [:error] [pid 53356:tid 53400] [client 192.178.4.101:65308] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKOGekdmt0kzjVcUN8viwAAAE8"]
[Tue Nov 11 09:15:06.656723 2025] [:error] [pid 53449:tid 53473] [client 192.178.4.101:55808] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKOGtpz08j5NoUSzp-mbQAAAVM"]
[Tue Nov 11 09:15:07.589827 2025] [:error] [pid 53449:tid 53478] [client 192.178.4.101:45122] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKOG9pz08j5NoUSzp-mcgAAAVg"]
[Tue Nov 11 09:15:11.314016 2025] [:error] [pid 53356:tid 53399] [client 192.178.4.101:57298] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKOH-kdmt0kzjVcUN8vlQAAAE4"]
[Tue Nov 11 09:15:11.660104 2025] [:error] [pid 53356:tid 53403] [client 192.178.4.101:44801] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKOH-kdmt0kzjVcUN8vlgAAAFI"]
[Tue Nov 11 09:15:12.266976 2025] [:error] [pid 53414:tid 53429] [client 192.178.4.101:37301] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKOIAs6pHd_Z5oc1ef3VQAAAQ0"]
[Tue Nov 11 09:15:12.693634 2025] [:error] [pid 53414:tid 53427] [client 192.178.4.101:47878] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKOIAs6pHd_Z5oc1ef3WQAAAQs"]
[Tue Nov 11 09:15:13.654117 2025] [:error] [pid 53355:tid 53370] [client 192.178.4.101:47663] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKOIYB5X5A3rMc4_nDExgAAAAw"]
[Tue Nov 11 09:15:14.591597 2025] [:error] [pid 53414:tid 53420] [client 192.178.4.101:57769] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKOIgs6pHd_Z5oc1ef3XAAAAQQ"]
[Tue Nov 11 09:15:15.793288 2025] [:error] [pid 53355:tid 53376] [client 192.178.4.101:51618] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKOI4B5X5A3rMc4_nDEyQAAABI"]
[Tue Nov 11 09:15:16.476462 2025] [:error] [pid 53355:tid 53367] [client 192.178.4.101:48375] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKOJIB5X5A3rMc4_nDEygAAAAk"]
[Tue Nov 11 09:15:16.826101 2025] [:error] [pid 53414:tid 53436] [client 192.178.4.101:43015] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKOJAs6pHd_Z5oc1ef3XwAAARQ"]
[Tue Nov 11 09:15:17.783055 2025] [:error] [pid 53414:tid 53437] [client 192.178.4.101:45695] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKOJQs6pHd_Z5oc1ef3YQAAARU"]
[Tue Nov 11 09:15:18.432119 2025] [:error] [pid 53356:tid 53405] [client 192.178.4.101:51436] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKOJukdmt0kzjVcUN8vngAAAFQ"]
[Tue Nov 11 09:15:19.465472 2025] [:error] [pid 53414:tid 53434] [client 192.178.4.101:47815] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKOJws6pHd_Z5oc1ef3YgAAARI"]
[Tue Nov 11 09:15:20.399328 2025] [:error] [pid 53414:tid 53429] [client 192.178.4.101:54618] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKOKAs6pHd_Z5oc1ef3ZgAAAQ0"]
[Tue Nov 11 09:15:21.530700 2025] [:error] [pid 53414:tid 53418] [client 192.178.4.101:39801] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKOKQs6pHd_Z5oc1ef3ggAAAQI"]
[Tue Nov 11 09:15:22.463594 2025] [:error] [pid 53414:tid 53432] [client 192.178.4.101:44646] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKOKgs6pHd_Z5oc1ef3hQAAARA"]
[Tue Nov 11 09:15:23.398978 2025] [:error] [pid 53449:tid 53468] [client 192.178.4.101:48342] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKOK9pz08j5NoUSzp-mkgAAAU4"]
[Tue Nov 11 09:15:24.403877 2025] [:error] [pid 53449:tid 53464] [client 192.178.4.101:37155] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKOLNpz08j5NoUSzp-mlwAAAUo"]
[Tue Nov 11 09:15:25.361264 2025] [:error] [pid 53414:tid 53434] [client 192.178.4.101:37855] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKOLQs6pHd_Z5oc1ef3iQAAARI"]
[Tue Nov 11 09:15:43.814039 2025] [:error] [pid 53449:tid 53464] [client 192.178.4.101:43261] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKOP9pz08j5NoUSzp-mrwAAAUo"]
[Tue Nov 11 09:15:44.137231 2025] [:error] [pid 53355:tid 53370] [client 192.178.4.101:55109] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKOQIB5X5A3rMc4_nDE9wAAAAw"]
[Tue Nov 11 09:15:44.556878 2025] [:error] [pid 53414:tid 53436] [client 192.178.4.101:36120] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKOQAs6pHd_Z5oc1ef3qwAAARQ"]
[Tue Nov 11 09:15:45.885457 2025] [:error] [pid 53355:tid 53366] [client 192.178.4.101:46569] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKOQYB5X5A3rMc4_nDE-gAAAAg"]
[Tue Nov 11 09:15:49.129157 2025] [:error] [pid 53355:tid 53361] [client 192.178.4.101:35421] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKORYB5X5A3rMc4_nDE-wAAAAM"]
[Tue Nov 11 09:15:50.065360 2025] [:error] [pid 53449:tid 53470] [client 192.178.4.101:37072] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKORtpz08j5NoUSzp-mwQAAAVA"]
[Tue Nov 11 09:15:50.996320 2025] [:error] [pid 53414:tid 53436] [client 192.178.4.101:49833] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKORgs6pHd_Z5oc1ef32QAAARQ"]
[Tue Nov 11 09:15:51.406914 2025] [:error] [pid 53449:tid 53456] [client 192.178.4.101:37270] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKOR9pz08j5NoUSzp-mwwAAAUI"]
[Tue Nov 11 09:15:52.410971 2025] [:error] [pid 53355:tid 53382] [client 192.178.4.101:54143] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKOSIB5X5A3rMc4_nDE_QAAABg"]
[Tue Nov 11 09:15:53.367654 2025] [:error] [pid 53414:tid 53426] [client 192.178.4.101:62568] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKOSQs6pHd_Z5oc1ef33AAAAQo"]
[Tue Nov 11 09:15:54.990779 2025] [:error] [pid 53356:tid 53407] [client 192.178.4.101:64168] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKOSukdmt0kzjVcUN8v7gAAAFY"]
[Tue Nov 11 09:15:56.000626 2025] [:error] [pid 53355:tid 53372] [client 192.178.4.101:48468] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKOS4B5X5A3rMc4_nDFBAAAAA4"]
[Tue Nov 11 09:15:56.962398 2025] [:error] [pid 53449:tid 53459] [client 192.178.4.101:64271] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKOTNpz08j5NoUSzp-mxQAAAUU"]
[Tue Nov 11 09:15:57.953713 2025] [:error] [pid 53355:tid 53367] [client 192.178.4.101:53947] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKOTYB5X5A3rMc4_nDFBgAAAAk"]
[Tue Nov 11 09:15:58.069409 2025] [:error] [pid 53414:tid 53423] [client 192.178.4.101:44343] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKOTgs6pHd_Z5oc1ef34gAAAQc"]
[Tue Nov 11 09:15:58.912078 2025] [:error] [pid 53356:tid 53396] [client 192.178.4.101:60513] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKOTukdmt0kzjVcUN8v8QAAAEs"]
[Tue Nov 11 09:15:59.104837 2025] [:error] [pid 53414:tid 53439] [client 192.178.4.101:44412] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKOTws6pHd_Z5oc1ef35AAAARc"]
[Tue Nov 11 09:16:01.509101 2025] [:error] [pid 53449:tid 53472] [client 192.178.4.101:58542] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKOUdpz08j5NoUSzp-mxgAAAVI"]
[Tue Nov 11 09:16:02.445095 2025] [:error] [pid 53356:tid 53398] [client 192.178.4.101:55445] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKOUukdmt0kzjVcUN8v9wAAAE0"]
[Tue Nov 11 09:16:02.635182 2025] [:error] [pid 53414:tid 53434] [client 192.178.4.101:60117] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKOUgs6pHd_Z5oc1ef36gAAARI"]
[Tue Nov 11 09:16:03.570500 2025] [:error] [pid 53414:tid 53424] [client 192.178.4.101:36563] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKOUws6pHd_Z5oc1ef37QAAAQg"]
[Tue Nov 11 09:16:08.905970 2025] [:error] [pid 53449:tid 53469] [client 192.178.4.101:62258] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKOWNpz08j5NoUSzp-nGgAAAU8"]
[Tue Nov 11 09:16:10.868795 2025] [:error] [pid 53449:tid 53460] [client 192.178.4.101:41256] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKOWtpz08j5NoUSzp-nJAAAAUY"]
[Tue Nov 11 09:16:11.827978 2025] [:error] [pid 53449:tid 53458] [client 192.178.4.101:49974] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKOW9pz08j5NoUSzp-nJwAAAUQ"]
[Tue Nov 11 09:16:17.856002 2025] [:error] [pid 53414:tid 53432] [client 192.178.4.101:60334] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKOYQs6pHd_Z5oc1ef4CgAAARA"]
[Tue Nov 11 09:16:18.862787 2025] [:error] [pid 53449:tid 53475] [client 192.178.4.101:60141] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKOYtpz08j5NoUSzp-nRgAAAVU"]
[Tue Nov 11 09:16:19.891563 2025] [:error] [pid 53355:tid 53370] [client 192.178.4.101:46112] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKOY4B5X5A3rMc4_nDFFAAAAAw"]
[Tue Nov 11 09:16:20.847858 2025] [:error] [pid 53414:tid 53438] [client 192.178.4.101:56614] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKOZAs6pHd_Z5oc1ef4EAAAARY"]
[Tue Nov 11 09:16:21.854672 2025] [:error] [pid 53356:tid 53387] [client 192.178.4.101:51957] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKOZekdmt0kzjVcUN8wDAAAAEI"]
[Tue Nov 11 09:16:22.812252 2025] [:error] [pid 53356:tid 53396] [client 192.178.4.101:42547] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKOZukdmt0kzjVcUN8wDgAAAEs"]
[Tue Nov 11 09:16:23.220060 2025] [:error] [pid 53355:tid 53358] [client 192.178.4.101:38940] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKOZ4B5X5A3rMc4_nDFFwAAAAA"]
[Tue Nov 11 09:16:23.744093 2025] [:error] [pid 53414:tid 53440] [client 192.178.4.101:35319] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKOZws6pHd_Z5oc1ef4FQAAARg"]
[Tue Nov 11 09:16:24.222584 2025] [:error] [pid 53414:tid 53429] [client 192.178.4.101:52154] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKOaAs6pHd_Z5oc1ef4FgAAAQ0"]
[Tue Nov 11 09:16:24.676306 2025] [:error] [pid 53355:tid 53372] [client 192.178.4.101:38384] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKOaIB5X5A3rMc4_nDFGgAAAA4"]
[Tue Nov 11 09:16:25.180590 2025] [:error] [pid 53355:tid 53381] [client 192.178.4.101:49596] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKOaYB5X5A3rMc4_nDFHAAAABc"]
[Tue Nov 11 09:16:25.610470 2025] [:error] [pid 53355:tid 53365] [client 192.178.4.101:59883] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKOaYB5X5A3rMc4_nDFHQAAAAc"]
[Tue Nov 11 09:16:26.112694 2025] [:error] [pid 53355:tid 53364] [client 192.178.4.101:47594] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKOaoB5X5A3rMc4_nDFIAAAAAY"]
[Tue Nov 11 09:16:27.089118 2025] [:error] [pid 53449:tid 53461] [client 192.178.4.101:40034] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKOa9pz08j5NoUSzp-nWgAAAUc"]
[Tue Nov 11 09:16:28.024379 2025] [:error] [pid 53449:tid 53478] [client 192.178.4.101:35004] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKObNpz08j5NoUSzp-nXAAAAVg"]
[Tue Nov 11 09:16:28.954620 2025] [:error] [pid 53355:tid 53371] [client 192.178.4.101:52356] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKObIB5X5A3rMc4_nDFJQAAAA0"]
[Tue Nov 11 09:16:29.730942 2025] [:error] [pid 53449:tid 53459] [client 192.178.4.101:42787] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKObdpz08j5NoUSzp-nYAAAAUU"]
[Tue Nov 11 09:16:30.293391 2025] [:error] [pid 53414:tid 53438] [client 192.178.4.101:52358] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKObgs6pHd_Z5oc1ef4GAAAARY"]
[Tue Nov 11 09:16:30.931537 2025] [:error] [pid 53414:tid 53436] [client 192.178.4.101:46560] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKObgs6pHd_Z5oc1ef4GgAAARQ"]
[Tue Nov 11 09:16:31.564122 2025] [:error] [pid 53449:tid 53460] [client 192.178.4.101:62589] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKOb9pz08j5NoUSzp-nYgAAAUY"]
[Tue Nov 11 09:16:32.191910 2025] [:error] [pid 53414:tid 53421] [client 192.178.4.101:43695] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKOcAs6pHd_Z5oc1ef4GwAAAQU"]
[Tue Nov 11 09:16:33.446637 2025] [:error] [pid 53356:tid 53398] [client 192.178.4.101:37365] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKOcekdmt0kzjVcUN8wHAAAAE0"]
[Tue Nov 11 09:16:34.380628 2025] [:error] [pid 53356:tid 53409] [client 192.178.4.101:59265] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKOcukdmt0kzjVcUN8wIAAAAFg"]
[Tue Nov 11 09:16:38.227635 2025] [:error] [pid 53449:tid 53471] [client 192.178.4.101:60975] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKOdtpz08j5NoUSzp-ngwAAAVE"]
[Tue Nov 11 09:16:41.660122 2025] [:error] [pid 53449:tid 53473] [client 192.178.4.101:35995] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKOedpz08j5NoUSzp-nkAAAAVM"]
[Tue Nov 11 09:17:00.414394 2025] [:error] [pid 53355:tid 53364] [client 192.178.4.101:41438] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKOjIB5X5A3rMc4_nDFUwAAAAY"]
[Tue Nov 11 09:17:01.347242 2025] [:error] [pid 53414:tid 53437] [client 192.178.4.101:35666] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKOjQs6pHd_Z5oc1ef4NwAAARU"]
[Tue Nov 11 09:17:02.343625 2025] [:error] [pid 53449:tid 53466] [client 192.178.4.101:43180] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKOjtpz08j5NoUSzp-nqQAAAUw"]
[Tue Nov 11 09:17:03.352674 2025] [:error] [pid 53414:tid 53435] [client 192.178.4.101:37126] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKOjws6pHd_Z5oc1ef4OAAAARM"]
[Tue Nov 11 09:17:04.599186 2025] [:error] [pid 53414:tid 53432] [client 192.178.4.101:62204] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKOkAs6pHd_Z5oc1ef4OgAAARA"]
[Tue Nov 11 09:17:06.755906 2025] [:error] [pid 53355:tid 53358] [client 192.178.4.101:38816] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKOkoB5X5A3rMc4_nDFZwAAAAA"]
[Tue Nov 11 09:17:07.693246 2025] [:error] [pid 53414:tid 53440] [client 192.178.4.101:63411] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKOkws6pHd_Z5oc1ef4PgAAARg"]
[Tue Nov 11 09:17:08.628880 2025] [:error] [pid 53356:tid 53402] [client 192.178.4.101:55264] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKOlOkdmt0kzjVcUN8wNQAAAFE"]
[Tue Nov 11 09:17:09.562697 2025] [:error] [pid 53355:tid 53374] [client 192.178.4.101:51164] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKOlYB5X5A3rMc4_nDFbAAAABA"]
[Tue Nov 11 09:17:10.497021 2025] [:error] [pid 53414:tid 53431] [client 192.178.4.101:54160] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKOlgs6pHd_Z5oc1ef4QAAAAQ8"]
[Tue Nov 11 09:17:14.759084 2025] [:error] [pid 53356:tid 53395] [client 192.178.4.101:43310] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKOmukdmt0kzjVcUN8wPgAAAEo"]
[Tue Nov 11 09:17:15.788540 2025] [:error] [pid 53414:tid 53428] [client 192.178.4.101:45767] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKOmws6pHd_Z5oc1ef4QgAAAQw"]
[Tue Nov 11 09:17:16.047622 2025] [:error] [pid 53449:tid 53468] [client 192.178.4.101:63096] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKOnNpz08j5NoUSzp-n9wAAAU4"]
[Tue Nov 11 09:17:16.749095 2025] [:error] [pid 53355:tid 53380] [client 192.178.4.101:39754] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKOnIB5X5A3rMc4_nDFcgAAABY"]
[Tue Nov 11 09:17:17.679318 2025] [:error] [pid 53449:tid 53464] [client 192.178.4.101:41316] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKOndpz08j5NoUSzp-n_wAAAUo"]
[Tue Nov 11 09:17:18.580952 2025] [:error] [pid 53449:tid 53465] [client 192.178.4.101:40833] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKOntpz08j5NoUSzp-oAQAAAUs"]
[Tue Nov 11 09:17:18.831220 2025] [:error] [pid 53449:tid 53462] [client 192.178.4.101:38504] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKOntpz08j5NoUSzp-oAgAAAUg"]
[Tue Nov 11 09:17:21.819349 2025] [:error] [pid 53414:tid 53439] [client 192.178.4.101:59857] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKOoQs6pHd_Z5oc1ef4RwAAARc"]
[Tue Nov 11 09:17:22.776582 2025] [:error] [pid 53356:tid 53390] [client 192.178.4.101:51883] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKOoukdmt0kzjVcUN8wRAAAAEU"]
[Tue Nov 11 09:17:26.423388 2025] [:error] [pid 53355:tid 53358] [client 192.178.4.101:56601] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKOpoB5X5A3rMc4_nDFdwAAAAA"]
[Tue Nov 11 09:17:27.362245 2025] [:error] [pid 53449:tid 53460] [client 192.178.4.101:59717] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKOp9pz08j5NoUSzp-oDAAAAUY"]
[Tue Nov 11 09:17:32.011354 2025] [:error] [pid 53356:tid 53400] [client 192.178.4.101:39787] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKOrOkdmt0kzjVcUN8wVAAAAE8"]
[Tue Nov 11 09:17:32.942287 2025] [:error] [pid 53356:tid 53404] [client 192.178.4.101:44504] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKOrOkdmt0kzjVcUN8wVQAAAFM"]
[Tue Nov 11 09:17:33.874790 2025] [:error] [pid 53414:tid 53429] [client 192.178.4.101:38484] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKOrQs6pHd_Z5oc1ef4VwAAAQ0"]
[Tue Nov 11 09:17:34.805686 2025] [:error] [pid 53356:tid 53399] [client 192.178.4.101:49753] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKOrukdmt0kzjVcUN8wVgAAAE4"]
[Tue Nov 11 09:17:35.219677 2025] [:error] [pid 53355:tid 53365] [client 192.178.4.101:45719] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKOr4B5X5A3rMc4_nDFgQAAAAc"]
[Tue Nov 11 09:17:37.178548 2025] [:error] [pid 53449:tid 53457] [client 192.178.4.101:34807] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKOsdpz08j5NoUSzp-oGgAAAUM"]
[Tue Nov 11 09:17:38.331908 2025] [:error] [pid 53355:tid 53360] [client 192.178.4.101:53131] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKOsoB5X5A3rMc4_nDFhwAAAAI"]
[Tue Nov 11 09:17:40.203823 2025] [:error] [pid 53449:tid 53467] [client 192.178.4.101:40756] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKOtNpz08j5NoUSzp-oIQAAAU0"]
[Tue Nov 11 09:17:40.579782 2025] [:error] [pid 53449:tid 53454] [client 192.178.4.101:50451] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKOtNpz08j5NoUSzp-oIwAAAUA"]
[Tue Nov 11 09:17:41.135716 2025] [:error] [pid 53449:tid 53462] [client 192.178.4.101:63972] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKOtdpz08j5NoUSzp-oJQAAAUg"]
[Tue Nov 11 09:17:41.512048 2025] [:error] [pid 53449:tid 53460] [client 192.178.4.101:41550] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKOtdpz08j5NoUSzp-oKQAAAUY"]
[Tue Nov 11 09:17:42.069910 2025] [:error] [pid 53356:tid 53395] [client 192.178.4.101:53250] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKOtukdmt0kzjVcUN8wXgAAAEo"]
[Tue Nov 11 09:17:43.078659 2025] [:error] [pid 53355:tid 53368] [client 192.178.4.101:49976] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKOt4B5X5A3rMc4_nDFiwAAAAo"]
[Tue Nov 11 09:17:44.040636 2025] [:error] [pid 53414:tid 53436] [client 192.178.4.101:58100] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKOuAs6pHd_Z5oc1ef4ZQAAARQ"]
[Tue Nov 11 09:17:47.081860 2025] [:error] [pid 59670:tid 59677] [client 192.178.4.101:48359] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKOu6k2Cnts0y-hpfpaywAAAIQ"]
[Tue Nov 11 09:17:50.448132 2025] [:error] [pid 59670:tid 59683] [client 192.178.4.101:41389] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKOvqk2Cnts0y-hpfpa0AAAAIo"]
[Tue Nov 11 09:17:51.374147 2025] [:error] [pid 59670:tid 59685] [client 192.178.4.101:51901] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKOv6k2Cnts0y-hpfpa0QAAAIw"]
[Tue Nov 11 09:17:52.312393 2025] [:error] [pid 53355:tid 53375] [client 192.178.4.101:56209] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKOwIB5X5A3rMc4_nDFkgAAABE"]
[Tue Nov 11 09:17:54.833767 2025] [:error] [pid 53449:tid 53460] [client 192.178.4.101:41882] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKOwtpz08j5NoUSzp-oQQAAAUY"]
[Tue Nov 11 09:17:55.970721 2025] [:error] [pid 59670:tid 59696] [client 192.178.4.101:61946] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKOw6k2Cnts0y-hpfpa2AAAAJc"]
[Tue Nov 11 09:22:20.789393 2025] [:error] [pid 59670:tid 59691] [client 192.178.4.101:52832] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKPzKk2Cnts0y-hpfpciQAAAJI"]
[Tue Nov 11 09:22:22.015676 2025] [:error] [pid 53355:tid 53373] [client 192.178.4.101:35414] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKPzoB5X5A3rMc4_nDG_gAAAA8"]
[Tue Nov 11 09:22:23.335462 2025] [:error] [pid 53414:tid 53420] [client 192.178.4.101:40917] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKPzws6pHd_Z5oc1ef55wAAAQQ"]
[Tue Nov 11 09:22:24.634945 2025] [:error] [pid 59670:tid 59681] [client 192.178.4.101:63122] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKP0Kk2Cnts0y-hpfpciwAAAIg"]
[Tue Nov 11 09:22:25.165364 2025] [:error] [pid 53355:tid 53372] [client 192.178.4.101:41856] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKP0YB5X5A3rMc4_nDG_wAAAA4"]
[Tue Nov 11 09:22:25.776712 2025] [:error] [pid 53355:tid 53379] [client 192.178.4.101:45131] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKP0YB5X5A3rMc4_nDHAAAAABU"]
[Tue Nov 11 09:22:26.386589 2025] [:error] [pid 53356:tid 53403] [client 192.178.4.101:62209] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKP0ukdmt0kzjVcUN8xjgAAAFI"]
[Tue Nov 11 09:22:26.987858 2025] [:error] [pid 53449:tid 53470] [client 192.178.4.101:47204] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKP0tpz08j5NoUSzp-pqwAAAVA"]
[Tue Nov 11 09:22:27.595535 2025] [:error] [pid 53355:tid 53367] [client 192.178.4.101:59621] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKP04B5X5A3rMc4_nDHAQAAAAk"]
[Tue Nov 11 09:22:28.191717 2025] [:error] [pid 59670:tid 59696] [client 192.178.4.101:60013] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKP1Kk2Cnts0y-hpfpcjQAAAJc"]
[Tue Nov 11 09:22:28.868131 2025] [:error] [pid 59670:tid 59686] [client 192.178.4.101:43609] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKP1Kk2Cnts0y-hpfpcjwAAAI0"]
[Tue Nov 11 09:22:29.981224 2025] [:error] [pid 53356:tid 53397] [client 192.178.4.101:38169] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKP1ekdmt0kzjVcUN8xkQAAAEw"]
[Tue Nov 11 09:22:30.917568 2025] [:error] [pid 53356:tid 53387] [client 192.178.4.101:43873] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKP1ukdmt0kzjVcUN8xlAAAAEI"]
[Tue Nov 11 09:22:31.853817 2025] [:error] [pid 53356:tid 53400] [client 192.178.4.101:64281] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKP1-kdmt0kzjVcUN8xlgAAAE8"]
[Tue Nov 11 09:22:34.289009 2025] [:error] [pid 59670:tid 59680] [client 192.178.4.101:35831] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKP2qk2Cnts0y-hpfpcmAAAAIc"]
[Tue Nov 11 09:22:35.230106 2025] [:error] [pid 53449:tid 53473] [client 192.178.4.101:39127] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKP29pz08j5NoUSzp-psgAAAVM"]
[Tue Nov 11 09:22:36.164859 2025] [:error] [pid 53356:tid 53390] [client 192.178.4.101:47410] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKP3Okdmt0kzjVcUN8xmQAAAEU"]
[Tue Nov 11 09:22:39.557669 2025] [:error] [pid 53414:tid 53432] [client 192.178.4.101:35730] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKP3ws6pHd_Z5oc1ef57gAAARA"]
[Tue Nov 11 09:22:40.363138 2025] [:error] [pid 59670:tid 59694] [client 192.178.4.101:64665] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKP4Kk2Cnts0y-hpfpcngAAAJU"]
[Tue Nov 11 09:22:40.554546 2025] [:error] [pid 53356:tid 53391] [client 192.178.4.101:52890] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKP4Okdmt0kzjVcUN8xmwAAAEY"]
[Tue Nov 11 09:22:41.492972 2025] [:error] [pid 53355:tid 53359] [client 192.178.4.101:42682] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKP4YB5X5A3rMc4_nDHEQAAAAE"]
[Tue Nov 11 09:22:42.423169 2025] [:error] [pid 59670:tid 59685] [client 192.178.4.101:53607] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKP4qk2Cnts0y-hpfpcoQAAAIw"]
[Tue Nov 11 09:22:43.353039 2025] [:error] [pid 59670:tid 59697] [client 192.178.4.101:58620] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKP46k2Cnts0y-hpfpcpQAAAJg"]
[Tue Nov 11 09:22:43.780161 2025] [:error] [pid 53449:tid 53467] [client 192.178.4.101:45561] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKP49pz08j5NoUSzp-puQAAAU0"]
[Tue Nov 11 09:22:44.288697 2025] [:error] [pid 53449:tid 53465] [client 192.178.4.101:41403] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKP5Npz08j5NoUSzp-puwAAAUs"]
[Tue Nov 11 09:22:44.716681 2025] [:error] [pid 53414:tid 53423] [client 192.178.4.101:36737] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKP5As6pHd_Z5oc1ef58gAAAQc"]
[Tue Nov 11 09:22:45.297122 2025] [:error] [pid 53414:tid 53430] [client 192.178.4.101:61229] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKP5Qs6pHd_Z5oc1ef58wAAAQ4"]
[Tue Nov 11 09:22:45.655980 2025] [:error] [pid 53355:tid 53380] [client 192.178.4.101:39114] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKP5YB5X5A3rMc4_nDHFQAAABY"]
[Tue Nov 11 09:22:46.595764 2025] [:error] [pid 53449:tid 53460] [client 192.178.4.101:50236] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKP5tpz08j5NoUSzp-pvgAAAUY"]
[Tue Nov 11 09:22:47.531282 2025] [:error] [pid 53414:tid 53437] [client 192.178.4.101:62808] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKP5ws6pHd_Z5oc1ef5-QAAARU"]
[Tue Nov 11 09:22:48.538907 2025] [:error] [pid 53414:tid 53427] [client 192.178.4.101:58943] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKP6As6pHd_Z5oc1ef5-wAAAQs"]
[Tue Nov 11 09:22:51.831508 2025] [:error] [pid 53355:tid 53368] [client 192.178.4.101:52705] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKP64B5X5A3rMc4_nDHGQAAAAo"]
[Tue Nov 11 09:22:52.769118 2025] [:error] [pid 53356:tid 53400] [client 192.178.4.101:51033] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKP7Okdmt0kzjVcUN8xowAAAE8"]
[Tue Nov 11 09:22:53.708971 2025] [:error] [pid 59670:tid 59687] [client 192.178.4.101:59409] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKP7ak2Cnts0y-hpfpcswAAAI4"]
[Tue Nov 11 09:22:54.720584 2025] [:error] [pid 59670:tid 59678] [client 192.178.4.101:49730] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKP7qk2Cnts0y-hpfpctQAAAIU"]
[Tue Nov 11 09:22:55.682241 2025] [:error] [pid 53355:tid 53382] [client 192.178.4.101:50866] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKP74B5X5A3rMc4_nDHHQAAABg"]
[Tue Nov 11 09:22:57.285146 2025] [:error] [pid 59670:tid 59677] [client 192.178.4.101:63073] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKP8ak2Cnts0y-hpfpctgAAAIQ"]
[Tue Nov 11 09:22:58.223413 2025] [:error] [pid 59670:tid 59690] [client 192.178.4.101:61531] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKP8qk2Cnts0y-hpfpctwAAAJE"]
[Tue Nov 11 09:22:59.159514 2025] [:error] [pid 53449:tid 53462] [client 192.178.4.101:47940] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKP89pz08j5NoUSzp-pwgAAAUg"]
[Tue Nov 11 09:23:04.989865 2025] [:error] [pid 53449:tid 53464] [client 192.178.4.101:51329] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKP-Npz08j5NoUSzp-pxgAAAUo"]
[Tue Nov 11 09:23:08.318207 2025] [:error] [pid 53449:tid 53473] [client 192.178.4.101:65177] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKP_Npz08j5NoUSzp-pyAAAAVM"]
[Tue Nov 11 09:23:09.251654 2025] [:error] [pid 59670:tid 59690] [client 192.178.4.101:59327] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKP_ak2Cnts0y-hpfpcxAAAAJE"]
[Tue Nov 11 09:23:10.807995 2025] [:error] [pid 53355:tid 53379] [client 192.178.4.101:60762] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKP_oB5X5A3rMc4_nDHIwAAABU"]
[Tue Nov 11 09:23:13.002959 2025] [:error] [pid 53355:tid 53363] [client 192.178.4.101:47513] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKQAYB5X5A3rMc4_nDHKwAAAAU"]
[Tue Nov 11 09:23:41.741013 2025] [:error] [pid 53414:tid 53428] [client 192.178.4.101:50627] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKQHQs6pHd_Z5oc1ef6HwAAAQw"]
[Tue Nov 11 09:23:42.677875 2025] [:error] [pid 59670:tid 59686] [client 192.178.4.101:44728] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKQHqk2Cnts0y-hpfpc3AAAAI0"]
[Tue Nov 11 09:23:43.156851 2025] [:error] [pid 59670:tid 59689] [client 192.178.4.101:39878] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKQH6k2Cnts0y-hpfpc3QAAAJA"]
[Tue Nov 11 09:23:43.608822 2025] [:error] [pid 53449:tid 53460] [client 192.178.4.101:47494] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKQH9pz08j5NoUSzp-p_QAAAUY"]
[Tue Nov 11 09:23:44.914384 2025] [:error] [pid 53356:tid 53388] [client 192.178.4.101:58283] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKQIOkdmt0kzjVcUN8xwQAAAEM"]
[Tue Nov 11 09:23:49.548080 2025] [:error] [pid 53449:tid 53455] [client 192.178.4.101:39902] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKQJdpz08j5NoUSzp-qCAAAAUE"]
[Tue Nov 11 09:23:50.482757 2025] [:error] [pid 53449:tid 53475] [client 192.178.4.101:47278] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKQJtpz08j5NoUSzp-qCgAAAVU"]
[Tue Nov 11 09:23:51.914280 2025] [:error] [pid 59670:tid 59684] [client 192.178.4.101:39149] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKQJ6k2Cnts0y-hpfpc7gAAAIs"]
[Tue Nov 11 09:23:53.907619 2025] [:error] [pid 53414:tid 53440] [client 192.178.4.101:38564] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKQKQs6pHd_Z5oc1ef6PwAAARg"]
[Tue Nov 11 09:23:55.268707 2025] [:error] [pid 53414:tid 53432] [client 192.178.4.101:54695] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKQKws6pHd_Z5oc1ef6QAAAARA"]
[Tue Nov 11 09:23:56.705375 2025] [:error] [pid 53414:tid 53420] [client 192.178.4.101:41279] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKQLAs6pHd_Z5oc1ef6QwAAAQQ"]
[Tue Nov 11 09:23:57.975428 2025] [:error] [pid 53449:tid 53465] [client 192.178.4.101:40609] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKQLdpz08j5NoUSzp-qEAAAAUs"]
[Tue Nov 11 09:23:59.303304 2025] [:error] [pid 59670:tid 59676] [client 192.178.4.101:59877] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKQL6k2Cnts0y-hpfpc-QAAAIM"]
[Tue Nov 11 09:24:00.684596 2025] [:error] [pid 59670:tid 59680] [client 192.178.4.101:54904] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKQMKk2Cnts0y-hpfpc_AAAAIc"]
[Tue Nov 11 09:24:04.265034 2025] [:error] [pid 53355:tid 53374] [client 192.178.4.101:61399] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKQNIB5X5A3rMc4_nDHgAAAABA"]
[Tue Nov 11 09:24:05.204599 2025] [:error] [pid 53414:tid 53427] [client 192.178.4.101:61189] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKQNQs6pHd_Z5oc1ef6SgAAAQs"]
[Tue Nov 11 09:24:06.713112 2025] [:error] [pid 53355:tid 53367] [client 192.178.4.101:50958] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKQNoB5X5A3rMc4_nDHgQAAAAk"]
[Tue Nov 11 09:24:07.651909 2025] [:error] [pid 53414:tid 53440] [client 192.178.4.101:50794] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKQNws6pHd_Z5oc1ef6TQAAARg"]
[Tue Nov 11 09:24:08.662369 2025] [:error] [pid 53356:tid 53395] [client 192.178.4.101:59872] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKQOOkdmt0kzjVcUN8x3AAAAEo"]
[Tue Nov 11 09:24:09.697646 2025] [:error] [pid 53356:tid 53385] [client 192.178.4.101:46091] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKQOekdmt0kzjVcUN8x3wAAAEA"]
[Tue Nov 11 09:24:10.252930 2025] [:error] [pid 53449:tid 53466] [client 192.178.4.101:51098] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKQOtpz08j5NoUSzp-qIAAAAUw"]
[Tue Nov 11 09:24:10.729972 2025] [:error] [pid 59670:tid 59690] [client 192.178.4.101:55310] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKQOqk2Cnts0y-hpfpdCAAAAJE"]
[Tue Nov 11 09:24:11.185588 2025] [:error] [pid 59670:tid 59691] [client 192.178.4.101:54028] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKQO6k2Cnts0y-hpfpdCwAAAJI"]
[Tue Nov 11 09:24:14.560644 2025] [:error] [pid 53355:tid 53378] [client 192.178.4.101:61539] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKQPoB5X5A3rMc4_nDHhgAAABQ"]
[Tue Nov 11 09:24:15.491177 2025] [:error] [pid 53356:tid 53392] [client 192.178.4.101:53278] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKQP-kdmt0kzjVcUN8x4wAAAEc"]
[Tue Nov 11 09:24:23.361848 2025] [:error] [pid 53449:tid 53462] [client 192.178.4.101:51932] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKQR9pz08j5NoUSzp-qWAAAAUg"]
[Tue Nov 11 09:24:25.427052 2025] [:error] [pid 53356:tid 53392] [client 192.178.4.101:46470] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKQSekdmt0kzjVcUN8x8AAAAEc"]
[Tue Nov 11 09:24:26.363447 2025] [:error] [pid 53449:tid 53476] [client 192.178.4.101:56569] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKQStpz08j5NoUSzp-qXAAAAVY"]
[Tue Nov 11 09:24:27.296468 2025] [:error] [pid 59670:tid 59697] [client 192.178.4.101:49010] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKQS6k2Cnts0y-hpfpdIgAAAJg"]
[Tue Nov 11 09:24:28.304856 2025] [:error] [pid 53356:tid 53403] [client 192.178.4.101:62736] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKQTOkdmt0kzjVcUN8x8QAAAFI"]
[Tue Nov 11 09:24:28.646725 2025] [:error] [pid 59670:tid 59675] [client 192.178.4.101:44549] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKQTKk2Cnts0y-hpfpdIwAAAII"]
[Tue Nov 11 09:24:30.335111 2025] [:error] [pid 53356:tid 53400] [client 192.178.4.101:40702] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKQTukdmt0kzjVcUN8x8gAAAE8"]
[Tue Nov 11 09:24:31.342880 2025] [:error] [pid 53356:tid 53406] [client 192.178.4.101:35863] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKQT-kdmt0kzjVcUN8x8wAAAFU"]
[Tue Nov 11 09:24:32.373105 2025] [:error] [pid 53414:tid 53435] [client 192.178.4.101:42146] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKQUAs6pHd_Z5oc1ef6YgAAARM"]
[Tue Nov 11 09:24:51.916082 2025] [:error] [pid 53356:tid 53390] [client 192.178.4.101:54886] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKQY-kdmt0kzjVcUN8yCAAAAEU"]
[Tue Nov 11 09:24:52.152019 2025] [:error] [pid 59670:tid 59679] [client 192.178.4.101:64239] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKQZKk2Cnts0y-hpfpdYQAAAIY"]
[Tue Nov 11 09:24:54.553521 2025] [:error] [pid 59670:tid 59697] [client 192.178.4.101:53784] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKQZqk2Cnts0y-hpfpdbAAAAJg"]
[Tue Nov 11 09:24:58.091632 2025] [:error] [pid 59670:tid 59688] [client 192.178.4.101:54251] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKQaqk2Cnts0y-hpfpdeQAAAI8"]
[Tue Nov 11 09:24:59.848545 2025] [:error] [pid 53356:tid 53404] [client 192.178.4.101:54682] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKQa-kdmt0kzjVcUN8yEAAAAFM"]
[Tue Nov 11 09:24:59.957825 2025] [:error] [pid 59670:tid 59697] [client 192.178.4.101:43954] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKQa6k2Cnts0y-hpfpdfgAAAJg"]
[Tue Nov 11 09:25:03.005516 2025] [:error] [pid 53414:tid 53428] [client 192.178.4.101:51234] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKQbws6pHd_Z5oc1ef7FAAAAQw"]
[Tue Nov 11 09:25:03.941277 2025] [:error] [pid 59670:tid 59684] [client 192.178.4.101:38235] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKQb6k2Cnts0y-hpfpdggAAAIs"]
[Tue Nov 11 09:25:04.877951 2025] [:error] [pid 53356:tid 53389] [client 192.178.4.101:44886] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKQcOkdmt0kzjVcUN8yEwAAAEQ"]
[Tue Nov 11 09:25:08.086692 2025] [:error] [pid 53355:tid 53367] [client 192.178.4.101:64342] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKQdIB5X5A3rMc4_nDIFgAAAAk"]
[Tue Nov 11 09:25:09.938235 2025] [:error] [pid 53356:tid 53387] [client 192.178.4.101:47882] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKQdekdmt0kzjVcUN8yGgAAAEI"]
[Tue Nov 11 09:25:11.820983 2025] [:error] [pid 53449:tid 53470] [client 192.178.4.101:35411] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKQd9pz08j5NoUSzp-qpAAAAVA"]
[Tue Nov 11 09:25:15.343010 2025] [:error] [pid 53449:tid 53469] [client 192.178.4.101:62997] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKQe9pz08j5NoUSzp-qqAAAAU8"]
[Tue Nov 11 09:25:15.788541 2025] [:error] [pid 53449:tid 53473] [client 192.178.4.101:62007] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKQe9pz08j5NoUSzp-qqQAAAVM"]
[Tue Nov 11 09:25:15.964899 2025] [:error] [pid 53355:tid 53375] [client 192.178.4.101:40988] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKQe4B5X5A3rMc4_nDIGwAAABE"]
[Tue Nov 11 09:25:16.723440 2025] [:error] [pid 53449:tid 53462] [client 192.178.4.101:52077] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKQfNpz08j5NoUSzp-qrwAAAUg"]
[Tue Nov 11 09:25:16.910414 2025] [:error] [pid 53414:tid 53433] [client 192.178.4.101:60855] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKQfAs6pHd_Z5oc1ef7HAAAARE"]
[Tue Nov 11 09:25:17.850423 2025] [:error] [pid 53414:tid 53425] [client 192.178.4.101:58875] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKQfQs6pHd_Z5oc1ef7HQAAAQk"]
[Tue Nov 11 09:25:18.860133 2025] [:error] [pid 53356:tid 53402] [client 192.178.4.101:36829] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKQfukdmt0kzjVcUN8yIgAAAFE"]
[Tue Nov 11 09:25:19.895242 2025] [:error] [pid 53449:tid 53455] [client 192.178.4.101:50591] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKQf9pz08j5NoUSzp-qswAAAUE"]
[Tue Nov 11 09:25:20.900680 2025] [:error] [pid 53355:tid 53374] [client 192.178.4.101:65398] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKQgIB5X5A3rMc4_nDIHgAAABA"]
[Tue Nov 11 09:25:21.842516 2025] [:error] [pid 59670:tid 59694] [client 192.178.4.101:59648] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKQgak2Cnts0y-hpfpdrQAAAJU"]
[Tue Nov 11 09:25:25.174620 2025] [:error] [pid 53414:tid 53424] [client 192.178.4.101:42442] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKQhQs6pHd_Z5oc1ef7LQAAAQg"]
[Tue Nov 11 09:25:26.868228 2025] [:error] [pid 53414:tid 53417] [client 192.178.4.101:35534] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKQhgs6pHd_Z5oc1ef7LwAAAQE"]
[Tue Nov 11 09:25:27.799743 2025] [:error] [pid 53414:tid 53416] [client 192.178.4.101:38559] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKQhws6pHd_Z5oc1ef7MQAAAQA"]
[Tue Nov 11 09:25:30.375712 2025] [:error] [pid 53356:tid 53393] [client 192.178.4.101:51407] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKQiukdmt0kzjVcUN8yPAAAAEg"]
[Tue Nov 11 09:25:32.251997 2025] [:error] [pid 53355:tid 53358] [client 192.178.4.101:60280] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKQjIB5X5A3rMc4_nDIKAAAAAA"]
[Tue Nov 11 09:25:33.182982 2025] [:error] [pid 53356:tid 53401] [client 192.178.4.101:60884] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKQjekdmt0kzjVcUN8yPgAAAFA"]
[Tue Nov 11 09:25:33.650407 2025] [:error] [pid 59670:tid 59689] [client 192.178.4.101:65104] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKQjak2Cnts0y-hpfpduQAAAJA"]
[Tue Nov 11 09:25:34.119277 2025] [:error] [pid 53356:tid 53392] [client 192.178.4.101:62558] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKQjukdmt0kzjVcUN8yPwAAAEc"]
[Tue Nov 11 09:25:34.583916 2025] [:error] [pid 53449:tid 53471] [client 192.178.4.101:45498] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKQjtpz08j5NoUSzp-qzgAAAVE"]
[Tue Nov 11 09:25:35.052131 2025] [:error] [pid 53356:tid 53400] [client 192.178.4.101:46836] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKQj-kdmt0kzjVcUN8yQQAAAE8"]
[Tue Nov 11 09:25:38.496180 2025] [:error] [pid 53356:tid 53391] [client 192.178.4.101:48602] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKQkukdmt0kzjVcUN8yRgAAAEY"]
[Tue Nov 11 09:25:38.729161 2025] [:error] [pid 53414:tid 53436] [client 192.178.4.101:44523] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKQkgs6pHd_Z5oc1ef7PgAAARQ"]
[Tue Nov 11 09:25:42.028655 2025] [:error] [pid 53355:tid 53368] [client 192.178.4.101:58078] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKQloB5X5A3rMc4_nDIKwAAAAo"]
[Tue Nov 11 09:25:47.469792 2025] [:error] [pid 53414:tid 53427] [client 192.178.4.101:46750] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKQmws6pHd_Z5oc1ef7UgAAAQs"]
[Tue Nov 11 09:33:00.847533 2025] [:error] [pid 59670:tid 59673] [client 192.178.4.101:59803] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKSTKk2Cnts0y-hpfpgmgAAAIA"]
[Tue Nov 11 09:33:01.706017 2025] [:error] [pid 59670:tid 59675] [client 192.178.4.101:43714] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKSTak2Cnts0y-hpfpgnAAAAII"]
[Tue Nov 11 09:33:04.091395 2025] [:error] [pid 53355:tid 53360] [client 192.178.4.101:55740] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKSUIB5X5A3rMc4_nDJtAAAAAI"]
[Tue Nov 11 09:33:05.267024 2025] [:error] [pid 59670:tid 59679] [client 192.178.4.101:65090] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKSUak2Cnts0y-hpfpgoQAAAIY"]
[Tue Nov 11 09:33:06.202943 2025] [:error] [pid 53414:tid 53423] [client 192.178.4.101:54514] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKSUgs6pHd_Z5oc1ef9UQAAAQc"]
[Tue Nov 11 09:33:07.451873 2025] [:error] [pid 53356:tid 53401] [client 192.178.4.101:63524] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKSU-kdmt0kzjVcUN80IAAAAFA"]
[Tue Nov 11 09:33:07.868851 2025] [:error] [pid 53414:tid 53440] [client 192.178.4.101:63760] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKSUws6pHd_Z5oc1ef9UwAAARg"]
[Tue Nov 11 09:33:09.124868 2025] [:error] [pid 53355:tid 53372] [client 192.178.4.101:64575] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKSVYB5X5A3rMc4_nDJtgAAAA4"]
[Tue Nov 11 09:33:10.654784 2025] [:error] [pid 53449:tid 53461] [client 192.178.4.101:44584] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKSVtpz08j5NoUSzp-tGQAAAUc"]
[Tue Nov 11 09:33:11.610921 2025] [:error] [pid 53449:tid 53469] [client 192.178.4.101:47864] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKSV9pz08j5NoUSzp-tGwAAAU8"]
[Tue Nov 11 09:33:12.028378 2025] [:error] [pid 53449:tid 53476] [client 192.178.4.101:45308] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKSWNpz08j5NoUSzp-tHAAAAVY"]
[Tue Nov 11 09:33:12.438113 2025] [:error] [pid 53356:tid 53387] [client 192.178.4.101:60215] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKSWOkdmt0kzjVcUN80JwAAAEI"]
[Tue Nov 11 09:33:13.033574 2025] [:error] [pid 53356:tid 53390] [client 192.178.4.101:54643] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKSWekdmt0kzjVcUN80KAAAAEU"]
[Tue Nov 11 09:33:13.379901 2025] [:error] [pid 53414:tid 53417] [client 192.178.4.101:48584] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKSWQs6pHd_Z5oc1ef9VQAAAQE"]
[Tue Nov 11 09:33:16.916497 2025] [:error] [pid 53355:tid 53366] [client 192.178.4.101:54661] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKSXIB5X5A3rMc4_nDJuwAAAAg"]
[Tue Nov 11 09:33:18.743461 2025] [:error] [pid 53414:tid 53427] [client 192.178.4.101:63280] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKSXgs6pHd_Z5oc1ef9VwAAAQs"]
[Tue Nov 11 09:33:19.683138 2025] [:error] [pid 53414:tid 53429] [client 192.178.4.101:53203] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKSXws6pHd_Z5oc1ef9WAAAAQ0"]
[Tue Nov 11 09:33:22.231653 2025] [:error] [pid 53449:tid 53465] [client 192.178.4.101:46382] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKSYtpz08j5NoUSzp-tJQAAAUs"]
[Tue Nov 11 09:33:22.418208 2025] [:error] [pid 53449:tid 53461] [client 192.178.4.101:64049] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKSYtpz08j5NoUSzp-tJgAAAUc"]
[Tue Nov 11 09:33:23.164071 2025] [:error] [pid 53414:tid 53431] [client 192.178.4.101:65200] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKSYws6pHd_Z5oc1ef9WQAAAQ8"]
[Tue Nov 11 09:33:23.354786 2025] [:error] [pid 53356:tid 53405] [client 192.178.4.101:49454] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKSY-kdmt0kzjVcUN80MgAAAFQ"]
[Tue Nov 11 09:33:24.292514 2025] [:error] [pid 53414:tid 53435] [client 192.178.4.101:57266] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKSZAs6pHd_Z5oc1ef9WgAAARM"]
[Tue Nov 11 09:33:36.195184 2025] [:error] [pid 53449:tid 53470] [client 192.178.4.101:55139] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKScNpz08j5NoUSzp-tNwAAAVA"]
[Tue Nov 11 09:33:39.288040 2025] [:error] [pid 53356:tid 53386] [client 192.178.4.101:36056] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKSc-kdmt0kzjVcUN80SwAAAEE"]
[Tue Nov 11 09:37:08.173896 2025] [:error] [pid 53449:tid 53459] [client 192.178.4.101:60037] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKTRNpz08j5NoUSzp-ulwAAAUU"]
[Tue Nov 11 09:37:10.394063 2025] [:error] [pid 59670:tid 59681] [client 192.178.4.101:35324] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKTRqk2Cnts0y-hpfpiCgAAAIg"]
[Tue Nov 11 09:37:11.885893 2025] [:error] [pid 53355:tid 53359] [client 192.178.4.101:48397] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKTR4B5X5A3rMc4_nDLMAAAAAE"]
[Tue Nov 11 09:37:13.069903 2025] [:error] [pid 53356:tid 53388] [client 192.178.4.101:49028] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKTSekdmt0kzjVcUN81rAAAAEM"]
[Tue Nov 11 09:37:14.577918 2025] [:error] [pid 53356:tid 53400] [client 192.178.4.101:34976] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKTSukdmt0kzjVcUN81sgAAAE8"]
[Tue Nov 11 09:37:15.540848 2025] [:error] [pid 53356:tid 53404] [client 192.178.4.101:65318] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKTS-kdmt0kzjVcUN81swAAAFM"]
[Tue Nov 11 09:37:16.550871 2025] [:error] [pid 59670:tid 59674] [client 192.178.4.101:63765] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKTTKk2Cnts0y-hpfpiDwAAAIE"]
[Tue Nov 11 09:37:19.036895 2025] [:error] [pid 53449:tid 53476] [client 192.178.4.101:64898] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKTT9pz08j5NoUSzp-uogAAAVY"]
[Tue Nov 11 09:37:19.992447 2025] [:error] [pid 59670:tid 59696] [client 192.178.4.101:45037] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKTT6k2Cnts0y-hpfpiEgAAAJc"]
[Tue Nov 11 09:37:21.279055 2025] [:error] [pid 53356:tid 53391] [client 192.178.4.101:50338] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKTUekdmt0kzjVcUN81uQAAAEY"]
[Tue Nov 11 09:37:23.780138 2025] [:error] [pid 59670:tid 59697] [client 192.178.4.101:45512] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKTU6k2Cnts0y-hpfpiHQAAAJg"]
[Tue Nov 11 09:37:24.741419 2025] [:error] [pid 59670:tid 59685] [client 192.178.4.101:62789] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKTVKk2Cnts0y-hpfpiIQAAAIw"]
[Tue Nov 11 09:37:24.998280 2025] [:error] [pid 53449:tid 53466] [client 192.178.4.101:46761] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKTVNpz08j5NoUSzp-uqwAAAUw"]
[Tue Nov 11 09:37:28.314539 2025] [:error] [pid 53355:tid 53374] [client 192.178.4.101:43070] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKTWIB5X5A3rMc4_nDLOgAAABA"]
[Tue Nov 11 09:37:31.677208 2025] [:error] [pid 53449:tid 53457] [client 192.178.4.101:42758] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKTW9pz08j5NoUSzp-utAAAAUM"]
[Tue Nov 11 09:37:35.077843 2025] [:error] [pid 59670:tid 59697] [client 192.178.4.101:56241] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKTX6k2Cnts0y-hpfpiXAAAAJg"]
[Tue Nov 11 09:37:39.279023 2025] [:error] [pid 53414:tid 53425] [client 192.178.4.101:42263] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKTYws6pHd_Z5oc1ef_LAAAAQk"]
[Tue Nov 11 09:37:42.015617 2025] [:error] [pid 53356:tid 53386] [client 192.178.4.101:45442] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKTZukdmt0kzjVcUN81yAAAAEE"]
[Tue Nov 11 09:37:43.564145 2025] [:error] [pid 53449:tid 53475] [client 192.178.4.101:36289] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKTZ9pz08j5NoUSzp-vbwAAAVU"]
[Tue Nov 11 09:37:47.409474 2025] [:error] [pid 53355:tid 53359] [client 192.178.4.101:59757] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKTa4B5X5A3rMc4_nDLQwAAAAE"]
[Tue Nov 11 09:37:49.854654 2025] [:error] [pid 53449:tid 53471] [client 192.178.4.101:55745] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKTbdpz08j5NoUSzp-vcwAAAVE"]
[Tue Nov 11 09:37:52.250083 2025] [:error] [pid 59670:tid 59697] [client 192.178.4.101:60532] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKTcKk2Cnts0y-hpfpiewAAAJg"]
[Tue Nov 11 09:37:58.140144 2025] [:error] [pid 53356:tid 53402] [client 192.178.4.101:60787] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKTdukdmt0kzjVcUN81zwAAAFE"]
[Tue Nov 11 09:37:59.863079 2025] [:error] [pid 53449:tid 53476] [client 192.178.4.101:56698] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKTd9pz08j5NoUSzp-vegAAAVY"]
[Tue Nov 11 09:38:01.262638 2025] [:error] [pid 53449:tid 53475] [client 192.178.4.101:43932] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKTedpz08j5NoUSzp-vfAAAAVU"]
[Tue Nov 11 09:38:25.822995 2025] [:error] [pid 53414:tid 53429] [client 192.178.4.101:59823] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKTkQs6pHd_Z5oc1ef_ngAAAQ0"]
[Tue Nov 11 09:38:27.204573 2025] [:error] [pid 53414:tid 53430] [client 192.178.4.101:37460] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKTkws6pHd_Z5oc1ef_oAAAAQ4"]
[Tue Nov 11 09:38:28.697833 2025] [:error] [pid 53356:tid 53398] [client 192.178.4.101:47310] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKTlOkdmt0kzjVcUN815AAAAE0"]
[Tue Nov 11 09:38:31.639790 2025] [:error] [pid 53449:tid 53474] [client 192.178.4.101:59536] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKTl9pz08j5NoUSzp-vkwAAAVQ"]
[Tue Nov 11 09:38:33.867099 2025] [:error] [pid 53449:tid 53459] [client 192.178.4.101:41684] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKTmdpz08j5NoUSzp-vlwAAAUU"]
[Tue Nov 11 09:38:36.754942 2025] [:error] [pid 53414:tid 53434] [client 192.178.4.101:48789] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKTnAs6pHd_Z5oc1ef_qQAAARI"]
[Tue Nov 11 09:38:39.164524 2025] [:error] [pid 53449:tid 53464] [client 192.178.4.101:37558] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKTn9pz08j5NoUSzp-vmgAAAUo"]
[Tue Nov 11 09:38:43.471037 2025] [:error] [pid 53356:tid 53406] [client 192.178.4.101:57620] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKTo-kdmt0kzjVcUN818AAAAFU"]
[Tue Nov 11 09:38:45.427321 2025] [:error] [pid 53356:tid 53386] [client 192.178.4.101:54542] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKTpekdmt0kzjVcUN818gAAAEE"]
[Tue Nov 11 09:38:46.459583 2025] [:error] [pid 53356:tid 53394] [client 192.178.4.101:55781] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKTpukdmt0kzjVcUN819QAAAEk"]
[Tue Nov 11 09:38:48.484746 2025] [:error] [pid 59670:tid 59692] [client 192.178.4.101:65292] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKTqKk2Cnts0y-hpfpi-wAAAJM"]
[Tue Nov 11 09:38:50.457865 2025] [:error] [pid 53355:tid 53375] [client 192.178.4.101:54335] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKTqoB5X5A3rMc4_nDLmAAAABE"]
[Tue Nov 11 09:38:51.621834 2025] [:error] [pid 53414:tid 53435] [client 192.178.4.101:35948] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKTqws6pHd_Z5oc1ef_sQAAARM"]
[Tue Nov 11 09:38:53.246015 2025] [:error] [pid 53414:tid 53440] [client 192.178.4.101:36628] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKTrQs6pHd_Z5oc1ef_tQAAARg"]
[Tue Nov 11 09:38:57.100666 2025] [:error] [pid 59670:tid 59696] [client 192.178.4.101:57727] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKTsak2Cnts0y-hpfpjBwAAAJc"]
[Tue Nov 11 09:38:59.730937 2025] [:error] [pid 53414:tid 53416] [client 192.178.4.101:48576] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKTsws6pHd_Z5oc1ef_ugAAAQA"]
[Tue Nov 11 09:39:00.743939 2025] [:error] [pid 53355:tid 53362] [client 192.178.4.101:59109] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKTtIB5X5A3rMc4_nDLnAAAAAQ"]
[Tue Nov 11 09:39:01.899582 2025] [:error] [pid 53356:tid 53407] [client 192.178.4.101:51513] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKTtekdmt0kzjVcUN81_QAAAFY"]
[Tue Nov 11 09:39:03.633815 2025] [:error] [pid 53355:tid 53371] [client 192.178.4.101:49972] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKTt4B5X5A3rMc4_nDLoAAAAA0"]
[Tue Nov 11 09:39:04.667254 2025] [:error] [pid 53355:tid 53359] [client 192.178.4.101:54620] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKTuIB5X5A3rMc4_nDLogAAAAE"]
[Tue Nov 11 09:39:08.193595 2025] [:error] [pid 53414:tid 53422] [client 192.178.4.101:63250] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKTvAs6pHd_Z5oc1ef_wQAAAQY"]
[Tue Nov 11 09:39:09.225783 2025] [:error] [pid 53414:tid 53419] [client 192.178.4.101:42135] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKTvQs6pHd_Z5oc1ef_wgAAAQM"]
[Tue Nov 11 09:39:12.363390 2025] [:error] [pid 59670:tid 59695] [client 192.178.4.101:59722] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKTwKk2Cnts0y-hpfpjJQAAAJY"]
[Tue Nov 11 09:39:13.368128 2025] [:error] [pid 53449:tid 53478] [client 192.178.4.101:55258] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKTwdpz08j5NoUSzp-vtQAAAVg"]
[Tue Nov 11 09:39:14.477527 2025] [:error] [pid 53356:tid 53393] [client 192.178.4.101:57755] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKTwukdmt0kzjVcUN82AQAAAEg"]
[Tue Nov 11 09:39:15.508600 2025] [:error] [pid 53356:tid 53388] [client 192.178.4.101:47190] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKTw-kdmt0kzjVcUN82BAAAAEM"]
[Tue Nov 11 09:39:17.754690 2025] [:error] [pid 59670:tid 59686] [client 192.178.4.101:51426] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKTxak2Cnts0y-hpfpjNwAAAI0"]
[Tue Nov 11 09:39:18.321280 2025] [:error] [pid 53356:tid 53399] [client 192.178.4.101:50532] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKTxukdmt0kzjVcUN82BwAAAE4"]
[Tue Nov 11 09:39:20.260730 2025] [:error] [pid 59670:tid 59688] [client 192.178.4.101:34960] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKTyKk2Cnts0y-hpfpjQAAAAI8"]
[Tue Nov 11 09:39:20.447766 2025] [:error] [pid 53355:tid 53367] [client 192.178.4.101:49944] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKTyIB5X5A3rMc4_nDLrgAAAAk"]
[Tue Nov 11 09:39:22.705771 2025] [:error] [pid 53414:tid 53435] [client 192.178.4.101:57723] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKTygs6pHd_Z5oc1ef_ygAAARM"]
[Tue Nov 11 09:39:23.547227 2025] [:error] [pid 53356:tid 53397] [client 192.178.4.101:49474] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKTy-kdmt0kzjVcUN82DAAAAEw"]
[Tue Nov 11 09:40:01.945675 2025] [:error] [pid 53414:tid 53417] [client 192.178.4.101:47137] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKT8Qs6pHd_Z5oc1ecABQAAAQE"]
[Tue Nov 11 09:40:05.505005 2025] [:error] [pid 53356:tid 53408] [client 192.178.4.101:51229] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKT9ekdmt0kzjVcUN82MwAAAFc"]
[Tue Nov 11 09:40:06.874144 2025] [:error] [pid 53356:tid 53385] [client 192.178.4.101:47016] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKT9ukdmt0kzjVcUN82NQAAAEA"]
[Tue Nov 11 09:40:13.146883 2025] [:error] [pid 53449:tid 53467] [client 192.178.4.101:53999] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKT_dpz08j5NoUSzp-v8QAAAU0"]
[Tue Nov 11 09:40:14.158873 2025] [:error] [pid 53356:tid 53396] [client 192.178.4.101:44041] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKT_ukdmt0kzjVcUN82OQAAAEs"]
[Tue Nov 11 09:40:14.344844 2025] [:error] [pid 59670:tid 59697] [client 192.178.4.101:53604] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKT_qk2Cnts0y-hpfpjxgAAAJg"]
[Tue Nov 11 09:40:16.365150 2025] [:error] [pid 59670:tid 59674] [client 192.178.4.101:51752] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKUAKk2Cnts0y-hpfpjyQAAAIE"]
[Tue Nov 11 09:40:17.351591 2025] [:error] [pid 59670:tid 59673] [client 192.178.4.101:60055] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKUAak2Cnts0y-hpfpjygAAAIA"]
[Tue Nov 11 09:40:19.075915 2025] [:error] [pid 59670:tid 59693] [client 192.178.4.101:54918] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKUA6k2Cnts0y-hpfpjzAAAAJQ"]
[Tue Nov 11 09:40:20.147061 2025] [:error] [pid 53356:tid 53394] [client 192.178.4.101:39315] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKUBOkdmt0kzjVcUN82PgAAAEk"]
[Tue Nov 11 09:40:20.624987 2025] [:error] [pid 59670:tid 59677] [client 192.178.4.101:58967] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKUBKk2Cnts0y-hpfpjzgAAAIQ"]
[Tue Nov 11 09:40:23.703019 2025] [:error] [pid 53414:tid 53437] [client 192.178.4.101:46967] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKUBws6pHd_Z5oc1ecAEAAAARU"]
[Tue Nov 11 09:40:24.661993 2025] [:error] [pid 53449:tid 53469] [client 192.178.4.101:48441] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKUCNpz08j5NoUSzp-v-wAAAU8"]
[Tue Nov 11 09:40:25.670025 2025] [:error] [pid 53414:tid 53434] [client 192.178.4.101:50744] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKUCQs6pHd_Z5oc1ecAFQAAARI"]
[Tue Nov 11 09:40:29.388839 2025] [:error] [pid 59670:tid 59689] [client 192.178.4.101:47003] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKUDak2Cnts0y-hpfpj2gAAAJA"]
[Tue Nov 11 09:40:31.653761 2025] [:error] [pid 53449:tid 53466] [client 192.178.4.101:49125] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKUD9pz08j5NoUSzp-wGAAAAUw"]
[Tue Nov 11 09:40:32.686565 2025] [:error] [pid 53414:tid 53435] [client 192.178.4.101:52996] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKUEAs6pHd_Z5oc1ecAHQAAARM"]
[Tue Nov 11 09:40:33.720058 2025] [:error] [pid 53414:tid 53417] [client 192.178.4.101:46818] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKUEQs6pHd_Z5oc1ecAIAAAAQE"]
[Tue Nov 11 09:40:53.765471 2025] [:error] [pid 53356:tid 53397] [client 192.178.4.101:41682] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKUJekdmt0kzjVcUN82YAAAAEw"]
[Tue Nov 11 10:01:22.024630 2025] [:error] [pid 53449:tid 53475] [client 165.227.108.173:39334] [client 165.227.108.173] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paramountbaldivis.com"] [uri "/.git/config"] [unique_id "aRKY8tpz08j5NoUSzp-4FgAAAVU"]
[Tue Nov 11 10:03:43.352561 2025] [:error] [pid 53414:tid 53440] [client 161.97.137.114:60993] [client 161.97.137.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 161.97.137.114, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRKZfws6pHd_Z5oc1ecH2AAAARg"]
[Tue Nov 11 10:03:45.601637 2025] [:error] [pid 59670:tid 59673] [client 161.97.137.114:61196] [client 161.97.137.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 161.97.137.114, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRKZgak2Cnts0y-hpfpuGgAAAIA"]
[Tue Nov 11 10:04:43.053248 2025] [:error] [pid 53449:tid 53460] [client 192.178.4.101:43886] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKZu9pz08j5NoUSzp-5CQAAAUY"]
[Tue Nov 11 10:04:43.819388 2025] [:error] [pid 53449:tid 53477] [client 192.178.4.101:62403] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKZu9pz08j5NoUSzp-5DAAAAVc"]
[Tue Nov 11 10:04:45.209468 2025] [:error] [pid 59670:tid 59693] [client 192.178.4.101:53486] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKZvak2Cnts0y-hpfpubwAAAJQ"]
[Tue Nov 11 10:04:46.829393 2025] [:error] [pid 53449:tid 53467] [client 192.178.4.101:55998] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKZvtpz08j5NoUSzp-5IQAAAU0"]
[Tue Nov 11 10:04:47.580922 2025] [:error] [pid 53449:tid 53454] [client 192.178.4.101:54020] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKZv9pz08j5NoUSzp-5LgAAAUA"]
[Tue Nov 11 10:04:49.154111 2025] [:error] [pid 53449:tid 53455] [client 192.178.4.101:45663] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKZwdpz08j5NoUSzp-5MQAAAUE"]
[Tue Nov 11 10:04:49.893258 2025] [:error] [pid 53414:tid 53422] [client 192.178.4.101:57645] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKZwQs6pHd_Z5oc1ecICwAAAQY"]
[Tue Nov 11 10:04:52.050740 2025] [:error] [pid 53449:tid 53457] [client 192.178.4.101:48684] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKZxNpz08j5NoUSzp-5NAAAAUM"]
[Tue Nov 11 10:04:54.377165 2025] [:error] [pid 53355:tid 53367] [client 192.178.4.101:41385] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKZxoB5X5A3rMc4_nDTHQAAAAk"]
[Tue Nov 11 10:05:10.620254 2025] [:error] [pid 53414:tid 53427] [client 192.178.4.101:62011] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKZ1gs6pHd_Z5oc1ecIHwAAAQs"]
[Tue Nov 11 10:05:19.903382 2025] [:error] [pid 53355:tid 53359] [client 192.178.4.101:51698] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKZ34B5X5A3rMc4_nDTOwAAAAE"]
[Tue Nov 11 10:05:21.725676 2025] [:error] [pid 59670:tid 59688] [client 192.178.4.101:55400] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKZ4ak2Cnts0y-hpfpu0AAAAI8"]
[Tue Nov 11 10:05:26.638275 2025] [:error] [pid 59670:tid 59683] [client 192.178.4.101:42166] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKZ5qk2Cnts0y-hpfpu1gAAAIo"]
[Tue Nov 11 10:05:30.525060 2025] [:error] [pid 59670:tid 59677] [client 192.178.4.101:47775] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKZ6qk2Cnts0y-hpfpu2AAAAIQ"]
[Tue Nov 11 10:05:31.269064 2025] [:error] [pid 53414:tid 53430] [client 192.178.4.101:42637] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKZ6ws6pHd_Z5oc1ecINQAAAQ4"]
[Tue Nov 11 10:07:36.003473 2025] [:error] [pid 59670:tid 59692] [client 192.178.4.101:41314] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKaaKk2Cnts0y-hpfpvpwAAAJM"]
[Tue Nov 11 10:07:36.849199 2025] [:error] [pid 53449:tid 53471] [client 192.178.4.101:48322] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKaaNpz08j5NoUSzp-6FQAAAVE"]
[Tue Nov 11 10:07:38.553992 2025] [:error] [pid 53449:tid 53469] [client 192.178.4.101:52032] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKaatpz08j5NoUSzp-6GgAAAU8"]
[Tue Nov 11 10:07:46.983449 2025] [:error] [pid 53449:tid 53477] [client 192.178.4.101:53673] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKactpz08j5NoUSzp-6IwAAAVc"]
[Tue Nov 11 10:07:47.917408 2025] [:error] [pid 53355:tid 53361] [client 192.178.4.101:43943] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKac4B5X5A3rMc4_nDT9gAAAAM"]
[Tue Nov 11 10:07:49.781325 2025] [:error] [pid 59670:tid 59691] [client 192.178.4.101:36086] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKadak2Cnts0y-hpfpvywAAAJI"]
[Tue Nov 11 10:07:51.196562 2025] [:error] [pid 59670:tid 59678] [client 192.178.4.101:43188] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKad6k2Cnts0y-hpfpvzgAAAIU"]
[Tue Nov 11 10:07:53.295051 2025] [:error] [pid 53449:tid 53469] [client 192.178.4.101:57831] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKaedpz08j5NoUSzp-6MgAAAU8"]
[Tue Nov 11 10:07:54.066766 2025] [:error] [pid 59670:tid 59692] [client 192.178.4.101:60627] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKaeqk2Cnts0y-hpfpv0QAAAJM"]
[Tue Nov 11 10:08:08.248808 2025] [:error] [pid 59670:tid 59675] [client 192.178.4.101:41858] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKaiKk2Cnts0y-hpfpv2gAAAII"]
[Tue Nov 11 10:08:14.518754 2025] [:error] [pid 53449:tid 53465] [client 192.178.4.101:63419] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKajtpz08j5NoUSzp-6RwAAAUs"]
[Tue Nov 11 10:08:15.952904 2025] [:error] [pid 53355:tid 53367] [client 192.178.4.101:61160] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKaj4B5X5A3rMc4_nDUEAAAAAk"]
[Tue Nov 11 10:08:22.347242 2025] [:error] [pid 53449:tid 53476] [client 192.178.4.101:42677] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKaltpz08j5NoUSzp-6UQAAAVY"]
[Tue Nov 11 10:09:24.529571 2025] [:error] [pid 53356:tid 53404] [client 192.178.4.101:44094] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKa1Okdmt0kzjVcUN8-uwAAAFM"]
[Tue Nov 11 10:09:25.286614 2025] [:error] [pid 59670:tid 59690] [client 192.178.4.101:50499] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKa1ak2Cnts0y-hpfpwPAAAAJE"]
[Tue Nov 11 10:09:26.801442 2025] [:error] [pid 53449:tid 53462] [client 192.178.4.101:58849] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKa1tpz08j5NoUSzp-6pAAAAUg"]
[Tue Nov 11 10:09:28.239634 2025] [:error] [pid 53449:tid 53471] [client 192.178.4.101:52325] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKa2Npz08j5NoUSzp-6pQAAAVE"]
[Tue Nov 11 10:09:31.279616 2025] [:error] [pid 53356:tid 53398] [client 192.178.4.101:47365] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKa2-kdmt0kzjVcUN8-wAAAAE0"]
[Tue Nov 11 10:09:33.454427 2025] [:error] [pid 53449:tid 53473] [client 192.178.4.101:57438] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKa3dpz08j5NoUSzp-6rwAAAVM"]
[Tue Nov 11 10:09:34.738911 2025] [:error] [pid 53449:tid 53456] [client 192.178.4.101:46183] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKa3tpz08j5NoUSzp-6sAAAAUI"]
[Tue Nov 11 10:09:36.244431 2025] [:error] [pid 53355:tid 53377] [client 192.178.4.101:58874] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKa4IB5X5A3rMc4_nDUYwAAABM"]
[Tue Nov 11 10:09:37.181574 2025] [:error] [pid 53355:tid 53378] [client 192.178.4.101:61234] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKa4YB5X5A3rMc4_nDUZQAAABQ"]
[Tue Nov 11 10:09:37.684618 2025] [:error] [pid 53449:tid 53463] [client 192.178.4.101:55634] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKa4dpz08j5NoUSzp-6sgAAAUk"]
[Tue Nov 11 10:09:38.398478 2025] [:error] [pid 59670:tid 59691] [client 192.178.4.101:64620] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKa4qk2Cnts0y-hpfpwUQAAAJI"]
[Tue Nov 11 10:09:39.010562 2025] [:error] [pid 59670:tid 59673] [client 192.178.4.101:60462] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKa46k2Cnts0y-hpfpwUgAAAIA"]
[Tue Nov 11 10:09:41.469128 2025] [:error] [pid 53414:tid 53438] [client 192.178.4.101:48731] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKa5Qs6pHd_Z5oc1ecJYAAAARY"]
[Tue Nov 11 10:09:45.332896 2025] [:error] [pid 59670:tid 59687] [client 192.178.4.101:61300] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKa6ak2Cnts0y-hpfpwYAAAAI4"]
[Tue Nov 11 10:09:45.870524 2025] [:error] [pid 59670:tid 59676] [client 192.178.4.101:44712] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKa6ak2Cnts0y-hpfpwZQAAAIM"]
[Tue Nov 11 10:09:46.269997 2025] [:error] [pid 59670:tid 59675] [client 192.178.4.101:63634] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKa6qk2Cnts0y-hpfpwZwAAAII"]
[Tue Nov 11 10:09:46.876710 2025] [:error] [pid 59670:tid 59692] [client 192.178.4.101:48815] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKa6qk2Cnts0y-hpfpwaAAAAJM"]
[Tue Nov 11 10:09:47.205897 2025] [:error] [pid 53414:tid 53416] [client 192.178.4.101:37043] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKa6ws6pHd_Z5oc1ecJrQAAAQA"]
[Tue Nov 11 10:09:47.808675 2025] [:error] [pid 59670:tid 59679] [client 192.178.4.101:38935] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKa66k2Cnts0y-hpfpwagAAAIY"]
[Tue Nov 11 10:09:48.765972 2025] [:error] [pid 53449:tid 53474] [client 192.178.4.101:45276] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKa7Npz08j5NoUSzp-6ugAAAVQ"]
[Tue Nov 11 10:09:50.084586 2025] [:error] [pid 59670:tid 59677] [client 192.178.4.101:65462] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKa7qk2Cnts0y-hpfpwjAAAAIQ"]
[Tue Nov 11 10:09:51.308944 2025] [:error] [pid 53355:tid 53380] [client 192.178.4.101:54843] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKa74B5X5A3rMc4_nDUdQAAABY"]
[Tue Nov 11 10:09:51.912211 2025] [:error] [pid 59670:tid 59683] [client 192.178.4.101:41079] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKa76k2Cnts0y-hpfpwjwAAAIo"]
[Tue Nov 11 10:10:15.784358 2025] [:error] [pid 53355:tid 53379] [client 192.178.4.101:47703] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKbB4B5X5A3rMc4_nDUkQAAABU"]
[Tue Nov 11 10:10:17.855426 2025] [:error] [pid 53449:tid 53458] [client 192.178.4.101:62269] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKbCdpz08j5NoUSzp-63AAAAUQ"]
[Tue Nov 11 10:10:19.275832 2025] [:error] [pid 53355:tid 53367] [client 192.178.4.101:55649] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKbC4B5X5A3rMc4_nDUlAAAAAk"]
[Tue Nov 11 10:10:20.211684 2025] [:error] [pid 53356:tid 53400] [client 192.178.4.101:42147] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKbDOkdmt0kzjVcUN8-5wAAAE8"]
[Tue Nov 11 10:10:21.149187 2025] [:error] [pid 53449:tid 53462] [client 192.178.4.101:53494] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKbDdpz08j5NoUSzp-64AAAAUg"]
[Tue Nov 11 10:10:41.896974 2025] [:error] [pid 59670:tid 59688] [client 192.178.4.101:35238] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKbIak2Cnts0y-hpfpw5gAAAI8"]
[Tue Nov 11 10:10:43.804734 2025] [:error] [pid 53449:tid 53460] [client 192.178.4.101:65094] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKbI9pz08j5NoUSzp-68gAAAUY"]
[Tue Nov 11 10:10:44.957723 2025] [:error] [pid 53356:tid 53403] [client 192.178.4.101:55818] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKbJOkdmt0kzjVcUN8-9AAAAFI"]
[Tue Nov 11 10:10:46.846132 2025] [:error] [pid 53449:tid 53457] [client 192.178.4.101:50906] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKbJtpz08j5NoUSzp-6-AAAAUM"]
[Tue Nov 11 10:13:51.679629 2025] [:error] [pid 59670:tid 59676] [client 192.178.4.101:49154] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKb36k2Cnts0y-hpfpx-QAAAIM"]
[Tue Nov 11 10:15:56.222269 2025] [:error] [pid 53355:tid 53366] [client 165.227.108.173:58776] [client 165.227.108.173] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paramountbaldivis.com"] [uri "/.git/config"] [unique_id "aRKcXIB5X5A3rMc4_nDVygAAAAg"]
[Tue Nov 11 10:16:42.160247 2025] [:error] [pid 59670:tid 59688] [client 192.178.4.101:45571] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKciqk2Cnts0y-hpfpznQAAAI8"]
[Tue Nov 11 10:16:43.157287 2025] [:error] [pid 53449:tid 53477] [client 192.178.4.101:52403] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKci9pz08j5NoUSzp-9PQAAAVc"]
[Tue Nov 11 10:16:44.683926 2025] [:error] [pid 59670:tid 59686] [client 192.178.4.101:49843] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKcjKk2Cnts0y-hpfpzoAAAAI0"]
[Tue Nov 11 10:16:46.193798 2025] [:error] [pid 53414:tid 53428] [client 192.178.4.101:60393] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKcjgs6pHd_Z5oc1ecLmAAAAQw"]
[Tue Nov 11 10:16:46.956016 2025] [:error] [pid 59670:tid 59677] [client 192.178.4.101:45403] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKcjqk2Cnts0y-hpfpzpQAAAIQ"]
[Tue Nov 11 10:16:47.695621 2025] [:error] [pid 53356:tid 53404] [client 192.178.4.101:64145] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKcj-kdmt0kzjVcUN9ATQAAAFM"]
[Tue Nov 11 10:16:48.444976 2025] [:error] [pid 53449:tid 53470] [client 192.178.4.101:54171] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKckNpz08j5NoUSzp-9QgAAAVA"]
[Tue Nov 11 10:16:51.475104 2025] [:error] [pid 53414:tid 53427] [client 192.178.4.101:55237] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKckws6pHd_Z5oc1ecLwQAAAQs"]
[Tue Nov 11 10:16:53.571694 2025] [:error] [pid 59670:tid 59680] [client 192.178.4.101:46814] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKclak2Cnts0y-hpfpzqgAAAIc"]
[Tue Nov 11 10:16:54.293833 2025] [:error] [pid 59670:tid 59682] [client 192.178.4.101:35048] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKclqk2Cnts0y-hpfpzqwAAAIk"]
[Tue Nov 11 10:16:56.927140 2025] [:error] [pid 53355:tid 53366] [client 192.178.4.101:36811] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKcmIB5X5A3rMc4_nDWDAAAAAg"]
[Tue Nov 11 10:16:57.207627 2025] [:error] [pid 53356:tid 53388] [client 192.178.4.101:38618] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKcmekdmt0kzjVcUN9AXgAAAEM"]
[Tue Nov 11 10:16:57.934246 2025] [:error] [pid 53355:tid 53380] [client 192.178.4.101:46316] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKcmYB5X5A3rMc4_nDWDgAAABY"]
[Tue Nov 11 10:16:58.651040 2025] [:error] [pid 59670:tid 59673] [client 192.178.4.101:45793] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKcmqk2Cnts0y-hpfpzsQAAAIA"]
[Tue Nov 11 10:16:59.359914 2025] [:error] [pid 53356:tid 53386] [client 192.178.4.101:38172] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKcm-kdmt0kzjVcUN9AXwAAAEE"]
[Tue Nov 11 10:17:00.077392 2025] [:error] [pid 53449:tid 53458] [client 192.178.4.101:39689] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKcnNpz08j5NoUSzp-9SgAAAUQ"]
[Tue Nov 11 10:17:04.017560 2025] [:error] [pid 53449:tid 53472] [client 192.178.4.101:48706] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKcoNpz08j5NoUSzp-9VgAAAVI"]
[Tue Nov 11 10:17:04.879620 2025] [:error] [pid 53356:tid 53396] [client 192.178.4.101:36062] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKcoOkdmt0kzjVcUN9AkQAAAEs"]
[Tue Nov 11 10:17:05.840390 2025] [:error] [pid 53355:tid 53374] [client 192.178.4.101:45944] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKcoYB5X5A3rMc4_nDWGwAAABA"]
[Tue Nov 11 10:25:41.677703 2025] [:error] [pid 59670:tid 59680] [client 192.178.4.101:40951] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKepak2Cnts0y-hpfp3VwAAAIc"]
[Tue Nov 11 10:25:43.993137 2025] [:error] [pid 53414:tid 53417] [client 192.178.4.101:38304] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKepws6pHd_Z5oc1ecOUAAAAQE"]
[Tue Nov 11 10:25:48.192532 2025] [:error] [pid 53449:tid 53460] [client 192.178.4.101:63412] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKerNpz08j5NoUSzp_ABAAAAUY"]
[Tue Nov 11 10:25:51.017634 2025] [:error] [pid 53355:tid 53379] [client 192.178.4.101:51600] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKer4B5X5A3rMc4_nDYcwAAABU"]
[Tue Nov 11 10:25:53.826464 2025] [:error] [pid 59670:tid 59696] [client 192.178.4.101:38822] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKesak2Cnts0y-hpfp3aQAAAJc"]
[Tue Nov 11 10:29:43.587631 2025] [:error] [pid 53414:tid 53430] [client 192.178.4.101:40414] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKflws6pHd_Z5oc1ecPZwAAAQ4"]
[Tue Nov 11 10:29:51.104783 2025] [:error] [pid 53355:tid 53362] [client 192.178.4.101:59524] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKfn4B5X5A3rMc4_nDZnAAAAAQ"]
[Tue Nov 11 10:29:56.312550 2025] [:error] [pid 53449:tid 53469] [client 192.178.4.101:61483] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKfpNpz08j5NoUSzp_BaQAAAU8"]
[Tue Nov 11 10:29:57.754028 2025] [:error] [pid 53414:tid 53416] [client 192.178.4.101:50116] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKfpQs6pHd_Z5oc1ecPfwAAAQA"]
[Tue Nov 11 10:30:05.089747 2025] [:error] [pid 53449:tid 53472] [client 192.178.4.101:51959] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKfrdpz08j5NoUSzp_BdAAAAVI"]
[Tue Nov 11 10:30:09.756360 2025] [:error] [pid 53355:tid 53365] [client 192.178.4.101:57251] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKfsYB5X5A3rMc4_nDZowAAAAc"]
[Tue Nov 11 10:30:15.925566 2025] [:error] [pid 53449:tid 53457] [client 192.178.4.101:47114] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKft9pz08j5NoUSzp_BlQAAAUM"]
[Tue Nov 11 10:30:18.200289 2025] [:error] [pid 53414:tid 53426] [client 192.178.4.101:40041] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKfugs6pHd_Z5oc1ecPqwAAAQo"]
[Tue Nov 11 10:30:22.617175 2025] [:error] [pid 53356:tid 53396] [client 192.178.4.101:61150] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKfvukdmt0kzjVcUN9EMwAAAEs"]
[Tue Nov 11 10:30:25.479903 2025] [:error] [pid 53356:tid 53398] [client 192.178.4.101:64022] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKfwekdmt0kzjVcUN9ENwAAAE0"]
[Tue Nov 11 10:30:29.134573 2025] [:error] [pid 53355:tid 53367] [client 192.178.4.101:38306] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKfxYB5X5A3rMc4_nDZyQAAAAk"]
[Tue Nov 11 10:30:32.039642 2025] [:error] [pid 53355:tid 53377] [client 192.178.4.101:58475] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKfyIB5X5A3rMc4_nDZzQAAABM"]
[Tue Nov 11 10:30:35.635354 2025] [:error] [pid 53355:tid 53365] [client 192.178.4.101:58495] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKfy4B5X5A3rMc4_nDZ0AAAAAc"]
[Tue Nov 11 10:31:41.562644 2025] [:error] [pid 53414:tid 53425] [client 192.178.4.101:59122] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKgDQs6pHd_Z5oc1ecQEwAAAQk"]
[Tue Nov 11 10:31:44.629413 2025] [:error] [pid 53449:tid 53462] [client 192.178.4.101:50101] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKgENpz08j5NoUSzp_CEAAAAUg"]
[Tue Nov 11 10:31:52.943434 2025] [:error] [pid 59670:tid 59697] [client 192.178.4.101:45099] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKgGKk2Cnts0y-hpfp6nQAAAJg"]
[Tue Nov 11 10:31:55.712605 2025] [:error] [pid 53449:tid 53477] [client 192.178.4.101:42550] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKgG9pz08j5NoUSzp_CFwAAAVc"]
[Tue Nov 11 10:32:04.827900 2025] [:error] [pid 59670:tid 59686] [client 192.178.4.101:48641] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKgJKk2Cnts0y-hpfp6qgAAAI0"]
[Tue Nov 11 10:32:06.837688 2025] [:error] [pid 53356:tid 53404] [client 192.178.4.101:61249] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKgJukdmt0kzjVcUN9EtwAAAFM"]
[Tue Nov 11 10:32:11.688792 2025] [:error] [pid 53355:tid 53365] [client 192.178.4.101:39743] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKgK4B5X5A3rMc4_nDaQAAAAAc"]
[Tue Nov 11 10:32:13.999127 2025] [:error] [pid 59670:tid 59685] [client 192.178.4.101:60338] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKgLak2Cnts0y-hpfp6uQAAAIw"]
[Tue Nov 11 10:32:17.811654 2025] [:error] [pid 53414:tid 53436] [client 192.178.4.101:41383] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKgMQs6pHd_Z5oc1ecQNgAAARQ"]
[Tue Nov 11 10:32:20.643108 2025] [:error] [pid 53356:tid 53399] [client 192.178.4.101:44908] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKgNOkdmt0kzjVcUN9EwgAAAE4"]
[Tue Nov 11 10:32:24.934638 2025] [:error] [pid 53355:tid 53381] [client 192.178.4.101:61795] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKgOIB5X5A3rMc4_nDaTAAAABc"]
[Tue Nov 11 10:32:28.822533 2025] [:error] [pid 59670:tid 59673] [client 192.178.4.101:37475] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKgPKk2Cnts0y-hpfp63QAAAIA"]
[Tue Nov 11 10:32:31.307653 2025] [:error] [pid 53356:tid 53404] [client 192.178.4.101:57216] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKgP-kdmt0kzjVcUN9E0QAAAFM"]
[Tue Nov 11 10:33:33.996202 2025] [:error] [pid 53355:tid 53364] [client 192.178.4.101:58780] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKgfYB5X5A3rMc4_nDanQAAAAY"]
[Tue Nov 11 10:33:36.553847 2025] [:error] [pid 59670:tid 59697] [client 192.178.4.101:44338] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKggKk2Cnts0y-hpfp7XQAAAJg"]
[Tue Nov 11 10:33:38.880870 2025] [:error] [pid 53414:tid 53436] [client 192.178.4.101:35114] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKgggs6pHd_Z5oc1ecQnAAAARQ"]
[Tue Nov 11 10:33:40.534538 2025] [:error] [pid 53449:tid 53461] [client 192.178.4.101:35271] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKghNpz08j5NoUSzp_C6AAAAUc"]
[Tue Nov 11 10:33:50.104423 2025] [:error] [pid 53449:tid 53458] [client 192.178.4.101:59372] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKgjtpz08j5NoUSzp_C8gAAAUQ"]
[Tue Nov 11 10:33:52.048531 2025] [:error] [pid 53414:tid 53433] [client 192.178.4.101:63787] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKgkAs6pHd_Z5oc1ecQpgAAARE"]
[Tue Nov 11 10:33:53.178388 2025] [:error] [pid 53414:tid 53432] [client 192.178.4.101:46280] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKgkQs6pHd_Z5oc1ecQqgAAARA"]
[Tue Nov 11 10:33:54.442433 2025] [:error] [pid 53356:tid 53405] [client 192.178.4.101:39508] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKgkukdmt0kzjVcUN9FdAAAAFQ"]
[Tue Nov 11 10:33:55.643079 2025] [:error] [pid 53449:tid 53467] [client 192.178.4.101:57998] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKgk9pz08j5NoUSzp_C_wAAAU0"]
[Tue Nov 11 10:33:56.831935 2025] [:error] [pid 53355:tid 53378] [client 192.178.4.101:51114] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKglIB5X5A3rMc4_nDaqwAAABQ"]
[Tue Nov 11 10:33:57.949993 2025] [:error] [pid 53355:tid 53375] [client 192.178.4.101:49224] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKglYB5X5A3rMc4_nDarQAAABE"]
[Tue Nov 11 10:34:05.296070 2025] [:error] [pid 53356:tid 53407] [client 192.178.4.101:38536] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKgnekdmt0kzjVcUN9FfwAAAFY"]
[Tue Nov 11 10:34:11.290599 2025] [:error] [pid 53449:tid 53460] [client 192.178.4.101:42016] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKgo9pz08j5NoUSzp_DEAAAAUY"]
[Tue Nov 11 10:34:13.919664 2025] [:error] [pid 53356:tid 53399] [client 192.178.4.101:48723] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKgpekdmt0kzjVcUN9FlQAAAE4"]
[Tue Nov 11 10:34:16.742450 2025] [:error] [pid 53356:tid 53401] [client 192.178.4.101:44274] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKgqOkdmt0kzjVcUN9FogAAAFA"]
[Tue Nov 11 10:34:18.972555 2025] [:error] [pid 59670:tid 59693] [client 192.178.4.101:64214] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKgqqk2Cnts0y-hpfp7gAAAAJQ"]
[Tue Nov 11 10:34:20.018280 2025] [:error] [pid 53449:tid 53476] [client 192.178.4.101:53080] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKgrNpz08j5NoUSzp_DPAAAAVY"]
[Tue Nov 11 10:34:23.210658 2025] [:error] [pid 53355:tid 53368] [client 192.178.4.101:54569] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKgr4B5X5A3rMc4_nDazgAAAAo"]
[Tue Nov 11 10:34:24.540883 2025] [:error] [pid 53355:tid 53380] [client 192.178.4.101:35360] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKgsIB5X5A3rMc4_nDa0gAAABY"]
[Tue Nov 11 10:34:26.998638 2025] [:error] [pid 53356:tid 53404] [client 192.178.4.101:37596] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKgsukdmt0kzjVcUN9FrwAAAFM"]
[Tue Nov 11 10:34:28.503660 2025] [:error] [pid 53449:tid 53472] [client 192.178.4.101:65409] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKgtNpz08j5NoUSzp_DSgAAAVI"]
[Tue Nov 11 10:34:54.696966 2025] [:error] [pid 59670:tid 59685] [client 192.178.4.101:43148] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKgzqk2Cnts0y-hpfp7xQAAAIw"]
[Tue Nov 11 10:34:57.287502 2025] [:error] [pid 53449:tid 53458] [client 192.178.4.101:53213] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKg0dpz08j5NoUSzp_DigAAAUQ"]
[Tue Nov 11 10:34:59.397645 2025] [:error] [pid 53356:tid 53397] [client 192.178.4.101:46788] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKg0-kdmt0kzjVcUN9FzAAAAEw"]
[Tue Nov 11 10:35:01.327397 2025] [:error] [pid 53356:tid 53389] [client 192.178.4.101:60445] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKg1ekdmt0kzjVcUN9F0QAAAEQ"]
[Tue Nov 11 10:35:05.780581 2025] [:error] [pid 53449:tid 53475] [client 192.178.4.101:61157] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKg2dpz08j5NoUSzp_DnQAAAVU"]
[Tue Nov 11 10:35:07.190220 2025] [:error] [pid 53449:tid 53461] [client 192.178.4.101:61343] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKg29pz08j5NoUSzp_DnwAAAUc"]
[Tue Nov 11 10:35:10.017961 2025] [:error] [pid 53414:tid 53428] [client 192.178.4.101:61014] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKg3gs6pHd_Z5oc1ecQ9wAAAQw"]
[Tue Nov 11 10:35:12.057922 2025] [:error] [pid 53414:tid 53435] [client 192.178.4.101:42003] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKg4As6pHd_Z5oc1ecQ-AAAARM"]
[Tue Nov 11 10:35:14.678120 2025] [:error] [pid 53414:tid 53438] [client 192.178.4.101:40393] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKg4gs6pHd_Z5oc1ecQ-wAAARY"]
[Tue Nov 11 10:35:17.335690 2025] [:error] [pid 53356:tid 53407] [client 192.178.4.101:45660] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKg5ekdmt0kzjVcUN9F3AAAAFY"]
[Tue Nov 11 10:35:19.315524 2025] [:error] [pid 53414:tid 53425] [client 192.178.4.101:48486] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKg5ws6pHd_Z5oc1ecQ_QAAAQk"]
[Tue Nov 11 10:35:20.057069 2025] [:error] [pid 53414:tid 53437] [client 192.178.4.101:61368] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKg6As6pHd_Z5oc1ecQ_gAAARU"]
[Tue Nov 11 10:35:21.294947 2025] [:error] [pid 53355:tid 53372] [client 192.178.4.101:57640] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKg6YB5X5A3rMc4_nDbFgAAAA4"]
[Tue Nov 11 10:35:23.293772 2025] [:error] [pid 53355:tid 53369] [client 192.178.4.101:43456] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKg64B5X5A3rMc4_nDbGgAAAAs"]
[Tue Nov 11 10:35:25.151151 2025] [:error] [pid 59670:tid 59691] [client 192.178.4.101:48256] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKg7ak2Cnts0y-hpfp73wAAAJI"]
[Tue Nov 11 10:36:47.617074 2025] [:error] [pid 59670:tid 59678] [client 192.178.4.101:52133] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKhP6k2Cnts0y-hpfp8agAAAIU"]
[Tue Nov 11 10:36:49.878133 2025] [:error] [pid 53449:tid 53470] [client 192.178.4.101:51754] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKhQdpz08j5NoUSzp_EOQAAAVA"]
[Tue Nov 11 10:36:51.300965 2025] [:error] [pid 53355:tid 53379] [client 192.178.4.101:58069] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKhQ4B5X5A3rMc4_nDbdAAAABU"]
[Tue Nov 11 10:36:54.889763 2025] [:error] [pid 53355:tid 53372] [client 192.178.4.101:44822] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKhRoB5X5A3rMc4_nDbeAAAAA4"]
[Tue Nov 11 10:36:56.452070 2025] [:error] [pid 53449:tid 53456] [client 192.178.4.101:43829] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKhSNpz08j5NoUSzp_EcgAAAUI"]
[Tue Nov 11 10:36:57.920623 2025] [:error] [pid 53414:tid 53429] [client 192.178.4.101:53305] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKhSQs6pHd_Z5oc1ecRpgAAAQ0"]
[Tue Nov 11 10:36:59.451391 2025] [:error] [pid 53414:tid 53416] [client 192.178.4.101:59294] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKhSws6pHd_Z5oc1ecRqgAAAQA"]
[Tue Nov 11 10:37:06.271095 2025] [:error] [pid 53414:tid 53421] [client 192.178.4.101:49154] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKhUgs6pHd_Z5oc1ecRsgAAAQU"]
[Tue Nov 11 10:37:07.618450 2025] [:error] [pid 59670:tid 59682] [client 192.178.4.101:55118] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKhU6k2Cnts0y-hpfp8hgAAAIk"]
[Tue Nov 11 10:37:11.871597 2025] [:error] [pid 53355:tid 53373] [client 192.178.4.101:64219] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKhV4B5X5A3rMc4_nDbjAAAAA8"]
[Tue Nov 11 10:37:14.070771 2025] [:error] [pid 53414:tid 53423] [client 192.178.4.101:54521] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKhWgs6pHd_Z5oc1ecRtwAAAQc"]
[Tue Nov 11 10:37:16.255153 2025] [:error] [pid 53449:tid 53470] [client 192.178.4.101:47181] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKhXNpz08j5NoUSzp_E3wAAAVA"]
[Tue Nov 11 10:37:17.783605 2025] [:error] [pid 53449:tid 53461] [client 192.178.4.101:51859] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKhXdpz08j5NoUSzp_E4QAAAUc"]
[Tue Nov 11 10:37:20.342468 2025] [:error] [pid 53449:tid 53463] [client 192.178.4.101:60643] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKhYNpz08j5NoUSzp_E5AAAAUk"]
[Tue Nov 11 10:37:23.275701 2025] [:error] [pid 53356:tid 53397] [client 192.178.4.101:44545] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKhY-kdmt0kzjVcUN9GpwAAAEw"]
[Tue Nov 11 10:37:25.665897 2025] [:error] [pid 53414:tid 53429] [client 192.178.4.101:54995] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKhZQs6pHd_Z5oc1ecRygAAAQ0"]
[Tue Nov 11 10:37:28.582554 2025] [:error] [pid 53449:tid 53461] [client 192.178.4.101:39844] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKhaNpz08j5NoUSzp_E8wAAAUc"]
[Tue Nov 11 10:37:29.881131 2025] [:error] [pid 59670:tid 59677] [client 192.178.4.101:44382] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKhaak2Cnts0y-hpfp9AAAAAIQ"]
[Tue Nov 11 10:37:33.262504 2025] [:error] [pid 53414:tid 53439] [client 192.178.4.101:41694] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKhbQs6pHd_Z5oc1ecR4AAAARc"]
[Tue Nov 11 10:37:34.693003 2025] [:error] [pid 53449:tid 53464] [client 192.178.4.101:43934] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKhbtpz08j5NoUSzp_FHwAAAUo"]
[Tue Nov 11 10:37:35.963019 2025] [:error] [pid 59670:tid 59676] [client 192.178.4.101:62705] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKhb6k2Cnts0y-hpfp9JQAAAIM"]
[Tue Nov 11 10:37:38.610198 2025] [:error] [pid 53355:tid 53375] [client 192.178.4.101:50435] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKhcoB5X5A3rMc4_nDbuAAAABE"]
[Tue Nov 11 10:37:39.648719 2025] [:error] [pid 59670:tid 59691] [client 192.178.4.101:48836] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKhc6k2Cnts0y-hpfp9QAAAAJI"]
[Tue Nov 11 10:37:42.533383 2025] [:error] [pid 53414:tid 53417] [client 192.178.4.101:37059] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKhdgs6pHd_Z5oc1ecR7gAAAQE"]
[Tue Nov 11 10:37:44.129146 2025] [:error] [pid 53414:tid 53432] [client 192.178.4.101:37138] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKheAs6pHd_Z5oc1ecR7wAAARA"]
[Tue Nov 11 10:38:11.755861 2025] [:error] [pid 53356:tid 53387] [client 192.178.4.101:62917] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKhk-kdmt0kzjVcUN9G6QAAAEI"]
[Tue Nov 11 10:38:13.568513 2025] [:error] [pid 59670:tid 59673] [client 192.178.4.101:61473] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKhlak2Cnts0y-hpfp9vwAAAIA"]
[Tue Nov 11 10:38:15.511859 2025] [:error] [pid 53449:tid 53462] [client 192.178.4.101:50237] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKhl9pz08j5NoUSzp_F2gAAAUg"]
[Tue Nov 11 10:38:17.569981 2025] [:error] [pid 53355:tid 53380] [client 192.178.4.101:45432] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKhmYB5X5A3rMc4_nDb5gAAABY"]
[Tue Nov 11 10:38:20.787047 2025] [:error] [pid 53355:tid 53382] [client 192.178.4.101:46700] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKhnIB5X5A3rMc4_nDb7QAAABg"]
[Tue Nov 11 10:38:23.389203 2025] [:error] [pid 53356:tid 53405] [client 192.178.4.101:43077] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKhn-kdmt0kzjVcUN9G8gAAAFQ"]
[Tue Nov 11 10:38:25.471908 2025] [:error] [pid 53449:tid 53457] [client 192.178.4.101:47671] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKhodpz08j5NoUSzp_GRwAAAUM"]
[Tue Nov 11 10:38:27.369882 2025] [:error] [pid 53355:tid 53379] [client 192.178.4.101:53782] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKho4B5X5A3rMc4_nDb-AAAABU"]
[Tue Nov 11 10:38:28.756663 2025] [:error] [pid 53356:tid 53393] [client 192.178.4.101:61359] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKhpOkdmt0kzjVcUN9G9wAAAEg"]
[Tue Nov 11 10:38:31.937625 2025] [:error] [pid 53449:tid 53462] [client 192.178.4.101:49919] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKhp9pz08j5NoUSzp_GcQAAAUg"]
[Tue Nov 11 10:38:34.299483 2025] [:error] [pid 53449:tid 53461] [client 192.178.4.101:43129] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKhqtpz08j5NoUSzp_GcgAAAUc"]
[Tue Nov 11 10:38:34.699604 2025] [:error] [pid 53356:tid 53392] [client 192.178.4.101:49673] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKhqukdmt0kzjVcUN9HAAAAAEc"]
[Tue Nov 11 10:38:36.671533 2025] [:error] [pid 53449:tid 53472] [client 192.178.4.101:50879] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKhrNpz08j5NoUSzp_GeQAAAVI"]
[Tue Nov 11 10:38:37.679268 2025] [:error] [pid 53355:tid 53364] [client 192.178.4.101:49032] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKhrYB5X5A3rMc4_nDcLQAAAAY"]
[Tue Nov 11 10:38:40.604860 2025] [:error] [pid 59670:tid 59695] [client 192.178.4.101:61052] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKhsKk2Cnts0y-hpfp93AAAAJY"]
[Tue Nov 11 10:38:42.854299 2025] [:error] [pid 53356:tid 53394] [client 192.178.4.101:52733] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKhsukdmt0kzjVcUN9HCAAAAEk"]
[Tue Nov 11 10:38:45.498103 2025] [:error] [pid 53414:tid 53430] [client 192.178.4.101:43447] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKhtQs6pHd_Z5oc1ecSlAAAAQ4"]
[Tue Nov 11 10:38:48.745607 2025] [:error] [pid 59670:tid 59679] [client 192.178.4.101:42494] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKhuKk2Cnts0y-hpfp96AAAAIY"]
[Tue Nov 11 10:38:52.815349 2025] [:error] [pid 53414:tid 53417] [client 192.178.4.101:53236] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKhvAs6pHd_Z5oc1ecSlwAAAQE"]
[Tue Nov 11 10:38:53.781036 2025] [:error] [pid 53449:tid 53459] [client 192.178.4.101:58289] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKhvdpz08j5NoUSzp_GjAAAAUU"]
[Tue Nov 11 10:38:55.749704 2025] [:error] [pid 53355:tid 53359] [client 192.178.4.101:65103] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKhv4B5X5A3rMc4_nDcewAAAAE"]
[Tue Nov 11 10:38:58.141815 2025] [:error] [pid 53355:tid 53377] [client 192.178.4.101:39446] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKhwoB5X5A3rMc4_nDcfwAAABM"]
[Tue Nov 11 10:39:00.344119 2025] [:error] [pid 53355:tid 53380] [client 192.178.4.101:44232] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKhxIB5X5A3rMc4_nDcgwAAABY"]
[Tue Nov 11 10:39:03.457131 2025] [:error] [pid 53355:tid 53366] [client 192.178.4.101:48461] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKhx4B5X5A3rMc4_nDchwAAAAg"]
[Tue Nov 11 10:39:05.873447 2025] [:error] [pid 59670:tid 59688] [client 192.178.4.101:61995] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKhyak2Cnts0y-hpfp9-gAAAI8"]
[Tue Nov 11 10:39:07.782792 2025] [:error] [pid 53355:tid 53370] [client 192.178.4.101:56084] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKhy4B5X5A3rMc4_nDcjgAAAAw"]
[Tue Nov 11 10:39:47.000046 2025] [:error] [pid 59670:tid 59687] [client 192.178.4.101:52238] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKh8qk2Cnts0y-hpfp-zwAAAI4"]
[Tue Nov 11 10:39:51.383679 2025] [:error] [pid 53355:tid 53367] [client 192.178.4.101:39298] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKh94B5X5A3rMc4_nDc3QAAAAk"]
[Tue Nov 11 10:39:52.866601 2025] [:error] [pid 59670:tid 59691] [client 192.178.4.101:61999] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKh-Kk2Cnts0y-hpfp_BAAAAJI"]
[Tue Nov 11 10:39:55.080876 2025] [:error] [pid 53449:tid 53456] [client 192.178.4.101:46751] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKh-9pz08j5NoUSzp_HFgAAAUI"]
[Tue Nov 11 10:39:56.039714 2025] [:error] [pid 53355:tid 53379] [client 192.178.4.101:49189] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKh_IB5X5A3rMc4_nDc4wAAABU"]
[Tue Nov 11 10:39:57.226577 2025] [:error] [pid 53414:tid 53430] [client 192.178.4.101:42543] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKh_Qs6pHd_Z5oc1ecTtAAAAQ4"]
[Tue Nov 11 10:40:01.456670 2025] [:error] [pid 53449:tid 53456] [client 192.178.4.101:50059] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKiAdpz08j5NoUSzp_HJwAAAUI"]
[Tue Nov 11 10:44:23.376832 2025] [:error] [pid 59670:tid 59674] [client 192.178.4.101:59327] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKjB6k2Cnts0y-hpfqFkgAAAIE"]
[Tue Nov 11 10:44:29.960780 2025] [:error] [pid 53355:tid 53362] [client 192.178.4.101:62924] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKjDYB5X5A3rMc4_nDeyQAAAAQ"]
[Tue Nov 11 10:44:32.784476 2025] [:error] [pid 53356:tid 53393] [client 192.178.4.101:61267] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKjEOkdmt0kzjVcUN9KXgAAAEg"]
[Tue Nov 11 10:44:45.424131 2025] [:error] [pid 53355:tid 53370] [client 192.178.4.101:40027] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKjHYB5X5A3rMc4_nDe7AAAAAw"]
[Tue Nov 11 10:44:47.722164 2025] [:error] [pid 53414:tid 53435] [client 192.178.4.101:61202] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKjHws6pHd_Z5oc1ecXJQAAARM"]
[Tue Nov 11 10:44:53.791573 2025] [:error] [pid 53449:tid 53478] [client 192.178.4.101:55108] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKjJdpz08j5NoUSzp_KygAAAVg"]
[Tue Nov 11 10:47:09.186589 2025] [:error] [pid 53414:tid 53424] [client 192.178.4.101:56399] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKjrQs6pHd_Z5oc1ecXrwAAAQg"]
[Tue Nov 11 10:47:18.463211 2025] [:error] [pid 53414:tid 53431] [client 192.178.4.101:62194] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKjtgs6pHd_Z5oc1ecXugAAAQ8"]
[Tue Nov 11 10:47:28.512865 2025] [:error] [pid 53355:tid 53373] [client 192.178.4.101:37955] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKjwIB5X5A3rMc4_nDfswAAAA8"]
[Tue Nov 11 10:47:35.367374 2025] [:error] [pid 53449:tid 53461] [client 192.178.4.101:36031] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKjx9pz08j5NoUSzp_LnwAAAUc"]
[Tue Nov 11 10:47:42.230453 2025] [:error] [pid 53355:tid 53364] [client 192.178.4.101:60212] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKjzoB5X5A3rMc4_nDfwQAAAAY"]
[Tue Nov 11 10:49:21.309102 2025] [:error] [pid 59670:tid 59691] [client 192.178.4.101:47839] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKkMak2Cnts0y-hpfqHuAAAAJI"]
[Tue Nov 11 10:49:30.203223 2025] [:error] [pid 53355:tid 53373] [client 192.178.4.101:50654] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKkOoB5X5A3rMc4_nDgSwAAAA8"]
[Tue Nov 11 10:49:39.826255 2025] [:error] [pid 53414:tid 53428] [client 192.178.4.101:42923] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKkQws6pHd_Z5oc1ecYkwAAAQw"]
[Tue Nov 11 10:49:50.763082 2025] [:error] [pid 53449:tid 53455] [client 192.178.4.101:40196] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKkTtpz08j5NoUSzp_MZQAAAUE"]
[Tue Nov 11 10:49:58.539165 2025] [:error] [pid 59670:tid 59686] [client 192.178.4.101:48781] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKkVqk2Cnts0y-hpfqIXQAAAI0"]
[Tue Nov 11 10:50:06.074788 2025] [:error] [pid 59670:tid 59679] [client 192.178.4.101:36950] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKkXqk2Cnts0y-hpfqIpAAAAIY"]
[Tue Nov 11 11:10:44.255544 2025] [:error] [pid 53355:tid 53370] [client 192.178.4.101:51869] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKpNIB5X5A3rMc4_nDm9wAAAAw"]
[Tue Nov 11 11:10:55.910190 2025] [:error] [pid 59670:tid 59680] [client 192.178.4.101:40418] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKpP6k2Cnts0y-hpfqS7wAAAIc"]
[Tue Nov 11 11:11:21.388063 2025] [:error] [pid 59670:tid 59682] [client 192.178.4.101:51801] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/games/%E0%B8%AA%E0%B8%B9%E0%B8%95%E0%B8%A3%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95pg.html"] [unique_id "aRKpWak2Cnts0y-hpfqTIQAAAIk"]
[Tue Nov 11 11:13:33.666068 2025] [:error] [pid 53355:tid 53382] [client 192.178.4.101:59728] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKp3YB5X5A3rMc4_nDnowAAABg"]
[Tue Nov 11 11:13:40.078298 2025] [:error] [pid 53355:tid 53367] [client 192.178.4.101:37692] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKp5IB5X5A3rMc4_nDnqAAAAAk"]
[Tue Nov 11 11:13:44.943091 2025] [:error] [pid 53356:tid 53387] [client 192.178.4.101:36740] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKp6Okdmt0kzjVcUN9UiwAAAEI"]
[Tue Nov 11 11:13:54.724486 2025] [:error] [pid 53449:tid 53461] [client 192.178.4.101:39947] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKp8tpz08j5NoUSzp_VFQAAAUc"]
[Tue Nov 11 11:16:15.131641 2025] [:error] [pid 53449:tid 53475] [client 192.178.4.101:57002] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKqf9pz08j5NoUSzp_V-wAAAVU"]
[Tue Nov 11 11:16:22.979433 2025] [:error] [pid 59670:tid 59678] [client 192.178.4.101:62558] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKqhqk2Cnts0y-hpfqU8gAAAIU"]
[Tue Nov 11 11:16:29.359813 2025] [:error] [pid 59670:tid 59690] [client 192.178.4.101:38375] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/xoso/%E0%B9%80%E0%B8%81%E0%B8%A1%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95pg%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99.html"] [unique_id "aRKqjak2Cnts0y-hpfqU9wAAAJE"]
[Tue Nov 11 11:16:31.722500 2025] [:error] [pid 53414:tid 53428] [client 192.178.4.101:59739] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKqjws6pHd_Z5oc1eciGAAAAQw"]
[Tue Nov 11 11:16:33.901439 2025] [:error] [pid 53414:tid 53432] [client 192.178.4.101:46066] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKqkQs6pHd_Z5oc1eciGQAAARA"]
[Tue Nov 11 11:16:37.666579 2025] [:error] [pid 53356:tid 53397] [client 192.178.4.101:42083] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/games/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%20%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%20%E0%B9%80%E0%B8%81%E0%B8%A1%20pg%20%E0%B9%83%E0%B8%AB%E0%B8%A1%E0%B9%88.html"] [unique_id "aRKqlekdmt0kzjVcUN9VZgAAAEw"]
[Tue Nov 11 11:16:40.793937 2025] [:error] [pid 53355:tid 53374] [client 192.178.4.101:37293] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/xoso/777pg%20slot%20login%20kenya%20sign%20up.html"] [unique_id "aRKqmIB5X5A3rMc4_nDpFAAAABA"]
[Tue Nov 11 11:16:47.681920 2025] [:error] [pid 53449:tid 53475] [client 192.178.4.101:34958] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKqn9pz08j5NoUSzp_WSwAAAVU"]
[Tue Nov 11 11:18:23.689723 2025] [:error] [pid 53355:tid 53358] [client 161.97.137.114:63200] [client 161.97.137.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 161.97.137.114, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRKq_4B5X5A3rMc4_nDpxQAAAAA"]
[Tue Nov 11 11:18:48.300090 2025] [:error] [pid 53414:tid 53426] [client 192.178.4.101:50781] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKrGAs6pHd_Z5oc1ecjDwAAAQo"]
[Tue Nov 11 11:18:53.345937 2025] [:error] [pid 53449:tid 53467] [client 192.178.4.101:63069] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKrHdpz08j5NoUSzp_XwwAAAU0"]
[Tue Nov 11 11:19:05.959519 2025] [:error] [pid 53356:tid 53390] [client 192.178.4.101:39340] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKrKekdmt0kzjVcUN9WJAAAAEU"]
[Tue Nov 11 11:19:15.332937 2025] [:error] [pid 53449:tid 53471] [client 192.178.4.101:35477] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKrM9pz08j5NoUSzp_X1gAAAVE"]
[Tue Nov 11 11:19:30.310293 2025] [:error] [pid 53414:tid 53428] [client 192.178.4.101:39402] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKrQgs6pHd_Z5oc1ecjUQAAAQw"]
[Tue Nov 11 11:19:33.242358 2025] [:error] [pid 53355:tid 53378] [client 192.178.4.101:43088] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKrRYB5X5A3rMc4_nDqRQAAABQ"]
[Tue Nov 11 11:21:48.693249 2025] [:error] [pid 59670:tid 59684] [client 192.178.4.101:39817] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKrzKk2Cnts0y-hpfqXsAAAAIs"]
[Tue Nov 11 11:21:55.286161 2025] [:error] [pid 59670:tid 59694] [client 192.178.4.101:45384] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKr06k2Cnts0y-hpfqXugAAAJU"]
[Tue Nov 11 11:22:17.193431 2025] [:error] [pid 53414:tid 53439] [client 192.178.4.101:61591] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKr6Qs6pHd_Z5oc1eckHQAAARc"]
[Tue Nov 11 11:22:26.348418 2025] [:error] [pid 53414:tid 53424] [client 192.178.4.101:38262] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKr8gs6pHd_Z5oc1eckJwAAAQg"]
[Tue Nov 11 11:22:35.389611 2025] [:error] [pid 53449:tid 53475] [client 192.178.4.101:55109] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKr-9pz08j5NoUSzp_ZcAAAAVU"]
[Tue Nov 11 11:25:39.408449 2025] [:error] [pid 53414:tid 53427] [client 192.178.4.101:35230] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKssws6pHd_Z5oc1eclXgAAAQs"]
[Tue Nov 11 11:25:50.119853 2025] [:error] [pid 59670:tid 59682] [client 192.178.4.101:43989] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKsvqk2Cnts0y-hpfqaHwAAAIk"]
[Tue Nov 11 11:26:17.260194 2025] [:error] [pid 59670:tid 59693] [client 192.178.4.101:63122] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKs2ak2Cnts0y-hpfqabgAAAJQ"]
[Tue Nov 11 11:26:25.352834 2025] [:error] [pid 59670:tid 59694] [client 192.178.4.101:40876] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKs4ak2Cnts0y-hpfqa0gAAAJU"]
[Tue Nov 11 11:26:29.820716 2025] [:error] [pid 53414:tid 53430] [client 192.178.4.101:46653] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKs5Qs6pHd_Z5oc1ecluAAAAQ4"]
[Tue Nov 11 11:28:10.870393 2025] [:error] [pid 53356:tid 53396] [client 192.178.4.101:59716] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKtSukdmt0kzjVcUN9Z0QAAAEs"]
[Tue Nov 11 11:28:11.084648 2025] [:error] [pid 53356:tid 53393] [client 192.178.4.101:39974] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKtS-kdmt0kzjVcUN9Z0gAAAEg"]
[Tue Nov 11 11:28:15.027889 2025] [:error] [pid 53356:tid 53401] [client 192.178.4.101:49352] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKtT-kdmt0kzjVcUN9Z3AAAAFA"]
[Tue Nov 11 11:28:21.294303 2025] [:error] [pid 53414:tid 53423] [client 192.178.4.101:45907] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKtVQs6pHd_Z5oc1ecmWQAAAQc"]
[Tue Nov 11 11:28:30.311169 2025] [:error] [pid 53449:tid 53472] [client 192.178.4.101:49668] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKtXtpz08j5NoUSzp_c3QAAAVI"]
[Tue Nov 11 11:28:39.785488 2025] [:error] [pid 53414:tid 53427] [client 192.178.4.101:34907] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKtZws6pHd_Z5oc1ecm8QAAAQs"]
[Tue Nov 11 11:28:45.026861 2025] [:error] [pid 53356:tid 53386] [client 192.178.4.101:48826] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKtbekdmt0kzjVcUN9aGAAAAEE"]
[Tue Nov 11 11:28:48.587638 2025] [:error] [pid 59670:tid 59673] [client 192.178.4.101:51490] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKtcKk2Cnts0y-hpfqcqwAAAIA"]
[Tue Nov 11 11:45:57.511651 2025] [:error] [pid 53449:tid 53475] [client 192.178.4.101:43478] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKxddpz08j5NoUSzp_iqAAAAVU"]
[Tue Nov 11 11:46:13.768948 2025] [:error] [pid 59670:tid 59689] [client 192.178.4.101:48616] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKxhak2Cnts0y-hpfqmQQAAAJA"]
[Tue Nov 11 11:46:22.844682 2025] [:error] [pid 53356:tid 53407] [client 192.178.4.101:35553] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKxjukdmt0kzjVcUN9e2wAAAFY"]
[Tue Nov 11 11:46:23.876410 2025] [:error] [pid 59670:tid 59686] [client 192.178.4.101:55826] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKxj6k2Cnts0y-hpfqmWwAAAI0"]
[Tue Nov 11 11:46:31.535102 2025] [:error] [pid 59670:tid 59676] [client 192.178.4.101:43794] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKxl6k2Cnts0y-hpfqmbQAAAIM"]
[Tue Nov 11 11:46:35.652868 2025] [:error] [pid 53355:tid 53366] [client 192.178.4.101:37039] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKxm4B5X5A3rMc4_nDyjwAAAAg"]
[Tue Nov 11 11:48:51.686778 2025] [:error] [pid 53449:tid 53467] [client 192.178.4.101:59616] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKyI9pz08j5NoUSzp_jfgAAAU0"]
[Tue Nov 11 11:49:11.323864 2025] [:error] [pid 59670:tid 59682] [client 192.178.4.101:65004] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKyN6k2Cnts0y-hpfqneAAAAIk"]
[Tue Nov 11 11:49:21.497622 2025] [:error] [pid 53355:tid 53360] [client 192.178.4.101:62966] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKyQYB5X5A3rMc4_nDzSwAAAAI"]
[Tue Nov 11 11:49:32.153611 2025] [:error] [pid 53449:tid 53469] [client 192.178.4.101:42380] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKyTNpz08j5NoUSzp_jyQAAAU8"]
[Tue Nov 11 11:49:39.015504 2025] [:error] [pid 53414:tid 53422] [client 192.178.4.101:50551] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKyUws6pHd_Z5oc1ecspAAAAQY"]
[Tue Nov 11 11:51:45.789588 2025] [:error] [pid 53449:tid 53469] [client 192.178.4.101:41199] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKy0dpz08j5NoUSzp_kXAAAAU8"]
[Tue Nov 11 11:51:51.313398 2025] [:error] [pid 53414:tid 53434] [client 192.178.4.101:58909] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKy1ws6pHd_Z5oc1ectLAAAARI"]
[Tue Nov 11 11:52:32.215596 2025] [:error] [pid 53449:tid 53477] [client 192.178.4.101:53828] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKzANpz08j5NoUSzp_kwQAAAVc"]
[Tue Nov 11 11:55:48.993262 2025] [:error] [pid 53414:tid 53434] [client 192.178.4.101:50937] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKzxAs6pHd_Z5oc1ecuSwAAARI"]
[Tue Nov 11 11:55:51.144134 2025] [:error] [pid 53449:tid 53464] [client 192.178.4.101:48068] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKzx9pz08j5NoUSzp_l_gAAAUo"]
[Tue Nov 11 11:55:52.216482 2025] [:error] [pid 53414:tid 53418] [client 192.178.4.101:37349] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKzyAs6pHd_Z5oc1ecuTgAAAQI"]
[Tue Nov 11 11:56:26.852206 2025] [:error] [pid 59670:tid 59682] [client 192.178.4.101:38399] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKz6qk2Cnts0y-hpfqrKwAAAIk"]
[Tue Nov 11 11:56:34.906722 2025] [:error] [pid 59670:tid 59690] [client 192.178.4.101:50267] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRKz8qk2Cnts0y-hpfqrOgAAAJE"]
[Tue Nov 11 12:06:43.474254 2025] [:error] [pid 59670:tid 59683] [client 161.97.137.114:63340] [client 161.97.137.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 161.97.137.114, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRK2U6k2Cnts0y-hpfqxIQAAAIo"]
[Tue Nov 11 12:08:55.068204 2025] [:error] [pid 53356:tid 53388] [client 213.209.143.137:62251] [client 213.209.143.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/excel-like-price-change-for-woocommerce-and-wp-e-commerce-light/readme.txt"] [unique_id "aRK21-kdmt0kzjVcUN9m6AAAAEM"]
[Tue Nov 11 12:08:55.606784 2025] [:error] [pid 59670:tid 59685] [client 213.209.143.137:63440] [client 213.209.143.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/excel-like-price-change-for-woocommerce-and-wp-e-commerce-light/readme.txt"] [unique_id "aRK216k2Cnts0y-hpfqzdAAAAIw"]
[Tue Nov 11 12:08:56.126054 2025] [:error] [pid 53356:tid 53407] [client 213.209.143.137:64508] [client 213.209.143.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/excel-like-price-change-for-woocommerce-and-wp-e-commerce-light/readme.txt"] [unique_id "aRK22Okdmt0kzjVcUN9m6gAAAFY"]
[Tue Nov 11 12:11:35.023842 2025] [:error] [pid 53355:tid 53377] [client 192.178.4.101:61719] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRK3d4B5X5A3rMc4_nD64wAAABM"]
[Tue Nov 11 12:11:49.286289 2025] [:error] [pid 53449:tid 53476] [client 192.178.4.101:57143] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRK3hdpz08j5NoUSzp_tpQAAAVY"]
[Tue Nov 11 12:12:04.935203 2025] [:error] [pid 53414:tid 53421] [client 192.178.4.101:39333] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRK3lAs6pHd_Z5oc1ec0kwAAAQU"]
[Tue Nov 11 12:12:19.292594 2025] [:error] [pid 53356:tid 53396] [client 192.178.4.101:57981] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRK3o-kdmt0kzjVcUN9n3QAAAEs"]
[Tue Nov 11 12:37:37.018961 2025] [:error] [pid 59670:tid 59696] [client 192.178.4.101:39040] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRK9kak2Cnts0y-hpfrAoQAAAJc"]
[Tue Nov 11 12:37:46.782686 2025] [:error] [pid 59670:tid 59676] [client 192.178.4.101:57824] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRK9mqk2Cnts0y-hpfrAswAAAIM"]
[Tue Nov 11 12:38:21.909881 2025] [:error] [pid 53449:tid 53473] [client 192.178.4.101:35057] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRK9vdpz08j5NoUSzp_4bAAAAVM"]
[Tue Nov 11 12:46:07.922201 2025] [:error] [pid 53356:tid 53390] [client 192.178.4.101:53228] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRK_j-kdmt0kzjVcUN9yRgAAAEU"]
[Tue Nov 11 12:46:12.894161 2025] [:error] [pid 53355:tid 53382] [client 192.178.4.101:37453] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRK_lIB5X5A3rMc4_nAFGQAAABg"]
[Tue Nov 11 12:46:22.735082 2025] [:error] [pid 53449:tid 53468] [client 192.178.4.101:34795] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRK_ntpz08j5NoUSzp_6qQAAAU4"]
[Tue Nov 11 12:46:41.511393 2025] [:error] [pid 59670:tid 59689] [client 192.178.4.101:36174] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRK_sak2Cnts0y-hpfrEtwAAAJA"]
[Tue Nov 11 12:46:43.886797 2025] [:error] [pid 53414:tid 53437] [client 192.178.4.101:41250] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRK_sws6pHd_Z5oc1edBgQAAARU"]
[Tue Nov 11 12:46:55.137389 2025] [:error] [pid 53449:tid 53473] [client 192.178.4.101:36232] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRK_v9pz08j5NoUSzp_7AAAAAVM"]
[Tue Nov 11 12:48:53.935226 2025] [:error] [pid 53356:tid 53394] [client 192.178.4.101:55717] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLANekdmt0kzjVcUN9zZwAAAEk"]
[Tue Nov 11 12:49:22.109112 2025] [:error] [pid 59670:tid 59693] [client 192.178.4.101:56420] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLAUqk2Cnts0y-hpfrGSQAAAJQ"]
[Tue Nov 11 12:49:26.877539 2025] [:error] [pid 59670:tid 59692] [client 192.178.4.101:46836] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLAVqk2Cnts0y-hpfrGTwAAAJM"]
[Tue Nov 11 12:49:31.599113 2025] [:error] [pid 53414:tid 53428] [client 192.178.4.101:56909] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLAWws6pHd_Z5oc1edClQAAAQw"]
[Tue Nov 11 12:49:43.675620 2025] [:error] [pid 53449:tid 53470] [client 192.178.4.101:50086] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLAZ9pz08j5NoUSzp_8cAAAAVA"]
[Tue Nov 11 12:52:42.860356 2025] [:error] [pid 53355:tid 53374] [client 192.178.4.101:35663] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLBGoB5X5A3rMc4_nAIHwAAABA"]
[Tue Nov 11 12:52:51.804264 2025] [:error] [pid 59670:tid 59697] [client 192.178.4.101:52905] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLBI6k2Cnts0y-hpfrH4gAAAJg"]
[Tue Nov 11 12:52:59.614922 2025] [:error] [pid 53355:tid 53363] [client 192.178.4.101:37505] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLBK4B5X5A3rMc4_nAILQAAAAU"]
[Tue Nov 11 12:56:15.579328 2025] [:error] [pid 53414:tid 53420] [client 192.178.4.101:39753] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLB7ws6pHd_Z5oc1edEswAAAQQ"]
[Tue Nov 11 12:56:31.598738 2025] [:error] [pid 59670:tid 59687] [client 192.178.4.101:40732] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLB_6k2Cnts0y-hpfrJtQAAAI4"]
[Tue Nov 11 12:56:44.519568 2025] [:error] [pid 53356:tid 53405] [client 192.178.4.101:37807] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLCDOkdmt0kzjVcUN911gAAAFQ"]
[Tue Nov 11 12:57:13.108010 2025] [:error] [pid 53356:tid 53409] [client 84.74.180.97:39932] [client 84.74.180.97] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 84.74.180.97, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRLCKekdmt0kzjVcUN918QAAAFg"]
[Tue Nov 11 12:58:07.270650 2025] [:error] [pid 59670:tid 59687] [client 161.97.137.114:52501] [client 161.97.137.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 161.97.137.114, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRLCX6k2Cnts0y-hpfrKkAAAAI4"]
[Tue Nov 11 12:59:29.501208 2025] [:error] [pid 53356:tid 53389] [client 192.178.4.101:50349] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLCsekdmt0kzjVcUN93NgAAAEQ"]
[Tue Nov 11 12:59:35.500215 2025] [:error] [pid 53356:tid 53407] [client 192.178.4.101:47727] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLCt-kdmt0kzjVcUN93PAAAAFY"]
[Tue Nov 11 12:59:45.596381 2025] [:error] [pid 59670:tid 59684] [client 192.178.4.101:43619] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLCwak2Cnts0y-hpfrLgAAAAIs"]
[Tue Nov 11 12:59:48.851450 2025] [:error] [pid 59670:tid 59691] [client 192.178.4.101:44495] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLCxKk2Cnts0y-hpfrLhAAAAJI"]
[Tue Nov 11 12:59:55.568735 2025] [:error] [pid 53449:tid 53463] [client 192.178.4.101:58961] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLCy9pz08j5NoUSzp8AXwAAAUk"]
[Tue Nov 11 13:03:17.640918 2025] [:error] [pid 53356:tid 53391] [client 192.178.4.101:36233] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLDlekdmt0kzjVcUN95FQAAAEY"]
[Tue Nov 11 13:03:25.001387 2025] [:error] [pid 53449:tid 53469] [client 192.178.4.101:42805] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLDndpz08j5NoUSzp8CQgAAAU8"]
[Tue Nov 11 13:03:29.220657 2025] [:error] [pid 53355:tid 53365] [client 192.178.4.101:40673] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLDoYB5X5A3rMc4_nAMfwAAAAc"]
[Tue Nov 11 13:03:33.627511 2025] [:error] [pid 53356:tid 53389] [client 192.178.4.101:58051] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLDpekdmt0kzjVcUN95MQAAAEQ"]
[Tue Nov 11 13:03:39.300450 2025] [:error] [pid 53414:tid 53440] [client 192.178.4.101:53687] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLDqws6pHd_Z5oc1edIMgAAARg"]
[Tue Nov 11 13:03:46.338399 2025] [:error] [pid 59670:tid 59681] [client 192.178.4.101:37876] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLDsqk2Cnts0y-hpfrOIQAAAIg"]
[Tue Nov 11 13:03:49.124064 2025] [:error] [pid 59670:tid 59693] [client 192.178.4.101:62694] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLDtak2Cnts0y-hpfrOKgAAAJQ"]
[Tue Nov 11 13:03:53.260992 2025] [:error] [pid 53355:tid 53364] [client 192.178.4.101:39787] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLDuYB5X5A3rMc4_nAMlAAAAAY"]
[Tue Nov 11 13:05:22.100952 2025] [:error] [pid 53449:tid 53465] [client 192.178.4.101:36024] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLEEtpz08j5NoUSzp8CpAAAAUs"]
[Tue Nov 11 13:05:26.095790 2025] [:error] [pid 59670:tid 59680] [client 192.178.4.101:42274] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLEFqk2Cnts0y-hpfrPAQAAAIc"]
[Tue Nov 11 13:05:27.421413 2025] [:error] [pid 59670:tid 59692] [client 192.178.4.101:50407] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLEF6k2Cnts0y-hpfrPBQAAAJM"]
[Tue Nov 11 13:05:30.057081 2025] [:error] [pid 53414:tid 53438] [client 192.178.4.101:45472] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLEGgs6pHd_Z5oc1edIpAAAARY"]
[Tue Nov 11 13:05:32.687414 2025] [:error] [pid 53355:tid 53366] [client 192.178.4.101:62492] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLEHIB5X5A3rMc4_nANEAAAAAg"]
[Tue Nov 11 13:05:43.143663 2025] [:error] [pid 53356:tid 53397] [client 192.178.4.101:62375] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLEJ-kdmt0kzjVcUN95tAAAAEw"]
[Tue Nov 11 13:05:46.710785 2025] [:error] [pid 53414:tid 53434] [client 192.178.4.101:38535] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLEKgs6pHd_Z5oc1edIsgAAARI"]
[Tue Nov 11 13:05:49.535860 2025] [:error] [pid 53414:tid 53417] [client 192.178.4.101:62869] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLELQs6pHd_Z5oc1edItAAAAQE"]
[Tue Nov 11 13:05:57.374935 2025] [:error] [pid 53414:tid 53428] [client 192.178.4.101:44701] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLENQs6pHd_Z5oc1edIugAAAQw"]
[Tue Nov 11 13:06:01.286228 2025] [:error] [pid 59670:tid 59684] [client 192.178.4.101:59810] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLEOak2Cnts0y-hpfrPQwAAAIs"]
[Tue Nov 11 13:11:24.143545 2025] [:error] [pid 53449:tid 53458] [client 192.178.4.101:35932] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLFfNpz08j5NoUSzp8EpQAAAUQ"]
[Tue Nov 11 13:11:30.404365 2025] [:error] [pid 53356:tid 53407] [client 192.178.4.101:56492] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLFgukdmt0kzjVcUN97WgAAAFY"]
[Tue Nov 11 13:11:34.505700 2025] [:error] [pid 59670:tid 59682] [client 192.178.4.101:62582] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLFhqk2Cnts0y-hpfrRkgAAAIk"]
[Tue Nov 11 13:11:39.885140 2025] [:error] [pid 53355:tid 53370] [client 192.178.4.101:40275] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLFi4B5X5A3rMc4_nAOmQAAAAw"]
[Tue Nov 11 13:11:45.241270 2025] [:error] [pid 59670:tid 59685] [client 192.178.4.101:59050] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLFkak2Cnts0y-hpfrRowAAAIw"]
[Tue Nov 11 13:11:51.783697 2025] [:error] [pid 53449:tid 53471] [client 192.178.4.101:54062] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLFl9pz08j5NoUSzp8EwgAAAVE"]
[Tue Nov 11 13:11:59.401611 2025] [:error] [pid 53414:tid 53439] [client 192.178.4.101:35154] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLFnws6pHd_Z5oc1edKnAAAARc"]
[Tue Nov 11 13:12:02.014930 2025] [:error] [pid 59670:tid 59690] [client 192.178.4.101:43131] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLFoqk2Cnts0y-hpfrRwgAAAJE"]
[Tue Nov 11 13:12:08.846153 2025] [:error] [pid 53355:tid 53377] [client 173.239.214.83:57125] [client 173.239.214.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aRLFqIB5X5A3rMc4_nAOvQAAABM"]
[Tue Nov 11 13:12:09.620388 2025] [:error] [pid 53449:tid 53462] [client 192.178.4.101:56516] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLFqdpz08j5NoUSzp8E1wAAAUg"]
[Tue Nov 11 13:12:09.723108 2025] [:error] [pid 53414:tid 53421] [client 173.239.214.85:57423] [client 173.239.214.85] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/images/admin.php"] [unique_id "aRLFqQs6pHd_Z5oc1edKpwAAAQU"]
[Tue Nov 11 13:12:10.652261 2025] [:error] [pid 53449:tid 53468] [client 173.239.214.105:28743] [client 173.239.214.105] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/ioxi-o.php"] [unique_id "aRLFqtpz08j5NoUSzp8E2gAAAU4"]
[Tue Nov 11 13:12:11.544544 2025] [:error] [pid 53355:tid 53380] [client 173.239.214.118:37317] [client 173.239.214.118] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-conf.php"] [unique_id "aRLFq4B5X5A3rMc4_nAOwAAAABY"]
[Tue Nov 11 13:12:12.425414 2025] [:error] [pid 53355:tid 53362] [client 173.239.214.117:35435] [client 173.239.214.117] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/admin.php"] [unique_id "aRLFrIB5X5A3rMc4_nAOwwAAAAQ"]
[Tue Nov 11 13:12:13.308040 2025] [:error] [pid 59670:tid 59679] [client 173.239.214.88:47093] [client 173.239.214.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/index.php"] [unique_id "aRLFrak2Cnts0y-hpfrR0wAAAIY"]
[Tue Nov 11 13:12:14.179113 2025] [:error] [pid 53356:tid 53401] [client 173.239.214.99:41949] [client 173.239.214.99] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/mini.php"] [unique_id "aRLFrukdmt0kzjVcUN97eQAAAFA"]
[Tue Nov 11 13:12:15.062432 2025] [:error] [pid 53414:tid 53426] [client 173.239.214.109:56741] [client 173.239.214.109] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/lock360.php"] [unique_id "aRLFrws6pHd_Z5oc1edKrgAAAQo"]
[Tue Nov 11 13:12:15.946650 2025] [:error] [pid 53414:tid 53437] [client 192.178.4.101:40753] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLFrws6pHd_Z5oc1edKsAAAARU"]
[Tue Nov 11 13:12:15.954620 2025] [:error] [pid 53449:tid 53458] [client 173.239.214.119:23885] [client 173.239.214.119] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/admin-wolf.php"] [unique_id "aRLFr9pz08j5NoUSzp8E5gAAAUQ"]
[Tue Nov 11 13:12:16.859511 2025] [:error] [pid 53355:tid 53374] [client 173.239.214.106:64675] [client 173.239.214.106] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/xx.php"] [unique_id "aRLFsIB5X5A3rMc4_nAOygAAABA"]
[Tue Nov 11 13:12:17.737833 2025] [:error] [pid 53414:tid 53439] [client 173.239.214.102:48033] [client 173.239.214.102] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/goods.php"] [unique_id "aRLFsQs6pHd_Z5oc1edKswAAARc"]
[Tue Nov 11 13:12:18.626788 2025] [:error] [pid 59670:tid 59690] [client 173.239.214.91:61605] [client 173.239.214.91] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/maint/about.php"] [unique_id "aRLFsqk2Cnts0y-hpfrR3gAAAJE"]
[Tue Nov 11 13:12:19.526251 2025] [:error] [pid 53356:tid 53385] [client 173.239.214.106:57021] [client 173.239.214.106] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/buy.php"] [unique_id "aRLFs-kdmt0kzjVcUN97hAAAAEA"]
[Tue Nov 11 13:12:20.407628 2025] [:error] [pid 53356:tid 53408] [client 173.239.214.104:29891] [client 173.239.214.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aRLFtOkdmt0kzjVcUN97iAAAAFc"]
[Tue Nov 11 13:12:20.987078 2025] [:error] [pid 53449:tid 53458] [client 192.178.4.101:40805] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLFtNpz08j5NoUSzp8E8gAAAUQ"]
[Tue Nov 11 13:12:22.940701 2025] [:error] [pid 53449:tid 53470] [client 173.239.214.81:38995] [client 173.239.214.81] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aRLFttpz08j5NoUSzp8E9AAAAVA"]
[Tue Nov 11 13:12:23.825729 2025] [:error] [pid 53449:tid 53464] [client 173.239.214.93:53067] [client 173.239.214.93] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-files.php"] [unique_id "aRLFt9pz08j5NoUSzp8E9wAAAUo"]
[Tue Nov 11 13:12:24.722044 2025] [:error] [pid 53355:tid 53363] [client 173.239.214.107:29449] [client 173.239.214.107] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/autoload_classmap/function.php"] [unique_id "aRLFuIB5X5A3rMc4_nAO0wAAAAU"]
[Tue Nov 11 13:12:25.598934 2025] [:error] [pid 59670:tid 59684] [client 173.239.214.32:28683] [client 173.239.214.32] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/f.php"] [unique_id "aRLFuak2Cnts0y-hpfrR9QAAAIs"]
[Tue Nov 11 13:12:26.482583 2025] [:error] [pid 53414:tid 53427] [client 173.239.214.111:42565] [client 173.239.214.111] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/index.php"] [unique_id "aRLFugs6pHd_Z5oc1edKuwAAAQs"]
[Tue Nov 11 13:12:27.407754 2025] [:error] [pid 53356:tid 53401] [client 173.239.214.119:46895] [client 173.239.214.119] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/images/index.php"] [unique_id "aRLFu-kdmt0kzjVcUN97lwAAAFA"]
[Tue Nov 11 13:12:28.291272 2025] [:error] [pid 53449:tid 53455] [client 173.239.214.124:61407] [client 173.239.214.124] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aRLFvNpz08j5NoUSzp8E_wAAAUE"]
[Tue Nov 11 13:12:29.175600 2025] [:error] [pid 59670:tid 59677] [client 173.239.214.81:29703] [client 173.239.214.81] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/includes/nav.php"] [unique_id "aRLFvak2Cnts0y-hpfrR_wAAAIQ"]
[Tue Nov 11 13:12:30.084468 2025] [:error] [pid 59670:tid 59685] [client 173.239.214.87:25265] [client 173.239.214.87] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/blocks/archives/"] [unique_id "aRLFvqk2Cnts0y-hpfrSAwAAAIw"]
[Tue Nov 11 13:12:30.973223 2025] [:error] [pid 59670:tid 59694] [client 173.239.214.104:48113] [client 173.239.214.104] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/images/index.php"] [unique_id "aRLFvqk2Cnts0y-hpfrSBgAAAJU"]
[Tue Nov 11 13:12:31.857222 2025] [:error] [pid 53449:tid 53454] [client 173.239.214.84:64177] [client 173.239.214.84] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/k.php"] [unique_id "aRLFv9pz08j5NoUSzp8FAgAAAUA"]
[Tue Nov 11 13:12:32.738872 2025] [:error] [pid 53356:tid 53395] [client 173.239.214.117:34303] [client 173.239.214.117] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/update/function.php"] [unique_id "aRLFwOkdmt0kzjVcUN97owAAAEo"]
[Tue Nov 11 13:12:33.618261 2025] [:error] [pid 53356:tid 53394] [client 173.239.214.116:53555] [client 173.239.214.116] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/m.php"] [unique_id "aRLFwekdmt0kzjVcUN97pQAAAEk"]
[Tue Nov 11 13:12:34.495953 2025] [:error] [pid 59670:tid 59686] [client 173.239.214.119:41923] [client 173.239.214.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "aRLFwqk2Cnts0y-hpfrSEgAAAI0"]
[Tue Nov 11 13:12:36.405265 2025] [:error] [pid 53356:tid 53391] [client 173.239.214.120:32355] [client 173.239.214.120] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/includes/index.php"] [unique_id "aRLFxOkdmt0kzjVcUN97rQAAAEY"]
[Tue Nov 11 13:12:37.283988 2025] [:error] [pid 53356:tid 53388] [client 45.131.195.68:63031] [client 45.131.195.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/themes/404.php"] [unique_id "aRLFxekdmt0kzjVcUN97sAAAAEM"]
[Tue Nov 11 13:12:38.166678 2025] [:error] [pid 53356:tid 53404] [client 45.131.195.221:59751] [client 45.131.195.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/assets/index.php"] [unique_id "aRLFxukdmt0kzjVcUN97tgAAAFM"]
[Tue Nov 11 13:12:40.315786 2025] [:error] [pid 53355:tid 53361] [client 173.239.214.88:40897] [client 173.239.214.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/css/colors/sunrise/index.php"] [unique_id "aRLFyIB5X5A3rMc4_nAO4gAAAAM"]
[Tue Nov 11 13:12:41.207857 2025] [:error] [pid 53355:tid 53381] [client 173.239.214.105:61281] [client 173.239.214.105] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/network/index.php"] [unique_id "aRLFyYB5X5A3rMc4_nAO5QAAABc"]
[Tue Nov 11 13:12:42.085627 2025] [:error] [pid 53414:tid 53429] [client 173.239.214.127:63739] [client 173.239.214.127] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/about.php"] [unique_id "aRLFygs6pHd_Z5oc1edKxwAAAQ0"]
[Tue Nov 11 13:12:42.973377 2025] [:error] [pid 53355:tid 53376] [client 173.239.214.115:35823] [client 173.239.214.115] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/we.php"] [unique_id "aRLFyoB5X5A3rMc4_nAO6QAAABI"]
[Tue Nov 11 13:12:43.852526 2025] [:error] [pid 53356:tid 53395] [client 173.239.214.115:38667] [client 173.239.214.115] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/inputs.php"] [unique_id "aRLFy-kdmt0kzjVcUN97wgAAAEo"]
[Tue Nov 11 13:12:44.727407 2025] [:error] [pid 53449:tid 53458] [client 173.239.214.112:38011] [client 173.239.214.112] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/alfa.php"] [unique_id "aRLFzNpz08j5NoUSzp8FGgAAAUQ"]
[Tue Nov 11 13:12:45.615274 2025] [:error] [pid 59670:tid 59691] [client 173.239.214.98:50675] [client 173.239.214.98] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/tinyfilemanager/tinyfilemanager.php"] [unique_id "aRLFzak2Cnts0y-hpfrSMwAAAJI"]
[Tue Nov 11 13:12:47.863819 2025] [:error] [pid 53355:tid 53364] [client 173.239.214.86:31607] [client 173.239.214.86] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/ws.php"] [unique_id "aRLFz4B5X5A3rMc4_nAO7wAAAAY"]
[Tue Nov 11 13:12:48.798882 2025] [:error] [pid 53356:tid 53390] [client 45.131.195.225:53897] [client 45.131.195.225] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/maint/index.php"] [unique_id "aRLF0Okdmt0kzjVcUN97xgAAAEU"]
[Tue Nov 11 13:12:49.686640 2025] [:error] [pid 53355:tid 53376] [client 173.239.214.123:60683] [client 173.239.214.123] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/admin.php"] [unique_id "aRLF0YB5X5A3rMc4_nAO8wAAABI"]
[Tue Nov 11 13:12:50.585836 2025] [:error] [pid 53355:tid 53366] [client 173.239.214.87:53185] [client 173.239.214.87] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/themes/admin.php"] [unique_id "aRLF0oB5X5A3rMc4_nAO9AAAAAg"]
[Tue Nov 11 13:12:51.474512 2025] [:error] [pid 53355:tid 53377] [client 173.239.214.122:26649] [client 173.239.214.122] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aRLF04B5X5A3rMc4_nAO9wAAABM"]
[Tue Nov 11 13:12:52.378856 2025] [:error] [pid 53414:tid 53422] [client 173.239.214.124:36207] [client 173.239.214.124] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/IXR/"] [unique_id "aRLF1As6pHd_Z5oc1edK0AAAAQY"]
[Tue Nov 11 13:12:53.259200 2025] [:error] [pid 53355:tid 53367] [client 173.239.214.126:26633] [client 173.239.214.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/IXR/index.php"] [unique_id "aRLF1YB5X5A3rMc4_nAO-wAAAAk"]
[Tue Nov 11 13:12:54.153471 2025] [:error] [pid 53355:tid 53382] [client 173.239.214.105:59677] [client 173.239.214.105] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/themes/news-portal/error.php"] [unique_id "aRLF1oB5X5A3rMc4_nAO_gAAABg"]
[Tue Nov 11 13:12:55.037758 2025] [:error] [pid 53414:tid 53429] [client 173.239.214.109:59253] [client 173.239.214.109] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/file.php"] [unique_id "aRLF1ws6pHd_Z5oc1edK0wAAAQ0"]
[Tue Nov 11 13:12:55.925390 2025] [:error] [pid 59670:tid 59690] [client 173.239.214.97:20815] [client 173.239.214.97] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/revslider/includes/external/page/index.php"] [unique_id "aRLF16k2Cnts0y-hpfrSXAAAAJE"]
[Tue Nov 11 13:12:56.804959 2025] [:error] [pid 53356:tid 53409] [client 45.131.195.221:56833] [client 45.131.195.221] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/pwnd/block-support.php"] [unique_id "aRLF2Okdmt0kzjVcUN971QAAAFg"]
[Tue Nov 11 13:12:57.685293 2025] [:error] [pid 59670:tid 59684] [client 173.239.214.117:27393] [client 173.239.214.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "paramountbaldivis.com"] [uri "/tinyfilemanager.php"] [unique_id "aRLF2ak2Cnts0y-hpfrSYAAAAIs"]
[Tue Nov 11 13:12:58.586356 2025] [:error] [pid 59670:tid 59679] [client 173.239.214.102:63531] [client 173.239.214.102] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/fm.php/sts.php"] [unique_id "aRLF2qk2Cnts0y-hpfrSZAAAAIY"]
[Tue Nov 11 13:12:59.473509 2025] [:error] [pid 53355:tid 53380] [client 173.239.214.108:38067] [client 173.239.214.108] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "aRLF24B5X5A3rMc4_nAPBAAAABY"]
[Tue Nov 11 13:13:00.359873 2025] [:error] [pid 53414:tid 53437] [client 173.239.214.85:56475] [client 173.239.214.85] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/languages/index.php"] [unique_id "aRLF3As6pHd_Z5oc1edK2gAAARU"]
[Tue Nov 11 13:13:01.264148 2025] [:error] [pid 53356:tid 53387] [client 173.239.214.100:57183] [client 173.239.214.100] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/adminfuns.php"] [unique_id "aRLF3ekdmt0kzjVcUN972wAAAEI"]
[Tue Nov 11 13:13:02.450979 2025] [:error] [pid 53449:tid 53457] [client 173.239.214.82:48087] [client 173.239.214.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/class-json-ajax-session.php"] [unique_id "aRLF3tpz08j5NoUSzp8FQQAAAUM"]
[Tue Nov 11 13:13:03.353544 2025] [:error] [pid 53356:tid 53392] [client 173.239.214.91:53177] [client 173.239.214.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/block-supports/index.php"] [unique_id "aRLF3-kdmt0kzjVcUN973wAAAEc"]
[Tue Nov 11 13:13:04.269328 2025] [:error] [pid 53356:tid 53390] [client 173.239.214.82:48417] [client 173.239.214.82] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/user/about.php"] [unique_id "aRLF4Okdmt0kzjVcUN974AAAAEU"]
[Tue Nov 11 13:13:05.155885 2025] [:error] [pid 53414:tid 53428] [client 173.239.214.83:40753] [client 173.239.214.83] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/css/dist/"] [unique_id "aRLF4Qs6pHd_Z5oc1edK4gAAAQw"]
[Tue Nov 11 13:13:06.041267 2025] [:error] [pid 53449:tid 53475] [client 173.239.214.113:34483] [client 173.239.214.113] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/function.php"] [unique_id "aRLF4tpz08j5NoUSzp8FSQAAAVU"]
[Tue Nov 11 13:13:06.925667 2025] [:error] [pid 59670:tid 59694] [client 45.131.195.225:43971] [client 45.131.195.225] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/core-plugin/include.php"] [unique_id "aRLF4qk2Cnts0y-hpfrSeQAAAJU"]
[Tue Nov 11 13:13:07.812865 2025] [:error] [pid 53355:tid 53364] [client 173.239.214.108:60711] [client 173.239.214.108] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/av.php"] [unique_id "aRLF44B5X5A3rMc4_nAPEAAAAAY"]
[Tue Nov 11 13:13:08.691323 2025] [:error] [pid 53414:tid 53437] [client 173.239.214.84:61327] [client 173.239.214.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "paramountbaldivis.com"] [uri "/filemanager.php"] [unique_id "aRLF5As6pHd_Z5oc1edK6AAAARU"]
[Tue Nov 11 13:13:09.574461 2025] [:error] [pid 53449:tid 53462] [client 173.239.214.32:31931] [client 173.239.214.32] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-conflg.php"] [unique_id "aRLF5dpz08j5NoUSzp8FUQAAAUg"]
[Tue Nov 11 13:13:10.449883 2025] [:error] [pid 59670:tid 59697] [client 173.239.214.84:28631] [client 173.239.214.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/css/index.php"] [unique_id "aRLF5qk2Cnts0y-hpfrSgAAAAJg"]
[Tue Nov 11 13:13:11.357066 2025] [:error] [pid 53355:tid 53366] [client 173.239.214.101:32387] [client 173.239.214.101] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/wp-theme-editor/include.php"] [unique_id "aRLF54B5X5A3rMc4_nAPGQAAAAg"]
[Tue Nov 11 13:13:12.276689 2025] [:error] [pid 53356:tid 53397] [client 173.239.214.117:51097] [client 173.239.214.117] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/themes/sketch/404.php"] [unique_id "aRLF6Okdmt0kzjVcUN975gAAAEw"]
[Tue Nov 11 13:13:13.162073 2025] [:error] [pid 59670:tid 59690] [client 173.239.214.92:44619] [client 173.239.214.92] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-info.php"] [unique_id "aRLF6ak2Cnts0y-hpfrShQAAAJE"]
[Tue Nov 11 13:13:14.047825 2025] [:error] [pid 53414:tid 53427] [client 173.239.214.118:65247] [client 173.239.214.118] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/index.php"] [unique_id "aRLF6gs6pHd_Z5oc1edK9AAAAQs"]
[Tue Nov 11 13:13:14.934880 2025] [:error] [pid 53356:tid 53385] [client 173.239.214.87:24205] [client 173.239.214.87] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/about/function.php"] [unique_id "aRLF6ukdmt0kzjVcUN976gAAAEA"]
[Tue Nov 11 13:13:15.830011 2025] [:error] [pid 53356:tid 53406] [client 45.131.195.225:34801] [client 45.131.195.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/js/jcrop/Jcrop.php"] [unique_id "aRLF6-kdmt0kzjVcUN976wAAAFU"]
[Tue Nov 11 13:13:16.734471 2025] [:error] [pid 53355:tid 53365] [client 173.239.214.100:35283] [client 173.239.214.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/Text/wp-login.php"] [unique_id "aRLF7IB5X5A3rMc4_nAPHQAAAAc"]
[Tue Nov 11 13:13:17.610795 2025] [:error] [pid 59670:tid 59682] [client 173.239.214.97:65459] [client 173.239.214.97] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/.well-known/acme-challenge/"] [unique_id "aRLF7ak2Cnts0y-hpfrSkQAAAIk"]
[Tue Nov 11 13:13:18.491081 2025] [:error] [pid 53414:tid 53419] [client 173.239.214.125:42977] [client 173.239.214.125] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/new.php"] [unique_id "aRLF7gs6pHd_Z5oc1edK_gAAAQM"]
[Tue Nov 11 13:13:19.373500 2025] [:error] [pid 53414:tid 53432] [client 173.239.214.125:28043] [client 173.239.214.125] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/radio.php"] [unique_id "aRLF7ws6pHd_Z5oc1edLAAAAARA"]
[Tue Nov 11 13:13:20.260979 2025] [:error] [pid 53449:tid 53465] [client 173.239.214.122:26645] [client 173.239.214.122] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/uploads/2024/index.php"] [unique_id "aRLF8Npz08j5NoUSzp8FXwAAAUs"]
[Tue Nov 11 13:13:21.142944 2025] [:error] [pid 53414:tid 53416] [client 173.239.214.117:44721] [client 173.239.214.117] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/cgi-bin/about.php"] [unique_id "aRLF8Qs6pHd_Z5oc1edLBAAAAQA"]
[Tue Nov 11 13:13:22.021553 2025] [:error] [pid 53355:tid 53369] [client 173.239.214.103:29375] [client 173.239.214.103] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/js/widgets/index.php"] [unique_id "aRLF8oB5X5A3rMc4_nAPIwAAAAs"]
[Tue Nov 11 13:13:22.898484 2025] [:error] [pid 53356:tid 53395] [client 45.131.195.225:27443] [client 45.131.195.225] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/class.php"] [unique_id "aRLF8ukdmt0kzjVcUN97-QAAAEo"]
[Tue Nov 11 13:13:23.783585 2025] [:error] [pid 59670:tid 59674] [client 173.239.214.115:64571] [client 173.239.214.115] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-trackback.php"] [unique_id "aRLF86k2Cnts0y-hpfrSngAAAIE"]
[Tue Nov 11 13:13:24.670122 2025] [:error] [pid 59670:tid 59691] [client 173.239.214.99:35721] [client 173.239.214.99] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/includes/about.php"] [unique_id "aRLF9Kk2Cnts0y-hpfrSogAAAJI"]
[Tue Nov 11 13:13:25.562956 2025] [:error] [pid 53356:tid 53387] [client 173.239.214.117:40417] [client 173.239.214.117] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/system.php"] [unique_id "aRLF9ekdmt0kzjVcUN97_AAAAEI"]
[Tue Nov 11 13:13:27.475145 2025] [:error] [pid 53356:tid 53390] [client 173.239.214.126:61755] [client 173.239.214.126] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-file.php"] [unique_id "aRLF9-kdmt0kzjVcUN97_wAAAEU"]
[Tue Nov 11 13:13:28.414896 2025] [:error] [pid 53414:tid 53420] [client 173.239.214.102:44705] [client 173.239.214.102] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/bless.php"] [unique_id "aRLF-As6pHd_Z5oc1edLEQAAAQQ"]
[Tue Nov 11 13:13:29.316894 2025] [:error] [pid 59670:tid 59678] [client 173.239.214.86:61029] [client 173.239.214.86] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/buy.php"] [unique_id "aRLF-ak2Cnts0y-hpfrSqgAAAIU"]
[Tue Nov 11 13:13:30.208471 2025] [:error] [pid 53356:tid 53387] [client 173.239.214.118:62807] [client 173.239.214.118] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/simple.php"] [unique_id "aRLF-ukdmt0kzjVcUN98CAAAAEI"]
[Tue Nov 11 13:13:31.097149 2025] [:error] [pid 53449:tid 53464] [client 45.131.195.225:22911] [client 45.131.195.225] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/languages/wp-login.php"] [unique_id "aRLF-9pz08j5NoUSzp8FbQAAAUo"]
[Tue Nov 11 13:13:31.987461 2025] [:error] [pid 59670:tid 59688] [client 173.239.214.120:22005] [client 173.239.214.120] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/xleet.php"] [unique_id "aRLF-6k2Cnts0y-hpfrSrQAAAI8"]
[Tue Nov 11 13:13:32.870627 2025] [:error] [pid 53414:tid 53427] [client 173.239.214.119:40029] [client 173.239.214.119] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-admin.php"] [unique_id "aRLF_As6pHd_Z5oc1edLFwAAAQs"]
[Tue Nov 11 13:13:34.763607 2025] [:error] [pid 53356:tid 53385] [client 173.239.214.93:25877] [client 173.239.214.93] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/themes/index.php"] [unique_id "aRLF_ukdmt0kzjVcUN98FwAAAEA"]
[Tue Nov 11 13:13:35.648933 2025] [:error] [pid 53356:tid 53402] [client 173.239.214.86:50491] [client 173.239.214.86] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/linkpreview/db.php"] [unique_id "aRLF_-kdmt0kzjVcUN98GgAAAFE"]
[Tue Nov 11 13:13:37.766569 2025] [:error] [pid 53449:tid 53456] [client 173.239.214.117:39367] [client 173.239.214.117] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/ss.php"] [unique_id "aRLGAdpz08j5NoUSzp8FfgAAAUI"]
[Tue Nov 11 13:13:38.646582 2025] [:error] [pid 53355:tid 53375] [client 173.239.214.124:38721] [client 173.239.214.124] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/includes/admin-ajax.php"] [unique_id "aRLGAoB5X5A3rMc4_nAPTQAAABE"]
[Tue Nov 11 13:13:39.535406 2025] [:error] [pid 53356:tid 53388] [client 173.239.214.115:53865] [client 173.239.214.115] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/WordPressCore/include.php"] [unique_id "aRLGA-kdmt0kzjVcUN98MQAAAEM"]
[Tue Nov 11 13:13:40.423928 2025] [:error] [pid 53449:tid 53454] [client 173.239.214.98:44005] [client 173.239.214.98] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/admin.php"] [unique_id "aRLGBNpz08j5NoUSzp8FhwAAAUA"]
[Tue Nov 11 13:13:41.317209 2025] [:error] [pid 53356:tid 53408] [client 173.239.214.94:41519] [client 173.239.214.94] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/about.php"] [unique_id "aRLGBekdmt0kzjVcUN98NAAAAFc"]
[Tue Nov 11 13:13:42.196507 2025] [:error] [pid 53449:tid 53464] [client 173.239.214.88:57767] [client 173.239.214.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/upgrade.php"] [unique_id "aRLGBtpz08j5NoUSzp8FiQAAAUo"]
[Tue Nov 11 13:13:43.082951 2025] [:error] [pid 53449:tid 53477] [client 173.239.214.89:56183] [client 173.239.214.89] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/block-bindings/"] [unique_id "aRLGB9pz08j5NoUSzp8FiwAAAVc"]
[Tue Nov 11 13:13:43.964188 2025] [:error] [pid 59670:tid 59696] [client 173.239.214.124:58381] [client 173.239.214.124] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/webdb.php"] [unique_id "aRLGB6k2Cnts0y-hpfrSwAAAAJc"]
[Tue Nov 11 13:13:44.874799 2025] [:error] [pid 53414:tid 53421] [client 173.239.214.121:59889] [client 173.239.214.121] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/admin/index.php"] [unique_id "aRLGCAs6pHd_Z5oc1edLQgAAAQU"]
[Tue Nov 11 13:13:45.757587 2025] [:error] [pid 59670:tid 59677] [client 173.239.214.127:40285] [client 173.239.214.127] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "aRLGCak2Cnts0y-hpfrSxgAAAIQ"]
[Tue Nov 11 13:13:46.644875 2025] [:error] [pid 59670:tid 59679] [client 173.239.214.98:37429] [client 173.239.214.98] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/ini.php"] [unique_id "aRLGCqk2Cnts0y-hpfrSygAAAIY"]
[Tue Nov 11 13:13:47.535532 2025] [:error] [pid 59670:tid 59685] [client 173.239.214.98:21235] [client 173.239.214.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aRLGC6k2Cnts0y-hpfrS0QAAAIw"]
[Tue Nov 11 13:13:48.449028 2025] [:error] [pid 53356:tid 53392] [client 173.239.214.115:22069] [client 173.239.214.115] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/load.php"] [unique_id "aRLGDOkdmt0kzjVcUN98SAAAAEc"]
[Tue Nov 11 13:13:49.566913 2025] [:error] [pid 53414:tid 53427] [client 173.239.214.118:32735] [client 173.239.214.118] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/version.php"] [unique_id "aRLGDQs6pHd_Z5oc1edLWAAAAQs"]
[Tue Nov 11 13:13:50.441318 2025] [:error] [pid 53356:tid 53394] [client 173.239.214.83:41167] [client 173.239.214.83] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/packed.php"] [unique_id "aRLGDukdmt0kzjVcUN98TwAAAEk"]
[Tue Nov 11 13:13:51.316423 2025] [:error] [pid 53449:tid 53458] [client 173.239.214.115:25587] [client 173.239.214.115] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/Text/Diff/Renderer/"] [unique_id "aRLGD9pz08j5NoUSzp8FlAAAAUQ"]
[Tue Nov 11 13:13:52.226785 2025] [:error] [pid 59670:tid 59683] [client 173.239.214.94:46331] [client 173.239.214.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aRLGEKk2Cnts0y-hpfrS4wAAAIo"]
[Tue Nov 11 13:13:53.106538 2025] [:error] [pid 59670:tid 59675] [client 173.239.214.114:42741] [client 173.239.214.114] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/bypass.php"] [unique_id "aRLGEak2Cnts0y-hpfrS6gAAAII"]
[Tue Nov 11 13:13:53.987911 2025] [:error] [pid 59670:tid 59689] [client 173.239.214.108:47753] [client 173.239.214.108] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/readme.php"] [unique_id "aRLGEak2Cnts0y-hpfrS8gAAAJA"]
[Tue Nov 11 13:13:54.862562 2025] [:error] [pid 53449:tid 53454] [client 173.239.214.118:39275] [client 173.239.214.118] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/images/"] [unique_id "aRLGEtpz08j5NoUSzp8FnQAAAUA"]
[Tue Nov 11 13:13:55.747565 2025] [:error] [pid 59670:tid 59691] [client 45.131.195.68:21193] [client 45.131.195.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aRLGE6k2Cnts0y-hpfrS9QAAAJI"]
[Tue Nov 11 13:13:57.637321 2025] [:error] [pid 53449:tid 53475] [client 173.239.214.93:35313] [client 173.239.214.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "paramountbaldivis.com"] [uri "/tiny.php"] [unique_id "aRLGFdpz08j5NoUSzp8FnwAAAVU"]
[Tue Nov 11 13:13:58.531530 2025] [:error] [pid 53449:tid 53461] [client 173.239.214.119:65509] [client 173.239.214.119] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content.php"] [unique_id "aRLGFtpz08j5NoUSzp8FogAAAUc"]
[Tue Nov 11 13:14:00.666445 2025] [:error] [pid 53449:tid 53472] [client 173.239.214.110:20977] [client 173.239.214.110] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/moon.php"] [unique_id "aRLGGNpz08j5NoUSzp8FqAAAAVI"]
[Tue Nov 11 13:14:01.571673 2025] [:error] [pid 53356:tid 53403] [client 173.239.214.88:56861] [client 173.239.214.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/chosen.php"] [unique_id "aRLGGekdmt0kzjVcUN98bAAAAFI"]
[Tue Nov 11 13:14:02.623974 2025] [:error] [pid 53355:tid 53362] [client 173.239.214.104:42715] [client 173.239.214.104] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/files.php"] [unique_id "aRLGGoB5X5A3rMc4_nAPgAAAAAQ"]
[Tue Nov 11 13:14:03.661726 2025] [:error] [pid 59670:tid 59677] [client 173.239.214.112:49569] [client 173.239.214.112] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/index2.php"] [unique_id "aRLGG6k2Cnts0y-hpfrTDAAAAIQ"]
[Tue Nov 11 13:14:04.554224 2025] [:error] [pid 59670:tid 59675] [client 173.239.214.90:26769] [client 173.239.214.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/license.php"] [unique_id "aRLGHKk2Cnts0y-hpfrTEAAAAII"]
[Tue Nov 11 13:14:05.442932 2025] [:error] [pid 53414:tid 53416] [client 173.239.214.128:38369] [client 173.239.214.128] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/class.api.php"] [unique_id "aRLGHQs6pHd_Z5oc1edLeAAAAQA"]
[Tue Nov 11 13:14:06.318586 2025] [:error] [pid 59670:tid 59690] [client 173.239.214.88:39595] [client 173.239.214.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/radio.php"] [unique_id "aRLGHqk2Cnts0y-hpfrTEwAAAJE"]
[Tue Nov 11 13:14:07.198464 2025] [:error] [pid 59670:tid 59693] [client 173.239.214.117:34617] [client 173.239.214.117] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/files/"] [unique_id "aRLGH6k2Cnts0y-hpfrTFgAAAJQ"]
[Tue Nov 11 13:14:08.094758 2025] [:error] [pid 53355:tid 53370] [client 173.239.214.126:29799] [client 173.239.214.126] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/"] [unique_id "aRLGIIB5X5A3rMc4_nAPjAAAAAw"]
[Tue Nov 11 13:14:08.965546 2025] [:error] [pid 53414:tid 53430] [client 173.239.214.117:55025] [client 173.239.214.117] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/widgets/"] [unique_id "aRLGIAs6pHd_Z5oc1edLfQAAAQ4"]
[Tue Nov 11 13:14:09.836383 2025] [:error] [pid 59670:tid 59677] [client 173.239.214.88:39811] [client 173.239.214.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/product.php"] [unique_id "aRLGIak2Cnts0y-hpfrTIgAAAIQ"]
[Tue Nov 11 13:14:10.722674 2025] [:error] [pid 53414:tid 53421] [client 173.239.214.123:21721] [client 173.239.214.123] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp.php"] [unique_id "aRLGIgs6pHd_Z5oc1edLggAAAQU"]
[Tue Nov 11 13:14:11.606476 2025] [:error] [pid 59670:tid 59682] [client 173.239.214.113:58363] [client 173.239.214.113] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "aRLGI6k2Cnts0y-hpfrTJQAAAIk"]
[Tue Nov 11 13:14:14.038013 2025] [:error] [pid 59670:tid 59690] [client 173.239.214.119:30731] [client 173.239.214.119] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/theme-compat/"] [unique_id "aRLGJqk2Cnts0y-hpfrTKQAAAJE"]
[Tue Nov 11 13:14:14.914543 2025] [:error] [pid 53355:tid 53381] [client 173.239.214.110:37865] [client 173.239.214.110] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/menu.php"] [unique_id "aRLGJoB5X5A3rMc4_nAPmQAAABc"]
[Tue Nov 11 13:14:15.816927 2025] [:error] [pid 59670:tid 59693] [client 173.239.214.84:43933] [client 173.239.214.84] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/edit.php"] [unique_id "aRLGJ6k2Cnts0y-hpfrTLAAAAJQ"]
[Tue Nov 11 13:14:16.690677 2025] [:error] [pid 53449:tid 53467] [client 173.239.214.123:63997] [client 173.239.214.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/images/about.php"] [unique_id "aRLGKNpz08j5NoUSzp8FwwAAAU0"]
[Tue Nov 11 13:14:17.596204 2025] [:error] [pid 59670:tid 59682] [client 45.131.195.225:55679] [client 45.131.195.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/about.php"] [unique_id "aRLGKak2Cnts0y-hpfrTMgAAAIk"]
[Tue Nov 11 13:14:18.486757 2025] [:error] [pid 53356:tid 53403] [client 45.131.195.68:65457] [client 45.131.195.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/certificates/index.php"] [unique_id "aRLGKukdmt0kzjVcUN98fgAAAFI"]
[Tue Nov 11 13:14:19.365062 2025] [:error] [pid 53449:tid 53470] [client 45.131.195.221:40229] [client 45.131.195.221] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aRLGK9pz08j5NoUSzp8FxQAAAVA"]
[Tue Nov 11 13:14:20.253676 2025] [:error] [pid 53449:tid 53454] [client 173.239.214.81:51019] [client 173.239.214.81] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/contact.php"] [unique_id "aRLGLNpz08j5NoUSzp8FyAAAAUA"]
[Tue Nov 11 13:14:21.125603 2025] [:error] [pid 53355:tid 53372] [client 173.239.214.104:49175] [client 173.239.214.104] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/a.php"] [unique_id "aRLGLYB5X5A3rMc4_nAPpAAAAA4"]
[Tue Nov 11 13:14:22.018522 2025] [:error] [pid 53355:tid 53380] [client 173.239.214.107:48433] [client 173.239.214.107] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/login.php"] [unique_id "aRLGLoB5X5A3rMc4_nAPpQAAABY"]
[Tue Nov 11 13:14:22.898662 2025] [:error] [pid 53449:tid 53463] [client 45.131.195.68:63759] [client 45.131.195.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/classwithtostring.php"] [unique_id "aRLGLtpz08j5NoUSzp8FzQAAAUk"]
[Tue Nov 11 13:14:23.781602 2025] [:error] [pid 53414:tid 53423] [client 173.239.214.90:34459] [client 173.239.214.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/pomo/index.php"] [unique_id "aRLGLws6pHd_Z5oc1edLkAAAAQc"]
[Tue Nov 11 13:14:24.672995 2025] [:error] [pid 53449:tid 53478] [client 173.239.214.103:43327] [client 173.239.214.103] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-Owl.php"] [unique_id "aRLGMNpz08j5NoUSzp8F0QAAAVg"]
[Tue Nov 11 13:14:25.552520 2025] [:error] [pid 53414:tid 53435] [client 173.239.214.81:47221] [client 173.239.214.81] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-config-sample.php"] [unique_id "aRLGMQs6pHd_Z5oc1edLkwAAARM"]
[Tue Nov 11 13:14:26.424926 2025] [:error] [pid 53414:tid 53429] [client 173.239.214.87:64381] [client 173.239.214.87] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/options.php"] [unique_id "aRLGMgs6pHd_Z5oc1edLlAAAAQ0"]
[Tue Nov 11 13:14:27.308772 2025] [:error] [pid 59670:tid 59681] [client 173.239.214.79:27861] [client 173.239.214.79] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/uploaded_script.php"] [unique_id "aRLGM6k2Cnts0y-hpfrTWwAAAIg"]
[Tue Nov 11 13:14:28.301121 2025] [:error] [pid 53355:tid 53377] [client 173.239.214.100:45991] [client 173.239.214.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/css/dist/components/index.php"] [unique_id "aRLGNIB5X5A3rMc4_nAPrAAAABM"]
[Tue Nov 11 13:14:29.203465 2025] [:error] [pid 53355:tid 53381] [client 173.239.214.85:52489] [client 173.239.214.85] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/as.php"] [unique_id "aRLGNYB5X5A3rMc4_nAPsQAAABc"]
[Tue Nov 11 13:14:30.123800 2025] [:error] [pid 53414:tid 53432] [client 173.239.214.90:44673] [client 173.239.214.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/item.php"] [unique_id "aRLGNgs6pHd_Z5oc1edLmAAAARA"]
[Tue Nov 11 13:14:31.128433 2025] [:error] [pid 53355:tid 53363] [client 173.239.214.117:42217] [client 173.239.214.117] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/uploads/"] [unique_id "aRLGN4B5X5A3rMc4_nAPtwAAAAU"]
[Tue Nov 11 13:14:32.014601 2025] [:error] [pid 53449:tid 53458] [client 173.239.214.127:61705] [client 173.239.214.127] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/uploads/about.php"] [unique_id "aRLGONpz08j5NoUSzp8F5QAAAUQ"]
[Tue Nov 11 13:14:32.890193 2025] [:error] [pid 53414:tid 53417] [client 173.239.214.121:40017] [client 173.239.214.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/mah.php"] [unique_id "aRLGOAs6pHd_Z5oc1edLoQAAAQE"]
[Tue Nov 11 13:14:33.771852 2025] [:error] [pid 53355:tid 53381] [client 173.239.214.92:43085] [client 173.239.214.92] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/404.php"] [unique_id "aRLGOYB5X5A3rMc4_nAPugAAABc"]
[Tue Nov 11 13:14:34.655165 2025] [:error] [pid 53355:tid 53375] [client 173.239.214.93:31059] [client 173.239.214.93] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/options.php"] [unique_id "aRLGOoB5X5A3rMc4_nAPvQAAABE"]
[Tue Nov 11 13:14:35.540728 2025] [:error] [pid 53414:tid 53423] [client 173.239.214.88:33451] [client 173.239.214.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aRLGOws6pHd_Z5oc1edLqgAAAQc"]
[Tue Nov 11 13:14:36.418063 2025] [:error] [pid 59670:tid 59682] [client 173.239.214.101:38295] [client 173.239.214.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/Text/chosen.php"] [unique_id "aRLGPKk2Cnts0y-hpfrTawAAAIk"]
[Tue Nov 11 13:14:37.299833 2025] [:error] [pid 53414:tid 53434] [client 173.239.214.97:54155] [client 173.239.214.97] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/doc.php"] [unique_id "aRLGPQs6pHd_Z5oc1edLsAAAARI"]
[Tue Nov 11 13:14:38.182105 2025] [:error] [pid 59670:tid 59677] [client 173.239.214.79:20101] [client 173.239.214.79] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/elp.php"] [unique_id "aRLGPqk2Cnts0y-hpfrTbQAAAIQ"]
[Tue Nov 11 13:14:39.057117 2025] [:error] [pid 53355:tid 53361] [client 173.239.214.95:41197] [client 173.239.214.95] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/yasnu.php"] [unique_id "aRLGP4B5X5A3rMc4_nAPyQAAAAM"]
[Tue Nov 11 13:14:39.935006 2025] [:error] [pid 59670:tid 59680] [client 173.239.214.108:43179] [client 173.239.214.108] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/css/index.php"] [unique_id "aRLGP6k2Cnts0y-hpfrTdAAAAIc"]
[Tue Nov 11 13:14:40.813385 2025] [:error] [pid 53355:tid 53368] [client 173.239.214.120:53573] [client 173.239.214.120] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-signin.php"] [unique_id "aRLGQIB5X5A3rMc4_nAPywAAAAo"]
[Tue Nov 11 13:14:41.689428 2025] [:error] [pid 53356:tid 53409] [client 173.239.214.119:33009] [client 173.239.214.119] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/.well-known/"] [unique_id "aRLGQekdmt0kzjVcUN98pgAAAFg"]
[Tue Nov 11 13:14:42.570425 2025] [:error] [pid 53449:tid 53454] [client 173.239.214.94:36083] [client 173.239.214.94] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/about.php"] [unique_id "aRLGQtpz08j5NoUSzp8F9AAAAUA"]
[Tue Nov 11 13:14:43.446014 2025] [:error] [pid 53449:tid 53463] [client 173.239.214.104:49805] [client 173.239.214.104] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/uploads/wp.php"] [unique_id "aRLGQ9pz08j5NoUSzp8F9gAAAUk"]
[Tue Nov 11 13:14:44.338544 2025] [:error] [pid 59670:tid 59675] [client 173.239.214.124:33195] [client 173.239.214.124] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/zasf"] [unique_id "aRLGRKk2Cnts0y-hpfrTfQAAAII"]
[Tue Nov 11 13:14:44.653870 2025] [:error] [pid 53355:tid 53382] [client 192.178.4.101:41844] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLGRIB5X5A3rMc4_nAP2gAAABg"]
[Tue Nov 11 13:14:45.222390 2025] [:error] [pid 53356:tid 53402] [client 173.239.214.108:43347] [client 173.239.214.108] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/ty.php"] [unique_id "aRLGRekdmt0kzjVcUN98rAAAAFE"]
[Tue Nov 11 13:14:46.096785 2025] [:error] [pid 53414:tid 53419] [client 173.239.214.121:53303] [client 173.239.214.121] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/PHPMailer/"] [unique_id "aRLGRgs6pHd_Z5oc1edL0QAAAQM"]
[Tue Nov 11 13:14:46.972637 2025] [:error] [pid 53414:tid 53424] [client 173.239.214.106:32481] [client 173.239.214.106] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRLGRgs6pHd_Z5oc1edL5AAAAQg"]
[Tue Nov 11 13:14:47.855390 2025] [:error] [pid 59670:tid 59696] [client 45.131.195.221:20715] [client 45.131.195.221] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/chosen/function.php"] [unique_id "aRLGR6k2Cnts0y-hpfrTgwAAAJc"]
[Tue Nov 11 13:14:48.728854 2025] [:error] [pid 53449:tid 53476] [client 45.131.195.68:48827] [client 45.131.195.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/themes/twentytwentyfour/"] [unique_id "aRLGSNpz08j5NoUSzp8F_QAAAVY"]
[Tue Nov 11 13:14:49.399606 2025] [:error] [pid 53355:tid 53382] [client 192.178.4.101:51056] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLGSYB5X5A3rMc4_nAP6gAAABg"]
[Tue Nov 11 13:14:49.606503 2025] [:error] [pid 53355:tid 53361] [client 173.239.214.81:40607] [client 173.239.214.81] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/bk/index.php"] [unique_id "aRLGSYB5X5A3rMc4_nAP7AAAAAM"]
[Tue Nov 11 13:14:50.480884 2025] [:error] [pid 53449:tid 53463] [client 173.239.214.95:62085] [client 173.239.214.95] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/rest-api/search/"] [unique_id "aRLGStpz08j5NoUSzp8GAQAAAUk"]
[Tue Nov 11 13:14:51.358538 2025] [:error] [pid 53414:tid 53430] [client 173.239.214.119:28003] [client 173.239.214.119] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/classic-editor/wp-login.php"] [unique_id "aRLGSws6pHd_Z5oc1edL-gAAAQ4"]
[Tue Nov 11 13:14:52.232760 2025] [:error] [pid 53449:tid 53465] [client 173.239.214.84:65295] [client 173.239.214.84] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/sitemaps/"] [unique_id "aRLGTNpz08j5NoUSzp8GAwAAAUs"]
[Tue Nov 11 13:14:52.332667 2025] [:error] [pid 53356:tid 53394] [client 192.178.4.101:56341] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLGTOkdmt0kzjVcUN98tQAAAEk"]
[Tue Nov 11 13:14:53.115629 2025] [:error] [pid 53355:tid 53359] [client 173.239.214.109:49969] [client 173.239.214.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aRLGTYB5X5A3rMc4_nAP8AAAAAE"]
[Tue Nov 11 13:14:54.054977 2025] [:error] [pid 53449:tid 53478] [client 173.239.214.106:43997] [client 173.239.214.106] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/css/colors/index.php"] [unique_id "aRLGTtpz08j5NoUSzp8GBgAAAVg"]
[Tue Nov 11 13:14:54.951498 2025] [:error] [pid 59670:tid 59678] [client 173.239.214.90:52639] [client 173.239.214.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/x.php"] [unique_id "aRLGTqk2Cnts0y-hpfrTkAAAAIU"]
[Tue Nov 11 13:14:55.096003 2025] [:error] [pid 53449:tid 53455] [client 192.178.4.101:62236] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLGT9pz08j5NoUSzp8GCQAAAUE"]
[Tue Nov 11 13:14:55.829830 2025] [:error] [pid 59670:tid 59675] [client 45.131.195.221:61707] [client 45.131.195.221] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/classwithtostring.php"] [unique_id "aRLGT6k2Cnts0y-hpfrTkwAAAII"]
[Tue Nov 11 13:14:56.719929 2025] [:error] [pid 59670:tid 59677] [client 173.239.214.110:65329] [client 173.239.214.110] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/js/"] [unique_id "aRLGUKk2Cnts0y-hpfrTlgAAAIQ"]
[Tue Nov 11 13:14:57.624498 2025] [:error] [pid 53355:tid 53363] [client 173.239.214.112:36025] [client 173.239.214.112] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/files/index.php"] [unique_id "aRLGUYB5X5A3rMc4_nAP9wAAAAU"]
[Tue Nov 11 13:14:58.500073 2025] [:error] [pid 53356:tid 53385] [client 173.239.214.118:65167] [client 173.239.214.118] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/worksec.php"] [unique_id "aRLGUukdmt0kzjVcUN98xAAAAEA"]
[Tue Nov 11 13:14:59.404063 2025] [:error] [pid 53356:tid 53402] [client 173.239.214.90:63301] [client 173.239.214.90] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-signup.php"] [unique_id "aRLGU-kdmt0kzjVcUN98xgAAAFE"]
[Tue Nov 11 13:15:00.278953 2025] [:error] [pid 53414:tid 53434] [client 173.239.214.85:32883] [client 173.239.214.85] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-header.php"] [unique_id "aRLGVAs6pHd_Z5oc1edMCgAAARI"]
[Tue Nov 11 13:15:01.179491 2025] [:error] [pid 59670:tid 59684] [client 45.131.195.68:22229] [client 45.131.195.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/cache/index.php"] [unique_id "aRLGVak2Cnts0y-hpfrTmgAAAIs"]
[Tue Nov 11 13:15:02.104531 2025] [:error] [pid 53355:tid 53358] [client 173.239.214.94:22835] [client 173.239.214.94] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/mah.php"] [unique_id "aRLGVoB5X5A3rMc4_nAP_AAAAAA"]
[Tue Nov 11 13:15:03.170603 2025] [:error] [pid 53355:tid 53376] [client 173.239.214.119:55641] [client 173.239.214.119] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/Text/Diff/Engine/"] [unique_id "aRLGV4B5X5A3rMc4_nAP_gAAABI"]
[Tue Nov 11 13:15:04.091604 2025] [:error] [pid 53355:tid 53372] [client 173.239.214.102:61169] [client 173.239.214.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/Text/index.php"] [unique_id "aRLGWIB5X5A3rMc4_nAQAAAAAA4"]
[Tue Nov 11 13:15:05.035081 2025] [:error] [pid 53449:tid 53475] [client 173.239.214.122:45031] [client 173.239.214.122] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/1.php"] [unique_id "aRLGWdpz08j5NoUSzp8GHAAAAVU"]
[Tue Nov 11 13:15:05.924051 2025] [:error] [pid 53356:tid 53390] [client 173.239.214.88:21765] [client 173.239.214.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/config.php"] [unique_id "aRLGWekdmt0kzjVcUN981QAAAEU"]
[Tue Nov 11 13:15:06.826456 2025] [:error] [pid 53356:tid 53389] [client 173.239.214.84:33285] [client 173.239.214.84] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-configs.php"] [unique_id "aRLGWukdmt0kzjVcUN982AAAAEQ"]
[Tue Nov 11 13:15:07.713629 2025] [:error] [pid 53355:tid 53373] [client 173.239.214.83:57463] [client 173.239.214.83] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/shell.php"] [unique_id "aRLGW4B5X5A3rMc4_nAQBAAAAA8"]
[Tue Nov 11 13:15:08.612706 2025] [:error] [pid 53355:tid 53365] [client 173.239.214.116:48453] [client 173.239.214.116] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/uploads/index.php"] [unique_id "aRLGXIB5X5A3rMc4_nAQBgAAAAc"]
[Tue Nov 11 13:15:09.496698 2025] [:error] [pid 53355:tid 53361] [client 173.239.214.32:39729] [client 173.239.214.32] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/index/function.php"] [unique_id "aRLGXYB5X5A3rMc4_nAQCQAAAAM"]
[Tue Nov 11 13:15:10.384793 2025] [:error] [pid 59670:tid 59675] [client 173.239.214.111:44567] [client 173.239.214.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/assets/about.php"] [unique_id "aRLGXqk2Cnts0y-hpfrTqgAAAII"]
[Tue Nov 11 13:15:11.270890 2025] [:error] [pid 53355:tid 53378] [client 173.239.214.83:58341] [client 173.239.214.83] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/leafmailer.php"] [unique_id "aRLGX4B5X5A3rMc4_nAQEAAAABQ"]
[Tue Nov 11 13:15:12.232966 2025] [:error] [pid 53414:tid 53418] [client 173.239.214.101:54369] [client 173.239.214.101] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/wp-conflg.php"] [unique_id "aRLGYAs6pHd_Z5oc1edMHwAAAQI"]
[Tue Nov 11 13:15:13.109470 2025] [:error] [pid 53449:tid 53463] [client 173.239.214.81:27061] [client 173.239.214.81] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/post.php"] [unique_id "aRLGYdpz08j5NoUSzp8GKwAAAUk"]
[Tue Nov 11 13:15:14.019452 2025] [:error] [pid 53356:tid 53398] [client 45.131.195.68:38651] [client 45.131.195.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/customize.php"] [unique_id "aRLGYukdmt0kzjVcUN99EQAAAE0"]
[Tue Nov 11 13:15:14.939259 2025] [:error] [pid 53414:tid 53425] [client 173.239.214.84:32461] [client 173.239.214.84] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/css/admin.php"] [unique_id "aRLGYgs6pHd_Z5oc1edMNQAAAQk"]
[Tue Nov 11 13:15:15.981272 2025] [:error] [pid 53449:tid 53466] [client 173.239.214.116:54713] [client 173.239.214.116] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/themes/twentyfive/include.php"] [unique_id "aRLGY9pz08j5NoUSzp8GMAAAAUw"]
[Tue Nov 11 13:15:16.917913 2025] [:error] [pid 53356:tid 53385] [client 173.239.214.94:20559] [client 173.239.214.94] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/sodium_compat/lib/"] [unique_id "aRLGZOkdmt0kzjVcUN99FwAAAEA"]
[Tue Nov 11 13:15:17.799664 2025] [:error] [pid 53449:tid 53470] [client 173.239.214.115:23019] [client 173.239.214.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/rest-api/fields/index.php"] [unique_id "aRLGZdpz08j5NoUSzp8GMgAAAVA"]
[Tue Nov 11 13:15:18.699423 2025] [:error] [pid 53449:tid 53474] [client 173.239.214.111:59859] [client 173.239.214.111] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aRLGZtpz08j5NoUSzp8GMwAAAVQ"]
[Tue Nov 11 13:15:19.576537 2025] [:error] [pid 53449:tid 53454] [client 173.239.214.79:35193] [client 173.239.214.79] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-links.php"] [unique_id "aRLGZ9pz08j5NoUSzp8GNQAAAUA"]
[Tue Nov 11 13:15:20.477161 2025] [:error] [pid 59670:tid 59690] [client 173.239.214.91:55243] [client 173.239.214.91] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/xwebshell.php"] [unique_id "aRLGaKk2Cnts0y-hpfrT-QAAAJE"]
[Tue Nov 11 13:15:21.360948 2025] [:error] [pid 53414:tid 53433] [client 173.239.214.98:28941] [client 173.239.214.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/Requests/index.php"] [unique_id "aRLGaQs6pHd_Z5oc1edMRQAAARE"]
[Tue Nov 11 13:15:23.621458 2025] [:error] [pid 59670:tid 59681] [client 173.239.214.82:55289] [client 173.239.214.82] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/item.php"] [unique_id "aRLGa6k2Cnts0y-hpfrUAgAAAIg"]
[Tue Nov 11 13:15:24.548919 2025] [:error] [pid 53356:tid 53406] [client 173.239.214.91:63617] [client 173.239.214.91] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/w.php"] [unique_id "aRLGbOkdmt0kzjVcUN99LgAAAFU"]
[Tue Nov 11 13:15:25.457969 2025] [:error] [pid 53356:tid 53389] [client 173.239.214.110:60169] [client 173.239.214.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/js/crop/index.php"] [unique_id "aRLGbekdmt0kzjVcUN99LwAAAEQ"]
[Tue Nov 11 13:15:26.370283 2025] [:error] [pid 53449:tid 53455] [client 173.239.214.92:43821] [client 173.239.214.92] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/js/dist/"] [unique_id "aRLGbtpz08j5NoUSzp8GOQAAAUE"]
[Tue Nov 11 13:15:27.257581 2025] [:error] [pid 53356:tid 53390] [client 173.239.214.103:44343] [client 173.239.214.103] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/update/g.php"] [unique_id "aRLGb-kdmt0kzjVcUN99NAAAAEU"]
[Tue Nov 11 13:15:28.140258 2025] [:error] [pid 53449:tid 53465] [client 173.239.214.88:26321] [client 173.239.214.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/maint/wp-login.php"] [unique_id "aRLGcNpz08j5NoUSzp8GOwAAAUs"]
[Tue Nov 11 13:15:29.227587 2025] [:error] [pid 59670:tid 59685] [client 173.239.214.117:52969] [client 173.239.214.117] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aRLGcak2Cnts0y-hpfrUEQAAAIw"]
[Tue Nov 11 13:15:30.121773 2025] [:error] [pid 59670:tid 59682] [client 173.239.214.106:32273] [client 173.239.214.106] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/b.php"] [unique_id "aRLGcqk2Cnts0y-hpfrUFgAAAIk"]
[Tue Nov 11 13:15:31.025447 2025] [:error] [pid 53449:tid 53470] [client 173.239.214.117:57089] [client 173.239.214.117] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/.well-known/pki-validation/index.php"] [unique_id "aRLGc9pz08j5NoUSzp8GPgAAAVA"]
[Tue Nov 11 13:15:31.997544 2025] [:error] [pid 59670:tid 59685] [client 173.239.214.94:20941] [client 173.239.214.94] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/js/privacy-tools.min.php"] [unique_id "aRLGc6k2Cnts0y-hpfrUGgAAAIw"]
[Tue Nov 11 13:15:32.877846 2025] [:error] [pid 53449:tid 53463] [client 173.239.214.114:36863] [client 173.239.214.114] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/css/index.php"] [unique_id "aRLGdNpz08j5NoUSzp8GQgAAAUk"]
[Tue Nov 11 13:15:33.791109 2025] [:error] [pid 59670:tid 59684] [client 173.239.214.119:57135] [client 173.239.214.119] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/themes/twentytwenty/404.php"] [unique_id "aRLGdak2Cnts0y-hpfrUIgAAAIs"]
[Tue Nov 11 13:15:34.690234 2025] [:error] [pid 53449:tid 53464] [client 173.239.214.113:63127] [client 173.239.214.113] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/includes/wp-login.php"] [unique_id "aRLGdtpz08j5NoUSzp8GRgAAAUo"]
[Tue Nov 11 13:15:35.600916 2025] [:error] [pid 59670:tid 59686] [client 173.239.214.106:36759] [client 173.239.214.106] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/js/chosen.php"] [unique_id "aRLGd6k2Cnts0y-hpfrUJgAAAI0"]
[Tue Nov 11 13:15:36.487136 2025] [:error] [pid 59670:tid 59683] [client 173.239.214.110:50869] [client 173.239.214.110] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "aRLGeKk2Cnts0y-hpfrUKgAAAIo"]
[Tue Nov 11 13:15:39.065529 2025] [:error] [pid 59670:tid 59673] [client 173.239.214.116:48319] [client 173.239.214.116] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/function/function.php"] [unique_id "aRLGe6k2Cnts0y-hpfrUOQAAAIA"]
[Tue Nov 11 13:15:39.945946 2025] [:error] [pid 59670:tid 59688] [client 45.131.195.68:28847] [client 45.131.195.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/cc.php"] [unique_id "aRLGe6k2Cnts0y-hpfrUPwAAAI8"]
[Tue Nov 11 13:15:40.821871 2025] [:error] [pid 53355:tid 53365] [client 173.239.214.128:62129] [client 173.239.214.128] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/flower.php"] [unique_id "aRLGfIB5X5A3rMc4_nAQQgAAAAc"]
[Tue Nov 11 13:15:41.696960 2025] [:error] [pid 53355:tid 53363] [client 173.239.214.126:49089] [client 173.239.214.126] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/autoload_classmap.php"] [unique_id "aRLGfYB5X5A3rMc4_nAQRQAAAAU"]
[Tue Nov 11 13:15:42.580362 2025] [:error] [pid 53449:tid 53459] [client 173.239.214.103:34889] [client 173.239.214.103] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/s.php"] [unique_id "aRLGftpz08j5NoUSzp8GVgAAAUU"]
[Tue Nov 11 13:15:43.463720 2025] [:error] [pid 53355:tid 53371] [client 173.239.214.120:46331] [client 173.239.214.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/blocks/about.php"] [unique_id "aRLGf4B5X5A3rMc4_nAQSAAAAA0"]
[Tue Nov 11 13:15:44.341535 2025] [:error] [pid 59670:tid 59673] [client 173.239.214.92:39285] [client 173.239.214.92] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/error.php"] [unique_id "aRLGgKk2Cnts0y-hpfrUUQAAAIA"]
[Tue Nov 11 13:15:45.217040 2025] [:error] [pid 59670:tid 59691] [client 173.239.214.124:54517] [client 173.239.214.124] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/shell/index.php"] [unique_id "aRLGgak2Cnts0y-hpfrUVgAAAJI"]
[Tue Nov 11 13:15:46.109657 2025] [:error] [pid 53356:tid 53399] [client 173.239.214.83:57321] [client 173.239.214.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/admin.php"] [unique_id "aRLGgukdmt0kzjVcUN99SgAAAE4"]
[Tue Nov 11 13:15:46.996802 2025] [:error] [pid 59670:tid 59697] [client 173.239.214.88:38175] [client 173.239.214.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/copypaths.php"] [unique_id "aRLGgqk2Cnts0y-hpfrUYQAAAJg"]
[Tue Nov 11 13:15:47.879534 2025] [:error] [pid 53355:tid 53368] [client 173.239.214.84:42505] [client 173.239.214.84] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wander.php"] [unique_id "aRLGg4B5X5A3rMc4_nAQUQAAAAo"]
[Tue Nov 11 13:15:49.984444 2025] [:error] [pid 53355:tid 53366] [client 173.239.214.89:60111] [client 173.239.214.89] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/2.php"] [unique_id "aRLGhYB5X5A3rMc4_nAQVgAAAAg"]
[Tue Nov 11 13:15:50.867855 2025] [:error] [pid 53414:tid 53417] [client 173.239.214.106:21077] [client 173.239.214.106] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/mainhosting/default.php"] [unique_id "aRLGhgs6pHd_Z5oc1edMbgAAAQE"]
[Tue Nov 11 13:15:51.755858 2025] [:error] [pid 53414:tid 53423] [client 173.239.214.83:58881] [client 173.239.214.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/themes.php"] [unique_id "aRLGhws6pHd_Z5oc1edMcAAAAQc"]
[Tue Nov 11 13:15:52.633792 2025] [:error] [pid 59670:tid 59686] [client 173.239.214.105:44579] [client 173.239.214.105] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/languages/themes/"] [unique_id "aRLGiKk2Cnts0y-hpfrUaQAAAI0"]
[Tue Nov 11 13:15:53.514372 2025] [:error] [pid 53355:tid 53362] [client 173.239.214.82:45839] [client 173.239.214.82] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/rest-api/endpoints/"] [unique_id "aRLGiYB5X5A3rMc4_nAQXQAAAAQ"]
[Tue Nov 11 13:15:54.391167 2025] [:error] [pid 53414:tid 53432] [client 45.131.195.225:36763] [client 45.131.195.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/widgets/include.php"] [unique_id "aRLGigs6pHd_Z5oc1edMdAAAARA"]
[Tue Nov 11 13:15:55.285507 2025] [:error] [pid 53449:tid 53454] [client 173.239.214.122:48693] [client 173.239.214.122] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/hello.php"] [unique_id "aRLGi9pz08j5NoUSzp8GbwAAAUA"]
[Tue Nov 11 13:15:56.166663 2025] [:error] [pid 53356:tid 53404] [client 45.131.195.68:39981] [client 45.131.195.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-activate.php"] [unique_id "aRLGjOkdmt0kzjVcUN99YwAAAFM"]
[Tue Nov 11 13:15:57.072062 2025] [:error] [pid 53355:tid 53381] [client 173.239.214.113:37891] [client 173.239.214.113] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/db.php"] [unique_id "aRLGjYB5X5A3rMc4_nAQZgAAABc"]
[Tue Nov 11 13:15:57.951486 2025] [:error] [pid 59670:tid 59674] [client 173.239.214.91:36639] [client 173.239.214.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/certificates/wp-conflg.php"] [unique_id "aRLGjak2Cnts0y-hpfrUeQAAAIE"]
[Tue Nov 11 13:15:58.864948 2025] [:error] [pid 53355:tid 53376] [client 173.239.214.82:64427] [client 173.239.214.82] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/byp.php"] [unique_id "aRLGjoB5X5A3rMc4_nAQZwAAABI"]
[Tue Nov 11 13:15:59.790808 2025] [:error] [pid 53355:tid 53365] [client 173.239.214.126:41849] [client 173.239.214.126] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/"] [unique_id "aRLGj4B5X5A3rMc4_nAQawAAAAc"]
[Tue Nov 11 13:16:00.672376 2025] [:error] [pid 53355:tid 53361] [client 173.239.214.85:46895] [client 173.239.214.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/pomo/wp-login.php"] [unique_id "aRLGkIB5X5A3rMc4_nAQbAAAAAM"]
[Tue Nov 11 13:16:01.548233 2025] [:error] [pid 53355:tid 53364] [client 173.239.214.107:51191] [client 173.239.214.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/wp-conflg.php"] [unique_id "aRLGkYB5X5A3rMc4_nAQbQAAAAY"]
[Tue Nov 11 13:16:02.460879 2025] [:error] [pid 59670:tid 59690] [client 173.239.214.122:28117] [client 173.239.214.122] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/inc/dnd-upload-cf7.php"] [unique_id "aRLGkqk2Cnts0y-hpfrUgQAAAJE"]
[Tue Nov 11 13:16:03.362814 2025] [:error] [pid 53414:tid 53433] [client 173.239.214.85:32871] [client 173.239.214.85] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/acf-theme-code-pro/acf_theme_code_pro.php"] [unique_id "aRLGkws6pHd_Z5oc1edMgwAAARE"]
[Tue Nov 11 13:16:04.310513 2025] [:error] [pid 53355:tid 53362] [client 173.239.214.127:55733] [client 173.239.214.127] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-zx.php"] [unique_id "aRLGlIB5X5A3rMc4_nAQcgAAAAQ"]
[Tue Nov 11 13:16:05.203434 2025] [:error] [pid 53449:tid 53460] [client 173.239.214.104:65395] [client 173.239.214.104] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/Okxob.php"] [unique_id "aRLGldpz08j5NoUSzp8GfAAAAUY"]
[Tue Nov 11 13:16:06.110136 2025] [:error] [pid 53449:tid 53470] [client 173.239.214.116:27865] [client 173.239.214.116] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/css/colors/blue/Sanskrit.php"] [unique_id "aRLGltpz08j5NoUSzp8GfgAAAVA"]
[Tue Nov 11 13:16:07.018944 2025] [:error] [pid 53355:tid 53363] [client 173.239.214.97:28091] [client 173.239.214.97] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/shell3.php"] [unique_id "aRLGl4B5X5A3rMc4_nAQeAAAAAU"]
[Tue Nov 11 13:16:07.897176 2025] [:error] [pid 53355:tid 53368] [client 173.239.214.126:35641] [client 173.239.214.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/js/tinymce/plugins/directionality/index.php"] [unique_id "aRLGl4B5X5A3rMc4_nAQewAAAAo"]
[Tue Nov 11 13:16:08.813694 2025] [:error] [pid 53449:tid 53466] [client 173.239.214.98:61801] [client 173.239.214.98] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/js/widgets/admin.php"] [unique_id "aRLGmNpz08j5NoUSzp8GgQAAAUw"]
[Tue Nov 11 13:16:09.746799 2025] [:error] [pid 53356:tid 53408] [client 173.239.214.121:32997] [client 173.239.214.121] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/habhan.php"] [unique_id "aRLGmekdmt0kzjVcUN99ewAAAFc"]
[Tue Nov 11 13:16:10.633872 2025] [:error] [pid 59670:tid 59696] [client 173.239.214.91:61405] [client 173.239.214.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/images/media/admin.php"] [unique_id "aRLGmqk2Cnts0y-hpfrUjQAAAJc"]
[Tue Nov 11 13:16:11.506576 2025] [:error] [pid 53355:tid 53373] [client 173.239.214.113:31773] [client 173.239.214.113] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/habhan.php"] [unique_id "aRLGm4B5X5A3rMc4_nAQiQAAAA8"]
[Tue Nov 11 13:16:12.416031 2025] [:error] [pid 59670:tid 59678] [client 173.239.214.115:44923] [client 173.239.214.115] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-term.php"] [unique_id "aRLGnKk2Cnts0y-hpfrUkgAAAIU"]
[Tue Nov 11 13:16:13.294051 2025] [:error] [pid 59670:tid 59690] [client 173.239.214.124:50033] [client 173.239.214.124] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/link-encryption.php"] [unique_id "aRLGnak2Cnts0y-hpfrUlQAAAJE"]
[Tue Nov 11 13:16:14.172322 2025] [:error] [pid 53414:tid 53437] [client 173.239.214.91:51675] [client 173.239.214.91] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/advanced-product-fields-for-woocommerce/db.php"] [unique_id "aRLGngs6pHd_Z5oc1edMkQAAARU"]
[Tue Nov 11 13:16:15.052688 2025] [:error] [pid 53356:tid 53392] [client 173.239.214.119:23919] [client 173.239.214.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/nekocing.php"] [unique_id "aRLGn-kdmt0kzjVcUN99hgAAAEc"]
[Tue Nov 11 13:16:15.930704 2025] [:error] [pid 53356:tid 53388] [client 173.239.214.98:48113] [client 173.239.214.98] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/includes/class-wp-community-events-list.php"] [unique_id "aRLGn-kdmt0kzjVcUN99igAAAEM"]
[Tue Nov 11 13:16:16.836858 2025] [:error] [pid 53449:tid 53467] [client 173.239.214.85:33519] [client 173.239.214.85] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/link-manager-first.php"] [unique_id "aRLGoNpz08j5NoUSzp8GhQAAAU0"]
[Tue Nov 11 13:16:17.715440 2025] [:error] [pid 53414:tid 53432] [client 173.239.214.89:22085] [client 173.239.214.89] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/themes-pointer.php"] [unique_id "aRLGoQs6pHd_Z5oc1edMlwAAARA"]
[Tue Nov 11 13:16:18.644762 2025] [:error] [pid 53356:tid 53405] [client 173.239.214.85:42227] [client 173.239.214.85] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/network/theme-install-session.php"] [unique_id "aRLGoukdmt0kzjVcUN99jAAAAFQ"]
[Tue Nov 11 13:16:19.520529 2025] [:error] [pid 53355:tid 53377] [client 45.131.195.225:25515] [client 45.131.195.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/revision-beta.php"] [unique_id "aRLGo4B5X5A3rMc4_nAQngAAABM"]
[Tue Nov 11 13:16:20.393919 2025] [:error] [pid 53355:tid 53378] [client 173.239.214.94:42799] [client 173.239.214.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/ID3/getid3.lib-repository.php"] [unique_id "aRLGpIB5X5A3rMc4_nAQoQAAABQ"]
[Tue Nov 11 13:16:21.313879 2025] [:error] [pid 53414:tid 53426] [client 173.239.214.113:60959] [client 173.239.214.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/class-wp-date-query-request.php"] [unique_id "aRLGpQs6pHd_Z5oc1edMogAAAQo"]
[Tue Nov 11 13:16:22.203453 2025] [:error] [pid 59670:tid 59685] [client 173.239.214.100:20349] [client 173.239.214.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/theme-templates-sample.php"] [unique_id "aRLGpqk2Cnts0y-hpfrUqQAAAIw"]
[Tue Nov 11 13:16:23.083256 2025] [:error] [pid 53355:tid 53369] [client 173.239.214.116:39731] [client 173.239.214.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/theme-compat/chosen.php"] [unique_id "aRLGp4B5X5A3rMc4_nAQpQAAAAs"]
[Tue Nov 11 13:16:23.959189 2025] [:error] [pid 53355:tid 53363] [client 173.239.214.99:57445] [client 173.239.214.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/PHPMailer/autoload_classmap.php"] [unique_id "aRLGp4B5X5A3rMc4_nAQqgAAAAU"]
[Tue Nov 11 13:16:24.852167 2025] [:error] [pid 53355:tid 53380] [client 173.239.214.120:25161] [client 173.239.214.120] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/pwnd/lala.php"] [unique_id "aRLGqIB5X5A3rMc4_nAQrQAAABY"]
[Tue Nov 11 13:16:25.732421 2025] [:error] [pid 53414:tid 53437] [client 173.239.214.107:34797] [client 173.239.214.107] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/so-pinyin-slugs/inc/main_json.php"] [unique_id "aRLGqQs6pHd_Z5oc1edMqAAAARU"]
[Tue Nov 11 13:16:26.611332 2025] [:error] [pid 53449:tid 53477] [client 173.239.214.89:50267] [client 173.239.214.89] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/generator/assets/css/css_json.php"] [unique_id "aRLGqtpz08j5NoUSzp8GmQAAAVc"]
[Tue Nov 11 13:16:27.501776 2025] [:error] [pid 53355:tid 53376] [client 173.239.214.128:61195] [client 173.239.214.128] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/themes/theme-check/main.php"] [unique_id "aRLGq4B5X5A3rMc4_nAQswAAABI"]
[Tue Nov 11 13:16:28.381118 2025] [:error] [pid 53356:tid 53392] [client 173.239.214.95:61871] [client 173.239.214.95] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/themes/theme-check/theme-check.php"] [unique_id "aRLGrOkdmt0kzjVcUN99nwAAAEc"]
[Tue Nov 11 13:16:28.653996 2025] [:error] [pid 59670:tid 59675] [client 192.178.4.101:59301] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLGrKk2Cnts0y-hpfrUsAAAAII"]
[Tue Nov 11 13:16:29.376821 2025] [:error] [pid 53356:tid 53388] [client 173.239.214.119:42965] [client 173.239.214.119] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/themes/covr-wpcom/assets/fonts/manrope.php"] [unique_id "aRLGrekdmt0kzjVcUN99oQAAAEM"]
[Tue Nov 11 13:16:30.266235 2025] [:error] [pid 53356:tid 53400] [client 45.131.195.225:45923] [client 45.131.195.225] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/down.php"] [unique_id "aRLGrukdmt0kzjVcUN99owAAAE8"]
[Tue Nov 11 13:16:31.141146 2025] [:error] [pid 53356:tid 53404] [client 173.239.214.85:21851] [client 173.239.214.85] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/phpad/acp.php"] [unique_id "aRLGr-kdmt0kzjVcUN99pQAAAFM"]
[Tue Nov 11 13:16:32.024154 2025] [:error] [pid 59670:tid 59691] [client 173.239.214.115:60573] [client 173.239.214.115] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/user/wp-conflg.php"] [unique_id "aRLGsKk2Cnts0y-hpfrUtgAAAJI"]
[Tue Nov 11 13:16:32.896986 2025] [:error] [pid 53449:tid 53460] [client 173.239.214.111:21969] [client 173.239.214.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/blocks/latest-comments/about.php"] [unique_id "aRLGsNpz08j5NoUSzp8GpwAAAUY"]
[Tue Nov 11 13:16:34.179213 2025] [:error] [pid 53355:tid 53359] [client 192.178.4.101:63300] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLGsoB5X5A3rMc4_nAQuAAAAAE"]
[Tue Nov 11 13:16:34.779027 2025] [:error] [pid 53355:tid 53377] [client 173.239.214.91:62119] [client 173.239.214.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/blocks/comments/admin.php"] [unique_id "aRLGsoB5X5A3rMc4_nAQugAAABM"]
[Tue Nov 11 13:16:35.651704 2025] [:error] [pid 59670:tid 59681] [client 173.239.214.94:35373] [client 173.239.214.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/blocks/pattern/about.php"] [unique_id "aRLGs6k2Cnts0y-hpfrUwgAAAIg"]
[Tue Nov 11 13:16:36.559130 2025] [:error] [pid 53414:tid 53427] [client 173.239.214.86:44587] [client 173.239.214.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/chosen.php"] [unique_id "aRLGtAs6pHd_Z5oc1edMuAAAAQs"]
[Tue Nov 11 13:16:36.937807 2025] [:error] [pid 53355:tid 53378] [client 192.178.4.101:37309] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLGtIB5X5A3rMc4_nAQvAAAABQ"]
[Tue Nov 11 13:16:37.447830 2025] [:error] [pid 59670:tid 59681] [client 173.239.214.103:29961] [client 173.239.214.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aRLGtak2Cnts0y-hpfrUzQAAAIg"]
[Tue Nov 11 13:16:38.322192 2025] [:error] [pid 53355:tid 53358] [client 173.239.214.103:48911] [client 173.239.214.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/widgets/chosen.php"] [unique_id "aRLGtoB5X5A3rMc4_nAQvQAAAAA"]
[Tue Nov 11 13:16:39.214566 2025] [:error] [pid 53414:tid 53424] [client 173.239.214.101:49231] [client 173.239.214.101] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/themes/exnova/wp-file.php"] [unique_id "aRLGtws6pHd_Z5oc1edMugAAAQg"]
[Tue Nov 11 13:16:40.102890 2025] [:error] [pid 59670:tid 59679] [client 173.239.214.106:40365] [client 173.239.214.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/css/dist/ccp.php"] [unique_id "aRLGuKk2Cnts0y-hpfrU1gAAAIY"]
[Tue Nov 11 13:16:41.018250 2025] [:error] [pid 53356:tid 53392] [client 173.239.214.124:25521] [client 173.239.214.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/blocks/gallery/default.php"] [unique_id "aRLGuekdmt0kzjVcUN99tQAAAEc"]
[Tue Nov 11 13:16:41.914074 2025] [:error] [pid 53355:tid 53372] [client 173.239.214.123:62403] [client 173.239.214.123] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/js/widgets/chosen.php"] [unique_id "aRLGuYB5X5A3rMc4_nAQxAAAAA4"]
[Tue Nov 11 13:16:42.828519 2025] [:error] [pid 53356:tid 53396] [client 173.239.214.126:41815] [client 173.239.214.126] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wpcontent/themes/twentytwentytwo/templates/autoload_classmap.php"] [unique_id "aRLGuukdmt0kzjVcUN99vwAAAEs"]
[Tue Nov 11 13:16:43.725061 2025] [:error] [pid 59670:tid 59685] [client 173.239.214.112:43409] [client 173.239.214.112] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/languages/admin.php"] [unique_id "aRLGu6k2Cnts0y-hpfrU4QAAAIw"]
[Tue Nov 11 13:16:44.629496 2025] [:error] [pid 59670:tid 59688] [client 173.239.214.97:34759] [client 173.239.214.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/fiz23.php"] [unique_id "aRLGvKk2Cnts0y-hpfrU5QAAAI8"]
[Tue Nov 11 13:16:45.510214 2025] [:error] [pid 53355:tid 53366] [client 173.239.214.32:54605] [client 173.239.214.32] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/fiz23.php"] [unique_id "aRLGvYB5X5A3rMc4_nAQzAAAAAg"]
[Tue Nov 11 13:16:46.582076 2025] [:error] [pid 53414:tid 53418] [client 173.239.214.113:33857] [client 173.239.214.113] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-singup-login.php"] [unique_id "aRLGvgs6pHd_Z5oc1edMwwAAAQI"]
[Tue Nov 11 13:16:47.480935 2025] [:error] [pid 59670:tid 59674] [client 173.239.214.93:60763] [client 173.239.214.93] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/v.php"] [unique_id "aRLGv6k2Cnts0y-hpfrU8AAAAIE"]
[Tue Nov 11 13:16:48.365287 2025] [:error] [pid 53414:tid 53417] [client 173.239.214.85:40169] [client 173.239.214.85] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/includes/nav-menu-get.php"] [unique_id "aRLGwAs6pHd_Z5oc1edMyAAAAQE"]
[Tue Nov 11 13:16:49.240730 2025] [:error] [pid 53355:tid 53375] [client 173.239.214.105:50917] [client 173.239.214.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/class-wp-customize-widgets-first.php"] [unique_id "aRLGwYB5X5A3rMc4_nAQ1AAAABE"]
[Tue Nov 11 13:16:50.141108 2025] [:error] [pid 59670:tid 59679] [client 173.239.214.79:51201] [client 173.239.214.79] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/admin-header.php"] [unique_id "aRLGwqk2Cnts0y-hpfrU-gAAAIY"]
[Tue Nov 11 13:16:51.053274 2025] [:error] [pid 53355:tid 53382] [client 173.239.214.92:37349] [client 173.239.214.92] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/bolt.php"] [unique_id "aRLGw4B5X5A3rMc4_nAQ1wAAABg"]
[Tue Nov 11 13:16:51.942226 2025] [:error] [pid 53356:tid 53397] [client 173.239.214.83:43931] [client 173.239.214.83] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/erinyani/default.php"] [unique_id "aRLGw-kdmt0kzjVcUN991wAAAEw"]
[Tue Nov 11 13:16:53.859946 2025] [:error] [pid 53449:tid 53469] [client 173.239.214.114:37817] [client 173.239.214.114] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/O.php"] [unique_id "aRLGxdpz08j5NoUSzp8GywAAAU8"]
[Tue Nov 11 13:16:54.759729 2025] [:error] [pid 59670:tid 59684] [client 173.239.214.106:45083] [client 173.239.214.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/sodium_compat/src/Core/Base64/about.php"] [unique_id "aRLGxqk2Cnts0y-hpfrVAwAAAIs"]
[Tue Nov 11 13:16:55.658771 2025] [:error] [pid 59670:tid 59680] [client 173.239.214.99:57915] [client 173.239.214.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/sodium_compat/src/Core32/about.php"] [unique_id "aRLGx6k2Cnts0y-hpfrVBQAAAIc"]
[Tue Nov 11 13:16:56.596064 2025] [:error] [pid 53414:tid 53430] [client 173.239.214.112:53845] [client 173.239.214.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/PHPMailer/chosen.php"] [unique_id "aRLGyAs6pHd_Z5oc1edM1QAAAQ4"]
[Tue Nov 11 13:16:57.498727 2025] [:error] [pid 53449:tid 53476] [client 173.239.214.92:59937] [client 173.239.214.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "aRLGydpz08j5NoUSzp8G0wAAAVY"]
[Tue Nov 11 13:16:58.200980 2025] [:error] [pid 53449:tid 53460] [client 192.178.4.101:49311] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLGytpz08j5NoUSzp8G1wAAAUY"]
[Tue Nov 11 13:16:58.412783 2025] [:error] [pid 53449:tid 53455] [client 173.239.214.118:36859] [client 173.239.214.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/js/tinymce/plugins/wptextpattern/about.php"] [unique_id "aRLGytpz08j5NoUSzp8G2AAAAUE"]
[Tue Nov 11 13:16:59.324222 2025] [:error] [pid 53414:tid 53435] [client 173.239.214.117:26343] [client 173.239.214.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/js/plupload/about.php"] [unique_id "aRLGyws6pHd_Z5oc1edM2wAAARM"]
[Tue Nov 11 13:17:00.231931 2025] [:error] [pid 53356:tid 53394] [client 173.239.214.123:33927] [client 173.239.214.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/images/media/about.php"] [unique_id "aRLGzOkdmt0kzjVcUN994AAAAEk"]
[Tue Nov 11 13:17:01.149636 2025] [:error] [pid 59670:tid 59674] [client 173.239.214.95:30197] [client 173.239.214.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/blocks/read-more/about.php"] [unique_id "aRLGzak2Cnts0y-hpfrVFwAAAIE"]
[Tue Nov 11 13:17:02.132701 2025] [:error] [pid 59670:tid 59675] [client 173.239.214.94:57645] [client 173.239.214.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/blocks/page-list/about.php"] [unique_id "aRLGzqk2Cnts0y-hpfrVGgAAAII"]
[Tue Nov 11 13:17:03.266869 2025] [:error] [pid 53449:tid 53460] [client 173.239.214.123:56763] [client 173.239.214.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/blocks/details/about.php"] [unique_id "aRLGz9pz08j5NoUSzp8G3wAAAUY"]
[Tue Nov 11 13:17:04.177096 2025] [:error] [pid 59670:tid 59687] [client 173.239.214.118:65087] [client 173.239.214.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/blocks/social-link/about.php"] [unique_id "aRLG0Kk2Cnts0y-hpfrVIgAAAI4"]
[Tue Nov 11 13:17:05.103971 2025] [:error] [pid 53355:tid 53364] [client 173.239.214.95:44693] [client 173.239.214.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aRLG0YB5X5A3rMc4_nAQ8gAAAAY"]
[Tue Nov 11 13:17:06.013774 2025] [:error] [pid 53449:tid 53473] [client 173.239.214.99:60257] [client 173.239.214.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/css/dist/edit-post/about.php"] [unique_id "aRLG0tpz08j5NoUSzp8G6AAAAVM"]
[Tue Nov 11 13:17:07.000963 2025] [:error] [pid 53355:tid 53374] [client 173.239.214.83:41449] [client 173.239.214.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/css/dist/block-editor/about.php"] [unique_id "aRLG0oB5X5A3rMc4_nAQ9gAAABA"]
[Tue Nov 11 13:17:07.905468 2025] [:error] [pid 53356:tid 53409] [client 173.239.214.115:63489] [client 173.239.214.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/item.php"] [unique_id "aRLG0-kdmt0kzjVcUN996gAAAFg"]
[Tue Nov 11 13:17:08.809250 2025] [:error] [pid 53355:tid 53361] [client 45.131.195.225:44041] [client 45.131.195.225] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-conflg/function.php"] [unique_id "aRLG1IB5X5A3rMc4_nAQ_AAAAAM"]
[Tue Nov 11 13:17:09.702246 2025] [:error] [pid 53355:tid 53368] [client 173.239.214.99:47397] [client 173.239.214.99] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/js/widgets/about.php"] [unique_id "aRLG1YB5X5A3rMc4_nARAQAAAAo"]
[Tue Nov 11 13:17:10.599088 2025] [:error] [pid 53449:tid 53454] [client 173.239.214.89:32039] [client 173.239.214.89] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/css/about.php"] [unique_id "aRLG1tpz08j5NoUSzp8G8gAAAUA"]
[Tue Nov 11 13:17:11.538440 2025] [:error] [pid 53355:tid 53376] [client 173.239.214.88:29991] [client 173.239.214.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/css/colors/ocean/about.php"] [unique_id "aRLG14B5X5A3rMc4_nARBAAAABI"]
[Tue Nov 11 13:17:12.446667 2025] [:error] [pid 53414:tid 53438] [client 173.239.214.107:44991] [client 173.239.214.107] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/themes/twentytwentyone/template-parts/post/about.php"] [unique_id "aRLG2As6pHd_Z5oc1edM6gAAARY"]
[Tue Nov 11 13:17:13.352280 2025] [:error] [pid 53355:tid 53366] [client 173.239.214.81:60499] [client 173.239.214.81] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/themes/rimini-new/inc/shop/about.php"] [unique_id "aRLG2YB5X5A3rMc4_nARBgAAAAg"]
[Tue Nov 11 13:17:14.286301 2025] [:error] [pid 53449:tid 53477] [client 173.239.214.125:25153] [client 173.239.214.125] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/themes/rimini-new/inc/plugins/about.php"] [unique_id "aRLG2tpz08j5NoUSzp8G-AAAAVc"]
[Tue Nov 11 13:17:15.177889 2025] [:error] [pid 53355:tid 53362] [client 173.239.214.87:46113] [client 173.239.214.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/css/dist/customize-widgets/base64.php"] [unique_id "aRLG24B5X5A3rMc4_nARDAAAAAQ"]
[Tue Nov 11 13:17:16.075820 2025] [:error] [pid 53356:tid 53389] [client 173.239.214.91:25699] [client 173.239.214.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/js/imgareaselect/colors/index.php"] [unique_id "aRLG3Okdmt0kzjVcUN99-gAAAEQ"]
[Tue Nov 11 13:17:16.988918 2025] [:error] [pid 53355:tid 53371] [client 173.239.214.128:65451] [client 173.239.214.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/Requests/src/views/index.php"] [unique_id "aRLG3IB5X5A3rMc4_nARJAAAAA0"]
[Tue Nov 11 13:17:17.902435 2025] [:error] [pid 53414:tid 53435] [client 173.239.214.107:36671] [client 173.239.214.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/Text/Diff/Engine/constant-contact/index.php"] [unique_id "aRLG3Qs6pHd_Z5oc1edNCQAAARM"]
[Tue Nov 11 13:17:18.877713 2025] [:error] [pid 53449:tid 53461] [client 173.239.214.85:37335] [client 173.239.214.85] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/cgi-bin/user/index.php"] [unique_id "aRLG3tpz08j5NoUSzp8HCwAAAUc"]
[Tue Nov 11 13:17:19.782382 2025] [:error] [pid 53449:tid 53471] [client 173.239.214.117:26253] [client 173.239.214.117] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-blog-front.php"] [unique_id "aRLG39pz08j5NoUSzp8HEQAAAVE"]
[Tue Nov 11 13:17:20.704730 2025] [:error] [pid 53355:tid 53359] [client 173.239.214.117:34521] [client 173.239.214.117] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-Blogs.php"] [unique_id "aRLG4IB5X5A3rMc4_nARTgAAAAE"]
[Tue Nov 11 13:17:21.605183 2025] [:error] [pid 53414:tid 53432] [client 173.239.214.111:27285] [client 173.239.214.111] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/uploads/2025/08/fields/index.php"] [unique_id "aRLG4Qs6pHd_Z5oc1edNEwAAARA"]
[Tue Nov 11 13:17:22.537245 2025] [:error] [pid 53414:tid 53437] [client 173.239.214.115:49215] [client 173.239.214.115] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/themes/twentytwenty/inc/imgareaselect/index.php"] [unique_id "aRLG4gs6pHd_Z5oc1edNFgAAARU"]
[Tue Nov 11 13:17:23.465163 2025] [:error] [pid 53355:tid 53366] [client 173.239.214.104:37015] [client 173.239.214.104] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/css/colors/blue/mu-plugins/index.php"] [unique_id "aRLG44B5X5A3rMc4_nARVQAAAAg"]
[Tue Nov 11 13:17:24.371038 2025] [:error] [pid 53355:tid 53382] [client 173.239.214.89:54123] [client 173.239.214.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/block-patterns/chosen.php"] [unique_id "aRLG5IB5X5A3rMc4_nARWQAAABg"]
[Tue Nov 11 13:17:25.302474 2025] [:error] [pid 53356:tid 53398] [client 173.239.214.105:53447] [client 173.239.214.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/rest-api/wp-conflg.php"] [unique_id "aRLG5ekdmt0kzjVcUN9-HgAAAE0"]
[Tue Nov 11 13:17:26.225788 2025] [:error] [pid 53355:tid 53381] [client 173.239.214.117:52893] [client 173.239.214.117] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/plugins.php"] [unique_id "aRLG5oB5X5A3rMc4_nARXQAAABc"]
[Tue Nov 11 13:17:27.164472 2025] [:error] [pid 53356:tid 53385] [client 173.239.214.88:39485] [client 173.239.214.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/index.php"] [unique_id "aRLG5-kdmt0kzjVcUN9-IgAAAEA"]
[Tue Nov 11 13:17:28.119905 2025] [:error] [pid 53355:tid 53382] [client 173.239.214.82:35875] [client 173.239.214.82] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/adout.php"] [unique_id "aRLG6IB5X5A3rMc4_nARYgAAABg"]
[Tue Nov 11 13:17:29.034212 2025] [:error] [pid 53355:tid 53374] [client 173.239.214.107:51607] [client 173.239.214.107] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/m.php"] [unique_id "aRLG6YB5X5A3rMc4_nARZAAAABA"]
[Tue Nov 11 13:17:29.934246 2025] [:error] [pid 59670:tid 59693] [client 173.239.214.119:22857] [client 173.239.214.119] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/themes/twentynineteen/template-parts/footer/index.php"] [unique_id "aRLG6ak2Cnts0y-hpfrVngAAAJQ"]
[Tue Nov 11 13:17:30.832091 2025] [:error] [pid 59670:tid 59676] [client 173.239.214.117:34765] [client 173.239.214.117] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/themes/twentytwentytwo/assets/fonts/source-serif-pro/index.php"] [unique_id "aRLG6qk2Cnts0y-hpfrVoQAAAIM"]
[Tue Nov 11 13:17:31.740962 2025] [:error] [pid 59670:tid 59689] [client 173.239.214.101:23325] [client 173.239.214.101] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/themes/twentytwentyone/assets/sass/04-elements/index.php"] [unique_id "aRLG66k2Cnts0y-hpfrVpAAAAJA"]
[Tue Nov 11 13:17:32.645824 2025] [:error] [pid 53449:tid 53455] [client 173.239.214.98:50489] [client 173.239.214.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/blocks/comment-content/index.php"] [unique_id "aRLG7Npz08j5NoUSzp8HKwAAAUE"]
[Tue Nov 11 13:17:33.547930 2025] [:error] [pid 53449:tid 53477] [client 173.239.214.126:59313] [client 173.239.214.126] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/nextscan2.php"] [unique_id "aRLG7dpz08j5NoUSzp8HLgAAAVc"]
[Tue Nov 11 13:17:34.440667 2025] [:error] [pid 53414:tid 53440] [client 173.239.214.85:60069] [client 173.239.214.85] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/languages/themes/vendor/index.php"] [unique_id "aRLG7gs6pHd_Z5oc1edNLQAAARg"]
[Tue Nov 11 13:17:35.335648 2025] [:error] [pid 53356:tid 53385] [client 173.239.214.100:61847] [client 173.239.214.100] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/maint/just2.php"] [unique_id "aRLG7-kdmt0kzjVcUN9-LAAAAEA"]
[Tue Nov 11 13:17:36.229176 2025] [:error] [pid 53356:tid 53407] [client 173.239.214.121:34001] [client 173.239.214.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/sodium_compat/namespaced/Core/Curve25519/widgets/index.php"] [unique_id "aRLG8Okdmt0kzjVcUN9-MAAAAFY"]
[Tue Nov 11 13:17:37.125232 2025] [:error] [pid 53414:tid 53438] [client 173.239.214.88:20759] [client 173.239.214.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/themes/olsen-light/404.php"] [unique_id "aRLG8Qs6pHd_Z5oc1edNNAAAARY"]
[Tue Nov 11 13:17:38.024891 2025] [:error] [pid 53414:tid 53424] [client 173.239.214.118:32245] [client 173.239.214.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/blocks/navigation/index.php"] [unique_id "aRLG8gs6pHd_Z5oc1edNNQAAAQg"]
[Tue Nov 11 13:17:38.923285 2025] [:error] [pid 53414:tid 53429] [client 173.239.214.117:32289] [client 173.239.214.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/blocks/post-navigation-link/index.php"] [unique_id "aRLG8gs6pHd_Z5oc1edNNwAAAQ0"]
[Tue Nov 11 13:17:40.087257 2025] [:error] [pid 53355:tid 53366] [client 45.131.195.225:22851] [client 45.131.195.225] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/js/geckos.php"] [unique_id "aRLG9IB5X5A3rMc4_nARdAAAAAg"]
[Tue Nov 11 13:17:40.995678 2025] [:error] [pid 59670:tid 59677] [client 173.239.214.89:26487] [client 173.239.214.89] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/js/index.php"] [unique_id "aRLG9Kk2Cnts0y-hpfrVuQAAAIQ"]
[Tue Nov 11 13:17:41.902157 2025] [:error] [pid 53356:tid 53389] [client 173.239.214.127:50231] [client 173.239.214.127] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/upgrade/admin.php"] [unique_id "aRLG9ekdmt0kzjVcUN9-OwAAAEQ"]
[Tue Nov 11 13:17:42.853913 2025] [:error] [pid 53449:tid 53469] [client 45.131.195.221:39009] [client 45.131.195.221] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/languages/plugins/wp-login.php"] [unique_id "aRLG9tpz08j5NoUSzp8HQgAAAU8"]
[Tue Nov 11 13:17:43.770966 2025] [:error] [pid 59670:tid 59677] [client 173.239.214.121:61383] [client 173.239.214.121] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/languages/plugins/about.php"] [unique_id "aRLG96k2Cnts0y-hpfrVwgAAAIQ"]
[Tue Nov 11 13:17:44.670826 2025] [:error] [pid 53449:tid 53475] [client 173.239.214.91:44453] [client 173.239.214.91] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/themes/twentytwentyfive/assets/fonts/beiruti/index.php"] [unique_id "aRLG-Npz08j5NoUSzp8HRgAAAVU"]
[Tue Nov 11 13:17:45.597559 2025] [:error] [pid 53414:tid 53436] [client 173.239.214.104:21431] [client 173.239.214.104] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/jet-elements/includes/modules/jet-dashboard/wp-login.php"] [unique_id "aRLG-Qs6pHd_Z5oc1edNPQAAARQ"]
[Tue Nov 11 13:17:46.515618 2025] [:error] [pid 53356:tid 53391] [client 173.239.214.111:40463] [client 173.239.214.111] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/loco-translate/tpl/admin/index.php"] [unique_id "aRLG-ukdmt0kzjVcUN9-PwAAAEY"]
[Tue Nov 11 13:17:47.419217 2025] [:error] [pid 53356:tid 53396] [client 173.239.214.103:31275] [client 173.239.214.103] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/wp-mail-smtp/about.php"] [unique_id "aRLG--kdmt0kzjVcUN9-RQAAAEs"]
[Tue Nov 11 13:17:48.318157 2025] [:error] [pid 53414:tid 53426] [client 173.239.214.123:27725] [client 173.239.214.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/theme-compat/index.php"] [unique_id "aRLG_As6pHd_Z5oc1edNQAAAAQo"]
[Tue Nov 11 13:17:49.223963 2025] [:error] [pid 53414:tid 53434] [client 173.239.214.91:31807] [client 173.239.214.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/SimplePie/src/Parse/index.php"] [unique_id "aRLG_Qs6pHd_Z5oc1edNQgAAARI"]
[Tue Nov 11 13:17:50.123397 2025] [:error] [pid 53355:tid 53360] [client 173.239.214.118:35987] [client 173.239.214.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/SimplePie/library/SimplePie/index.php"] [unique_id "aRLG_oB5X5A3rMc4_nARfgAAAAI"]
[Tue Nov 11 13:17:51.018988 2025] [:error] [pid 59670:tid 59673] [client 173.239.214.122:56191] [client 173.239.214.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/blocks/navigation-link/index.php"] [unique_id "aRLG_6k2Cnts0y-hpfrV1AAAAIA"]
[Tue Nov 11 13:17:51.918044 2025] [:error] [pid 53414:tid 53418] [client 173.239.214.85:54217] [client 173.239.214.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/blocks/comment-content/about.php"] [unique_id "aRLG_ws6pHd_Z5oc1edNUQAAAQI"]
[Tue Nov 11 13:17:52.808578 2025] [:error] [pid 53414:tid 53431] [client 173.239.214.114:60657] [client 173.239.214.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aRLHAAs6pHd_Z5oc1edNVAAAAQ8"]
[Tue Nov 11 13:17:53.728010 2025] [:error] [pid 53449:tid 53465] [client 173.239.214.122:64323] [client 173.239.214.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/blocks/calendar/about.php"] [unique_id "aRLHAdpz08j5NoUSzp8HWAAAAUs"]
[Tue Nov 11 13:17:54.617042 2025] [:error] [pid 53449:tid 53459] [client 173.239.214.91:28189] [client 173.239.214.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/blocks/post-template/index.php"] [unique_id "aRLHAtpz08j5NoUSzp8HWQAAAUU"]
[Tue Nov 11 13:17:55.518718 2025] [:error] [pid 53414:tid 53431] [client 45.131.195.225:22131] [client 45.131.195.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "aRLHAws6pHd_Z5oc1edNWwAAAQ8"]
[Tue Nov 11 13:17:56.431792 2025] [:error] [pid 53414:tid 53438] [client 173.239.214.32:41101] [client 173.239.214.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/js/dist/development/index.php"] [unique_id "aRLHBAs6pHd_Z5oc1edNXAAAARY"]
[Tue Nov 11 13:17:57.334473 2025] [:error] [pid 59670:tid 59685] [client 173.239.214.115:58283] [client 173.239.214.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/js/tinymce/plugins/colorpicker/index.php"] [unique_id "aRLHBak2Cnts0y-hpfrV3QAAAIw"]
[Tue Nov 11 13:17:58.245047 2025] [:error] [pid 53449:tid 53459] [client 173.239.214.95:59241] [client 173.239.214.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/js/tinymce/plugins/wpgallery/index.php"] [unique_id "aRLHBtpz08j5NoUSzp8HYwAAAUU"]
[Tue Nov 11 13:17:59.167562 2025] [:error] [pid 53355:tid 53371] [client 173.239.214.117:47947] [client 173.239.214.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/Text/Diff/Engine/wp.php"] [unique_id "aRLHB4B5X5A3rMc4_nARiwAAAA0"]
[Tue Nov 11 13:19:41.175433 2025] [:error] [pid 53449:tid 53460] [client 192.178.4.101:56796] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLHbdpz08j5NoUSzp8IKQAAAUY"]
[Tue Nov 11 13:19:52.548691 2025] [:error] [pid 53356:tid 53400] [client 192.178.4.101:41183] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLHeOkdmt0kzjVcUN9_IwAAAE8"]
[Tue Nov 11 13:19:55.744933 2025] [:error] [pid 53355:tid 53370] [client 192.178.4.101:47394] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLHe4B5X5A3rMc4_nASkAAAAAw"]
[Tue Nov 11 13:20:19.774414 2025] [:error] [pid 53356:tid 53407] [client 192.178.4.101:39108] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLHk-kdmt0kzjVcUN9_RgAAAFY"]
[Tue Nov 11 13:20:21.383708 2025] [:error] [pid 53449:tid 53468] [client 192.178.4.101:38406] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLHldpz08j5NoUSzp8IcQAAAU4"]
[Tue Nov 11 13:22:10.468403 2025] [:error] [pid 53356:tid 53389] [client 192.178.4.101:39065] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLIAukdmt0kzjVcUN9_9AAAAEQ"]
[Tue Nov 11 13:22:16.879277 2025] [:error] [pid 59670:tid 59686] [client 192.178.4.101:51428] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLICKk2Cnts0y-hpfrY2gAAAI0"]
[Tue Nov 11 13:22:21.634630 2025] [:error] [pid 59670:tid 59690] [client 192.178.4.101:41348] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLIDak2Cnts0y-hpfrY6wAAAJE"]
[Tue Nov 11 13:22:37.151529 2025] [:error] [pid 59670:tid 59684] [client 192.178.4.101:61259] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLIHak2Cnts0y-hpfrZFAAAAIs"]
[Tue Nov 11 13:22:41.781603 2025] [:error] [pid 53356:tid 53407] [client 192.178.4.101:38378] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLIIekdmt0kzjVcUN-AIQAAAFY"]
[Tue Nov 11 13:22:49.497482 2025] [:error] [pid 53414:tid 53440] [client 192.178.4.101:64096] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLIKQs6pHd_Z5oc1edP1QAAARg"]
[Tue Nov 11 13:22:55.685458 2025] [:error] [pid 53414:tid 53422] [client 192.178.4.101:62442] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLILws6pHd_Z5oc1edP5wAAAQY"]
[Tue Nov 11 13:25:02.997182 2025] [:error] [pid 59670:tid 59677] [client 192.178.4.101:54702] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLIrqk2Cnts0y-hpfradgAAAIQ"]
[Tue Nov 11 13:25:24.758081 2025] [:error] [pid 59670:tid 59689] [client 192.178.4.101:54581] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLIxKk2Cnts0y-hpfralgAAAJA"]
[Tue Nov 11 13:25:32.440463 2025] [:error] [pid 53355:tid 53381] [client 192.178.4.101:60394] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLIzIB5X5A3rMc4_nAUdAAAABc"]
[Tue Nov 11 13:25:40.038553 2025] [:error] [pid 53449:tid 53465] [client 192.178.4.101:42677] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLI1Npz08j5NoUSzp8K6wAAAUs"]
[Tue Nov 11 13:25:43.144468 2025] [:error] [pid 53414:tid 53423] [client 192.178.4.101:39349] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLI1ws6pHd_Z5oc1edQxQAAAQc"]
[Tue Nov 11 13:28:05.300171 2025] [:error] [pid 59670:tid 59685] [client 192.178.4.101:52909] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLJZak2Cnts0y-hpfrbzAAAAIw"]
[Tue Nov 11 13:28:32.901384 2025] [:error] [pid 59670:tid 59683] [client 192.178.4.101:52995] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLJgKk2Cnts0y-hpfrb-wAAAIo"]
[Tue Nov 11 13:28:35.916534 2025] [:error] [pid 53356:tid 53396] [client 192.178.4.101:50181] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLJg-kdmt0kzjVcUN-CNwAAAEs"]
[Tue Nov 11 13:28:46.531557 2025] [:error] [pid 53449:tid 53473] [client 192.178.4.101:65491] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLJjtpz08j5NoUSzp8MAAAAAVM"]
[Tue Nov 11 13:28:51.044741 2025] [:error] [pid 53356:tid 53405] [client 192.178.4.101:44431] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLJk-kdmt0kzjVcUN-CRQAAAFQ"]
[Tue Nov 11 13:30:35.390512 2025] [:error] [pid 53449:tid 53475] [client 192.178.4.101:58427] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLJ-9pz08j5NoUSzp8MbQAAAVU"]
[Tue Nov 11 13:30:38.131608 2025] [:error] [pid 59670:tid 59673] [client 192.178.4.101:45473] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLJ_qk2Cnts0y-hpfrcvAAAAIA"]
[Tue Nov 11 13:30:44.921057 2025] [:error] [pid 53414:tid 53417] [client 192.178.4.101:37468] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLKBAs6pHd_Z5oc1edSOgAAAQE"]
[Tue Nov 11 13:30:53.306209 2025] [:error] [pid 53356:tid 53392] [client 192.178.4.101:45379] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLKDekdmt0kzjVcUN-CqgAAAEc"]
[Tue Nov 11 13:30:55.644210 2025] [:error] [pid 59670:tid 59697] [client 192.178.4.101:37000] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLKD6k2Cnts0y-hpfrc1QAAAJg"]
[Tue Nov 11 13:31:19.808500 2025] [:error] [pid 53355:tid 53379] [client 192.178.4.101:59685] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLKJ4B5X5A3rMc4_nAV3wAAABU"]
[Tue Nov 11 13:32:47.412002 2025] [:error] [pid 53414:tid 53422] [client 192.178.4.101:40949] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLKfws6pHd_Z5oc1edSrAAAAQY"]
[Tue Nov 11 13:32:54.101614 2025] [:error] [pid 53355:tid 53361] [client 192.178.4.101:55524] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLKhoB5X5A3rMc4_nAWSgAAAAM"]
[Tue Nov 11 13:32:58.036960 2025] [:error] [pid 53356:tid 53396] [client 192.178.4.101:47820] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLKiukdmt0kzjVcUN-DIwAAAEs"]
[Tue Nov 11 13:33:00.656263 2025] [:error] [pid 59670:tid 59693] [client 192.178.4.101:64933] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLKjKk2Cnts0y-hpfrdlQAAAJQ"]
[Tue Nov 11 13:33:08.480452 2025] [:error] [pid 59670:tid 59682] [client 192.178.4.101:38369] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLKlKk2Cnts0y-hpfrdoQAAAIk"]
[Tue Nov 11 13:33:16.280974 2025] [:error] [pid 53449:tid 53462] [client 192.178.4.101:51418] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLKnNpz08j5NoUSzp8NKAAAAUg"]
[Tue Nov 11 13:33:18.859747 2025] [:error] [pid 53355:tid 53376] [client 192.178.4.101:44142] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLKnoB5X5A3rMc4_nAWYQAAABI"]
[Tue Nov 11 13:33:22.732723 2025] [:error] [pid 53414:tid 53436] [client 192.178.4.101:52932] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLKogs6pHd_Z5oc1edSygAAARQ"]
[Tue Nov 11 13:33:30.472643 2025] [:error] [pid 53355:tid 53362] [client 192.178.4.101:45178] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLKqoB5X5A3rMc4_nAWZAAAAAQ"]
[Tue Nov 11 13:33:34.340935 2025] [:error] [pid 53414:tid 53416] [client 192.178.4.101:52062] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLKrgs6pHd_Z5oc1edS1gAAAQA"]
[Tue Nov 11 13:41:20.732953 2025] [:error] [pid 53356:tid 53407] [client 192.178.4.101:63689] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLMgOkdmt0kzjVcUN-F3gAAAFY"]
[Tue Nov 11 13:41:31.749194 2025] [:error] [pid 53414:tid 53434] [client 192.178.4.101:36366] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLMiws6pHd_Z5oc1edVowAAARI"]
[Tue Nov 11 13:41:43.868305 2025] [:error] [pid 53356:tid 53409] [client 192.178.4.101:50528] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLMl-kdmt0kzjVcUN-GBQAAAFg"]
[Tue Nov 11 13:41:45.978616 2025] [:error] [pid 53449:tid 53476] [client 192.178.4.101:56924] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLMmdpz08j5NoUSzp8QZAAAAVY"]
[Tue Nov 11 13:41:50.772505 2025] [:error] [pid 53414:tid 53428] [client 192.178.4.101:39588] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLMngs6pHd_Z5oc1edVxwAAAQw"]
[Tue Nov 11 13:41:58.559804 2025] [:error] [pid 59670:tid 59695] [client 192.178.4.101:54145] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLMpqk2Cnts0y-hpfriBwAAAJY"]
[Tue Nov 11 13:41:59.592767 2025] [:error] [pid 53355:tid 53377] [client 192.178.4.101:37190] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLMp4B5X5A3rMc4_nAZhAAAABM"]
[Tue Nov 11 13:42:02.483561 2025] [:error] [pid 53449:tid 53457] [client 192.178.4.101:50844] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLMqtpz08j5NoUSzp8QgwAAAUM"]
[Tue Nov 11 13:42:05.819637 2025] [:error] [pid 53355:tid 53367] [client 192.178.4.101:35419] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLMrYB5X5A3rMc4_nAZiQAAAAk"]
[Tue Nov 11 13:42:10.772043 2025] [:error] [pid 53356:tid 53403] [client 192.178.4.101:61566] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLMsukdmt0kzjVcUN-GIwAAAFI"]
[Tue Nov 11 13:42:12.406496 2025] [:error] [pid 59670:tid 59684] [client 192.178.4.101:39490] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLMtKk2Cnts0y-hpfriKAAAAIs"]
[Tue Nov 11 13:43:54.404415 2025] [:error] [pid 59670:tid 59673] [client 192.178.4.101:63685] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLNGqk2Cnts0y-hpfrivgAAAIA"]
[Tue Nov 11 13:44:11.417425 2025] [:error] [pid 53355:tid 53377] [client 192.178.4.101:61503] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLNK4B5X5A3rMc4_nAaTwAAABM"]
[Tue Nov 11 13:44:25.567743 2025] [:error] [pid 53414:tid 53422] [client 192.178.4.101:46081] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLNOQs6pHd_Z5oc1edWkgAAAQY"]
[Tue Nov 11 13:44:34.213540 2025] [:error] [pid 53449:tid 53475] [client 192.178.4.101:42225] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLNQtpz08j5NoUSzp8RkAAAAVU"]
[Tue Nov 11 13:44:39.334031 2025] [:error] [pid 53355:tid 53366] [client 192.178.4.101:50904] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLNR4B5X5A3rMc4_nAafQAAAAg"]
[Tue Nov 11 13:46:47.044836 2025] [:error] [pid 53355:tid 53376] [client 192.178.4.101:57399] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLNx4B5X5A3rMc4_nAbCQAAABI"]
[Tue Nov 11 13:46:53.849983 2025] [:error] [pid 53414:tid 53435] [client 192.178.4.101:39997] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLNzQs6pHd_Z5oc1edXUwAAARM"]
[Tue Nov 11 13:47:12.312068 2025] [:error] [pid 59670:tid 59691] [client 192.178.4.101:58536] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLN4Kk2Cnts0y-hpfrkJwAAAJI"]
[Tue Nov 11 13:48:56.247075 2025] [:error] [pid 53356:tid 53409] [client 192.178.4.101:36350] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLOSOkdmt0kzjVcUN-IxQAAAFg"]
[Tue Nov 11 13:49:00.605458 2025] [:error] [pid 59670:tid 59683] [client 192.178.4.101:50657] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLOTKk2Cnts0y-hpfrk7QAAAIo"]
[Tue Nov 11 13:49:14.288841 2025] [:error] [pid 53449:tid 53464] [client 192.178.4.101:37754] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLOWtpz08j5NoUSzp8TdQAAAUo"]
[Tue Nov 11 13:49:17.656431 2025] [:error] [pid 53356:tid 53409] [client 192.178.4.101:56703] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLOXekdmt0kzjVcUN-I7QAAAFg"]
[Tue Nov 11 13:49:39.183989 2025] [:error] [pid 59670:tid 59681] [client 192.178.4.101:46434] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLOc6k2Cnts0y-hpfrlWwAAAIg"]
[Tue Nov 11 13:49:42.449132 2025] [:error] [pid 53356:tid 53407] [client 192.178.4.101:62098] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLOdukdmt0kzjVcUN-JAwAAAFY"]
[Tue Nov 11 13:50:08.085111 2025] [:error] [pid 53414:tid 53434] [client 182.40.104.255:37890] [client 182.40.104.255] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||paramountbaldivis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLOkAs6pHd_Z5oc1edYMgAAARI"]
[Tue Nov 11 13:51:09.721008 2025] [:error] [pid 53355:tid 53361] [client 192.178.4.101:62020] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLOzYB5X5A3rMc4_nAcgwAAAAM"]
[Tue Nov 11 13:51:33.578248 2025] [:error] [pid 53449:tid 53473] [client 192.178.4.101:51006] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLO5dpz08j5NoUSzp8UZQAAAVM"]
[Tue Nov 11 13:51:42.557589 2025] [:error] [pid 53414:tid 53429] [client 192.178.4.101:42664] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLO7gs6pHd_Z5oc1edYzQAAAQ0"]
[Tue Nov 11 13:51:54.095716 2025] [:error] [pid 53355:tid 53370] [client 192.178.4.101:53855] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLO-oB5X5A3rMc4_nAc4AAAAAw"]
[Tue Nov 11 13:52:31.974922 2025] [:error] [pid 59670:tid 59687] [client 161.97.137.114:63947] [client 161.97.137.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 161.97.137.114, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRLPH6k2Cnts0y-hpfrnGAAAAI4"]
[Tue Nov 11 13:53:51.349254 2025] [:error] [pid 53355:tid 53370] [client 192.178.4.101:51812] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLPb4B5X5A3rMc4_nAd3gAAAAw"]
[Tue Nov 11 13:53:59.316553 2025] [:error] [pid 53414:tid 53422] [client 192.178.4.101:56972] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLPdws6pHd_Z5oc1edZlAAAAQY"]
[Tue Nov 11 14:08:20.291847 2025] [:error] [pid 59670:tid 59694] [client 192.178.4.101:52428] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLS1Kk2Cnts0y-hpfrvFwAAAJU"]
[Tue Nov 11 14:08:23.282808 2025] [:error] [pid 53449:tid 53477] [client 192.178.4.101:47457] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLS19pz08j5NoUSzp8cjgAAAVc"]
[Tue Nov 11 14:08:24.176527 2025] [:error] [pid 53449:tid 53460] [client 192.178.4.101:49212] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLS2Npz08j5NoUSzp8cjwAAAUY"]
[Tue Nov 11 14:08:26.963759 2025] [:error] [pid 59670:tid 59677] [client 192.178.4.101:44654] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLS2qk2Cnts0y-hpfrvJwAAAIQ"]
[Tue Nov 11 14:08:31.512906 2025] [:error] [pid 53449:tid 53463] [client 192.178.4.101:57546] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLS39pz08j5NoUSzp8clwAAAUk"]
[Tue Nov 11 14:08:32.544496 2025] [:error] [pid 53356:tid 53402] [client 192.178.4.101:59199] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLS4Okdmt0kzjVcUN-PuAAAAFE"]
[Tue Nov 11 14:08:38.013409 2025] [:error] [pid 59670:tid 59674] [client 192.178.4.101:42631] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLS5qk2Cnts0y-hpfrvNgAAAIE"]
[Tue Nov 11 14:08:39.378243 2025] [:error] [pid 53356:tid 53397] [client 192.178.4.101:44956] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLS5-kdmt0kzjVcUN-PvwAAAEw"]
[Tue Nov 11 14:08:53.999739 2025] [:error] [pid 59670:tid 59680] [client 192.178.4.101:44567] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLS9ak2Cnts0y-hpfrvVwAAAIc"]
[Tue Nov 11 14:08:56.547379 2025] [:error] [pid 53355:tid 53374] [client 192.178.4.101:55597] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLS-IB5X5A3rMc4_nAi6QAAABA"]
[Tue Nov 11 14:09:07.908292 2025] [:error] [pid 53449:tid 53464] [client 192.178.4.101:58760] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLTA9pz08j5NoUSzp8ctgAAAUo"]
[Tue Nov 11 14:09:12.848002 2025] [:error] [pid 53449:tid 53469] [client 192.178.4.101:60026] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLTCNpz08j5NoUSzp8cuQAAAU8"]
[Tue Nov 11 14:09:16.528338 2025] [:error] [pid 53355:tid 53365] [client 192.178.4.101:61829] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLTDIB5X5A3rMc4_nAjCgAAAAc"]
[Tue Nov 11 14:10:05.010880 2025] [:error] [pid 59670:tid 59697] [client 72.144.102.147:28672] [client 72.144.102.147] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 72.144.102.147, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRLTPak2Cnts0y-hpfrv8AAAAJg"]
[Tue Nov 11 14:10:49.741026 2025] [:error] [pid 53356:tid 53386] [client 192.178.4.101:65018] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLTaekdmt0kzjVcUN-QdwAAAEE"]
[Tue Nov 11 14:11:06.379748 2025] [:error] [pid 53414:tid 53436] [client 192.178.4.101:49869] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLTegs6pHd_Z5oc1edfbgAAARQ"]
[Tue Nov 11 14:11:20.326458 2025] [:error] [pid 53414:tid 53426] [client 192.178.4.101:59183] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLTiAs6pHd_Z5oc1edfnwAAAQo"]
[Tue Nov 11 14:11:23.104872 2025] [:error] [pid 53414:tid 53416] [client 192.178.4.101:56138] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLTiws6pHd_Z5oc1edfpgAAAQA"]
[Tue Nov 11 14:11:25.915561 2025] [:error] [pid 53449:tid 53460] [client 192.178.4.101:62754] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLTjdpz08j5NoUSzp8diAAAAUY"]
[Tue Nov 11 14:11:35.364575 2025] [:error] [pid 53355:tid 53365] [client 192.178.4.101:56521] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLTl4B5X5A3rMc4_nAjrgAAAAc"]
[Tue Nov 11 14:12:57.098656 2025] [:error] [pid 53449:tid 53456] [client 192.178.4.101:44528] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLT6dpz08j5NoUSzp8ebAAAAUI"]
[Tue Nov 11 14:12:58.891218 2025] [:error] [pid 59670:tid 59687] [client 192.178.4.101:43994] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLT6qk2Cnts0y-hpfrxpAAAAI4"]
[Tue Nov 11 14:13:07.527599 2025] [:error] [pid 53356:tid 53401] [client 192.178.4.101:38615] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLT8-kdmt0kzjVcUN-RggAAAFA"]
[Tue Nov 11 14:13:08.663294 2025] [:error] [pid 53356:tid 53406] [client 192.178.4.101:36589] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLT9Okdmt0kzjVcUN-RhQAAAFU"]
[Tue Nov 11 14:13:16.987527 2025] [:error] [pid 53355:tid 53378] [client 192.178.4.101:61394] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLT_IB5X5A3rMc4_nAkRQAAABQ"]
[Tue Nov 11 14:13:19.917250 2025] [:error] [pid 53355:tid 53367] [client 192.178.4.101:49415] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLT_4B5X5A3rMc4_nAkRwAAAAk"]
[Tue Nov 11 14:13:21.092856 2025] [:error] [pid 53356:tid 53408] [client 192.178.4.101:48960] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLUAekdmt0kzjVcUN-RjwAAAFc"]
[Tue Nov 11 14:13:22.450599 2025] [:error] [pid 53449:tid 53475] [client 192.178.4.101:60996] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLUAtpz08j5NoUSzp8ecwAAAVU"]
[Tue Nov 11 14:13:23.798819 2025] [:error] [pid 59670:tid 59673] [client 192.178.4.101:35678] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLUA6k2Cnts0y-hpfrx3gAAAIA"]
[Tue Nov 11 14:13:25.071517 2025] [:error] [pid 53356:tid 53409] [client 192.178.4.101:63749] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLUBekdmt0kzjVcUN-RkgAAAFg"]
[Tue Nov 11 14:13:29.346151 2025] [:error] [pid 53449:tid 53454] [client 192.178.4.101:38848] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLUCdpz08j5NoUSzp8elAAAAUA"]
[Tue Nov 11 14:13:30.738161 2025] [:error] [pid 53414:tid 53437] [client 192.178.4.101:42230] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLUCgs6pHd_Z5oc1edgsAAAARU"]
[Tue Nov 11 14:13:33.513404 2025] [:error] [pid 53414:tid 53430] [client 192.178.4.101:59210] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLUDQs6pHd_Z5oc1edgvgAAAQ4"]
[Tue Nov 11 14:13:34.897185 2025] [:error] [pid 59670:tid 59695] [client 192.178.4.101:42502] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLUDqk2Cnts0y-hpfrx6QAAAJY"]
[Tue Nov 11 14:13:36.272676 2025] [:error] [pid 53355:tid 53364] [client 192.178.4.101:35137] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLUEIB5X5A3rMc4_nAkXwAAAAY"]
[Tue Nov 11 14:13:37.651057 2025] [:error] [pid 59670:tid 59696] [client 192.178.4.101:50797] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLUEak2Cnts0y-hpfrx7AAAAJc"]
[Tue Nov 11 14:13:40.303167 2025] [:error] [pid 53356:tid 53397] [client 192.178.4.101:39870] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLUFOkdmt0kzjVcUN-RsQAAAEw"]
[Tue Nov 11 14:13:41.739601 2025] [:error] [pid 53449:tid 53472] [client 192.178.4.101:51988] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLUFdpz08j5NoUSzp8eyAAAAVI"]
[Tue Nov 11 14:13:43.088768 2025] [:error] [pid 53356:tid 53393] [client 192.178.4.101:55531] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLUF-kdmt0kzjVcUN-RtAAAAEg"]
[Tue Nov 11 14:13:44.446235 2025] [:error] [pid 59670:tid 59696] [client 192.178.4.101:43566] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLUGKk2Cnts0y-hpfrx-gAAAJc"]
[Tue Nov 11 14:13:45.771005 2025] [:error] [pid 53355:tid 53375] [client 192.178.4.101:42719] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLUGYB5X5A3rMc4_nAkawAAABE"]
[Tue Nov 11 14:14:09.403022 2025] [:error] [pid 53414:tid 53436] [client 192.178.4.101:59997] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLUMQs6pHd_Z5oc1edhAAAAARQ"]
[Tue Nov 11 14:14:09.938724 2025] [:error] [pid 59670:tid 59678] [client 192.178.4.101:44699] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLUMak2Cnts0y-hpfryKgAAAIU"]
[Tue Nov 11 14:14:11.988986 2025] [:error] [pid 53356:tid 53385] [client 192.178.4.101:50743] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLUM-kdmt0kzjVcUN-RywAAAEA"]
[Tue Nov 11 14:14:13.257067 2025] [:error] [pid 53414:tid 53431] [client 192.178.4.101:55898] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLUNQs6pHd_Z5oc1edhGAAAAQ8"]
[Tue Nov 11 14:14:14.529667 2025] [:error] [pid 53355:tid 53372] [client 192.178.4.101:41009] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLUNoB5X5A3rMc4_nAkqQAAAA4"]
[Tue Nov 11 14:14:15.797665 2025] [:error] [pid 53414:tid 53419] [client 192.178.4.101:57911] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLUNws6pHd_Z5oc1edhMQAAAQM"]
[Tue Nov 11 14:14:17.048522 2025] [:error] [pid 53355:tid 53380] [client 192.178.4.101:51738] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLUOYB5X5A3rMc4_nAkrQAAABY"]
[Tue Nov 11 14:14:18.302371 2025] [:error] [pid 53355:tid 53371] [client 192.178.4.101:39848] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLUOoB5X5A3rMc4_nAkrgAAAA0"]
[Tue Nov 11 14:14:25.169597 2025] [:error] [pid 59670:tid 59693] [client 192.178.4.101:37283] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLUQak2Cnts0y-hpfryeAAAAJQ"]
[Tue Nov 11 14:14:27.079583 2025] [:error] [pid 53356:tid 53397] [client 192.178.4.101:50943] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLUQ-kdmt0kzjVcUN-R5AAAAEw"]
[Tue Nov 11 14:14:28.328483 2025] [:error] [pid 53356:tid 53409] [client 192.178.4.101:46453] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLUROkdmt0kzjVcUN-R5gAAAFg"]
[Tue Nov 11 14:37:07.023420 2025] [:error] [pid 53355:tid 53382] [client 192.178.4.101:54066] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLZk4B5X5A3rMc4_nAtRQAAABg"]
[Tue Nov 11 14:37:09.172541 2025] [:error] [pid 53356:tid 53408] [client 192.178.4.101:60324] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLZlekdmt0kzjVcUN-akAAAAFc"]
[Tue Nov 11 14:37:10.505717 2025] [:error] [pid 53355:tid 53367] [client 192.178.4.101:64491] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLZloB5X5A3rMc4_nAtUwAAAAk"]
[Tue Nov 11 14:37:11.784773 2025] [:error] [pid 53355:tid 53374] [client 192.178.4.101:54744] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLZl4B5X5A3rMc4_nAtVQAAABA"]
[Tue Nov 11 14:37:13.188288 2025] [:error] [pid 59670:tid 59679] [client 192.178.4.101:37402] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLZmak2Cnts0y-hpfr-bAAAAIY"]
[Tue Nov 11 14:37:14.514972 2025] [:error] [pid 53355:tid 53369] [client 192.178.4.101:48239] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLZmoB5X5A3rMc4_nAtZAAAAAs"]
[Tue Nov 11 14:37:15.838158 2025] [:error] [pid 53355:tid 53364] [client 192.178.4.101:42985] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLZm4B5X5A3rMc4_nAtbAAAAAY"]
[Tue Nov 11 14:37:17.153081 2025] [:error] [pid 53356:tid 53385] [client 192.178.4.101:61226] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLZnekdmt0kzjVcUN-apAAAAEA"]
[Tue Nov 11 14:37:18.461668 2025] [:error] [pid 53414:tid 53431] [client 192.178.4.101:61893] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLZngs6pHd_Z5oc1edp5wAAAQ8"]
[Tue Nov 11 14:37:21.059029 2025] [:error] [pid 53414:tid 53422] [client 192.178.4.101:44642] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLZoQs6pHd_Z5oc1edp7QAAAQY"]
[Tue Nov 11 14:37:22.363983 2025] [:error] [pid 53355:tid 53360] [client 192.178.4.101:62980] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLZooB5X5A3rMc4_nAteAAAAAI"]
[Tue Nov 11 14:37:23.657296 2025] [:error] [pid 59670:tid 59696] [client 192.178.4.101:62213] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLZo6k2Cnts0y-hpfr-gwAAAJc"]
[Tue Nov 11 14:37:24.948832 2025] [:error] [pid 53355:tid 53365] [client 192.178.4.101:65031] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLZpIB5X5A3rMc4_nAtfAAAAAc"]
[Tue Nov 11 14:37:26.232008 2025] [:error] [pid 53449:tid 53459] [client 192.178.4.101:45843] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLZptpz08j5NoUSzp8o2wAAAUU"]
[Tue Nov 11 14:37:28.784536 2025] [:error] [pid 53449:tid 53477] [client 192.178.4.101:48461] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLZqNpz08j5NoUSzp8o5QAAAVc"]
[Tue Nov 11 14:37:30.050272 2025] [:error] [pid 59670:tid 59676] [client 192.178.4.101:65141] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLZqqk2Cnts0y-hpfr-jwAAAIM"]
[Tue Nov 11 14:37:31.310604 2025] [:error] [pid 53356:tid 53389] [client 192.178.4.101:62040] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLZq-kdmt0kzjVcUN-auAAAAEQ"]
[Tue Nov 11 14:37:33.816261 2025] [:error] [pid 53355:tid 53377] [client 192.178.4.101:45490] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLZrYB5X5A3rMc4_nAtoAAAABM"]
[Tue Nov 11 14:37:35.069402 2025] [:error] [pid 53414:tid 53428] [client 192.178.4.101:64046] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLZrws6pHd_Z5oc1edqKAAAAQw"]
[Tue Nov 11 14:37:38.701380 2025] [:error] [pid 59670:tid 59694] [client 192.178.4.101:45009] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLZsqk2Cnts0y-hpfr-pwAAAJU"]
[Tue Nov 11 14:37:41.241994 2025] [:error] [pid 53449:tid 53468] [client 192.178.4.101:43886] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLZtdpz08j5NoUSzp8pCgAAAU4"]
[Tue Nov 11 14:37:46.124448 2025] [:error] [pid 53414:tid 53431] [client 192.178.4.101:41926] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLZugs6pHd_Z5oc1edqWAAAAQ8"]
[Tue Nov 11 14:37:47.352044 2025] [:error] [pid 53355:tid 53375] [client 192.178.4.101:55395] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLZu4B5X5A3rMc4_nAtvAAAABE"]
[Tue Nov 11 14:37:49.799653 2025] [:error] [pid 53356:tid 53388] [client 192.178.4.101:40516] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLZvekdmt0kzjVcUN-a_QAAAEM"]
[Tue Nov 11 14:37:52.236494 2025] [:error] [pid 53355:tid 53379] [client 192.178.4.101:51780] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLZwIB5X5A3rMc4_nAtzAAAABU"]
[Tue Nov 11 14:37:53.459097 2025] [:error] [pid 53449:tid 53465] [client 192.178.4.101:46426] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLZwdpz08j5NoUSzp8pIwAAAUs"]
[Tue Nov 11 14:37:59.534388 2025] [:error] [pid 53449:tid 53465] [client 192.178.4.101:60018] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLZx9pz08j5NoUSzp8pKwAAAUs"]
[Tue Nov 11 14:38:00.731812 2025] [:error] [pid 53414:tid 53439] [client 192.178.4.101:49471] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLZyAs6pHd_Z5oc1edqdgAAARc"]
[Tue Nov 11 14:38:03.141538 2025] [:error] [pid 59670:tid 59688] [client 192.178.4.101:36121] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLZy6k2Cnts0y-hpfr-0QAAAI8"]
[Tue Nov 11 14:39:02.902400 2025] [:error] [pid 53356:tid 53407] [client 192.178.4.101:55301] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLaBukdmt0kzjVcUN-bnwAAAFY"]
[Tue Nov 11 14:39:03.980568 2025] [:error] [pid 53355:tid 53358] [client 192.178.4.101:51452] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLaB4B5X5A3rMc4_nAuTAAAAAA"]
[Tue Nov 11 14:39:05.018970 2025] [:error] [pid 59670:tid 59691] [client 192.178.4.101:57285] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLaCak2Cnts0y-hpfr_UwAAAJI"]
[Tue Nov 11 14:39:06.281221 2025] [:error] [pid 53356:tid 53385] [client 192.178.4.101:50849] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLaCukdmt0kzjVcUN-boAAAAEA"]
[Tue Nov 11 14:39:07.548094 2025] [:error] [pid 53449:tid 53470] [client 192.178.4.101:44908] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLaC9pz08j5NoUSzp8psgAAAVA"]
[Tue Nov 11 14:39:08.828430 2025] [:error] [pid 53355:tid 53372] [client 192.178.4.101:42600] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLaDIB5X5A3rMc4_nAuVgAAAA4"]
[Tue Nov 11 14:39:10.096109 2025] [:error] [pid 53414:tid 53439] [client 192.178.4.101:46741] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLaDgs6pHd_Z5oc1edq8wAAARc"]
[Tue Nov 11 14:39:11.357415 2025] [:error] [pid 53355:tid 53361] [client 192.178.4.101:59967] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLaD4B5X5A3rMc4_nAuYQAAAAM"]
[Tue Nov 11 14:39:12.620173 2025] [:error] [pid 53355:tid 53369] [client 192.178.4.101:46463] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLaEIB5X5A3rMc4_nAuYgAAAAs"]
[Tue Nov 11 14:39:16.371634 2025] [:error] [pid 53355:tid 53376] [client 192.178.4.101:46626] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLaFIB5X5A3rMc4_nAuaAAAABI"]
[Tue Nov 11 14:39:17.629740 2025] [:error] [pid 53414:tid 53423] [client 192.178.4.101:48357] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLaFQs6pHd_Z5oc1edq-gAAAQc"]
[Tue Nov 11 14:39:21.363520 2025] [:error] [pid 53414:tid 53437] [client 192.178.4.101:60640] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLaGQs6pHd_Z5oc1edrAAAAARU"]
[Tue Nov 11 14:39:25.087466 2025] [:error] [pid 53356:tid 53392] [client 192.178.4.101:38270] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLaHekdmt0kzjVcUN-bxgAAAEc"]
[Tue Nov 11 14:39:27.560370 2025] [:error] [pid 59670:tid 59678] [client 192.178.4.101:38859] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLaH6k2Cnts0y-hpfr_rQAAAIU"]
[Tue Nov 11 14:39:31.301674 2025] [:error] [pid 53355:tid 53376] [client 192.178.4.101:61249] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLaI4B5X5A3rMc4_nAufwAAABI"]
[Tue Nov 11 14:39:32.531092 2025] [:error] [pid 59670:tid 59674] [client 192.178.4.101:41863] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLaJKk2Cnts0y-hpfr_uwAAAIE"]
[Tue Nov 11 14:39:34.977464 2025] [:error] [pid 53449:tid 53478] [client 192.178.4.101:35192] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLaJtpz08j5NoUSzp8pzAAAAVg"]
[Tue Nov 11 14:39:36.206461 2025] [:error] [pid 59670:tid 59697] [client 192.178.4.101:58617] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLaKKk2Cnts0y-hpfr_xAAAAJg"]
[Tue Nov 11 14:39:37.421981 2025] [:error] [pid 59670:tid 59680] [client 192.178.4.101:44768] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLaKak2Cnts0y-hpfr_ygAAAIc"]
[Tue Nov 11 14:39:38.652561 2025] [:error] [pid 53356:tid 53391] [client 192.178.4.101:53950] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLaKukdmt0kzjVcUN-b2AAAAEY"]
[Tue Nov 11 14:39:41.077964 2025] [:error] [pid 53414:tid 53440] [client 192.178.4.101:46539] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLaLQs6pHd_Z5oc1edrDQAAARg"]
[Tue Nov 11 14:39:42.293661 2025] [:error] [pid 53355:tid 53378] [client 192.178.4.101:44652] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLaLoB5X5A3rMc4_nAuiwAAABQ"]
[Tue Nov 11 14:48:58.126026 2025] [:error] [pid 53356:tid 53387] [client 161.97.137.114:50550] [client 161.97.137.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 161.97.137.114, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRLcWukdmt0kzjVcUN-fLQAAAEI"]
[Tue Nov 11 15:08:01.897530 2025] [:error] [pid 53414:tid 53423] [client 192.178.4.101:48564] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLg0Qs6pHd_Z5oc1ed1FQAAAQc"]
[Tue Nov 11 15:08:04.296715 2025] [:error] [pid 53356:tid 53407] [client 192.178.4.101:38032] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLg1Okdmt0kzjVcUN-mOgAAAFY"]
[Tue Nov 11 15:08:05.892041 2025] [:error] [pid 59670:tid 59677] [client 192.178.4.101:39167] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLg1ak2Cnts0y-hpfoOLQAAAIQ"]
[Tue Nov 11 15:08:07.498526 2025] [:error] [pid 59670:tid 59693] [client 192.178.4.101:35490] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLg16k2Cnts0y-hpfoOLwAAAJQ"]
[Tue Nov 11 15:08:13.824937 2025] [:error] [pid 53414:tid 53435] [client 192.178.4.101:43106] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLg3Qs6pHd_Z5oc1ed1JgAAARM"]
[Tue Nov 11 15:08:15.407129 2025] [:error] [pid 53355:tid 53364] [client 192.178.4.101:63773] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLg34B5X5A3rMc4_nA4VQAAAAY"]
[Tue Nov 11 15:08:16.969176 2025] [:error] [pid 53356:tid 53389] [client 192.178.4.101:37360] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLg4Okdmt0kzjVcUN-mRgAAAEQ"]
[Tue Nov 11 15:08:18.533950 2025] [:error] [pid 53356:tid 53404] [client 192.178.4.101:65426] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLg4ukdmt0kzjVcUN-mRwAAAFM"]
[Tue Nov 11 15:08:20.089584 2025] [:error] [pid 59670:tid 59682] [client 192.178.4.101:35907] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLg5Kk2Cnts0y-hpfoOPgAAAIk"]
[Tue Nov 11 15:08:23.171066 2025] [:error] [pid 53355:tid 53381] [client 192.178.4.101:40354] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLg54B5X5A3rMc4_nA4WgAAABc"]
[Tue Nov 11 15:08:24.707385 2025] [:error] [pid 59670:tid 59674] [client 192.178.4.101:59339] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLg6Kk2Cnts0y-hpfoOQwAAAIE"]
[Tue Nov 11 15:08:26.234897 2025] [:error] [pid 53356:tid 53405] [client 192.178.4.101:53151] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLg6ukdmt0kzjVcUN-mSgAAAFQ"]
[Tue Nov 11 15:08:27.770436 2025] [:error] [pid 53356:tid 53403] [client 192.178.4.101:48451] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLg6-kdmt0kzjVcUN-mTQAAAFI"]
[Tue Nov 11 15:08:30.789545 2025] [:error] [pid 59670:tid 59690] [client 192.178.4.101:63519] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLg7qk2Cnts0y-hpfoOSwAAAJE"]
[Tue Nov 11 15:08:32.305875 2025] [:error] [pid 59670:tid 59675] [client 192.178.4.101:57769] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLg8Kk2Cnts0y-hpfoOTAAAAII"]
[Tue Nov 11 15:08:35.310947 2025] [:error] [pid 59670:tid 59681] [client 192.178.4.101:64164] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLg86k2Cnts0y-hpfoOUwAAAIg"]
[Tue Nov 11 15:08:36.802697 2025] [:error] [pid 53356:tid 53408] [client 192.178.4.101:63774] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLg9Okdmt0kzjVcUN-mdgAAAFc"]
[Tue Nov 11 15:08:39.753383 2025] [:error] [pid 53356:tid 53402] [client 192.178.4.101:53081] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLg9-kdmt0kzjVcUN-mfwAAAFE"]
[Tue Nov 11 15:08:41.242562 2025] [:error] [pid 53355:tid 53381] [client 192.178.4.101:51164] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLg-YB5X5A3rMc4_nA4fQAAABc"]
[Tue Nov 11 15:08:45.583729 2025] [:error] [pid 53449:tid 53455] [client 192.178.4.101:51120] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLg_dpz08j5NoUSzp81dAAAAUE"]
[Tue Nov 11 15:08:48.560135 2025] [:error] [pid 53449:tid 53472] [client 192.178.4.101:51451] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLhANpz08j5NoUSzp81eAAAAVI"]
[Tue Nov 11 15:08:50.022574 2025] [:error] [pid 53449:tid 53460] [client 192.178.4.101:64009] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLhAtpz08j5NoUSzp81egAAAUY"]
[Tue Nov 11 15:08:52.906263 2025] [:error] [pid 53449:tid 53467] [client 192.178.4.101:59457] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLhBNpz08j5NoUSzp81fwAAAU0"]
[Tue Nov 11 15:08:54.276999 2025] [:error] [pid 53356:tid 53391] [client 192.178.4.101:48307] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLhBukdmt0kzjVcUN-mjwAAAEY"]
[Tue Nov 11 15:08:55.772196 2025] [:error] [pid 53355:tid 53375] [client 192.178.4.101:46435] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLhB4B5X5A3rMc4_nA4iwAAABE"]
[Tue Nov 11 15:08:58.603774 2025] [:error] [pid 53414:tid 53433] [client 192.178.4.101:48562] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLhCgs6pHd_Z5oc1ed1RAAAARE"]
[Tue Nov 11 15:09:49.706658 2025] [:error] [pid 53356:tid 53405] [client 192.178.4.101:59866] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLhPekdmt0kzjVcUN-myAAAAFQ"]
[Tue Nov 11 15:09:50.798001 2025] [:error] [pid 53356:tid 53395] [client 192.178.4.101:39515] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLhPukdmt0kzjVcUN-mygAAAEo"]
[Tue Nov 11 15:09:53.984814 2025] [:error] [pid 53355:tid 53374] [client 192.178.4.101:61031] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLhQYB5X5A3rMc4_nA4ywAAABA"]
[Tue Nov 11 15:09:56.184658 2025] [:error] [pid 53414:tid 53438] [client 192.178.4.101:51825] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLhRAs6pHd_Z5oc1ed1cgAAARY"]
[Tue Nov 11 15:09:57.738757 2025] [:error] [pid 53449:tid 53460] [client 192.178.4.101:41736] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLhRdpz08j5NoUSzp813AAAAUY"]
[Tue Nov 11 15:10:00.629760 2025] [:error] [pid 53356:tid 53403] [client 192.178.4.101:49258] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLhSOkdmt0kzjVcUN-m1AAAAFI"]
[Tue Nov 11 15:10:05.083693 2025] [:error] [pid 53414:tid 53440] [client 192.178.4.101:60722] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLhTQs6pHd_Z5oc1ed1dwAAARg"]
[Tue Nov 11 15:10:12.373693 2025] [:error] [pid 53356:tid 53403] [client 192.178.4.101:39775] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLhVOkdmt0kzjVcUN-m3gAAAFI"]
[Tue Nov 11 15:22:12.000018 2025] [:error] [pid 59670:tid 59676] [client 185.193.67.83:48738] [client 185.193.67.83] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.193.67.83, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRLkI6k2Cnts0y-hpfoUwQAAAIM"]
[Tue Nov 11 15:36:52.080061 2025] [:error] [pid 53356:tid 53409] [client 192.178.4.101:44502] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLnlOkdmt0kzjVcUN-ulgAAAFg"]
[Tue Nov 11 15:36:52.559540 2025] [:error] [pid 53355:tid 53366] [client 192.178.4.101:41315] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLnlIB5X5A3rMc4_nBBjwAAAAg"]
[Tue Nov 11 15:36:54.253713 2025] [:error] [pid 53356:tid 53396] [client 192.178.4.101:57747] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLnlukdmt0kzjVcUN-ulwAAAEs"]
[Tue Nov 11 15:36:55.169328 2025] [:error] [pid 59670:tid 59674] [client 192.178.4.101:37951] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLnl6k2Cnts0y-hpfodDAAAAIE"]
[Tue Nov 11 15:36:56.084977 2025] [:error] [pid 53449:tid 53454] [client 192.178.4.101:62565] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLnmNpz08j5NoUSzp8_PAAAAUA"]
[Tue Nov 11 15:36:56.998875 2025] [:error] [pid 53356:tid 53398] [client 192.178.4.101:35433] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLnmOkdmt0kzjVcUN-urgAAAE0"]
[Tue Nov 11 15:36:57.837756 2025] [:error] [pid 53414:tid 53434] [client 192.178.4.101:53931] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLnmQs6pHd_Z5oc1ed-hQAAARI"]
[Tue Nov 11 15:36:58.822473 2025] [:error] [pid 53414:tid 53421] [client 192.178.4.101:50578] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLnmgs6pHd_Z5oc1ed-hgAAAQU"]
[Tue Nov 11 15:37:00.731669 2025] [:error] [pid 53355:tid 53375] [client 192.178.4.101:34795] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLnnIB5X5A3rMc4_nBBmQAAABE"]
[Tue Nov 11 15:37:01.761515 2025] [:error] [pid 53355:tid 53368] [client 192.178.4.101:60667] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLnnYB5X5A3rMc4_nBBnAAAAAo"]
[Tue Nov 11 15:37:07.962182 2025] [:error] [pid 53449:tid 53456] [client 192.178.4.101:44189] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLno9pz08j5NoUSzp8_VAAAAUI"]
[Tue Nov 11 15:37:09.236783 2025] [:error] [pid 53355:tid 53359] [client 192.178.4.101:65298] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLnpYB5X5A3rMc4_nBBqgAAAAE"]
[Tue Nov 11 15:37:10.268591 2025] [:error] [pid 53449:tid 53471] [client 192.178.4.101:48131] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLnptpz08j5NoUSzp8_WwAAAVE"]
[Tue Nov 11 15:37:10.610262 2025] [:error] [pid 53356:tid 53386] [client 192.178.4.101:65106] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLnpukdmt0kzjVcUN-uvQAAAEE"]
[Tue Nov 11 15:37:13.149788 2025] [:error] [pid 53449:tid 53469] [client 192.178.4.101:38618] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLnqdpz08j5NoUSzp8_YwAAAU8"]
[Tue Nov 11 15:37:14.090968 2025] [:error] [pid 59670:tid 59695] [client 192.178.4.101:46925] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLnqqk2Cnts0y-hpfodIwAAAJY"]
[Tue Nov 11 15:37:15.098037 2025] [:error] [pid 53449:tid 53474] [client 192.178.4.101:56089] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLnq9pz08j5NoUSzp8_ZgAAAVQ"]
[Tue Nov 11 15:37:16.154945 2025] [:error] [pid 53356:tid 53408] [client 192.178.4.101:60776] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLnrOkdmt0kzjVcUN-uwQAAAFc"]
[Tue Nov 11 15:37:17.112119 2025] [:error] [pid 53449:tid 53460] [client 192.178.4.101:55609] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLnrdpz08j5NoUSzp8_agAAAUY"]
[Tue Nov 11 15:37:18.112848 2025] [:error] [pid 53356:tid 53397] [client 192.178.4.101:46558] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLnrukdmt0kzjVcUN-uxgAAAEw"]
[Tue Nov 11 15:37:18.823449 2025] [:error] [pid 59670:tid 59688] [client 192.178.4.101:54386] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLnrqk2Cnts0y-hpfodJwAAAI8"]
[Tue Nov 11 15:37:20.747711 2025] [:error] [pid 53414:tid 53424] [client 192.178.4.101:42177] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLnsAs6pHd_Z5oc1ed-mAAAAQg"]
[Tue Nov 11 15:37:21.806676 2025] [:error] [pid 53355:tid 53366] [client 192.178.4.101:59979] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLnsYB5X5A3rMc4_nBCNAAAAAg"]
[Tue Nov 11 15:37:22.644549 2025] [:error] [pid 53449:tid 53478] [client 192.178.4.101:48629] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLnstpz08j5NoUSzp8_bgAAAVg"]
[Tue Nov 11 15:37:24.557680 2025] [:error] [pid 53356:tid 53386] [client 192.178.4.101:59947] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLntOkdmt0kzjVcUN-uyQAAAEE"]
[Tue Nov 11 15:37:25.517882 2025] [:error] [pid 53356:tid 53394] [client 192.178.4.101:62052] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLntekdmt0kzjVcUN-uywAAAEk"]
[Tue Nov 11 15:37:26.386913 2025] [:error] [pid 53449:tid 53471] [client 192.178.4.101:55923] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLnttpz08j5NoUSzp8_cgAAAVE"]
[Tue Nov 11 15:37:27.346906 2025] [:error] [pid 59670:tid 59682] [client 192.178.4.101:41352] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLnt6k2Cnts0y-hpfodbgAAAIk"]
[Tue Nov 11 15:37:28.365500 2025] [:error] [pid 53449:tid 53460] [client 192.178.4.101:55047] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLnuNpz08j5NoUSzp8_cwAAAUY"]
[Tue Nov 11 15:37:29.307571 2025] [:error] [pid 53449:tid 53461] [client 192.178.4.101:42903] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLnudpz08j5NoUSzp8_dwAAAUc"]
[Tue Nov 11 15:37:30.264549 2025] [:error] [pid 53356:tid 53396] [client 192.178.4.101:36739] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLnuukdmt0kzjVcUN-uzwAAAEs"]
[Tue Nov 11 15:37:31.207763 2025] [:error] [pid 53414:tid 53431] [client 192.178.4.101:55866] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLnuws6pHd_Z5oc1ed-pQAAAQ8"]
[Tue Nov 11 15:37:32.148366 2025] [:error] [pid 53355:tid 53368] [client 192.178.4.101:47323] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLnvIB5X5A3rMc4_nBCPwAAAAo"]
[Tue Nov 11 15:37:33.004958 2025] [:error] [pid 53449:tid 53454] [client 192.178.4.101:42382] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLnvdpz08j5NoUSzp8_ewAAAUA"]
[Tue Nov 11 15:37:33.944569 2025] [:error] [pid 53449:tid 53465] [client 192.178.4.101:40338] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLnvdpz08j5NoUSzp8_gAAAAUs"]
[Tue Nov 11 15:37:35.878587 2025] [:error] [pid 53356:tid 53389] [client 192.178.4.101:42311] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLnv-kdmt0kzjVcUN-u1AAAAEQ"]
[Tue Nov 11 15:37:36.835315 2025] [:error] [pid 53414:tid 53421] [client 192.178.4.101:43017] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLnwAs6pHd_Z5oc1ed-qAAAAQU"]
[Tue Nov 11 15:37:43.111185 2025] [:error] [pid 53356:tid 53396] [client 192.178.4.101:58291] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLnx-kdmt0kzjVcUN-u2wAAAEs"]
[Tue Nov 11 15:37:44.141699 2025] [:error] [pid 53414:tid 53425] [client 192.178.4.101:39449] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLnyAs6pHd_Z5oc1ed-rAAAAQk"]
[Tue Nov 11 15:37:45.101970 2025] [:error] [pid 53355:tid 53362] [client 192.178.4.101:41705] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLnyYB5X5A3rMc4_nBCSAAAAAQ"]
[Tue Nov 11 15:37:46.104822 2025] [:error] [pid 53414:tid 53429] [client 192.178.4.101:35627] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLnygs6pHd_Z5oc1ed-vAAAAQ0"]
[Tue Nov 11 15:37:46.600512 2025] [:error] [pid 53356:tid 53409] [client 192.178.4.101:59837] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLnyukdmt0kzjVcUN-u_wAAAFg"]
[Tue Nov 11 15:37:47.589092 2025] [:error] [pid 53356:tid 53406] [client 192.178.4.101:42294] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLny-kdmt0kzjVcUN-vAAAAAFU"]
[Tue Nov 11 15:37:48.494551 2025] [:error] [pid 53356:tid 53402] [client 192.178.4.101:42571] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLnzOkdmt0kzjVcUN-vBAAAAFE"]
[Tue Nov 11 15:37:49.543488 2025] [:error] [pid 53356:tid 53405] [client 192.178.4.101:46186] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLnzekdmt0kzjVcUN-vBwAAAFQ"]
[Tue Nov 11 15:38:04.614438 2025] [:error] [pid 53356:tid 53385] [client 192.178.4.101:65361] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLn3Okdmt0kzjVcUN-vHgAAAEA"]
[Tue Nov 11 15:38:05.038839 2025] [:error] [pid 53355:tid 53379] [client 192.178.4.101:61535] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLn3YB5X5A3rMc4_nBCWgAAABU"]
[Tue Nov 11 15:38:06.157174 2025] [:error] [pid 53414:tid 53437] [client 192.178.4.101:52452] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLn3gs6pHd_Z5oc1ed-zQAAARU"]
[Tue Nov 11 15:38:09.008808 2025] [:error] [pid 53449:tid 53476] [client 192.178.4.101:36376] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLn4dpz08j5NoUSzp8_yAAAAVY"]
[Tue Nov 11 15:38:10.047746 2025] [:error] [pid 53414:tid 53435] [client 192.178.4.101:58991] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLn4gs6pHd_Z5oc1ed-1QAAARM"]
[Tue Nov 11 15:38:11.013159 2025] [:error] [pid 53355:tid 53381] [client 192.178.4.101:47375] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLn44B5X5A3rMc4_nBCXgAAABc"]
[Tue Nov 11 15:38:11.998575 2025] [:error] [pid 59670:tid 59689] [client 192.178.4.101:49728] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLn46k2Cnts0y-hpfodpgAAAJA"]
[Tue Nov 11 15:38:12.893191 2025] [:error] [pid 53356:tid 53409] [client 192.178.4.101:63060] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLn5Okdmt0kzjVcUN-vJgAAAFg"]
[Tue Nov 11 15:38:13.957336 2025] [:error] [pid 53355:tid 53364] [client 192.178.4.101:43627] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLn5YB5X5A3rMc4_nBCYwAAAAY"]
[Tue Nov 11 15:38:15.867676 2025] [:error] [pid 59670:tid 59677] [client 192.178.4.101:46310] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLn56k2Cnts0y-hpfodrQAAAIQ"]
[Tue Nov 11 15:38:16.826324 2025] [:error] [pid 53355:tid 53366] [client 192.178.4.101:35901] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLn6IB5X5A3rMc4_nBCawAAAAg"]
[Tue Nov 11 15:38:17.704305 2025] [:error] [pid 53356:tid 53388] [client 192.178.4.101:65366] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLn6ekdmt0kzjVcUN-vMgAAAEM"]
[Tue Nov 11 15:38:18.747710 2025] [:error] [pid 53414:tid 53433] [client 192.178.4.101:42093] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLn6gs6pHd_Z5oc1ed-2QAAARE"]
[Tue Nov 11 15:38:19.708643 2025] [:error] [pid 53449:tid 53468] [client 192.178.4.101:45774] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLn69pz08j5NoUSzp8_1QAAAU4"]
[Tue Nov 11 15:38:20.732647 2025] [:error] [pid 59670:tid 59679] [client 192.178.4.101:56704] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLn7Kk2Cnts0y-hpfodswAAAIY"]
[Tue Nov 11 15:38:22.486214 2025] [:error] [pid 53449:tid 53463] [client 192.178.4.101:38159] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLn7tpz08j5NoUSzp8_2AAAAUk"]
[Tue Nov 11 15:38:23.552567 2025] [:error] [pid 53356:tid 53395] [client 192.178.4.101:52131] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLn7-kdmt0kzjVcUN-vOQAAAEo"]
[Tue Nov 11 15:38:27.912216 2025] [:error] [pid 53414:tid 53436] [client 192.178.4.101:59901] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLn8ws6pHd_Z5oc1ed-3gAAARQ"]
[Tue Nov 11 15:38:28.870885 2025] [:error] [pid 59670:tid 59696] [client 192.178.4.101:58607] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLn9Kk2Cnts0y-hpfodwQAAAJc"]
[Tue Nov 11 15:38:29.799858 2025] [:error] [pid 53449:tid 53478] [client 192.178.4.101:65418] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLn9dpz08j5NoUSzp8_6QAAAVg"]
[Tue Nov 11 15:38:30.806995 2025] [:error] [pid 53356:tid 53395] [client 192.178.4.101:36163] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLn9ukdmt0kzjVcUN-vRQAAAEo"]
[Tue Nov 11 15:38:32.214477 2025] [:error] [pid 53356:tid 53386] [client 192.178.4.101:55361] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLn-Okdmt0kzjVcUN-vRwAAAEE"]
[Tue Nov 11 15:38:33.170452 2025] [:error] [pid 59670:tid 59696] [client 192.178.4.101:35612] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLn-ak2Cnts0y-hpfodzAAAAJc"]
[Tue Nov 11 15:38:34.275026 2025] [:error] [pid 59670:tid 59693] [client 192.178.4.101:40148] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLn-qk2Cnts0y-hpfodzgAAAJQ"]
[Tue Nov 11 15:38:35.351988 2025] [:error] [pid 59670:tid 59676] [client 192.178.4.101:46078] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLn-6k2Cnts0y-hpfod0gAAAIM"]
[Tue Nov 11 15:38:36.380599 2025] [:error] [pid 59670:tid 59685] [client 192.178.4.101:37002] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLn_Kk2Cnts0y-hpfod0wAAAIw"]
[Tue Nov 11 15:38:37.333062 2025] [:error] [pid 53449:tid 53461] [client 192.178.4.101:38709] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLn_dpz08j5NoUSzp8_7wAAAUc"]
[Tue Nov 11 15:38:38.355491 2025] [:error] [pid 53414:tid 53416] [client 192.178.4.101:38648] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLn_gs6pHd_Z5oc1ed-5gAAAQA"]
[Tue Nov 11 15:38:39.274714 2025] [:error] [pid 59670:tid 59687] [client 192.178.4.101:48224] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLn_6k2Cnts0y-hpfod1QAAAI4"]
[Tue Nov 11 15:38:40.344434 2025] [:error] [pid 59670:tid 59682] [client 192.178.4.101:52128] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLoAKk2Cnts0y-hpfod2AAAAIk"]
[Tue Nov 11 15:38:42.246260 2025] [:error] [pid 53449:tid 53477] [client 192.178.4.101:34889] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLoAtpz08j5NoUSzp9AAgAAAVc"]
[Tue Nov 11 15:38:46.268334 2025] [:error] [pid 53356:tid 53393] [client 192.178.4.101:59641] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLoBukdmt0kzjVcUN-vVwAAAEg"]
[Tue Nov 11 15:38:48.243490 2025] [:error] [pid 53355:tid 53376] [client 192.178.4.101:39308] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLoCIB5X5A3rMc4_nBCnAAAABI"]
[Tue Nov 11 15:38:50.139753 2025] [:error] [pid 53355:tid 53366] [client 192.178.4.101:58881] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLoCoB5X5A3rMc4_nBCoAAAAAg"]
[Tue Nov 11 15:38:51.196659 2025] [:error] [pid 53449:tid 53474] [client 192.178.4.101:53474] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLoC9pz08j5NoUSzp9AFAAAAVQ"]
[Tue Nov 11 15:38:52.169655 2025] [:error] [pid 59670:tid 59693] [client 192.178.4.101:47544] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLoDKk2Cnts0y-hpfod5gAAAJQ"]
[Tue Nov 11 15:38:53.172626 2025] [:error] [pid 53414:tid 53440] [client 192.178.4.101:35106] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLoDQs6pHd_Z5oc1ed-9QAAARg"]
[Tue Nov 11 15:38:54.157127 2025] [:error] [pid 53449:tid 53470] [client 192.178.4.101:61913] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLoDtpz08j5NoUSzp9AFQAAAVA"]
[Tue Nov 11 15:38:55.133973 2025] [:error] [pid 53449:tid 53467] [client 192.178.4.101:52830] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLoD9pz08j5NoUSzp9AGwAAAU0"]
[Tue Nov 11 15:38:57.079327 2025] [:error] [pid 59670:tid 59688] [client 192.178.4.101:44218] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLoEak2Cnts0y-hpfod7QAAAI8"]
[Tue Nov 11 15:38:58.110248 2025] [:error] [pid 53355:tid 53376] [client 192.178.4.101:41158] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLoEoB5X5A3rMc4_nBCpgAAABI"]
[Tue Nov 11 15:38:59.024148 2025] [:error] [pid 53414:tid 53438] [client 192.178.4.101:39069] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLoEws6pHd_Z5oc1ed--gAAARY"]
[Tue Nov 11 15:38:59.933171 2025] [:error] [pid 53414:tid 53425] [client 192.178.4.101:63662] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLoEws6pHd_Z5oc1ed-_AAAAQk"]
[Tue Nov 11 15:39:01.112672 2025] [:error] [pid 53356:tid 53399] [client 192.178.4.101:61902] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLoFekdmt0kzjVcUN-vZAAAAE4"]
[Tue Nov 11 15:39:01.873854 2025] [:error] [pid 53449:tid 53456] [client 192.178.4.101:42261] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLoFdpz08j5NoUSzp9AHwAAAUI"]
[Tue Nov 11 15:39:27.015479 2025] [:error] [pid 59670:tid 59679] [client 192.178.4.101:42570] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLoL6k2Cnts0y-hpfoeGwAAAIY"]
[Tue Nov 11 15:39:27.582500 2025] [:error] [pid 53414:tid 53420] [client 192.178.4.101:46786] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLoLws6pHd_Z5oc1ed_GgAAAQQ"]
[Tue Nov 11 15:39:29.456574 2025] [:error] [pid 53414:tid 53434] [client 192.178.4.101:57343] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLoMQs6pHd_Z5oc1ed_GwAAARI"]
[Tue Nov 11 15:39:31.657072 2025] [:error] [pid 53356:tid 53394] [client 192.178.4.101:59634] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLoM-kdmt0kzjVcUN-vfgAAAEk"]
[Tue Nov 11 15:39:34.944041 2025] [:error] [pid 59670:tid 59694] [client 192.178.4.101:34809] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLoNqk2Cnts0y-hpfoeNQAAAJU"]
[Tue Nov 11 15:39:35.974684 2025] [:error] [pid 53356:tid 53407] [client 192.178.4.101:63238] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLoN-kdmt0kzjVcUN-vgwAAAFY"]
[Tue Nov 11 15:39:38.149909 2025] [:error] [pid 53356:tid 53409] [client 192.178.4.101:64110] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLoOukdmt0kzjVcUN-viAAAAFg"]
[Tue Nov 11 15:39:39.245013 2025] [:error] [pid 59670:tid 59684] [client 192.178.4.101:39017] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLoO6k2Cnts0y-hpfoeNwAAAIs"]
[Tue Nov 11 15:39:40.398594 2025] [:error] [pid 53355:tid 53360] [client 192.178.4.101:44406] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLoPIB5X5A3rMc4_nBCxwAAAAI"]
[Tue Nov 11 15:39:41.471577 2025] [:error] [pid 53355:tid 53382] [client 192.178.4.101:63484] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLoPYB5X5A3rMc4_nBCyQAAABg"]
[Tue Nov 11 15:39:42.548771 2025] [:error] [pid 53449:tid 53464] [client 192.178.4.101:46760] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLoPtpz08j5NoUSzp9AaAAAAUo"]
[Tue Nov 11 15:39:43.617457 2025] [:error] [pid 59670:tid 59686] [client 192.178.4.101:53193] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLoP6k2Cnts0y-hpfoePwAAAI0"]
[Tue Nov 11 15:39:44.680989 2025] [:error] [pid 53449:tid 53456] [client 192.178.4.101:48141] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLoQNpz08j5NoUSzp9AbwAAAUI"]
[Tue Nov 11 15:39:45.746998 2025] [:error] [pid 53414:tid 53420] [client 192.178.4.101:39844] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLoQQs6pHd_Z5oc1ed_MAAAAQQ"]
[Tue Nov 11 15:39:47.779057 2025] [:error] [pid 53414:tid 53416] [client 192.178.4.101:63928] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLoQws6pHd_Z5oc1ed_NQAAAQA"]
[Tue Nov 11 15:39:48.834907 2025] [:error] [pid 53355:tid 53376] [client 192.178.4.101:36013] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLoRIB5X5A3rMc4_nBC0gAAABI"]
[Tue Nov 11 15:39:49.881522 2025] [:error] [pid 59670:tid 59673] [client 192.178.4.101:64070] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLoRak2Cnts0y-hpfoeSQAAAIA"]
[Tue Nov 11 15:39:50.923356 2025] [:error] [pid 59670:tid 59677] [client 192.178.4.101:61580] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLoRqk2Cnts0y-hpfoeSwAAAIQ"]
[Tue Nov 11 15:39:53.070491 2025] [:error] [pid 53355:tid 53369] [client 192.178.4.101:53253] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLoSYB5X5A3rMc4_nBC1gAAAAs"]
[Tue Nov 11 15:39:54.029042 2025] [:error] [pid 59670:tid 59681] [client 192.178.4.101:42929] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLoSqk2Cnts0y-hpfoeTwAAAIg"]
[Tue Nov 11 15:39:56.089874 2025] [:error] [pid 59670:tid 59685] [client 192.178.4.101:37214] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLoTKk2Cnts0y-hpfoeVQAAAIw"]
[Tue Nov 11 15:39:58.217253 2025] [:error] [pid 53449:tid 53467] [client 192.178.4.101:35111] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLoTtpz08j5NoUSzp9AdQAAAU0"]
[Tue Nov 11 15:40:11.493337 2025] [:error] [pid 59670:tid 59691] [client 192.178.4.101:51480] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLoW6k2Cnts0y-hpfoecAAAAJI"]
[Tue Nov 11 15:40:12.392900 2025] [:error] [pid 59670:tid 59693] [client 192.178.4.101:55973] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLoXKk2Cnts0y-hpfoedgAAAJQ"]
[Tue Nov 11 15:40:14.606522 2025] [:error] [pid 59670:tid 59685] [client 192.178.4.101:53169] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLoXqk2Cnts0y-hpfoefAAAAIw"]
[Tue Nov 11 15:40:17.872296 2025] [:error] [pid 53449:tid 53464] [client 192.178.4.101:54130] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLoYdpz08j5NoUSzp9AlgAAAUo"]
[Tue Nov 11 15:40:18.965392 2025] [:error] [pid 53449:tid 53461] [client 192.178.4.101:47993] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLoYtpz08j5NoUSzp9AmgAAAUc"]
[Tue Nov 11 15:40:20.107942 2025] [:error] [pid 59670:tid 59697] [client 192.178.4.101:49456] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLoZKk2Cnts0y-hpfoegwAAAJg"]
[Tue Nov 11 15:40:21.180232 2025] [:error] [pid 53355:tid 53370] [client 192.178.4.101:55898] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLoZYB5X5A3rMc4_nBC6gAAAAw"]
[Tue Nov 11 15:40:22.174922 2025] [:error] [pid 53356:tid 53391] [client 192.178.4.101:39896] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLoZukdmt0kzjVcUN-vpQAAAEY"]
[Tue Nov 11 15:40:24.374394 2025] [:error] [pid 53355:tid 53359] [client 192.178.4.101:64239] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLoaIB5X5A3rMc4_nBC7wAAAAE"]
[Tue Nov 11 15:40:46.854027 2025] [:error] [pid 53355:tid 53378] [client 192.178.4.101:38552] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLofoB5X5A3rMc4_nBDDQAAABQ"]
[Tue Nov 11 15:40:47.894597 2025] [:error] [pid 53414:tid 53421] [client 192.178.4.101:35560] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLofws6pHd_Z5oc1ed_eQAAAQU"]
[Tue Nov 11 15:40:49.619177 2025] [:error] [pid 53414:tid 53416] [client 192.178.4.101:50422] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLogQs6pHd_Z5oc1ed_fQAAAQA"]
[Tue Nov 11 15:40:50.650813 2025] [:error] [pid 59670:tid 59677] [client 192.178.4.101:64017] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLogqk2Cnts0y-hpfoetgAAAIQ"]
[Tue Nov 11 15:40:54.339151 2025] [:error] [pid 53356:tid 53405] [client 192.178.4.101:63269] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLohukdmt0kzjVcUN-wEQAAAFQ"]
[Tue Nov 11 15:40:55.270974 2025] [:error] [pid 59670:tid 59675] [client 192.178.4.101:49477] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLoh6k2Cnts0y-hpfoevgAAAII"]
[Tue Nov 11 15:40:56.202782 2025] [:error] [pid 53355:tid 53370] [client 192.178.4.101:52386] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLoiIB5X5A3rMc4_nBDGgAAAAw"]
[Tue Nov 11 15:41:34.772949 2025] [:error] [pid 53355:tid 53382] [client 103.243.82.171:57228] [client 103.243.82.171] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.243.82.171, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aRLoroB5X5A3rMc4_nBDQAAAABg"]
[Tue Nov 11 15:41:36.369843 2025] [:error] [pid 53355:tid 53358] [client 103.243.82.171:57228] [client 103.243.82.171] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||paramountbaldivis.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "paramountbaldivis.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aRLosIB5X5A3rMc4_nBDQwAAAAA"]
[Tue Nov 11 15:50:17.094644 2025] [:error] [pid 53356:tid 53407] [client 161.97.137.114:63620] [client 161.97.137.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 161.97.137.114, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRLquekdmt0kzjVcUN-zcQAAAFY"]
[Tue Nov 11 16:10:49.000916 2025] [:error] [pid 31336:tid 31352] [client 192.178.4.101:57750] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLviLiGeE-8_vmBMeLvPAAAAMw"]
[Tue Nov 11 16:11:00.145164 2025] [:error] [pid 31441:tid 31463] [client 192.178.4.101:61408] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLvlPQ8TlGWLenoKAXUHAAAAZQ"]
[Tue Nov 11 16:11:22.825072 2025] [:error] [pid 32838:tid 32873] [client 192.178.4.101:39132] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLvqnqKZ8Vxr93KcaXDDQAAAEQ"]
[Tue Nov 11 16:14:38.866962 2025] [:error] [pid 32838:tid 32884] [client 192.178.4.101:64075] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLwbnqKZ8Vxr93KcaXEpQAAAE8"]
[Tue Nov 11 16:21:30.835969 2025] [:error] [pid 36578:tid 36592] [client 192.178.4.101:38243] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLyCkMi03XeylcOo5Wi2gAAAMk"]
[Tue Nov 11 16:21:32.744991 2025] [:error] [pid 36673:tid 36683] [client 192.178.4.101:63468] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLyDCvASiSDHs9bkffTSAAAAIg"]
[Tue Nov 11 16:21:41.171545 2025] [:error] [pid 36578:tid 36604] [client 192.178.4.101:52109] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLyFUMi03XeylcOo5Wi5gAAANU"]
[Tue Nov 11 16:21:46.642971 2025] [:error] [pid 36578:tid 36602] [client 192.178.4.101:46589] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLyGkMi03XeylcOo5Wi7AAAANM"]
[Tue Nov 11 16:22:01.429396 2025] [:error] [pid 36579:tid 36615] [client 192.178.4.101:40492] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLyKemuedRSntjwLw5RkQAAAAQ"]
[Tue Nov 11 16:22:09.583772 2025] [:error] [pid 43205:tid 43222] [client 192.178.4.101:54213] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLyMb48SbhIkX6TjwM_kwAAAQ4"]
[Tue Nov 11 16:25:36.990121 2025] [:error] [pid 36578:tid 36601] [client 192.178.4.101:42900] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLzAEMi03XeylcOo5Wj5wAAANI"]
[Tue Nov 11 16:25:46.166348 2025] [:error] [pid 43205:tid 43217] [client 192.178.4.101:40984] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLzCr48SbhIkX6TjwNA5wAAAQk"]
[Tue Nov 11 16:25:56.847830 2025] [:error] [pid 36579:tid 36628] [client 192.178.4.101:61093] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLzFOmuedRSntjwLw5S9wAAABE"]
[Tue Nov 11 16:26:32.465356 2025] [:error] [pid 43205:tid 43219] [client 192.178.4.101:54645] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRLzOL48SbhIkX6TjwNBIgAAAQs"]
[Tue Nov 11 16:39:49.647930 2025] [:error] [pid 43205:tid 43213] [client 46.37.234.21:53300] [client 46.37.234.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 46.37.234.21, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRL2Vb48SbhIkX6TjwNGggAAAQU"]
[Tue Nov 11 16:55:13.740288 2025] [:error] [pid 36673:tid 36679] [client 161.97.137.114:55636] [client 161.97.137.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 161.97.137.114, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRL58SvASiSDHs9bkffcAAAAAIQ"]
[Tue Nov 11 17:00:31.061940 2025] [:error] [pid 43205:tid 43223] [client 192.178.4.101:41228] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRL7L748SbhIkX6TjwNMsQAAAQ8"]
[Tue Nov 11 17:00:36.168509 2025] [:error] [pid 36579:tid 36627] [client 192.178.4.101:43931] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRL7NOmuedRSntjwLw5ZpAAAABA"]
[Tue Nov 11 17:00:54.507730 2025] [:error] [pid 36673:tid 36681] [client 192.178.4.101:35866] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/gambling/Login%20%E0%B8%95%E0%B8%B2%E0%B8%A3%E0%B8%B2%E0%B8%87%E0%B8%A3%E0%B8%B2%E0%B8%84%E0%B8%B2%E0%B8%9E%E0%B8%B9%E0%B8%A5%E0%B9%80%E0%B8%AA%E0%B8%A1%E0%B8%AD.html"] [unique_id "aRL7RivASiSDHs9bkffc_QAAAIY"]
[Tue Nov 11 17:14:51.555994 2025] [:error] [pid 36580:tid 36653] [client 192.178.4.101:48101] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRL-i5aaFQZGE3H9yOGpHQAAAE8"]
[Tue Nov 11 17:15:30.660372 2025] [:error] [pid 36579:tid 36633] [client 192.178.4.101:52418] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRL-sumuedRSntjwLw5ctAAAABY"]
[Tue Nov 11 17:15:46.038440 2025] [:error] [pid 36579:tid 36624] [client 192.178.4.101:35280] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRL-wumuedRSntjwLw5ctwAAAA0"]
[Tue Nov 11 17:21:48.478135 2025] [:error] [pid 36578:tid 36600] [client 192.178.4.101:51168] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRMALEMi03XeylcOo5WuZgAAANE"]
[Tue Nov 11 17:22:19.342830 2025] [:error] [pid 43205:tid 43231] [client 192.178.4.101:49937] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRMAS748SbhIkX6TjwNS2QAAARc"]
[Tue Nov 11 17:22:20.306236 2025] [:error] [pid 36578:tid 36585] [client 192.178.4.101:55585] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRMATEMi03XeylcOo5WufQAAAMI"]
[Tue Nov 11 17:22:40.539675 2025] [:error] [pid 36579:tid 36617] [client 159.26.120.29:35618] [client 159.26.120.29] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 159.26.120.29, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aRMAYOmuedRSntjwLw5dtAAAAAY"]
[Tue Nov 11 17:22:41.032661 2025] [:error] [pid 43205:tid 43223] [client 192.178.4.101:47618] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRMAYb48SbhIkX6TjwNS7wAAAQ8"]
[Tue Nov 11 17:22:43.340692 2025] [:error] [pid 36579:tid 36629] [client 159.26.120.29:35618] [client 159.26.120.29] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||paramountbaldivis.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "paramountbaldivis.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aRMAY-muedRSntjwLw5dugAAABI"]
[Tue Nov 11 17:22:45.785517 2025] [:error] [pid 36579:tid 36633] [client 159.26.120.29:35618] [client 159.26.120.29] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 159.26.120.29, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aRMAZemuedRSntjwLw5dwAAAABY"]
[Tue Nov 11 17:32:44.782763 2025] [:error] [pid 43205:tid 43229] [client 192.178.4.101:50470] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRMCvL48SbhIkX6TjwNZLQAAARU"]
[Tue Nov 11 17:32:46.433565 2025] [:error] [pid 36579:tid 36627] [client 192.178.4.101:55437] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRMCvumuedRSntjwLw5hcQAAABA"]
[Tue Nov 11 17:32:57.617993 2025] [:error] [pid 36673:tid 36690] [client 192.178.4.101:34941] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRMCySvASiSDHs9bkffl5QAAAI8"]
[Tue Nov 11 17:37:47.668456 2025] [:error] [pid 36579:tid 36613] [client 192.178.4.101:45147] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRMD6-muedRSntjwLw5iegAAAAI"]
[Tue Nov 11 17:38:21.403371 2025] [:error] [pid 43205:tid 43232] [client 192.178.4.101:38976] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRMEDb48SbhIkX6TjwNbXQAAARg"]
[Tue Nov 11 17:38:35.753451 2025] [:error] [pid 36673:tid 36684] [client 192.178.4.101:47763] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRMEGyvASiSDHs9bkffnzgAAAIk"]
[Tue Nov 11 17:51:50.410792 2025] [:error] [pid 43205:tid 43230] [client 157.245.42.243:38042] [client 157.245.42.243] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 157.245.42.243, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRMHNr48SbhIkX6TjwNf1QAAARY"]
[Tue Nov 11 17:53:25.843745 2025] [:error] [pid 36578:tid 36606] [client 192.178.4.101:34802] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRMHlUMi03XeylcOo5W2-gAAANc"]
[Tue Nov 11 17:53:26.876595 2025] [:error] [pid 36580:tid 36660] [client 192.178.4.101:44661] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRMHlpaaFQZGE3H9yOGzhAAAAFY"]
[Tue Nov 11 17:53:50.960739 2025] [:error] [pid 36580:tid 36640] [client 192.178.4.101:55768] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRMHrpaaFQZGE3H9yOGzkgAAAEI"]
[Tue Nov 11 17:57:38.741757 2025] [:error] [pid 36579:tid 36625] [client 192.178.4.101:51084] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRMIkumuedRSntjwLw5ngwAAAA4"]
[Tue Nov 11 17:57:49.552880 2025] [:error] [pid 36580:tid 36643] [client 192.178.4.101:44274] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRMInZaaFQZGE3H9yOG1JgAAAEU"]
[Tue Nov 11 17:57:52.474781 2025] [:error] [pid 43205:tid 43224] [client 192.178.4.101:56085] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRMIoL48SbhIkX6TjwNieQAAARA"]
[Tue Nov 11 17:58:19.901458 2025] [:error] [pid 36673:tid 36694] [client 192.178.4.101:60284] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRMIuyvASiSDHs9bkfftgAAAAJM"]
[Tue Nov 11 17:58:25.617635 2025] [:error] [pid 36673:tid 36683] [client 192.178.4.101:52041] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRMIwSvASiSDHs9bkffthQAAAIg"]
[Tue Nov 11 18:01:50.620079 2025] [:error] [pid 36673:tid 36679] [client 192.178.4.101:59691] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRMJjivASiSDHs9bkffuZwAAAIQ"]
[Tue Nov 11 18:02:24.433150 2025] [:error] [pid 43205:tid 43231] [client 192.178.4.101:60427] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRMJsL48SbhIkX6TjwNj2gAAARc"]
[Tue Nov 11 18:02:27.326119 2025] [:error] [pid 43205:tid 43217] [client 192.178.4.101:44165] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRMJs748SbhIkX6TjwNj3QAAAQk"]
[Tue Nov 11 18:05:00.283687 2025] [:error] [pid 43205:tid 43222] [client 161.97.137.114:59428] [client 161.97.137.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 161.97.137.114, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRMKTL48SbhIkX6TjwNkrAAAAQ4"]
[Tue Nov 11 18:05:29.517587 2025] [:error] [pid 36673:tid 36695] [client 192.178.4.101:54102] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRMKaSvASiSDHs9bkffvpQAAAJQ"]
[Tue Nov 11 18:09:33.950974 2025] [:error] [pid 36578:tid 36606] [client 192.178.4.101:63919] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRMLXUMi03XeylcOo5W6VgAAANc"]
[Tue Nov 11 18:59:49.888700 2025] [:error] [pid 36673:tid 36680] [client 54.74.25.151:38038] [client 54.74.25.151] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.74.25.151, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRMXJSvASiSDHs9bkfcAowAAAIU"]
[Tue Nov 11 19:15:41.463035 2025] [:error] [pid 43205:tid 43228] [client 161.97.137.114:59170] [client 161.97.137.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 161.97.137.114, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRMa3b48SbhIkX6TjwOC2wAAARQ"]
[Tue Nov 11 19:19:46.023696 2025] [:error] [pid 36673:tid 36675] [client 192.178.4.101:52540] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRMb0ivASiSDHs9bkfcGPQAAAIA"]
[Tue Nov 11 19:24:39.893879 2025] [:error] [pid 36580:tid 36639] [client 192.178.4.101:53441] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRMc95aaFQZGE3H9yOHMJAAAAEE"]
[Tue Nov 11 19:24:41.324643 2025] [:error] [pid 36673:tid 36686] [client 192.178.4.101:55649] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRMc-SvASiSDHs9bkfcHZgAAAIs"]
[Tue Nov 11 19:25:05.265162 2025] [:error] [pid 36578:tid 36601] [client 192.178.4.101:61396] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRMdEUMi03XeylcOo5XN4gAAANI"]
[Tue Nov 11 19:25:16.601599 2025] [:error] [pid 43205:tid 43211] [client 192.178.4.101:57912] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRMdHL48SbhIkX6TjwOFYQAAAQM"]
[Tue Nov 11 19:29:27.292426 2025] [:error] [pid 36578:tid 36586] [client 192.178.4.101:40250] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRMeF0Mi03XeylcOo5XO7QAAAMM"]
[Tue Nov 11 19:29:28.879331 2025] [:error] [pid 36579:tid 36620] [client 192.178.4.101:55854] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRMeGOmuedRSntjwLw5-jAAAAAk"]
[Tue Nov 11 19:29:33.629490 2025] [:error] [pid 36580:tid 36659] [client 192.178.4.101:46852] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRMeHZaaFQZGE3H9yOHNHAAAAFU"]
[Tue Nov 11 19:29:35.197975 2025] [:error] [pid 36579:tid 36628] [client 192.178.4.101:46230] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRMeH-muedRSntjwLw5-kQAAABE"]
[Tue Nov 11 19:32:42.760609 2025] [:error] [pid 36673:tid 36688] [client 192.178.4.101:40871] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRMe2ivASiSDHs9bkfcJGgAAAI0"]
[Tue Nov 11 19:33:12.167684 2025] [:error] [pid 43205:tid 43208] [client 192.178.4.101:53066] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRMe-L48SbhIkX6TjwOHqwAAAQA"]
[Tue Nov 11 19:33:18.300045 2025] [:error] [pid 36673:tid 36683] [client 192.178.4.101:60475] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRMe_ivASiSDHs9bkfcJOgAAAIg"]
[Tue Nov 11 19:33:39.971258 2025] [:error] [pid 36578:tid 36585] [client 192.178.4.101:35500] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRMfE0Mi03XeylcOo5XPuAAAAMI"]
[Tue Nov 11 19:45:46.718156 2025] [:error] [pid 43205:tid 43229] [client 192.178.4.101:40355] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRMh6r48SbhIkX6TjwOMDQAAARU"]
[Tue Nov 11 19:45:48.570971 2025] [:error] [pid 36578:tid 36593] [client 192.178.4.101:35671] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRMh7EMi03XeylcOo5XSiwAAAMo"]
[Tue Nov 11 19:49:33.343597 2025] [:error] [pid 36580:tid 36656] [client 192.178.4.101:38122] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRMizZaaFQZGE3H9yOHRYQAAAFI"]
[Tue Nov 11 19:50:19.763938 2025] [:error] [pid 36579:tid 36615] [client 192.178.4.101:47126] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRMi--muedRSntjwLw6DNgAAAAQ"]
[Tue Nov 11 19:53:34.729844 2025] [:error] [pid 36673:tid 36686] [client 192.178.4.101:64384] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRMjvivASiSDHs9bkfcOgwAAAIs"]
[Tue Nov 11 19:53:37.331731 2025] [:error] [pid 43205:tid 43228] [client 192.178.4.101:63148] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRMjwb48SbhIkX6TjwOOYwAAARQ"]
[Tue Nov 11 19:53:58.419463 2025] [:error] [pid 36673:tid 36692] [client 192.178.4.101:44059] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRMj1ivASiSDHs9bkfcOrAAAAJE"]
[Tue Nov 11 19:54:08.245762 2025] [:error] [pid 43205:tid 43224] [client 192.178.4.101:44236] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRMj4L48SbhIkX6TjwOO3QAAARA"]
[Tue Nov 11 19:54:27.781635 2025] [:error] [pid 36578:tid 36591] [client 192.178.4.101:46004] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRMj80Mi03XeylcOo5XUjAAAAMg"]
[Tue Nov 11 19:54:29.111866 2025] [:error] [pid 36673:tid 36688] [client 192.178.4.101:64377] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRMj9SvASiSDHs9bkfcPIAAAAI0"]
[Tue Nov 11 19:56:56.596974 2025] [:error] [pid 36578:tid 36586] [client 192.178.4.101:36309] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRMkiEMi03XeylcOo5XVKQAAAMM"]
[Tue Nov 11 19:57:28.532388 2025] [:error] [pid 36580:tid 36646] [client 192.178.4.101:64245] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRMkqJaaFQZGE3H9yOHTSAAAAEg"]
[Tue Nov 11 19:57:41.657978 2025] [:error] [pid 43205:tid 43210] [client 192.178.4.101:47047] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRMktb48SbhIkX6TjwOQNQAAAQI"]
[Tue Nov 11 19:57:45.966679 2025] [:error] [pid 36580:tid 36643] [client 192.178.4.101:50317] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRMkuZaaFQZGE3H9yOHTaAAAAEU"]
[Tue Nov 11 20:02:56.172549 2025] [:error] [pid 43205:tid 43209] [client 192.178.4.101:39622] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRMl8L48SbhIkX6TjwORvQAAAQE"]
[Tue Nov 11 20:02:59.118521 2025] [:error] [pid 36578:tid 36593] [client 192.178.4.101:62083] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRMl80Mi03XeylcOo5XWIwAAAMo"]
[Tue Nov 11 20:03:05.190155 2025] [:error] [pid 36578:tid 36599] [client 192.178.4.101:38049] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRMl-UMi03XeylcOo5XWKgAAANA"]
[Tue Nov 11 20:03:20.208116 2025] [:error] [pid 43205:tid 43225] [client 192.178.4.101:48436] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRMmCL48SbhIkX6TjwOR_AAAARE"]
[Tue Nov 11 20:03:21.705572 2025] [:error] [pid 43205:tid 43218] [client 192.178.4.101:61716] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRMmCb48SbhIkX6TjwOR_wAAAQo"]
[Tue Nov 11 20:05:31.582552 2025] [:error] [pid 36580:tid 36640] [client 192.178.4.101:44209] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRMmi5aaFQZGE3H9yOHVOQAAAEI"]
[Tue Nov 11 20:05:54.942132 2025] [:error] [pid 36579:tid 36621] [client 192.178.4.101:65132] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRMmoumuedRSntjwLw6GzQAAAAo"]
[Tue Nov 11 20:06:24.099975 2025] [:error] [pid 36579:tid 36622] [client 192.178.4.101:45353] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRMmwOmuedRSntjwLw6G3gAAAAs"]
[Tue Nov 11 20:09:54.844724 2025] [:error] [pid 36578:tid 36585] [client 192.178.4.101:45998] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRMnkkMi03XeylcOo5XXhQAAAMI"]
[Tue Nov 11 20:09:56.278904 2025] [:error] [pid 36579:tid 36622] [client 192.178.4.101:45641] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRMnlOmuedRSntjwLw6HvgAAAAs"]
[Tue Nov 11 20:09:59.444706 2025] [:error] [pid 36673:tid 36690] [client 192.178.4.101:48338] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRMnlyvASiSDHs9bkfcSlwAAAI8"]
[Tue Nov 11 20:13:26.634779 2025] [:error] [pid 43205:tid 43228] [client 51.89.116.113:3901] [client 51.89.116.113] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 51.89.116.113, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRMoZr48SbhIkX6TjwOVEQAAARQ"]
[Tue Nov 11 20:15:19.320168 2025] [:error] [pid 36579:tid 36612] [client 192.178.4.101:49328] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRMo1-muedRSntjwLw6IwQAAAAE"]
[Tue Nov 11 20:15:40.888088 2025] [:error] [pid 36580:tid 36646] [client 192.178.4.101:58303] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRMo7JaaFQZGE3H9yOHXAwAAAEg"]
[Tue Nov 11 20:16:14.447629 2025] [:error] [pid 43205:tid 43218] [client 187.188.79.71:30517] [client 187.188.79.71] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 187.188.79.71, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aRMpDr48SbhIkX6TjwOWGAAAAQo"]
[Tue Nov 11 20:26:28.663991 2025] [:error] [pid 36580:tid 36659] [client 192.178.4.101:60183] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRMrdJaaFQZGE3H9yOHZvwAAAFU"]
[Tue Nov 11 20:26:46.180473 2025] [:error] [pid 36673:tid 36681] [client 192.178.4.101:38082] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRMrhivASiSDHs9bkfcXfgAAAIY"]
[Tue Nov 11 20:26:47.690805 2025] [:error] [pid 36580:tid 36647] [client 192.178.4.101:65299] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRMrh5aaFQZGE3H9yOHZzgAAAEk"]
[Tue Nov 11 20:26:59.672875 2025] [:error] [pid 43205:tid 43215] [client 192.178.4.101:40995] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRMrk748SbhIkX6TjwOaRgAAAQc"]
[Tue Nov 11 20:27:11.492520 2025] [:error] [pid 43205:tid 43232] [client 192.178.4.101:57645] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRMrn748SbhIkX6TjwOaUAAAARg"]
[Tue Nov 11 20:27:34.138598 2025] [:error] [pid 36580:tid 36640] [client 161.97.137.114:60879] [client 161.97.137.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 161.97.137.114, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRMrtpaaFQZGE3H9yOHaDgAAAEI"]
[Tue Nov 11 20:30:29.320813 2025] [:error] [pid 43205:tid 43219] [client 192.178.4.101:35562] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRMsZb48SbhIkX6TjwObdAAAAQs"]
[Tue Nov 11 20:30:32.481009 2025] [:error] [pid 43205:tid 43222] [client 192.178.4.101:47562] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRMsaL48SbhIkX6TjwObewAAAQ4"]
[Tue Nov 11 20:30:37.113030 2025] [:error] [pid 36579:tid 36613] [client 192.178.4.101:51550] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRMsbemuedRSntjwLw6M2gAAAAI"]
[Tue Nov 11 20:33:42.891560 2025] [:error] [pid 36578:tid 36583] [client 192.178.4.101:57498] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRMtJkMi03XeylcOo5XdFAAAAMA"]
[Tue Nov 11 20:33:44.944574 2025] [:error] [pid 43205:tid 43229] [client 192.178.4.101:35351] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRMtKL48SbhIkX6TjwOc6AAAARU"]
[Tue Nov 11 20:34:14.846252 2025] [:error] [pid 43205:tid 43217] [client 192.178.4.101:48338] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRMtRr48SbhIkX6TjwOdJwAAAQk"]
[Tue Nov 11 20:34:17.097980 2025] [:error] [pid 36578:tid 36591] [client 192.178.4.101:63402] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRMtSUMi03XeylcOo5XdMQAAAMg"]
[Tue Nov 11 20:34:37.825070 2025] [:error] [pid 36580:tid 36658] [client 192.178.4.101:55533] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRMtXZaaFQZGE3H9yOHcIgAAAFQ"]
[Tue Nov 11 20:34:39.206280 2025] [:error] [pid 36673:tid 36689] [client 192.178.4.101:37250] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRMtXyvASiSDHs9bkfcaDwAAAI4"]
[Tue Nov 11 20:36:19.883542 2025] [:error] [pid 36580:tid 36647] [client 192.178.4.101:39683] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRMtw5aaFQZGE3H9yOHciQAAAEk"]
[Tue Nov 11 20:36:23.334683 2025] [:error] [pid 43205:tid 43209] [client 192.178.4.101:47356] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRMtx748SbhIkX6TjwOd5gAAAQE"]
[Tue Nov 11 20:36:26.060999 2025] [:error] [pid 36673:tid 36681] [client 192.178.4.101:58113] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRMtyivASiSDHs9bkfcanAAAAIY"]
[Tue Nov 11 20:36:52.845393 2025] [:error] [pid 43205:tid 43216] [client 192.178.4.101:47426] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRMt5L48SbhIkX6TjwOeOgAAAQg"]
[Tue Nov 11 20:36:53.877264 2025] [:error] [pid 43205:tid 43208] [client 192.178.4.101:47409] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRMt5b48SbhIkX6TjwOePgAAAQA"]
[Tue Nov 11 20:36:57.918637 2025] [:error] [pid 36580:tid 36656] [client 192.178.4.101:42307] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRMt6ZaaFQZGE3H9yOHcxQAAAFI"]
[Tue Nov 11 20:40:28.527645 2025] [:error] [pid 43205:tid 43231] [client 192.178.4.101:46417] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRMuvL48SbhIkX6TjwOf0gAAARc"]
[Tue Nov 11 20:40:42.035769 2025] [:error] [pid 36580:tid 36659] [client 192.178.4.101:41164] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRMuypaaFQZGE3H9yOHdhwAAAFU"]
[Tue Nov 11 20:40:53.452952 2025] [:error] [pid 36673:tid 36676] [client 192.178.4.101:62437] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRMu1SvASiSDHs9bkfccPAAAAIE"]
[Tue Nov 11 20:40:58.516390 2025] [:error] [pid 36673:tid 36678] [client 192.178.4.101:50349] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRMu2ivASiSDHs9bkfccPwAAAIM"]
[Tue Nov 11 20:41:01.172412 2025] [:error] [pid 36673:tid 36687] [client 192.178.4.101:39488] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRMu3SvASiSDHs9bkfccQAAAAIw"]
[Tue Nov 11 20:42:58.372825 2025] [:error] [pid 36578:tid 36583] [client 192.178.4.101:63311] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRMvUkMi03XeylcOo5XfcwAAAMA"]
[Tue Nov 11 20:42:59.508649 2025] [:error] [pid 36579:tid 36625] [client 192.178.4.101:49106] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRMvU-muedRSntjwLw6P3QAAAA4"]
[Tue Nov 11 20:43:01.949648 2025] [:error] [pid 43205:tid 43217] [client 192.178.4.101:46235] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRMvVb48SbhIkX6TjwOg1gAAAQk"]
[Tue Nov 11 20:44:53.962449 2025] [:error] [pid 36580:tid 36651] [client 192.178.4.101:40802] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRMvxZaaFQZGE3H9yOHe9gAAAE0"]
[Tue Nov 11 20:45:36.076360 2025] [:error] [pid 43205:tid 43210] [client 192.178.4.101:58291] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRMv8L48SbhIkX6TjwOhpgAAAQI"]
[Tue Nov 11 20:45:37.176915 2025] [:error] [pid 36673:tid 36694] [client 192.178.4.101:64890] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRMv8SvASiSDHs9bkfcdmgAAAJM"]
[Tue Nov 11 20:45:46.583341 2025] [:error] [pid 36580:tid 36646] [client 192.178.4.101:64722] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRMv-paaFQZGE3H9yOHfHAAAAEg"]
[Tue Nov 11 20:46:56.960388 2025] [:error] [pid 43205:tid 43226] [client 192.178.4.101:47214] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRMwQL48SbhIkX6TjwOiDAAAARI"]
[Tue Nov 11 20:47:47.815682 2025] [:error] [pid 36579:tid 36624] [client 192.178.4.101:51236] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRMwc-muedRSntjwLw6RGAAAAA0"]
[Tue Nov 11 20:49:48.640205 2025] [:error] [pid 43205:tid 43218] [client 192.178.4.101:52946] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRMw7L48SbhIkX6TjwOjbwAAAQo"]
[Tue Nov 11 20:49:53.839820 2025] [:error] [pid 36580:tid 36657] [client 192.178.4.101:35371] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRMw8ZaaFQZGE3H9yOHgawAAAFM"]
[Tue Nov 11 20:50:42.925412 2025] [:error] [pid 43205:tid 43217] [client 192.178.4.101:56839] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRMxIr48SbhIkX6TjwOj4gAAAQk"]
[Tue Nov 11 20:52:46.824570 2025] [:error] [pid 43205:tid 43228] [client 192.178.4.101:60328] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRMxnr48SbhIkX6TjwOkgwAAARQ"]
[Tue Nov 11 20:52:51.892212 2025] [:error] [pid 36579:tid 36632] [client 192.178.4.101:60660] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRMxo-muedRSntjwLw6SYwAAABU"]
[Tue Nov 11 20:53:00.327236 2025] [:error] [pid 36578:tid 36593] [client 192.178.4.101:39710] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRMxrEMi03XeylcOo5XiCgAAAMo"]
[Tue Nov 11 20:53:05.935837 2025] [:error] [pid 36673:tid 36678] [client 192.178.4.101:50249] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRMxsSvASiSDHs9bkfcf5AAAAIM"]
[Tue Nov 11 20:53:07.348172 2025] [:error] [pid 36673:tid 36698] [client 192.178.4.101:64792] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRMxsyvASiSDHs9bkfcf6QAAAJc"]
[Tue Nov 11 20:53:11.533633 2025] [:error] [pid 36578:tid 36604] [client 192.178.4.101:45158] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRMxt0Mi03XeylcOo5XiEgAAANU"]
[Tue Nov 11 20:53:13.004035 2025] [:error] [pid 43205:tid 43231] [client 192.178.4.101:36822] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRMxub48SbhIkX6TjwOkpAAAARc"]
[Tue Nov 11 20:53:19.859911 2025] [:error] [pid 36578:tid 36606] [client 192.178.4.101:62088] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRMxv0Mi03XeylcOo5XiHQAAANc"]
[Tue Nov 11 20:53:30.991218 2025] [:error] [pid 43205:tid 43214] [client 192.178.4.101:44536] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRMxyr48SbhIkX6TjwOkzgAAAQY"]
[Tue Nov 11 20:53:32.218605 2025] [:error] [pid 36579:tid 36622] [client 192.178.4.101:49762] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRMxzOmuedRSntjwLw6SdwAAAAs"]
[Tue Nov 11 20:53:34.961638 2025] [:error] [pid 36578:tid 36607] [client 192.178.4.101:45725] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRMxzkMi03XeylcOo5XiOAAAANg"]
[Tue Nov 11 20:55:23.289078 2025] [:error] [pid 36580:tid 36644] [client 192.178.4.101:40434] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRMyO5aaFQZGE3H9yOHhkAAAAEY"]
[Tue Nov 11 20:55:25.277636 2025] [:error] [pid 36580:tid 36656] [client 192.178.4.101:54873] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRMyPZaaFQZGE3H9yOHhlAAAAFI"]
[Tue Nov 11 20:55:47.734823 2025] [:error] [pid 36673:tid 36684] [client 192.178.4.101:40403] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRMyUyvASiSDHs9bkfcgpwAAAIk"]
[Tue Nov 11 20:55:48.670569 2025] [:error] [pid 43205:tid 43223] [client 192.178.4.101:65477] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRMyVL48SbhIkX6TjwOl0QAAAQ8"]
[Tue Nov 11 20:55:53.980617 2025] [:error] [pid 36673:tid 36697] [client 192.178.4.101:37839] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRMyWSvASiSDHs9bkfcgqQAAAJY"]
[Tue Nov 11 20:55:55.239913 2025] [:error] [pid 36580:tid 36644] [client 192.178.4.101:61106] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRMyW5aaFQZGE3H9yOHhpgAAAEY"]
[Tue Nov 11 20:55:58.895098 2025] [:error] [pid 36673:tid 36683] [client 192.178.4.101:45245] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRMyXivASiSDHs9bkfcgqgAAAIg"]
[Tue Nov 11 20:56:14.736724 2025] [:error] [pid 43205:tid 43215] [client 192.178.4.101:58341] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRMybr48SbhIkX6TjwOl7gAAAQc"]
[Tue Nov 11 20:56:19.868546 2025] [:error] [pid 36673:tid 36686] [client 192.178.4.101:51606] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRMycyvASiSDHs9bkfcgxgAAAIs"]
[Tue Nov 11 20:58:58.809561 2025] [:error] [pid 43205:tid 43215] [client 192.178.4.101:39731] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRMzEr48SbhIkX6TjwOm4AAAAQc"]
[Tue Nov 11 20:59:27.349050 2025] [:error] [pid 36673:tid 36690] [client 192.178.4.101:34924] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRMzLyvASiSDHs9bkfchdgAAAI8"]
[Tue Nov 11 20:59:31.522635 2025] [:error] [pid 36673:tid 36699] [client 192.178.4.101:63457] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRMzMyvASiSDHs9bkfchewAAAJg"]
[Tue Nov 11 20:59:34.288065 2025] [:error] [pid 36578:tid 36607] [client 192.178.4.101:38067] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRMzNkMi03XeylcOo5XjVAAAANg"]
[Tue Nov 11 20:59:53.686319 2025] [:error] [pid 36578:tid 36601] [client 192.178.4.101:56503] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRMzSUMi03XeylcOo5XjYQAAANI"]
[Tue Nov 11 20:59:55.164902 2025] [:error] [pid 36579:tid 36630] [client 192.178.4.101:62748] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRMzS-muedRSntjwLw6TxgAAABM"]
[Tue Nov 11 21:01:40.796078 2025] [:error] [pid 43205:tid 43217] [client 192.178.4.101:41486] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRMztL48SbhIkX6TjwOn_QAAAQk"]
[Tue Nov 11 21:01:42.226963 2025] [:error] [pid 36579:tid 36631] [client 192.178.4.101:36383] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRMztumuedRSntjwLw6UTQAAABQ"]
[Tue Nov 11 21:01:44.974539 2025] [:error] [pid 36579:tid 36632] [client 192.178.4.101:41691] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRMzuOmuedRSntjwLw6UTwAAABU"]
[Tue Nov 11 21:02:07.639175 2025] [:error] [pid 36579:tid 36628] [client 192.178.4.101:40514] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRMzz-muedRSntjwLw6UXwAAABE"]
[Tue Nov 11 21:02:21.798133 2025] [:error] [pid 36579:tid 36632] [client 192.178.4.101:65085] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRMz3emuedRSntjwLw6UeAAAABU"]
[Tue Nov 11 21:03:48.071803 2025] [:error] [pid 36673:tid 36696] [client 192.178.4.101:61881] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRM0NCvASiSDHs9bkfciowAAAJU"]
[Tue Nov 11 21:03:59.535584 2025] [:error] [pid 36673:tid 36695] [client 192.178.4.101:53885] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRM0PyvASiSDHs9bkfciqwAAAJQ"]
[Tue Nov 11 21:04:22.487868 2025] [:error] [pid 36580:tid 36661] [client 192.178.4.101:41514] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRM0VpaaFQZGE3H9yOHjlAAAAFc"]
[Tue Nov 11 21:04:31.080459 2025] [:error] [pid 36673:tid 36694] [client 192.178.4.101:38555] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRM0XyvASiSDHs9bkfci2AAAAJM"]
[Tue Nov 11 21:04:39.685615 2025] [:error] [pid 43205:tid 43220] [client 192.178.4.101:37769] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRM0Z748SbhIkX6TjwOpbwAAAQw"]
[Tue Nov 11 21:04:41.183687 2025] [:error] [pid 36578:tid 36590] [client 192.178.4.101:40687] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRM0aUMi03XeylcOo5XkogAAAMc"]
[Tue Nov 11 21:04:44.004636 2025] [:error] [pid 36578:tid 36586] [client 192.178.4.101:38451] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRM0bEMi03XeylcOo5XkqQAAAMM"]
[Tue Nov 11 21:07:13.109505 2025] [:error] [pid 36578:tid 36607] [client 192.178.4.101:54316] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRM1AUMi03XeylcOo5XlcwAAANg"]
[Tue Nov 11 21:07:19.722553 2025] [:error] [pid 36578:tid 36595] [client 192.178.4.101:45818] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRM1B0Mi03XeylcOo5XlgAAAAMw"]
[Tue Nov 11 21:07:29.246080 2025] [:error] [pid 36580:tid 36660] [client 192.178.4.101:49637] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRM1EZaaFQZGE3H9yOHkTwAAAFY"]
[Tue Nov 11 21:07:30.691455 2025] [:error] [pid 36578:tid 36589] [client 192.178.4.101:54797] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRM1EkMi03XeylcOo5XlnAAAAMY"]
[Tue Nov 11 21:07:38.040257 2025] [:error] [pid 36579:tid 36629] [client 192.178.4.101:41122] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRM1GumuedRSntjwLw6VwQAAABI"]
[Tue Nov 11 21:07:48.840929 2025] [:error] [pid 36673:tid 36698] [client 192.178.4.101:40886] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRM1JCvASiSDHs9bkfcjwgAAAJc"]
[Tue Nov 11 21:07:52.999083 2025] [:error] [pid 36579:tid 36629] [client 192.178.4.101:64324] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRM1KOmuedRSntjwLw6V2wAAABI"]
[Tue Nov 11 21:07:54.407177 2025] [:error] [pid 43205:tid 43212] [client 192.178.4.101:48162] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRM1Kr48SbhIkX6TjwOqvgAAAQQ"]
[Tue Nov 11 21:07:57.181587 2025] [:error] [pid 36673:tid 36685] [client 192.178.4.101:58570] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRM1LSvASiSDHs9bkfcjzAAAAIo"]
[Tue Nov 11 21:20:13.886885 2025] [:error] [pid 36673:tid 36684] [client 178.128.250.184:44718] [client 178.128.250.184] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 178.128.250.184, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRM4DSvASiSDHs9bkfcn0wAAAIk"]
[Tue Nov 11 21:38:05.649971 2025] [:error] [pid 36673:tid 36685] [client 192.178.4.101:35611] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRM8PSvASiSDHs9bkfcuZQAAAIo"]
[Tue Nov 11 21:38:15.314210 2025] [:error] [pid 36580:tid 36661] [client 192.178.4.101:50307] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRM8R5aaFQZGE3H9yOHtvAAAAFc"]
[Tue Nov 11 21:38:19.147610 2025] [:error] [pid 36578:tid 36589] [client 192.178.4.101:65033] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRM8S0Mi03XeylcOo5XuLgAAAMY"]
[Tue Nov 11 21:38:21.644710 2025] [:error] [pid 36673:tid 36684] [client 192.178.4.101:57236] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRM8TSvASiSDHs9bkfcumgAAAIk"]
[Tue Nov 11 21:38:30.671631 2025] [:error] [pid 36579:tid 36612] [client 192.178.4.101:54485] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRM8VumuedRSntjwLw6fLAAAAAE"]
[Tue Nov 11 21:38:33.817895 2025] [:error] [pid 43205:tid 43208] [client 192.178.4.101:57816] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRM8Wb48SbhIkX6TjwO53QAAAQA"]
[Tue Nov 11 21:38:34.552022 2025] [:error] [pid 36673:tid 36675] [client 192.178.4.101:41616] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRM8WivASiSDHs9bkfcuzAAAAIA"]
[Tue Nov 11 21:38:44.214834 2025] [:error] [pid 36579:tid 36615] [client 192.178.4.101:46892] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRM8ZOmuedRSntjwLw6fTwAAAAQ"]
[Tue Nov 11 21:38:46.185458 2025] [:error] [pid 36580:tid 36648] [client 192.178.4.101:57428] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRM8ZpaaFQZGE3H9yOHuGgAAAEo"]
[Tue Nov 11 21:38:57.830425 2025] [:error] [pid 36579:tid 36616] [client 192.178.4.101:43037] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRM8cemuedRSntjwLw6fdgAAAAU"]
[Tue Nov 11 21:39:00.318922 2025] [:error] [pid 36673:tid 36693] [client 192.178.4.101:54086] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRM8dCvASiSDHs9bkfcvBQAAAJI"]
[Tue Nov 11 21:39:34.252530 2025] [:error] [pid 36580:tid 36645] [client 161.97.137.114:59752] [client 161.97.137.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 161.97.137.114, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRM8lpaaFQZGE3H9yOHurwAAAEc"]
[Tue Nov 11 21:40:21.166138 2025] [:error] [pid 36673:tid 36675] [client 192.178.4.101:41791] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRM8xSvASiSDHs9bkfcvzAAAAIA"]
[Tue Nov 11 21:40:28.640564 2025] [:error] [pid 36673:tid 36678] [client 192.178.4.101:54338] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRM8zCvASiSDHs9bkfcv3gAAAIM"]
[Tue Nov 11 21:40:41.893535 2025] [:error] [pid 36579:tid 36635] [client 192.178.4.101:65308] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRM82emuedRSntjwLw6gjAAAABg"]
[Tue Nov 11 21:40:44.560092 2025] [:error] [pid 36673:tid 36698] [client 192.178.4.101:62898] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRM83CvASiSDHs9bkfcwBAAAAJc"]
[Tue Nov 11 21:40:53.796405 2025] [:error] [pid 36578:tid 36602] [client 192.178.4.101:61877] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRM85UMi03XeylcOo5XvogAAANM"]
[Tue Nov 11 21:40:57.781257 2025] [:error] [pid 36580:tid 36651] [client 192.178.4.101:63986] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRM86ZaaFQZGE3H9yOHvRQAAAE0"]
[Tue Nov 11 21:41:09.676056 2025] [:error] [pid 36673:tid 36676] [client 192.178.4.101:52752] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRM89SvASiSDHs9bkfcwLQAAAIE"]
[Tue Nov 11 21:41:14.942033 2025] [:error] [pid 36673:tid 36695] [client 192.178.4.101:62807] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRM8-ivASiSDHs9bkfcwMgAAAJQ"]
[Tue Nov 11 21:42:50.036288 2025] [:error] [pid 36673:tid 36686] [client 192.178.4.101:44490] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRM9WivASiSDHs9bkfcw0wAAAIs"]
[Tue Nov 11 21:43:11.289696 2025] [:error] [pid 36579:tid 36616] [client 192.178.4.101:51411] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRM9b-muedRSntjwLw6hegAAAAU"]
[Tue Nov 11 21:43:17.844423 2025] [:error] [pid 43205:tid 43217] [client 192.178.4.101:44431] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRM9db48SbhIkX6TjwO8dgAAAQk"]
[Tue Nov 11 21:43:20.363356 2025] [:error] [pid 43205:tid 43222] [client 192.178.4.101:41110] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRM9eL48SbhIkX6TjwO8hgAAAQ4"]
[Tue Nov 11 21:43:30.714811 2025] [:error] [pid 36578:tid 36593] [client 192.178.4.101:40771] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRM9gkMi03XeylcOo5XwrAAAAMo"]
[Tue Nov 11 21:43:32.091543 2025] [:error] [pid 36579:tid 36615] [client 192.178.4.101:54287] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRM9hOmuedRSntjwLw6hkAAAAAQ"]
[Tue Nov 11 21:43:35.970326 2025] [:error] [pid 43205:tid 43232] [client 192.178.4.101:44557] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRM9h748SbhIkX6TjwO8uwAAARg"]
[Tue Nov 11 21:43:42.470715 2025] [:error] [pid 36580:tid 36660] [client 192.178.4.101:37481] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRM9jpaaFQZGE3H9yOHwcQAAAFY"]
[Tue Nov 11 21:45:45.871683 2025] [:error] [pid 36580:tid 36648] [client 192.178.4.101:39593] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRM-CZaaFQZGE3H9yOHxDgAAAEo"]
[Tue Nov 11 21:45:48.733600 2025] [:error] [pid 36580:tid 36659] [client 192.178.4.101:62328] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRM-DJaaFQZGE3H9yOHxEgAAAFU"]
[Tue Nov 11 21:45:55.832557 2025] [:error] [pid 36579:tid 36618] [client 192.178.4.101:37143] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRM-E-muedRSntjwLw6iNgAAAAc"]
[Tue Nov 11 21:46:16.737987 2025] [:error] [pid 43205:tid 43211] [client 192.178.4.101:46747] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRM-KL48SbhIkX6TjwO93wAAAQM"]
[Tue Nov 11 21:46:20.733144 2025] [:error] [pid 43205:tid 43215] [client 192.178.4.101:35144] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRM-LL48SbhIkX6TjwO95wAAAQc"]
[Tue Nov 11 21:46:24.762633 2025] [:error] [pid 36673:tid 36688] [client 192.178.4.101:45508] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRM-MCvASiSDHs9bkfcyMwAAAI0"]
[Tue Nov 11 21:48:13.410438 2025] [:error] [pid 43205:tid 43215] [client 192.178.4.101:39222] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRM-nb48SbhIkX6TjwO-ygAAAQc"]
[Tue Nov 11 21:48:21.127230 2025] [:error] [pid 36673:tid 36684] [client 192.178.4.101:45569] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRM-pSvASiSDHs9bkfcy5AAAAIk"]
[Tue Nov 11 21:48:36.523682 2025] [:error] [pid 36673:tid 36691] [client 192.178.4.101:55117] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRM-tCvASiSDHs9bkfcy7gAAAJA"]
[Tue Nov 11 21:48:46.892231 2025] [:error] [pid 36578:tid 36594] [client 192.178.4.101:35083] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRM-vkMi03XeylcOo5Xx-QAAAMs"]
[Tue Nov 11 21:48:52.780831 2025] [:error] [pid 43205:tid 43222] [client 192.178.4.101:52718] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRM-xL48SbhIkX6TjwO_GgAAAQ4"]
[Tue Nov 11 21:53:32.206787 2025] [:error] [pid 36673:tid 36676] [client 192.178.4.101:35807] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRM_3CvASiSDHs9bkfc01gAAAIE"]
[Tue Nov 11 21:53:36.938611 2025] [:error] [pid 36673:tid 36677] [client 192.178.4.101:39605] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRM_4CvASiSDHs9bkfc03wAAAII"]
[Tue Nov 11 21:53:40.403995 2025] [:error] [pid 43205:tid 43211] [client 192.178.4.101:41120] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRM_5L48SbhIkX6TjwPBHwAAAQM"]
[Tue Nov 11 21:53:52.846375 2025] [:error] [pid 43205:tid 43211] [client 192.178.4.101:36345] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRM_8L48SbhIkX6TjwPBMwAAAQM"]
[Tue Nov 11 21:54:02.814548 2025] [:error] [pid 43205:tid 43219] [client 192.178.4.101:52197] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRM_-r48SbhIkX6TjwPBQwAAAQs"]
[Tue Nov 11 21:54:07.017501 2025] [:error] [pid 43205:tid 43225] [client 192.178.4.101:44269] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRM__748SbhIkX6TjwPBSQAAARE"]
[Tue Nov 11 21:54:12.702717 2025] [:error] [pid 36578:tid 36584] [client 192.178.4.101:49242] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNABEMi03XeylcOo5XzagAAAME"]
[Tue Nov 11 21:54:26.832358 2025] [:error] [pid 36578:tid 36594] [client 192.178.4.101:42537] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNAEkMi03XeylcOo5XzgQAAAMs"]
[Tue Nov 11 21:56:37.299380 2025] [:error] [pid 36579:tid 36617] [client 192.178.4.101:52226] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNAlemuedRSntjwLw6lowAAAAY"]
[Tue Nov 11 21:56:59.536474 2025] [:error] [pid 43205:tid 43231] [client 192.178.4.101:55005] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNAq748SbhIkX6TjwPCuQAAARc"]
[Tue Nov 11 21:57:11.063554 2025] [:error] [pid 36673:tid 36696] [client 192.178.4.101:37963] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNAtyvASiSDHs9bkfc2IgAAAJU"]
[Tue Nov 11 21:57:19.721466 2025] [:error] [pid 36580:tid 36662] [client 192.178.4.101:49894] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNAv5aaFQZGE3H9yOH0rAAAAFg"]
[Tue Nov 11 21:59:18.962191 2025] [:error] [pid 36580:tid 36643] [client 192.178.4.101:41233] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNBNpaaFQZGE3H9yOH1hAAAAEU"]
[Tue Nov 11 21:59:22.843496 2025] [:error] [pid 43205:tid 43214] [client 192.178.4.101:51508] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNBOr48SbhIkX6TjwPD-gAAAQY"]
[Tue Nov 11 21:59:28.154591 2025] [:error] [pid 43205:tid 43227] [client 192.178.4.101:35479] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNBQL48SbhIkX6TjwPD_wAAARM"]
[Tue Nov 11 21:59:31.298096 2025] [:error] [pid 36578:tid 36583] [client 192.178.4.101:53556] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNBQ0Mi03XeylcOo5X1VwAAAMA"]
[Tue Nov 11 21:59:40.441593 2025] [:error] [pid 36673:tid 36690] [client 192.178.4.101:53402] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNBTCvASiSDHs9bkfc3HAAAAI8"]
[Tue Nov 11 21:59:46.419051 2025] [:error] [pid 36579:tid 36614] [client 192.178.4.101:47036] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNBUumuedRSntjwLw6m1wAAAAM"]
[Tue Nov 11 21:59:49.507857 2025] [:error] [pid 36673:tid 36687] [client 192.178.4.101:55020] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNBVSvASiSDHs9bkfc3LgAAAIw"]
[Tue Nov 11 21:59:55.914798 2025] [:error] [pid 36578:tid 36593] [client 192.178.4.101:61595] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNBW0Mi03XeylcOo5X1dQAAAMo"]
[Tue Nov 11 22:00:10.965698 2025] [:error] [pid 36673:tid 36692] [client 192.178.4.101:47436] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNBaivASiSDHs9bkfc3aAAAAJE"]
[Tue Nov 11 22:00:12.993279 2025] [:error] [pid 43205:tid 43228] [client 192.178.4.101:58666] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNBbL48SbhIkX6TjwPEYAAAARQ"]
[Tue Nov 11 22:02:03.636262 2025] [:error] [pid 36578:tid 36603] [client 192.178.4.101:64736] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNB20Mi03XeylcOo5X2HwAAANQ"]
[Tue Nov 11 22:02:10.558938 2025] [:error] [pid 36580:tid 36642] [client 192.178.4.101:64683] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNB4paaFQZGE3H9yOH2ZAAAAEQ"]
[Tue Nov 11 22:02:19.743027 2025] [:error] [pid 36578:tid 36596] [client 192.178.4.101:46796] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNB60Mi03XeylcOo5X2PgAAAM0"]
[Tue Nov 11 22:02:31.726677 2025] [:error] [pid 36673:tid 36690] [client 192.178.4.101:38924] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNB9yvASiSDHs9bkfc4OAAAAI8"]
[Tue Nov 11 22:02:34.729246 2025] [:error] [pid 36673:tid 36677] [client 192.178.4.101:58901] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNB-ivASiSDHs9bkfc4OQAAAII"]
[Tue Nov 11 22:02:39.116530 2025] [:error] [pid 43205:tid 43209] [client 192.178.4.101:55402] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNB_748SbhIkX6TjwPFNgAAAQE"]
[Tue Nov 11 22:04:38.006894 2025] [:error] [pid 36580:tid 36660] [client 192.178.4.101:42716] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNCdpaaFQZGE3H9yOH3NQAAAFY"]
[Tue Nov 11 22:04:43.132648 2025] [:error] [pid 36579:tid 36634] [client 192.178.4.101:64899] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNCe-muedRSntjwLw6oEgAAABc"]
[Tue Nov 11 22:04:48.857131 2025] [:error] [pid 36578:tid 36592] [client 192.178.4.101:42926] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNCgEMi03XeylcOo5X28gAAAMk"]
[Tue Nov 11 22:04:51.811492 2025] [:error] [pid 43205:tid 43232] [client 192.178.4.101:46757] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNCg748SbhIkX6TjwPGEwAAARg"]
[Tue Nov 11 22:04:53.175187 2025] [:error] [pid 36673:tid 36690] [client 192.178.4.101:46450] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNChSvASiSDHs9bkfc4yAAAAI8"]
[Tue Nov 11 22:05:15.782064 2025] [:error] [pid 36578:tid 36603] [client 192.178.4.101:41121] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNCm0Mi03XeylcOo5X3FAAAANQ"]
[Tue Nov 11 22:05:21.961657 2025] [:error] [pid 36580:tid 36644] [client 192.178.4.101:39927] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNCoZaaFQZGE3H9yOH3YAAAAEY"]
[Tue Nov 11 22:05:24.329897 2025] [:error] [pid 36580:tid 36660] [client 192.178.4.101:58567] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNCpJaaFQZGE3H9yOH3ZQAAAFY"]
[Tue Nov 11 22:07:08.896901 2025] [:error] [pid 47964:tid 47982] [client 192.178.4.101:59785] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNDDF6CQC3ebUS5pkT_jQAAAY8"]
[Tue Nov 11 22:07:12.500739 2025] [:error] [pid 47964:tid 47973] [client 192.178.4.101:51398] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNDEF6CQC3ebUS5pkT_kAAAAYY"]
[Tue Nov 11 22:07:13.842155 2025] [:error] [pid 47859:tid 47875] [client 192.178.4.101:55354] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNDEaRzLR7egYHK_4d3WAAAAAs"]
[Tue Nov 11 22:07:27.889548 2025] [:error] [pid 47860:tid 47902] [client 192.178.4.101:56133] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNDH6Pe6bkmJWx80CzQgQAAAEs"]
[Tue Nov 11 22:07:32.064934 2025] [:error] [pid 47860:tid 47893] [client 192.178.4.101:62485] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNDJKPe6bkmJWx80CzQlQAAAEI"]
[Tue Nov 11 22:07:36.199296 2025] [:error] [pid 47931:tid 47951] [client 192.178.4.101:51996] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNDKDWP7ptQ6Y-gz68bFAAAAVE"]
[Tue Nov 11 22:08:00.903863 2025] [:error] [pid 47859:tid 47866] [client 192.178.4.101:40211] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNDQKRzLR7egYHK_4d4AAAAAAI"]
[Tue Nov 11 22:09:52.893563 2025] [:error] [pid 47931:tid 47957] [client 192.178.4.101:38714] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNDsDWP7ptQ6Y-gz68c1wAAAVc"]
[Tue Nov 11 22:09:58.432227 2025] [:error] [pid 47859:tid 47879] [client 192.178.4.101:64363] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNDtqRzLR7egYHK_4d5mgAAAA8"]
[Tue Nov 11 22:10:05.289477 2025] [:error] [pid 47931:tid 47952] [client 192.178.4.101:34822] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNDvTWP7ptQ6Y-gz68dBwAAAVI"]
[Tue Nov 11 22:10:21.843315 2025] [:error] [pid 47859:tid 47874] [client 192.178.4.101:60748] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNDzaRzLR7egYHK_4d52wAAAAo"]
[Tue Nov 11 22:10:27.320860 2025] [:error] [pid 47964:tid 47989] [client 192.178.4.101:43170] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRND016CQC3ebUS5pkQC2QAAAZY"]
[Tue Nov 11 22:10:32.750752 2025] [:error] [pid 47931:tid 47943] [client 192.178.4.101:48165] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRND2DWP7ptQ6Y-gz68dagAAAUk"]
[Tue Nov 11 22:12:52.238731 2025] [:error] [pid 47964:tid 47967] [client 192.178.4.101:44632] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNEZF6CQC3ebUS5pkQE4QAAAYA"]
[Tue Nov 11 22:13:18.836403 2025] [:error] [pid 47860:tid 47891] [client 192.178.4.101:49804] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNEfqPe6bkmJWx80CzT8QAAAEA"]
[Tue Nov 11 22:13:24.300750 2025] [:error] [pid 47860:tid 47902] [client 213.209.143.137:49500] [client 213.209.143.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/excel-like-price-change-for-woocommerce-and-wp-e-commerce-light/readme.txt"] [unique_id "aRNEhKPe6bkmJWx80CzT_wAAAEs"]
[Tue Nov 11 22:13:24.823727 2025] [:error] [pid 49628:tid 49647] [client 213.209.143.137:50627] [client 213.209.143.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/excel-like-price-change-for-woocommerce-and-wp-e-commerce-light/readme.txt"] [unique_id "aRNEhL82AgnfnwL7V2YzmAAAAJE"]
[Tue Nov 11 22:13:25.343408 2025] [:error] [pid 47859:tid 47880] [client 213.209.143.137:51740] [client 213.209.143.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/excel-like-price-change-for-woocommerce-and-wp-e-commerce-light/readme.txt"] [unique_id "aRNEhaRzLR7egYHK_4d7qAAAABA"]
[Tue Nov 11 22:13:30.989863 2025] [:error] [pid 47859:tid 47869] [client 192.178.4.101:52469] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNEiqRzLR7egYHK_4d7tQAAAAU"]
[Tue Nov 11 22:13:38.552719 2025] [:error] [pid 49628:tid 49642] [client 192.178.4.101:57498] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNEkr82AgnfnwL7V2YzvQAAAIw"]
[Tue Nov 11 22:13:44.681487 2025] [:error] [pid 47859:tid 47884] [client 192.178.4.101:38583] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNEmKRzLR7egYHK_4d7xAAAABQ"]
[Tue Nov 11 22:16:11.043110 2025] [:error] [pid 47859:tid 47881] [client 192.178.4.101:50160] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNFK6RzLR7egYHK_4d8tgAAABE"]
[Tue Nov 11 22:16:18.397958 2025] [:error] [pid 47860:tid 47898] [client 192.178.4.101:62092] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNFMqPe6bkmJWx80CzVOQAAAEc"]
[Tue Nov 11 22:16:20.265236 2025] [:error] [pid 49628:tid 49631] [client 192.178.4.101:36389] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNFNL82AgnfnwL7V2Y1OgAAAIE"]
[Tue Nov 11 22:16:29.367862 2025] [:error] [pid 47964:tid 47969] [client 192.178.4.101:56679] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNFPV6CQC3ebUS5pkQGxgAAAYI"]
[Tue Nov 11 22:16:41.538268 2025] [:error] [pid 47964:tid 47970] [client 192.178.4.101:37347] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNFSV6CQC3ebUS5pkQG2wAAAYM"]
[Tue Nov 11 22:16:44.929063 2025] [:error] [pid 47931:tid 47935] [client 192.178.4.101:61488] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNFTDWP7ptQ6Y-gz68hyQAAAUE"]
[Tue Nov 11 22:16:47.509297 2025] [:error] [pid 47859:tid 47873] [client 192.178.4.101:56695] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNFT6RzLR7egYHK_4d9JAAAAAk"]
[Tue Nov 11 22:17:45.860988 2025] [:error] [pid 47964:tid 47976] [client 192.178.4.101:46131] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNFiV6CQC3ebUS5pkQHdQAAAYk"]
[Tue Nov 11 22:17:46.832555 2025] [:error] [pid 47964:tid 47980] [client 192.178.4.101:50845] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNFil6CQC3ebUS5pkQHeQAAAY0"]
[Tue Nov 11 22:17:58.224667 2025] [:error] [pid 47931:tid 47942] [client 192.178.4.101:49320] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNFljWP7ptQ6Y-gz68ieAAAAUg"]
[Tue Nov 11 22:18:01.452227 2025] [:error] [pid 47964:tid 47976] [client 192.178.4.101:53329] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNFmV6CQC3ebUS5pkQH4gAAAYk"]
[Tue Nov 11 22:18:17.888216 2025] [:error] [pid 47964:tid 47971] [client 192.178.4.101:57826] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNFqV6CQC3ebUS5pkQIFQAAAYQ"]
[Tue Nov 11 22:18:19.546718 2025] [:error] [pid 47964:tid 47981] [client 192.178.4.101:52232] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNFq16CQC3ebUS5pkQIGAAAAY4"]
[Tue Nov 11 22:18:22.014632 2025] [:error] [pid 47931:tid 47941] [client 192.178.4.101:58650] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNFrjWP7ptQ6Y-gz68imwAAAUc"]
[Tue Nov 11 22:18:28.530849 2025] [:error] [pid 47931:tid 47946] [client 192.178.4.101:47798] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNFtDWP7ptQ6Y-gz68irwAAAUw"]
[Tue Nov 11 22:18:31.803797 2025] [:error] [pid 47860:tid 47905] [client 192.178.4.101:46721] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNFt6Pe6bkmJWx80CzW7AAAAE4"]
[Tue Nov 11 22:18:35.032321 2025] [:error] [pid 47859:tid 47875] [client 192.178.4.101:64514] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNFu6RzLR7egYHK_4d-QwAAAAs"]
[Tue Nov 11 22:18:37.660086 2025] [:error] [pid 47859:tid 47866] [client 192.178.4.101:60364] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNFvaRzLR7egYHK_4d-SAAAAAI"]
[Tue Nov 11 22:19:52.767562 2025] [:error] [pid 47931:tid 47950] [client 192.178.4.101:40597] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNGCDWP7ptQ6Y-gz68jcgAAAVA"]
[Tue Nov 11 22:19:54.461295 2025] [:error] [pid 49628:tid 49630] [client 192.178.4.101:64627] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNGCr82AgnfnwL7V2Y4YQAAAIA"]
[Tue Nov 11 22:20:01.227143 2025] [:error] [pid 47931:tid 47950] [client 192.178.4.101:52594] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNGETWP7ptQ6Y-gz68jhAAAAVA"]
[Tue Nov 11 22:20:05.997482 2025] [:error] [pid 47860:tid 47913] [client 192.178.4.101:54670] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNGFaPe6bkmJWx80CzXYAAAAFY"]
[Tue Nov 11 22:20:13.942463 2025] [:error] [pid 49628:tid 49639] [client 192.178.4.101:39020] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNGHb82AgnfnwL7V2Y4hgAAAIk"]
[Tue Nov 11 22:20:15.410048 2025] [:error] [pid 47931:tid 47938] [client 192.178.4.101:41141] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNGHzWP7ptQ6Y-gz68jiwAAAUQ"]
[Tue Nov 11 22:20:17.815734 2025] [:error] [pid 47931:tid 47958] [client 192.178.4.101:63296] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNGITWP7ptQ6Y-gz68jkAAAAVg"]
[Tue Nov 11 22:20:29.793472 2025] [:error] [pid 47931:tid 47946] [client 192.178.4.101:35205] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNGLTWP7ptQ6Y-gz68jnQAAAUw"]
[Tue Nov 11 22:20:32.130368 2025] [:error] [pid 47964:tid 47982] [client 192.178.4.101:38002] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNGMF6CQC3ebUS5pkQI6wAAAY8"]
[Tue Nov 11 22:20:34.530900 2025] [:error] [pid 47964:tid 47984] [client 192.178.4.101:54199] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNGMl6CQC3ebUS5pkQI8gAAAZE"]
[Tue Nov 11 22:20:42.112863 2025] [:error] [pid 47964:tid 47973] [client 192.178.4.101:48961] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNGOl6CQC3ebUS5pkQI9wAAAYY"]
[Tue Nov 11 22:20:44.973464 2025] [:error] [pid 47860:tid 47906] [client 192.178.4.101:53894] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNGPKPe6bkmJWx80CzXhAAAAE8"]
[Tue Nov 11 22:20:49.551902 2025] [:error] [pid 49628:tid 49630] [client 192.178.4.101:36248] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNGQb82AgnfnwL7V2Y4xAAAAIA"]
[Tue Nov 11 22:21:42.644212 2025] [:error] [pid 47931:tid 47945] [client 192.178.4.101:39415] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNGdjWP7ptQ6Y-gz68j8QAAAUs"]
[Tue Nov 11 22:21:48.576932 2025] [:error] [pid 49628:tid 49644] [client 192.178.4.101:50522] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNGfL82AgnfnwL7V2Y5LgAAAI4"]
[Tue Nov 11 22:21:53.516464 2025] [:error] [pid 49628:tid 49636] [client 192.178.4.101:48989] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNGgb82AgnfnwL7V2Y5OwAAAIY"]
[Tue Nov 11 22:21:55.207522 2025] [:error] [pid 49628:tid 49653] [client 192.178.4.101:47982] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNGg782AgnfnwL7V2Y5QgAAAJc"]
[Tue Nov 11 22:21:57.714526 2025] [:error] [pid 47859:tid 47866] [client 192.178.4.101:51731] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNGhaRzLR7egYHK_4d_SAAAAAI"]
[Tue Nov 11 22:22:02.607509 2025] [:error] [pid 47964:tid 47982] [client 192.178.4.101:59126] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNGil6CQC3ebUS5pkQJZgAAAY8"]
[Tue Nov 11 22:22:10.396478 2025] [:error] [pid 47964:tid 47980] [client 192.178.4.101:54950] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNGkl6CQC3ebUS5pkQJdQAAAY0"]
[Tue Nov 11 22:22:16.156217 2025] [:error] [pid 47964:tid 47972] [client 192.178.4.101:61398] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNGmF6CQC3ebUS5pkQJggAAAYU"]
[Tue Nov 11 22:22:20.292702 2025] [:error] [pid 49628:tid 49631] [client 192.178.4.101:58375] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNGnL82AgnfnwL7V2Y5YwAAAIE"]
[Tue Nov 11 22:22:23.609960 2025] [:error] [pid 47859:tid 47872] [client 192.178.4.101:62742] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNGn6RzLR7egYHK_4d_iAAAAAg"]
[Tue Nov 11 22:22:31.289373 2025] [:error] [pid 47859:tid 47879] [client 192.178.4.101:55343] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNGp6RzLR7egYHK_4d_wgAAAA8"]
[Tue Nov 11 22:22:32.909075 2025] [:error] [pid 49628:tid 49649] [client 192.178.4.101:54668] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNGqL82AgnfnwL7V2Y5jQAAAJM"]
[Tue Nov 11 22:22:35.491130 2025] [:error] [pid 47964:tid 47974] [client 192.178.4.101:37703] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNGq16CQC3ebUS5pkQKBwAAAYc"]
[Tue Nov 11 22:22:39.194490 2025] [:error] [pid 47860:tid 47893] [client 192.178.4.101:56688] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNGr6Pe6bkmJWx80CzYaQAAAEI"]
[Tue Nov 11 22:23:33.239016 2025] [:error] [pid 49628:tid 49651] [client 192.178.4.101:40133] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNG5b82AgnfnwL7V2Y5-AAAAJU"]
[Tue Nov 11 22:23:39.431505 2025] [:error] [pid 49628:tid 49654] [client 192.178.4.101:62693] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNG6782AgnfnwL7V2Y6BAAAAJg"]
[Tue Nov 11 22:23:47.123291 2025] [:error] [pid 49628:tid 49639] [client 192.178.4.101:44253] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNG8782AgnfnwL7V2Y6EgAAAIk"]
[Tue Nov 11 22:23:49.779572 2025] [:error] [pid 47964:tid 47989] [client 192.178.4.101:63103] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNG9V6CQC3ebUS5pkQKeQAAAZY"]
[Tue Nov 11 22:23:53.262766 2025] [:error] [pid 47931:tid 47934] [client 192.178.4.101:42871] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNG-TWP7ptQ6Y-gz68kuQAAAUA"]
[Tue Nov 11 22:23:57.656326 2025] [:error] [pid 49628:tid 49635] [client 192.178.4.101:50859] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNG_b82AgnfnwL7V2Y6HQAAAIU"]
[Tue Nov 11 22:23:59.913952 2025] [:error] [pid 47964:tid 47978] [client 192.178.4.101:36574] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNG_16CQC3ebUS5pkQKhgAAAYs"]
[Tue Nov 11 22:24:00.768944 2025] [:error] [pid 47964:tid 47969] [client 192.178.4.101:56268] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNHAF6CQC3ebUS5pkQKiAAAAYI"]
[Tue Nov 11 22:24:03.106741 2025] [:error] [pid 49628:tid 49630] [client 192.178.4.101:39838] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNHA782AgnfnwL7V2Y6KwAAAIA"]
[Tue Nov 11 22:24:09.820533 2025] [:error] [pid 49628:tid 49630] [client 192.178.4.101:49882] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNHCb82AgnfnwL7V2Y6XQAAAIA"]
[Tue Nov 11 22:24:11.664047 2025] [:error] [pid 49628:tid 49645] [client 192.178.4.101:37537] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNHC782AgnfnwL7V2Y6YAAAAI8"]
[Tue Nov 11 22:24:13.363806 2025] [:error] [pid 47859:tid 47868] [client 192.178.4.101:58060] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNHDaRzLR7egYHK_4eANgAAAAQ"]
[Tue Nov 11 22:24:23.226511 2025] [:error] [pid 47860:tid 47901] [client 192.178.4.101:39744] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNHF6Pe6bkmJWx80CzY5QAAAEo"]
[Tue Nov 11 22:25:52.086649 2025] [:error] [pid 49628:tid 49648] [client 192.178.4.101:65136] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNHcL82AgnfnwL7V2Y7MgAAAJI"]
[Tue Nov 11 22:26:07.677088 2025] [:error] [pid 49628:tid 49645] [client 192.178.4.101:62817] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNHf782AgnfnwL7V2Y7WwAAAI8"]
[Tue Nov 11 22:26:13.132812 2025] [:error] [pid 47859:tid 47888] [client 192.178.4.101:53225] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNHhaRzLR7egYHK_4eBQgAAABg"]
[Tue Nov 11 22:26:22.002346 2025] [:error] [pid 47931:tid 47936] [client 192.178.4.101:55345] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNHjjWP7ptQ6Y-gz68luAAAAUI"]
[Tue Nov 11 22:26:23.440148 2025] [:error] [pid 47931:tid 47952] [client 192.178.4.101:42448] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNHjzWP7ptQ6Y-gz68luwAAAVI"]
[Tue Nov 11 22:26:26.169331 2025] [:error] [pid 47859:tid 47877] [client 192.178.4.101:47052] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNHkqRzLR7egYHK_4eBZAAAAA0"]
[Tue Nov 11 22:26:27.541712 2025] [:error] [pid 49628:tid 49639] [client 192.178.4.101:34924] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNHk782AgnfnwL7V2Y7hQAAAIk"]
[Tue Nov 11 22:26:36.215622 2025] [:error] [pid 47860:tid 47911] [client 192.178.4.101:54727] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNHnKPe6bkmJWx80CzZvwAAAFQ"]
[Tue Nov 11 22:26:40.667070 2025] [:error] [pid 47859:tid 47879] [client 192.178.4.101:40644] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNHoKRzLR7egYHK_4eBfAAAAA8"]
[Tue Nov 11 22:26:44.335915 2025] [:error] [pid 47964:tid 47987] [client 192.178.4.101:47155] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNHpF6CQC3ebUS5pkQLsAAAAZQ"]
[Tue Nov 11 22:27:41.486029 2025] [:error] [pid 47964:tid 47970] [client 192.178.4.101:47898] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNH3V6CQC3ebUS5pkQMBgAAAYM"]
[Tue Nov 11 22:27:43.557165 2025] [:error] [pid 47859:tid 47883] [client 192.178.4.101:39087] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNH36RzLR7egYHK_4eBzQAAABM"]
[Tue Nov 11 22:27:47.268947 2025] [:error] [pid 47964:tid 47984] [client 192.178.4.101:50046] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNH416CQC3ebUS5pkQMGgAAAZE"]
[Tue Nov 11 22:27:50.371511 2025] [:error] [pid 49628:tid 49641] [client 192.178.4.101:54778] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNH5r82AgnfnwL7V2Y8RwAAAIs"]
[Tue Nov 11 22:27:58.513520 2025] [:error] [pid 47859:tid 47867] [client 192.178.4.101:39667] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNH7qRzLR7egYHK_4eB9AAAAAM"]
[Tue Nov 11 22:28:01.449732 2025] [:error] [pid 47859:tid 47867] [client 192.178.4.101:57900] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNH8aRzLR7egYHK_4eB-wAAAAM"]
[Tue Nov 11 22:28:06.415260 2025] [:error] [pid 47931:tid 47934] [client 192.178.4.101:59557] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNH9jWP7ptQ6Y-gz68mcAAAAUA"]
[Tue Nov 11 22:28:13.008175 2025] [:error] [pid 47931:tid 47954] [client 192.178.4.101:51409] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNH_TWP7ptQ6Y-gz68mjQAAAVQ"]
[Tue Nov 11 22:28:17.192593 2025] [:error] [pid 47859:tid 47877] [client 192.178.4.101:45651] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNIAaRzLR7egYHK_4eCIAAAAA0"]
[Tue Nov 11 22:28:18.622658 2025] [:error] [pid 47860:tid 47904] [client 192.178.4.101:43024] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNIAqPe6bkmJWx80CzaXAAAAE0"]
[Tue Nov 11 22:28:21.412801 2025] [:error] [pid 49628:tid 49632] [client 192.178.4.101:51922] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNIBb82AgnfnwL7V2Y8hgAAAII"]
[Tue Nov 11 22:28:26.793901 2025] [:error] [pid 49628:tid 49650] [client 192.178.4.101:50718] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNICr82AgnfnwL7V2Y8mgAAAJQ"]
[Tue Nov 11 22:28:31.209639 2025] [:error] [pid 47860:tid 47891] [client 192.178.4.101:42550] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNID6Pe6bkmJWx80CzaZQAAAEA"]
[Tue Nov 11 22:29:42.739228 2025] [:error] [pid 47859:tid 47870] [client 192.178.4.101:64174] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNIVqRzLR7egYHK_4eClAAAAAY"]
[Tue Nov 11 22:29:45.935780 2025] [:error] [pid 49628:tid 49652] [client 192.178.4.101:53761] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNIWb82AgnfnwL7V2Y9nAAAAJY"]
[Tue Nov 11 22:29:59.009419 2025] [:error] [pid 47931:tid 47940] [client 192.178.4.101:40337] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNIZzWP7ptQ6Y-gz68nYgAAAUY"]
[Tue Nov 11 22:30:01.361038 2025] [:error] [pid 47859:tid 47868] [client 192.178.4.101:51703] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNIaaRzLR7egYHK_4eCtAAAAAQ"]
[Tue Nov 11 22:30:08.543577 2025] [:error] [pid 47964:tid 47986] [client 192.178.4.101:57613] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNIcF6CQC3ebUS5pkQNhgAAAZM"]
[Tue Nov 11 22:30:10.972899 2025] [:error] [pid 47964:tid 47980] [client 192.178.4.101:36214] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNIcl6CQC3ebUS5pkQNjgAAAY0"]
[Tue Nov 11 22:30:20.121707 2025] [:error] [pid 47860:tid 47900] [client 192.178.4.101:50541] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNIfKPe6bkmJWx80CzbUgAAAEk"]
[Tue Nov 11 22:30:23.192143 2025] [:error] [pid 47931:tid 47956] [client 192.178.4.101:47435] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNIfzWP7ptQ6Y-gz68noQAAAVY"]
[Tue Nov 11 22:30:32.240882 2025] [:error] [pid 47931:tid 47940] [client 192.178.4.101:57151] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNIiDWP7ptQ6Y-gz68n2wAAAUY"]
[Tue Nov 11 22:32:31.411479 2025] [:error] [pid 47931:tid 47940] [client 192.178.4.101:40673] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNI_zWP7ptQ6Y-gz68olgAAAUY"]
[Tue Nov 11 22:32:33.777384 2025] [:error] [pid 47964:tid 47977] [client 192.178.4.101:46397] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNJAV6CQC3ebUS5pkQO3wAAAYo"]
[Tue Nov 11 22:32:38.891425 2025] [:error] [pid 47931:tid 47940] [client 192.178.4.101:53822] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNJBjWP7ptQ6Y-gz68ongAAAUY"]
[Tue Nov 11 22:32:49.616876 2025] [:error] [pid 47964:tid 47984] [client 192.178.4.101:54371] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNJEV6CQC3ebUS5pkQO7wAAAZE"]
[Tue Nov 11 22:32:51.213621 2025] [:error] [pid 47859:tid 47870] [client 192.178.4.101:38182] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNJE6RzLR7egYHK_4eDrgAAAAY"]
[Tue Nov 11 22:34:27.304055 2025] [:error] [pid 49628:tid 49637] [client 192.178.4.101:62164] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNJc782AgnfnwL7V2Y_5gAAAIc"]
[Tue Nov 11 22:34:38.176483 2025] [:error] [pid 47931:tid 47956] [client 192.178.4.101:42151] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNJfjWP7ptQ6Y-gz68pRgAAAVY"]
[Tue Nov 11 22:34:39.012177 2025] [:error] [pid 49628:tid 49651] [client 192.178.4.101:40949] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNJf782AgnfnwL7V2ZAKgAAAJU"]
[Tue Nov 11 22:34:47.207846 2025] [:error] [pid 47964:tid 47971] [client 192.178.4.101:45858] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNJh16CQC3ebUS5pkQPqQAAAYQ"]
[Tue Nov 11 22:34:48.107276 2025] [:error] [pid 47964:tid 47987] [client 192.178.4.101:48773] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNJiF6CQC3ebUS5pkQPrgAAAZQ"]
[Tue Nov 11 22:34:57.410370 2025] [:error] [pid 47860:tid 47913] [client 192.178.4.101:60517] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNJkaPe6bkmJWx80CzcnQAAAFY"]
[Tue Nov 11 22:34:57.877483 2025] [:error] [pid 49628:tid 49634] [client 192.178.4.101:55654] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNJkb82AgnfnwL7V2ZAQAAAAIQ"]
[Tue Nov 11 22:36:45.453431 2025] [:error] [pid 47931:tid 47957] [client 192.178.4.101:57674] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNJ_TWP7ptQ6Y-gz68p9QAAAVc"]
[Tue Nov 11 22:36:45.930298 2025] [:error] [pid 47964:tid 47971] [client 192.178.4.101:60793] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNJ_V6CQC3ebUS5pkQQUwAAAYQ"]
[Tue Nov 11 22:36:53.413802 2025] [:error] [pid 47931:tid 47940] [client 192.178.4.101:46610] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNKBTWP7ptQ6Y-gz68qCAAAAUY"]
[Tue Nov 11 22:36:57.234499 2025] [:error] [pid 49628:tid 49642] [client 192.178.4.101:51605] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNKCb82AgnfnwL7V2ZBQwAAAIw"]
[Tue Nov 11 22:36:58.273878 2025] [:error] [pid 47931:tid 47935] [client 192.178.4.101:39756] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNKCjWP7ptQ6Y-gz68qDwAAAUE"]
[Tue Nov 11 22:37:10.287862 2025] [:error] [pid 47860:tid 47893] [client 192.178.4.101:52971] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNKFqPe6bkmJWx80CzdPQAAAEI"]
[Tue Nov 11 22:37:30.609407 2025] [:error] [pid 47860:tid 47914] [client 192.178.4.101:44570] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNKKqPe6bkmJWx80CzdZQAAAFc"]
[Tue Nov 11 22:38:43.215421 2025] [:error] [pid 47931:tid 47945] [client 192.178.4.101:36766] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNKczWP7ptQ6Y-gz68qtAAAAUs"]
[Tue Nov 11 22:38:53.160224 2025] [:error] [pid 47964:tid 47985] [client 192.178.4.101:62981] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNKfV6CQC3ebUS5pkQRigAAAZI"]
[Tue Nov 11 22:38:54.194069 2025] [:error] [pid 49628:tid 49635] [client 192.178.4.101:39966] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNKfr82AgnfnwL7V2ZCVAAAAIU"]
[Tue Nov 11 22:39:06.189997 2025] [:error] [pid 47931:tid 47934] [client 192.178.4.101:58160] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNKijWP7ptQ6Y-gz68q0gAAAUA"]
[Tue Nov 11 22:39:10.805035 2025] [:error] [pid 49628:tid 49638] [client 192.178.4.101:49075] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNKjr82AgnfnwL7V2ZCeAAAAIg"]
[Tue Nov 11 22:39:16.479512 2025] [:error] [pid 47859:tid 47880] [client 192.178.4.101:57466] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNKlKRzLR7egYHK_4eF7QAAABA"]
[Tue Nov 11 22:39:17.511434 2025] [:error] [pid 47859:tid 47882] [client 192.178.4.101:54458] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNKlaRzLR7egYHK_4eF7gAAABI"]
[Tue Nov 11 22:39:24.042338 2025] [:error] [pid 47860:tid 47903] [client 192.178.4.101:55603] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNKnKPe6bkmJWx80Czd-gAAAEw"]
[Tue Nov 11 22:39:24.832513 2025] [:error] [pid 49628:tid 49645] [client 192.178.4.101:52478] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNKnL82AgnfnwL7V2ZCnAAAAI8"]
[Tue Nov 11 22:39:33.885554 2025] [:error] [pid 49628:tid 49653] [client 192.178.4.101:52263] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNKpb82AgnfnwL7V2ZCuAAAAJc"]
[Tue Nov 11 22:39:36.386275 2025] [:error] [pid 47859:tid 47878] [client 192.178.4.101:45475] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNKqKRzLR7egYHK_4eF_wAAAA4"]
[Tue Nov 11 22:41:02.674643 2025] [:error] [pid 47931:tid 47937] [client 192.178.4.101:56488] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNK_jWP7ptQ6Y-gz68rfAAAAUM"]
[Tue Nov 11 22:41:08.447397 2025] [:error] [pid 47964:tid 47975] [client 192.178.4.101:48774] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNLBF6CQC3ebUS5pkQSUwAAAYg"]
[Tue Nov 11 22:41:12.807574 2025] [:error] [pid 47964:tid 47980] [client 192.178.4.101:41922] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNLCF6CQC3ebUS5pkQSYQAAAY0"]
[Tue Nov 11 22:41:15.415864 2025] [:error] [pid 47931:tid 47944] [client 192.178.4.101:43930] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNLCzWP7ptQ6Y-gz68rjQAAAUo"]
[Tue Nov 11 22:41:29.046597 2025] [:error] [pid 49628:tid 49637] [client 192.178.4.101:38165] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNLGb82AgnfnwL7V2ZDnwAAAIc"]
[Tue Nov 11 22:41:33.132984 2025] [:error] [pid 47931:tid 47948] [client 192.178.4.101:47231] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNLHTWP7ptQ6Y-gz68rqAAAAU4"]
[Tue Nov 11 22:41:41.969950 2025] [:error] [pid 47859:tid 47874] [client 192.178.4.101:41570] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNLJaRzLR7egYHK_4eGtgAAAAo"]
[Tue Nov 11 22:41:45.069953 2025] [:error] [pid 47859:tid 47870] [client 192.178.4.101:38127] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNLKaRzLR7egYHK_4eGwgAAAAY"]
[Tue Nov 11 22:41:48.942627 2025] [:error] [pid 47931:tid 47954] [client 192.178.4.101:41845] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNLLDWP7ptQ6Y-gz68ryAAAAVQ"]
[Tue Nov 11 22:41:56.283974 2025] [:error] [pid 49628:tid 49631] [client 192.178.4.101:52150] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNLNL82AgnfnwL7V2ZD8gAAAIE"]
[Tue Nov 11 22:41:57.069142 2025] [:error] [pid 47931:tid 47949] [client 192.178.4.101:49896] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNLNTWP7ptQ6Y-gz68rywAAAU8"]
[Tue Nov 11 22:43:14.431655 2025] [:error] [pid 47964:tid 47980] [client 192.178.4.101:48890] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNLgl6CQC3ebUS5pkQTCgAAAY0"]
[Tue Nov 11 22:43:22.867157 2025] [:error] [pid 47931:tid 47956] [client 192.178.4.101:45972] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNLijWP7ptQ6Y-gz68sNgAAAVY"]
[Tue Nov 11 22:43:23.718730 2025] [:error] [pid 47931:tid 47955] [client 192.178.4.101:61861] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNLizWP7ptQ6Y-gz68sNwAAAVU"]
[Tue Nov 11 22:43:36.364780 2025] [:error] [pid 47931:tid 47949] [client 192.178.4.101:61567] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNLmDWP7ptQ6Y-gz68sSgAAAU8"]
[Tue Nov 11 22:43:42.112582 2025] [:error] [pid 49628:tid 49636] [client 192.178.4.101:58976] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNLnr82AgnfnwL7V2ZEnAAAAIY"]
[Tue Nov 11 22:43:55.491781 2025] [:error] [pid 47931:tid 47956] [client 192.178.4.101:41119] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNLqzWP7ptQ6Y-gz68scwAAAVY"]
[Tue Nov 11 22:43:57.323359 2025] [:error] [pid 47860:tid 47907] [client 192.178.4.101:45263] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNLraPe6bkmJWx80CzfRAAAAFA"]
[Tue Nov 11 22:46:32.914893 2025] [:error] [pid 47964:tid 47968] [client 192.178.4.101:43690] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNMSF6CQC3ebUS5pkQUXAAAAYE"]
[Tue Nov 11 22:46:42.298442 2025] [:error] [pid 47859:tid 47875] [client 192.178.4.101:55468] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNMUqRzLR7egYHK_4eIRgAAAAs"]
[Tue Nov 11 22:46:43.020425 2025] [:error] [pid 47859:tid 47888] [client 192.178.4.101:63453] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNMU6RzLR7egYHK_4eISAAAABg"]
[Tue Nov 11 22:46:53.441173 2025] [:error] [pid 49628:tid 49646] [client 192.178.4.101:62068] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNMXb82AgnfnwL7V2ZGXQAAAJA"]
[Tue Nov 11 22:46:54.361499 2025] [:error] [pid 49628:tid 49644] [client 192.178.4.101:59257] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNMXr82AgnfnwL7V2ZGYAAAAI4"]
[Tue Nov 11 22:47:07.018121 2025] [:error] [pid 49628:tid 49651] [client 192.178.4.101:65031] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNMa782AgnfnwL7V2ZGeQAAAJU"]
[Tue Nov 11 22:47:08.047094 2025] [:error] [pid 47860:tid 47911] [client 192.178.4.101:53399] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNMbKPe6bkmJWx80CzgowAAAFQ"]
[Tue Nov 11 22:48:45.520834 2025] [:error] [pid 47860:tid 47891] [client 192.178.4.101:36973] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNMzaPe6bkmJWx80CzhPQAAAEA"]
[Tue Nov 11 22:48:54.555765 2025] [:error] [pid 49628:tid 49632] [client 192.178.4.101:47675] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNM1r82AgnfnwL7V2ZHTwAAAII"]
[Tue Nov 11 22:48:56.853579 2025] [:error] [pid 47859:tid 47875] [client 192.178.4.101:63786] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNM2KRzLR7egYHK_4eJIQAAAAs"]
[Tue Nov 11 22:49:01.607592 2025] [:error] [pid 47860:tid 47894] [client 192.178.4.101:48957] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNM3aPe6bkmJWx80CzhXgAAAEM"]
[Tue Nov 11 22:49:11.334529 2025] [:error] [pid 47964:tid 47973] [client 192.178.4.101:49407] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNM516CQC3ebUS5pkQVcgAAAYY"]
[Tue Nov 11 22:49:15.861228 2025] [:error] [pid 47964:tid 47987] [client 192.178.4.101:55430] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNM616CQC3ebUS5pkQVegAAAZQ"]
[Tue Nov 11 22:50:49.252839 2025] [:error] [pid 49628:tid 49649] [client 192.178.4.101:59674] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNNSb82AgnfnwL7V2ZIhQAAAJM"]
[Tue Nov 11 22:50:58.283647 2025] [:error] [pid 49628:tid 49646] [client 192.178.4.101:46729] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNNUr82AgnfnwL7V2ZIngAAAJA"]
[Tue Nov 11 22:51:00.810690 2025] [:error] [pid 47931:tid 47953] [client 192.178.4.101:55713] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNNVDWP7ptQ6Y-gz68vGgAAAVM"]
[Tue Nov 11 22:51:17.426826 2025] [:error] [pid 47964:tid 47975] [client 192.178.4.101:62434] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNNZV6CQC3ebUS5pkQWTwAAAYg"]
[Tue Nov 11 22:51:17.590698 2025] [:error] [pid 47931:tid 47956] [client 192.178.4.101:42756] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNNZTWP7ptQ6Y-gz68vXAAAAVY"]
[Tue Nov 11 22:51:53.446413 2025] [:error] [pid 47964:tid 47973] [client 161.97.137.114:61217] [client 161.97.137.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 161.97.137.114, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRNNiV6CQC3ebUS5pkQWkgAAAYY"]
[Tue Nov 11 22:53:27.718420 2025] [:error] [pid 47964:tid 47977] [client 192.178.4.101:46182] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNN516CQC3ebUS5pkQXKAAAAYo"]
[Tue Nov 11 22:53:36.370868 2025] [:error] [pid 47860:tid 47905] [client 192.178.4.101:50577] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNN8KPe6bkmJWx80Czi9AAAAE4"]
[Tue Nov 11 22:53:37.202701 2025] [:error] [pid 47931:tid 47949] [client 192.178.4.101:51382] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNN8TWP7ptQ6Y-gz68wNgAAAU8"]
[Tue Nov 11 22:53:47.959829 2025] [:error] [pid 49628:tid 49653] [client 192.178.4.101:48860] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNN-782AgnfnwL7V2ZKJgAAAJc"]
[Tue Nov 11 22:53:49.757325 2025] [:error] [pid 49628:tid 49644] [client 192.178.4.101:50464] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNN_b82AgnfnwL7V2ZKKgAAAI4"]
[Tue Nov 11 22:53:51.607469 2025] [:error] [pid 49628:tid 49635] [client 192.178.4.101:64094] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNN_782AgnfnwL7V2ZKLwAAAIU"]
[Tue Nov 11 22:53:57.762819 2025] [:error] [pid 47859:tid 47881] [client 192.178.4.101:58367] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNOBaRzLR7egYHK_4eKygAAABE"]
[Tue Nov 11 22:54:22.147941 2025] [:error] [pid 49628:tid 49633] [client 192.178.4.101:39732] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNOHr82AgnfnwL7V2ZKYQAAAIM"]
[Tue Nov 11 22:54:24.465902 2025] [:error] [pid 47860:tid 47902] [client 192.178.4.101:42908] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNOIKPe6bkmJWx80CzjIAAAAEs"]
[Tue Nov 11 22:55:19.131821 2025] [:error] [pid 49628:tid 49634] [client 192.178.4.101:46181] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNOV782AgnfnwL7V2ZK0QAAAIQ"]
[Tue Nov 11 22:55:20.791817 2025] [:error] [pid 47931:tid 47936] [client 192.178.4.101:48325] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNOWDWP7ptQ6Y-gz68wqwAAAUI"]
[Tue Nov 11 22:55:30.359597 2025] [:error] [pid 47860:tid 47902] [client 192.178.4.101:38156] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNOYqPe6bkmJWx80CzjXgAAAEs"]
[Tue Nov 11 22:55:31.223896 2025] [:error] [pid 49628:tid 49636] [client 192.178.4.101:43694] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNOY782AgnfnwL7V2ZK5gAAAIY"]
[Tue Nov 11 22:55:59.585823 2025] [:error] [pid 47859:tid 47864] [client 192.178.4.101:40051] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNOf6RzLR7egYHK_4eLVwAAAAA"]
[Tue Nov 11 22:56:06.438578 2025] [:error] [pid 49628:tid 49652] [client 192.178.4.101:46224] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNOhr82AgnfnwL7V2ZLLwAAAJY"]
[Tue Nov 11 22:56:16.200459 2025] [:error] [pid 49628:tid 49634] [client 192.178.4.101:46303] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNOkL82AgnfnwL7V2ZLSgAAAIQ"]
[Tue Nov 11 22:57:19.698915 2025] [:error] [pid 47931:tid 47935] [client 192.178.4.101:47421] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNOzzWP7ptQ6Y-gz68xRgAAAUE"]
[Tue Nov 11 22:57:24.416947 2025] [:error] [pid 47859:tid 47884] [client 192.178.4.101:50664] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNO1KRzLR7egYHK_4eL3gAAABQ"]
[Tue Nov 11 22:57:27.173871 2025] [:error] [pid 47859:tid 47874] [client 192.178.4.101:51388] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNO16RzLR7egYHK_4eL4QAAAAo"]
[Tue Nov 11 22:57:35.270511 2025] [:error] [pid 47931:tid 47940] [client 192.178.4.101:37622] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNO3zWP7ptQ6Y-gz68xXgAAAUY"]
[Tue Nov 11 22:57:36.176058 2025] [:error] [pid 47860:tid 47901] [client 192.178.4.101:59115] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNO4KPe6bkmJWx80Czj_wAAAEo"]
[Tue Nov 11 22:57:49.452544 2025] [:error] [pid 47931:tid 47956] [client 192.178.4.101:48634] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNO7TWP7ptQ6Y-gz68xcwAAAVY"]
[Tue Nov 11 22:57:51.215913 2025] [:error] [pid 47964:tid 47984] [client 192.178.4.101:49247] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNO716CQC3ebUS5pkQYmwAAAZE"]
[Tue Nov 11 22:57:58.935339 2025] [:error] [pid 49628:tid 49631] [client 192.178.4.101:44608] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNO9r82AgnfnwL7V2ZMEAAAAIE"]
[Tue Nov 11 22:58:00.576055 2025] [:error] [pid 49628:tid 49633] [client 192.178.4.101:36462] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNO-L82AgnfnwL7V2ZMFAAAAIM"]
[Tue Nov 11 22:58:03.196169 2025] [:error] [pid 47964:tid 47986] [client 192.178.4.101:37789] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNO-16CQC3ebUS5pkQYswAAAZM"]
[Tue Nov 11 22:59:23.021980 2025] [:error] [pid 47964:tid 47967] [client 192.178.4.101:57322] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNPS16CQC3ebUS5pkQZUQAAAYA"]
[Tue Nov 11 22:59:25.649624 2025] [:error] [pid 47964:tid 47968] [client 192.178.4.101:38701] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNPTV6CQC3ebUS5pkQZVwAAAYE"]
[Tue Nov 11 22:59:36.075462 2025] [:error] [pid 49628:tid 49649] [client 192.178.4.101:62364] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNPWL82AgnfnwL7V2ZNCgAAAJM"]
[Tue Nov 11 22:59:37.001224 2025] [:error] [pid 47859:tid 47873] [client 192.178.4.101:48907] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNPWKRzLR7egYHK_4eMrgAAAAk"]
[Tue Nov 11 22:59:44.709090 2025] [:error] [pid 47859:tid 47888] [client 192.178.4.101:45377] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNPYKRzLR7egYHK_4eMtwAAABg"]
[Tue Nov 11 22:59:46.359900 2025] [:error] [pid 47859:tid 47873] [client 192.178.4.101:39744] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNPYqRzLR7egYHK_4eMugAAAAk"]
[Tue Nov 11 22:59:56.557870 2025] [:error] [pid 47859:tid 47872] [client 192.178.4.101:52461] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNPbKRzLR7egYHK_4eMyQAAAAg"]
[Tue Nov 11 22:59:57.259908 2025] [:error] [pid 47931:tid 47954] [client 192.178.4.101:40612] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNPbTWP7ptQ6Y-gz68yTwAAAVQ"]
[Tue Nov 11 23:01:28.934915 2025] [:error] [pid 47859:tid 47879] [client 192.178.4.101:52680] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNPyKRzLR7egYHK_4eNVgAAAA8"]
[Tue Nov 11 23:01:30.598056 2025] [:error] [pid 47859:tid 47883] [client 192.178.4.101:51764] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNPyqRzLR7egYHK_4eNWAAAABM"]
[Tue Nov 11 23:01:40.199452 2025] [:error] [pid 47859:tid 47873] [client 192.178.4.101:56746] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNP1KRzLR7egYHK_4eNawAAAAk"]
[Tue Nov 11 23:01:41.069267 2025] [:error] [pid 47860:tid 47891] [client 192.178.4.101:43844] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNP1aPe6bkmJWx80CzlwwAAAEA"]
[Tue Nov 11 23:01:52.447067 2025] [:error] [pid 47964:tid 47979] [client 192.178.4.101:63139] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNP4F6CQC3ebUS5pkQagwAAAYw"]
[Tue Nov 11 23:01:53.239401 2025] [:error] [pid 47964:tid 47975] [client 192.178.4.101:58787] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNP4V6CQC3ebUS5pkQaiQAAAYg"]
[Tue Nov 11 23:02:13.199504 2025] [:error] [pid 47859:tid 47880] [client 192.178.4.101:52741] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNP9aRzLR7egYHK_4eNkgAAABA"]
[Tue Nov 11 23:02:13.992459 2025] [:error] [pid 47931:tid 47947] [client 192.178.4.101:43408] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNP9TWP7ptQ6Y-gz68zQgAAAU0"]
[Tue Nov 11 23:02:24.084992 2025] [:error] [pid 47964:tid 47977] [client 192.178.4.101:44154] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNQAF6CQC3ebUS5pkQauwAAAYo"]
[Tue Nov 11 23:02:24.993462 2025] [:error] [pid 47964:tid 47991] [client 192.178.4.101:45825] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNQAF6CQC3ebUS5pkQavwAAAZg"]
[Tue Nov 11 23:02:26.583438 2025] [:error] [pid 47859:tid 47881] [client 192.178.4.101:43158] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNQAqRzLR7egYHK_4eNsQAAABE"]
[Tue Nov 11 23:04:31.455619 2025] [:error] [pid 49628:tid 49637] [client 192.178.4.101:49505] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNQf782AgnfnwL7V2ZQCAAAAIc"]
[Tue Nov 11 23:04:39.265157 2025] [:error] [pid 47931:tid 47952] [client 192.178.4.101:59303] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNQhzWP7ptQ6Y-gz680HQAAAVI"]
[Tue Nov 11 23:04:41.916926 2025] [:error] [pid 49628:tid 49632] [client 192.178.4.101:62570] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNQib82AgnfnwL7V2ZQGAAAAII"]
[Tue Nov 11 23:04:48.037360 2025] [:error] [pid 49628:tid 49641] [client 192.178.4.101:46231] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNQkL82AgnfnwL7V2ZQIgAAAIs"]
[Tue Nov 11 23:04:48.905405 2025] [:error] [pid 47964:tid 47973] [client 192.178.4.101:51270] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNQkF6CQC3ebUS5pkQbvAAAAYY"]
[Tue Nov 11 23:04:56.647506 2025] [:error] [pid 49628:tid 49640] [client 192.178.4.101:57987] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNQmL82AgnfnwL7V2ZQJwAAAIo"]
[Tue Nov 11 23:05:00.069030 2025] [:error] [pid 47931:tid 47951] [client 192.178.4.101:59556] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNQnDWP7ptQ6Y-gz680NgAAAVE"]
[Tue Nov 11 23:05:06.036383 2025] [:error] [pid 47860:tid 47900] [client 192.178.4.101:38322] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNQoqPe6bkmJWx80CzmygAAAEk"]
[Tue Nov 11 23:05:11.455375 2025] [:error] [pid 47931:tid 47938] [client 192.178.4.101:64904] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNQpzWP7ptQ6Y-gz680SAAAAUQ"]
[Tue Nov 11 23:05:12.031882 2025] [:error] [pid 47931:tid 47936] [client 192.178.4.101:36394] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNQqDWP7ptQ6Y-gz680SgAAAUI"]
[Tue Nov 11 23:05:20.589480 2025] [:error] [pid 49628:tid 49646] [client 192.178.4.101:46339] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNQsL82AgnfnwL7V2ZQXgAAAJA"]
[Tue Nov 11 23:05:22.388260 2025] [:error] [pid 47931:tid 47943] [client 192.178.4.101:54212] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNQsjWP7ptQ6Y-gz680VQAAAUk"]
[Tue Nov 11 23:07:35.635358 2025] [:error] [pid 47860:tid 47903] [client 192.178.4.101:61399] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNRN6Pe6bkmJWx80CzncgAAAEw"]
[Tue Nov 11 23:07:36.212588 2025] [:error] [pid 49628:tid 49631] [client 192.178.4.101:63328] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNROL82AgnfnwL7V2ZRSgAAAIE"]
[Tue Nov 11 23:07:45.660978 2025] [:error] [pid 49628:tid 49646] [client 192.178.4.101:50044] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNRQb82AgnfnwL7V2ZRXAAAAJA"]
[Tue Nov 11 23:07:46.615132 2025] [:error] [pid 47931:tid 47950] [client 192.178.4.101:52015] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNRQjWP7ptQ6Y-gz681GAAAAVA"]
[Tue Nov 11 23:07:55.797630 2025] [:error] [pid 49628:tid 49645] [client 192.178.4.101:48051] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNRS782AgnfnwL7V2ZRcwAAAI8"]
[Tue Nov 11 23:07:56.578560 2025] [:error] [pid 47859:tid 47885] [client 192.178.4.101:41710] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNRTKRzLR7egYHK_4ePVwAAABU"]
[Tue Nov 11 23:10:05.994703 2025] [:error] [pid 49628:tid 49634] [client 192.178.4.101:58876] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNRzb82AgnfnwL7V2ZSSgAAAIQ"]
[Tue Nov 11 23:10:13.088537 2025] [:error] [pid 47931:tid 47947] [client 192.178.4.101:58110] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNR1TWP7ptQ6Y-gz681-QAAAU0"]
[Tue Nov 11 23:10:14.608581 2025] [:error] [pid 47964:tid 47972] [client 192.178.4.101:51486] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNR1l6CQC3ebUS5pkQdmgAAAYU"]
[Tue Nov 11 23:10:24.180142 2025] [:error] [pid 47860:tid 47897] [client 192.178.4.101:45733] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNR4KPe6bkmJWx80CzoQAAAAEY"]
[Tue Nov 11 23:10:28.146590 2025] [:error] [pid 49628:tid 49649] [client 192.178.4.101:49875] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNR5L82AgnfnwL7V2ZSeAAAAJM"]
[Tue Nov 11 23:10:41.251608 2025] [:error] [pid 47860:tid 47901] [client 192.178.4.101:56893] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNR8aPe6bkmJWx80CzoUgAAAEo"]
[Tue Nov 11 23:10:43.567585 2025] [:error] [pid 47860:tid 47912] [client 192.178.4.101:60993] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNR86Pe6bkmJWx80CzoVAAAAFU"]
[Tue Nov 11 23:11:00.218678 2025] [:error] [pid 47964:tid 47980] [client 192.178.4.101:60094] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNSBF6CQC3ebUS5pkQd2AAAAY0"]
[Tue Nov 11 23:12:04.014806 2025] [:error] [pid 47860:tid 47892] [client 192.178.4.101:49606] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNSRKPe6bkmJWx80CzowQAAAEE"]
[Tue Nov 11 23:12:04.691455 2025] [:error] [pid 49628:tid 49641] [client 192.178.4.101:45216] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNSRL82AgnfnwL7V2ZTNgAAAIs"]
[Tue Nov 11 23:12:13.350325 2025] [:error] [pid 47859:tid 47882] [client 192.178.4.101:58398] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNSTaRzLR7egYHK_4eQ6wAAABI"]
[Tue Nov 11 23:12:20.320397 2025] [:error] [pid 49628:tid 49651] [client 192.178.4.101:45870] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNSVL82AgnfnwL7V2ZTQwAAAJU"]
[Tue Nov 11 23:12:21.460895 2025] [:error] [pid 47860:tid 47906] [client 192.178.4.101:37485] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNSVaPe6bkmJWx80Czo2wAAAE8"]
[Tue Nov 11 23:12:27.474414 2025] [:error] [pid 47931:tid 47948] [client 192.178.4.101:59256] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNSWzWP7ptQ6Y-gz682uwAAAU4"]
[Tue Nov 11 23:12:28.463807 2025] [:error] [pid 47860:tid 47911] [client 192.178.4.101:62092] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNSXKPe6bkmJWx80Czo4wAAAFQ"]
[Tue Nov 11 23:12:38.069530 2025] [:error] [pid 47964:tid 47987] [client 192.178.4.101:56811] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNSZl6CQC3ebUS5pkQeiQAAAZQ"]
[Tue Nov 11 23:12:39.073842 2025] [:error] [pid 47859:tid 47880] [client 192.178.4.101:54009] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNSZ6RzLR7egYHK_4eRBAAAABA"]
[Tue Nov 11 23:12:52.550406 2025] [:error] [pid 47860:tid 47898] [client 192.178.4.101:63736] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNSdKPe6bkmJWx80Czo-gAAAEc"]
[Tue Nov 11 23:12:55.725592 2025] [:error] [pid 47964:tid 47976] [client 192.178.4.101:40650] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNSd16CQC3ebUS5pkQelgAAAYk"]
[Tue Nov 11 23:13:51.043580 2025] [:error] [pid 49628:tid 49650] [client 192.178.4.101:60871] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNSr782AgnfnwL7V2ZUGAAAAJQ"]
[Tue Nov 11 23:13:57.749654 2025] [:error] [pid 49628:tid 49641] [client 192.178.4.101:45102] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNStb82AgnfnwL7V2ZUKAAAAIs"]
[Tue Nov 11 23:13:58.592962 2025] [:error] [pid 49628:tid 49632] [client 192.178.4.101:57653] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNStr82AgnfnwL7V2ZUKwAAAII"]
[Tue Nov 11 23:14:22.896244 2025] [:error] [pid 47860:tid 47914] [client 192.178.4.101:53192] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNSzqPe6bkmJWx80CzpewAAAFc"]
[Tue Nov 11 23:14:29.095711 2025] [:error] [pid 47931:tid 47958] [client 192.178.4.101:50564] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNS1TWP7ptQ6Y-gz683UgAAAVg"]
[Tue Nov 11 23:14:29.337548 2025] [:error] [pid 47931:tid 47946] [client 192.178.4.101:35145] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNS1TWP7ptQ6Y-gz683VAAAAUw"]
[Tue Nov 11 23:14:36.280966 2025] [:error] [pid 47964:tid 47985] [client 192.178.4.101:52292] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNS3F6CQC3ebUS5pkQfHwAAAZI"]
[Tue Nov 11 23:14:37.048538 2025] [:error] [pid 49628:tid 49646] [client 192.178.4.101:43379] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNS3b82AgnfnwL7V2ZUXQAAAJA"]
[Tue Nov 11 23:14:43.801462 2025] [:error] [pid 47931:tid 47944] [client 192.178.4.101:44219] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNS4zWP7ptQ6Y-gz683ZAAAAUo"]
[Tue Nov 11 23:14:44.228593 2025] [:error] [pid 47859:tid 47878] [client 192.178.4.101:40722] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNS5KRzLR7egYHK_4eRkQAAAA4"]
[Tue Nov 11 23:15:44.114103 2025] [:error] [pid 47964:tid 47987] [client 192.178.4.101:38407] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNTIF6CQC3ebUS5pkQfhwAAAZQ"]
[Tue Nov 11 23:15:54.465357 2025] [:error] [pid 49628:tid 49651] [client 192.178.4.101:36263] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNTKr82AgnfnwL7V2ZU4QAAAJU"]
[Tue Nov 11 23:15:55.258789 2025] [:error] [pid 49628:tid 49641] [client 192.178.4.101:58382] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNTK782AgnfnwL7V2ZU4wAAAIs"]
[Tue Nov 11 23:16:02.408871 2025] [:error] [pid 47964:tid 47970] [client 192.178.4.101:42803] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNTMl6CQC3ebUS5pkQfmwAAAYM"]
[Tue Nov 11 23:16:03.928638 2025] [:error] [pid 47859:tid 47873] [client 192.178.4.101:63723] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNTM6RzLR7egYHK_4eSFAAAAAk"]
[Tue Nov 11 23:16:24.961201 2025] [:error] [pid 47931:tid 47945] [client 192.178.4.101:61657] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNTSDWP7ptQ6Y-gz6834QAAAUs"]
[Tue Nov 11 23:16:25.624583 2025] [:error] [pid 49628:tid 49644] [client 192.178.4.101:60128] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNTSb82AgnfnwL7V2ZVGwAAAI4"]
[Tue Nov 11 23:16:33.314514 2025] [:error] [pid 47931:tid 47954] [client 192.178.4.101:36421] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNTUTWP7ptQ6Y-gz6836AAAAVQ"]
[Tue Nov 11 23:16:34.766159 2025] [:error] [pid 47964:tid 47969] [client 192.178.4.101:45808] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNTUl6CQC3ebUS5pkQf1AAAAYI"]
[Tue Nov 11 23:17:33.140913 2025] [:error] [pid 47931:tid 47951] [client 192.178.4.101:35159] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNTjTWP7ptQ6Y-gz684RAAAAVE"]
[Tue Nov 11 23:17:40.985563 2025] [:error] [pid 47859:tid 47870] [client 192.178.4.101:49781] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNTlKRzLR7egYHK_4eSjgAAAAY"]
[Tue Nov 11 23:17:42.471377 2025] [:error] [pid 49628:tid 49653] [client 192.178.4.101:60337] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNTlr82AgnfnwL7V2ZVlQAAAJc"]
[Tue Nov 11 23:17:47.909931 2025] [:error] [pid 47964:tid 47982] [client 192.178.4.101:58079] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNTm16CQC3ebUS5pkQgLgAAAY8"]
[Tue Nov 11 23:17:49.547632 2025] [:error] [pid 47964:tid 47989] [client 192.178.4.101:61505] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNTnV6CQC3ebUS5pkQgNgAAAZY"]
[Tue Nov 11 23:17:57.184091 2025] [:error] [pid 47964:tid 47970] [client 192.178.4.101:59944] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNTpV6CQC3ebUS5pkQgQQAAAYM"]
[Tue Nov 11 23:18:08.344609 2025] [:error] [pid 47859:tid 47880] [client 192.178.4.101:47098] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNTsKRzLR7egYHK_4eSpAAAABA"]
[Tue Nov 11 23:18:16.353271 2025] [:error] [pid 47859:tid 47876] [client 192.178.4.101:64854] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNTuKRzLR7egYHK_4eStAAAAAw"]
[Tue Nov 11 23:20:27.064570 2025] [:error] [pid 49628:tid 49636] [client 192.178.4.101:53208] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNUO782AgnfnwL7V2ZWngAAAIY"]
[Tue Nov 11 23:20:35.300434 2025] [:error] [pid 47964:tid 47982] [client 192.178.4.101:50072] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNUQ16CQC3ebUS5pkQhoAAAAY8"]
[Tue Nov 11 23:20:41.303833 2025] [:error] [pid 47860:tid 47897] [client 192.178.4.101:53542] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNUSaPe6bkmJWx80CzrVwAAAEY"]
[Tue Nov 11 23:20:48.964324 2025] [:error] [pid 47931:tid 47957] [client 192.178.4.101:37749] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNUUDWP7ptQ6Y-gz685SQAAAVc"]
[Tue Nov 11 23:20:54.053509 2025] [:error] [pid 47860:tid 47914] [client 192.178.4.101:54053] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNUVqPe6bkmJWx80CzrawAAAFc"]
[Tue Nov 11 23:20:58.269421 2025] [:error] [pid 47964:tid 47977] [client 192.178.4.101:58674] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNUWl6CQC3ebUS5pkQhtgAAAYo"]
[Tue Nov 11 23:21:10.142950 2025] [:error] [pid 47931:tid 47955] [client 192.178.4.101:41616] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNUZjWP7ptQ6Y-gz685XAAAAVU"]
[Tue Nov 11 23:23:08.732945 2025] [:error] [pid 47931:tid 47956] [client 192.178.4.101:46350] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNU3DWP7ptQ6Y-gz686IwAAAVY"]
[Tue Nov 11 23:23:14.880607 2025] [:error] [pid 47859:tid 47869] [client 192.178.4.101:61731] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNU4qRzLR7egYHK_4eUUwAAAAU"]
[Tue Nov 11 23:23:22.744397 2025] [:error] [pid 49628:tid 49654] [client 192.178.4.101:49148] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNU6r82AgnfnwL7V2ZX7gAAAJg"]
[Tue Nov 11 23:23:34.209038 2025] [:error] [pid 49628:tid 49650] [client 192.178.4.101:39937] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNU9r82AgnfnwL7V2ZYAAAAAJQ"]
[Tue Nov 11 23:23:43.678139 2025] [:error] [pid 47964:tid 47973] [client 192.178.4.101:45518] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNU_16CQC3ebUS5pkQioQAAAYY"]
[Tue Nov 11 23:25:04.611444 2025] [:error] [pid 47964:tid 47975] [client 192.178.4.101:60945] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNVUF6CQC3ebUS5pkQjKAAAAYg"]
[Tue Nov 11 23:25:12.974361 2025] [:error] [pid 47931:tid 47942] [client 192.178.4.101:58417] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNVWDWP7ptQ6Y-gz686xgAAAUg"]
[Tue Nov 11 23:25:22.371533 2025] [:error] [pid 47860:tid 47897] [client 192.178.4.101:45740] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNVYqPe6bkmJWx80CzsnQAAAEY"]
[Tue Nov 11 23:25:27.925449 2025] [:error] [pid 47860:tid 47896] [client 192.178.4.101:60646] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNVZ6Pe6bkmJWx80CzspAAAAEU"]
[Tue Nov 11 23:25:34.567782 2025] [:error] [pid 47964:tid 47982] [client 192.178.4.101:50837] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNVbl6CQC3ebUS5pkQjRwAAAY8"]
[Tue Nov 11 23:25:43.517599 2025] [:error] [pid 47859:tid 47868] [client 192.178.4.101:36451] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNVd6RzLR7egYHK_4eVBQAAAAQ"]
[Tue Nov 11 23:25:55.214281 2025] [:error] [pid 47860:tid 47896] [client 192.178.4.101:34835] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNVg6Pe6bkmJWx80CzsxgAAAEU"]
[Tue Nov 11 23:27:35.964996 2025] [:error] [pid 47931:tid 47941] [client 192.178.4.101:46739] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNV5zWP7ptQ6Y-gz687dQAAAUc"]
[Tue Nov 11 23:27:39.990093 2025] [:error] [pid 47964:tid 47976] [client 192.178.4.101:62274] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNV616CQC3ebUS5pkQj8wAAAYk"]
[Tue Nov 11 23:27:44.658714 2025] [:error] [pid 47859:tid 47883] [client 192.178.4.101:40792] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNV8KRzLR7egYHK_4eVqwAAABM"]
[Tue Nov 11 23:27:49.961384 2025] [:error] [pid 47859:tid 47874] [client 192.178.4.101:43849] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNV9aRzLR7egYHK_4eVswAAAAo"]
[Tue Nov 11 23:27:56.868856 2025] [:error] [pid 47964:tid 47969] [client 192.178.4.101:54735] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNV_F6CQC3ebUS5pkQkAQAAAYI"]
[Tue Nov 11 23:28:11.154521 2025] [:error] [pid 49628:tid 49648] [client 192.178.4.101:49467] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNWC782AgnfnwL7V2ZaIAAAAJI"]
[Tue Nov 11 23:28:17.040912 2025] [:error] [pid 49628:tid 49634] [client 192.178.4.101:40234] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNWEb82AgnfnwL7V2ZaKAAAAIQ"]
[Tue Nov 11 23:28:18.661219 2025] [:error] [pid 47931:tid 47948] [client 192.178.4.101:53562] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNWEjWP7ptQ6Y-gz687pQAAAU4"]
[Tue Nov 11 23:28:24.500232 2025] [:error] [pid 47859:tid 47884] [client 192.178.4.101:60362] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNWGKRzLR7egYHK_4eVzgAAABQ"]
[Tue Nov 11 23:28:26.533494 2025] [:error] [pid 49628:tid 49632] [client 192.178.4.101:44148] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNWGr82AgnfnwL7V2ZaNwAAAII"]
[Tue Nov 11 23:28:31.016677 2025] [:error] [pid 47859:tid 47871] [client 192.178.4.101:45794] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNWH6RzLR7egYHK_4eV0QAAAAc"]
[Tue Nov 11 23:28:32.280869 2025] [:error] [pid 47964:tid 47990] [client 192.178.4.101:61344] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNWIF6CQC3ebUS5pkQkIgAAAZc"]
[Tue Nov 11 23:29:52.163927 2025] [:error] [pid 47931:tid 47957] [client 192.178.4.101:48034] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNWcDWP7ptQ6Y-gz688FQAAAVc"]
[Tue Nov 11 23:29:55.693803 2025] [:error] [pid 47859:tid 47870] [client 192.178.4.101:47354] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNWc6RzLR7egYHK_4eWLwAAAAY"]
[Tue Nov 11 23:30:01.631202 2025] [:error] [pid 47860:tid 47905] [client 192.178.4.101:44342] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNWeaPe6bkmJWx80CztygAAAE4"]
[Tue Nov 11 23:30:18.969138 2025] [:error] [pid 47860:tid 47893] [client 192.178.4.101:59512] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNWiqPe6bkmJWx80Czt1gAAAEI"]
[Tue Nov 11 23:30:28.644254 2025] [:error] [pid 47859:tid 47886] [client 192.178.4.101:51613] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNWlKRzLR7egYHK_4eWVAAAABY"]
[Tue Nov 11 23:30:38.230478 2025] [:error] [pid 47860:tid 47911] [client 192.178.4.101:64572] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNWnqPe6bkmJWx80Czt8QAAAFQ"]
[Tue Nov 11 23:31:58.399233 2025] [:error] [pid 47964:tid 47978] [client 192.178.4.101:40459] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNW7l6CQC3ebUS5pkQlogAAAYs"]
[Tue Nov 11 23:32:01.501587 2025] [:error] [pid 49628:tid 49635] [client 192.178.4.101:42546] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNW8b82AgnfnwL7V2Zb-QAAAIU"]
[Tue Nov 11 23:32:07.164039 2025] [:error] [pid 47859:tid 47872] [client 192.178.4.101:58196] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNW96RzLR7egYHK_4eXIAAAAAg"]
[Tue Nov 11 23:32:13.970073 2025] [:error] [pid 47931:tid 47944] [client 192.178.4.101:35087] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNW_TWP7ptQ6Y-gz689IgAAAUo"]
[Tue Nov 11 23:32:27.526563 2025] [:error] [pid 47964:tid 47976] [client 192.178.4.101:37034] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNXC16CQC3ebUS5pkQl2gAAAYk"]
[Tue Nov 11 23:32:32.040500 2025] [:error] [pid 49628:tid 49633] [client 192.178.4.101:47322] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNXEL82AgnfnwL7V2ZcSAAAAIM"]
[Tue Nov 11 23:32:38.395886 2025] [:error] [pid 47859:tid 47868] [client 192.178.4.101:53177] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNXFqRzLR7egYHK_4eXQwAAAAQ"]
[Tue Nov 11 23:32:44.282904 2025] [:error] [pid 47964:tid 47987] [client 192.178.4.101:58749] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNXHF6CQC3ebUS5pkQl9QAAAZQ"]
[Tue Nov 11 23:32:52.214595 2025] [:error] [pid 47931:tid 47942] [client 192.178.4.101:49559] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNXJDWP7ptQ6Y-gz689mgAAAUg"]
[Tue Nov 11 23:34:08.544558 2025] [:error] [pid 47860:tid 47896] [client 192.178.4.101:57733] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNXcKPe6bkmJWx80CzvZQAAAEU"]
[Tue Nov 11 23:34:17.277750 2025] [:error] [pid 47964:tid 47982] [client 192.178.4.101:43740] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNXeV6CQC3ebUS5pkQmZQAAAY8"]
[Tue Nov 11 23:34:25.749554 2025] [:error] [pid 47860:tid 47895] [client 192.178.4.101:48008] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNXgaPe6bkmJWx80CzvhQAAAEQ"]
[Tue Nov 11 23:34:31.891039 2025] [:error] [pid 49628:tid 49649] [client 192.178.4.101:59187] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNXh782AgnfnwL7V2ZdWQAAAJM"]
[Tue Nov 11 23:34:39.274415 2025] [:error] [pid 47859:tid 47884] [client 192.178.4.101:56019] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNXj6RzLR7egYHK_4eX6wAAABQ"]
[Tue Nov 11 23:34:44.502484 2025] [:error] [pid 47859:tid 47866] [client 192.178.4.101:53507] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNXlKRzLR7egYHK_4eX8wAAAAI"]
[Tue Nov 11 23:36:49.838761 2025] [:error] [pid 47964:tid 47991] [client 192.178.4.101:48123] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNYEV6CQC3ebUS5pkQnCwAAAZg"]
[Tue Nov 11 23:36:56.766184 2025] [:error] [pid 47859:tid 47880] [client 192.178.4.101:42995] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNYGKRzLR7egYHK_4eYqQAAABA"]
[Tue Nov 11 23:37:15.568646 2025] [:error] [pid 47964:tid 47970] [client 192.178.4.101:48415] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNYK16CQC3ebUS5pkQnKQAAAYM"]
[Tue Nov 11 23:37:21.001621 2025] [:error] [pid 49628:tid 49637] [client 192.178.4.101:44160] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNYMb82AgnfnwL7V2Ze9wAAAIc"]
[Tue Nov 11 23:37:28.648780 2025] [:error] [pid 47859:tid 47876] [client 192.178.4.101:63206] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNYOKRzLR7egYHK_4eYyQAAAAw"]
[Tue Nov 11 23:37:34.044214 2025] [:error] [pid 47859:tid 47882] [client 192.178.4.101:48147] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNYPqRzLR7egYHK_4eY0QAAABI"]
[Tue Nov 11 23:39:34.235459 2025] [:error] [pid 47860:tid 47909] [client 192.178.4.101:60972] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNYtqPe6bkmJWx80CzxAgAAAFI"]
[Tue Nov 11 23:39:40.016686 2025] [:error] [pid 47931:tid 47949] [client 192.178.4.101:37690] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNYvDWP7ptQ6Y-gz68_jAAAAU8"]
[Tue Nov 11 23:39:44.115900 2025] [:error] [pid 47964:tid 47989] [client 192.178.4.101:62851] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNYwF6CQC3ebUS5pkQn7QAAAZY"]
[Tue Nov 11 23:39:52.531224 2025] [:error] [pid 49628:tid 49651] [client 192.178.4.101:53029] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNYyL82AgnfnwL7V2Zf-gAAAJU"]
[Tue Nov 11 23:39:56.686130 2025] [:error] [pid 47860:tid 47899] [client 192.178.4.101:42093] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNYzKPe6bkmJWx80CzxIgAAAEg"]
[Tue Nov 11 23:40:00.873630 2025] [:error] [pid 49628:tid 49649] [client 192.178.4.101:47616] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNY0L82AgnfnwL7V2ZgCQAAAJM"]
[Tue Nov 11 23:40:06.452737 2025] [:error] [pid 47931:tid 47942] [client 192.178.4.101:61290] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNY1jWP7ptQ6Y-gz68_oAAAAUg"]
[Tue Nov 11 23:40:12.453678 2025] [:error] [pid 47964:tid 47988] [client 192.178.4.101:39271] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNY3F6CQC3ebUS5pkQoJAAAAZU"]
[Tue Nov 11 23:40:22.672863 2025] [:error] [pid 47964:tid 47978] [client 192.178.4.101:61883] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNY5l6CQC3ebUS5pkQoNAAAAYs"]
[Tue Nov 11 23:40:28.309740 2025] [:error] [pid 47964:tid 47983] [client 192.178.4.101:36548] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNY7F6CQC3ebUS5pkQoNwAAAZA"]
[Tue Nov 11 23:40:30.525114 2025] [:error] [pid 47860:tid 47905] [client 192.178.4.101:51567] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNY7qPe6bkmJWx80CzxTQAAAE4"]
[Tue Nov 11 23:41:56.732194 2025] [:error] [pid 47860:tid 47900] [client 192.178.4.101:61451] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNZRKPe6bkmJWx80CzyBwAAAEk"]
[Tue Nov 11 23:42:04.270700 2025] [:error] [pid 47964:tid 47969] [client 192.178.4.101:61002] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNZTF6CQC3ebUS5pkQpOwAAAYI"]
[Tue Nov 11 23:42:21.306793 2025] [:error] [pid 47859:tid 47872] [client 192.178.4.101:44679] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNZXaRzLR7egYHK_4eazwAAAAg"]
[Tue Nov 11 23:42:42.175751 2025] [:error] [pid 47931:tid 47955] [client 192.178.4.101:62615] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNZcjWP7ptQ6Y-gz69AvwAAAVU"]
[Tue Nov 11 23:42:48.014286 2025] [:error] [pid 47860:tid 47911] [client 192.178.4.101:57482] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNZeKPe6bkmJWx80CzyUgAAAFQ"]
[Tue Nov 11 23:44:20.551879 2025] [:error] [pid 47860:tid 47912] [client 192.178.4.101:58838] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNZ1KPe6bkmJWx80Czy1QAAAFU"]
[Tue Nov 11 23:44:26.113208 2025] [:error] [pid 47931:tid 47934] [client 192.178.4.101:65297] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNZ2jWP7ptQ6Y-gz69BSQAAAUA"]
[Tue Nov 11 23:44:37.941419 2025] [:error] [pid 47859:tid 47876] [client 192.178.4.101:40484] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNZ5aRzLR7egYHK_4ebvQAAAAw"]
[Tue Nov 11 23:44:45.835736 2025] [:error] [pid 49628:tid 49635] [client 192.178.4.101:58178] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNZ7b82AgnfnwL7V2ZirgAAAIU"]
[Tue Nov 11 23:46:41.221007 2025] [:error] [pid 47860:tid 47904] [client 192.178.4.101:58913] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNaYaPe6bkmJWx80Czz8QAAAE0"]
[Tue Nov 11 23:46:47.626479 2025] [:error] [pid 47931:tid 47949] [client 192.178.4.101:61881] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNaZzWP7ptQ6Y-gz69CIQAAAU8"]
[Tue Nov 11 23:46:53.592486 2025] [:error] [pid 47859:tid 47887] [client 192.178.4.101:46697] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNabaRzLR7egYHK_4ecdgAAABc"]
[Tue Nov 11 23:47:14.999523 2025] [:error] [pid 47860:tid 47909] [client 192.178.4.101:48688] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNagqPe6bkmJWx80Cz0IgAAAFI"]
[Tue Nov 11 23:47:21.259288 2025] [:error] [pid 47860:tid 47898] [client 192.178.4.101:43315] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNaiaPe6bkmJWx80Cz0MAAAAEc"]
[Tue Nov 11 23:47:29.025562 2025] [:error] [pid 47860:tid 47905] [client 192.178.4.101:52971] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNakaPe6bkmJWx80Cz0OQAAAE4"]
[Tue Nov 11 23:49:32.940380 2025] [:error] [pid 49628:tid 49643] [client 192.178.4.101:52818] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNbDL82AgnfnwL7V2ZlQQAAAI0"]
[Tue Nov 11 23:49:43.326509 2025] [:error] [pid 47931:tid 47945] [client 192.178.4.101:46581] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNbFzWP7ptQ6Y-gz69DAwAAAUs"]
[Tue Nov 11 23:49:49.708477 2025] [:error] [pid 47859:tid 47868] [client 192.178.4.101:49465] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNbHaRzLR7egYHK_4edZwAAAAQ"]
[Tue Nov 11 23:49:56.530611 2025] [:error] [pid 47931:tid 47951] [client 192.178.4.101:54226] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNbJDWP7ptQ6Y-gz69DGAAAAVE"]
[Tue Nov 11 23:50:03.418649 2025] [:error] [pid 49628:tid 49633] [client 192.178.4.101:56644] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNbK782AgnfnwL7V2ZlbQAAAIM"]
[Tue Nov 11 23:50:16.226426 2025] [:error] [pid 49628:tid 49647] [client 192.178.4.101:36502] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNbOL82AgnfnwL7V2ZleQAAAJE"]
[Tue Nov 11 23:50:22.923787 2025] [:error] [pid 47859:tid 47881] [client 192.178.4.101:52690] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNbPqRzLR7egYHK_4edjgAAABE"]
[Tue Nov 11 23:51:54.749608 2025] [:error] [pid 47931:tid 47938] [client 192.178.4.101:62334] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNbmjWP7ptQ6Y-gz69DyAAAAUQ"]
[Tue Nov 11 23:52:19.672436 2025] [:error] [pid 47859:tid 47886] [client 192.178.4.101:53996] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNbs6RzLR7egYHK_4eePgAAABY"]
[Tue Nov 11 23:52:29.936264 2025] [:error] [pid 47964:tid 47967] [client 192.178.4.101:35720] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNbvV6CQC3ebUS5pkQtWgAAAYA"]
[Tue Nov 11 23:52:39.269781 2025] [:error] [pid 47859:tid 47880] [client 192.178.4.101:44540] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNbx6RzLR7egYHK_4eeYAAAABA"]
[Tue Nov 11 23:54:55.496427 2025] [:error] [pid 47860:tid 47912] [client 192.178.4.101:34816] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNcT6Pe6bkmJWx80Cz2cAAAAFU"]
[Tue Nov 11 23:55:09.774505 2025] [:error] [pid 47931:tid 47941] [client 192.178.4.101:47018] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNcXTWP7ptQ6Y-gz69ExAAAAUc"]
[Tue Nov 11 23:55:14.631991 2025] [:error] [pid 47964:tid 47987] [client 192.178.4.101:39646] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNcYl6CQC3ebUS5pkQuNAAAAZQ"]
[Tue Nov 11 23:55:21.049553 2025] [:error] [pid 49628:tid 49635] [client 192.178.4.101:36114] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNcab82AgnfnwL7V2ZoAAAAAIU"]
[Tue Nov 11 23:55:25.964549 2025] [:error] [pid 49628:tid 49647] [client 192.178.4.101:55235] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNcbb82AgnfnwL7V2ZoCAAAAJE"]
[Tue Nov 11 23:55:29.987974 2025] [:error] [pid 47964:tid 47979] [client 192.178.4.101:58860] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNccV6CQC3ebUS5pkQuRQAAAYw"]
[Tue Nov 11 23:55:37.928639 2025] [:error] [pid 49628:tid 49638] [client 192.178.4.101:56791] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNceb82AgnfnwL7V2ZoIQAAAIg"]
[Tue Nov 11 23:55:47.487642 2025] [:error] [pid 47859:tid 47883] [client 192.178.4.101:39023] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNcg6RzLR7egYHK_4efbQAAABM"]
[Tue Nov 11 23:57:46.412483 2025] [:error] [pid 47860:tid 47906] [client 192.178.4.101:40073] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNc-qPe6bkmJWx80Cz3PQAAAE8"]
[Tue Nov 11 23:57:58.813640 2025] [:error] [pid 47931:tid 47939] [client 192.178.4.101:37381] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNdBjWP7ptQ6Y-gz69F5QAAAUU"]
[Tue Nov 11 23:58:05.326050 2025] [:error] [pid 47931:tid 47939] [client 192.178.4.101:36395] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNdDTWP7ptQ6Y-gz69F8QAAAUU"]
[Tue Nov 11 23:58:13.177095 2025] [:error] [pid 47859:tid 47882] [client 192.178.4.101:56932] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNdFaRzLR7egYHK_4egFAAAABI"]
[Tue Nov 11 23:58:19.924248 2025] [:error] [pid 49628:tid 49643] [client 192.178.4.101:60466] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNdG782AgnfnwL7V2ZpMQAAAI0"]
[Tue Nov 11 23:58:28.563916 2025] [:error] [pid 47931:tid 47934] [client 192.178.4.101:38001] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNdJDWP7ptQ6Y-gz69GFwAAAUA"]
[Tue Nov 11 23:58:34.986000 2025] [:error] [pid 47860:tid 47907] [client 192.178.4.101:63693] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNdKqPe6bkmJWx80Cz3iAAAAFA"]
[Tue Nov 11 23:59:52.048658 2025] [:error] [pid 49628:tid 49647] [client 192.178.4.101:61407] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNdeL82AgnfnwL7V2ZqFQAAAJE"]
[Wed Nov 12 00:00:31.730338 2025] [:error] [pid 47931:tid 47948] [client 192.178.4.101:63910] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNdnzWP7ptQ6Y-gz69GvQAAAU4"]
[Wed Nov 12 00:00:39.761704 2025] [:error] [pid 47964:tid 47981] [client 192.178.4.101:50008] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNdp16CQC3ebUS5pkQwSQAAAY4"]
[Wed Nov 12 00:02:52.217887 2025] [:error] [pid 47860:tid 47907] [client 192.178.4.101:35938] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNeLKPe6bkmJWx80Cz4uQAAAFA"]
[Wed Nov 12 00:03:26.367797 2025] [:error] [pid 49628:tid 49654] [client 192.178.4.101:58955] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNeTr82AgnfnwL7V2ZrrwAAAJg"]
[Wed Nov 12 00:03:34.208843 2025] [:error] [pid 47859:tid 47879] [client 192.178.4.101:41291] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNeVqRzLR7egYHK_4ehggAAAA8"]
[Wed Nov 12 00:04:15.971407 2025] [:error] [pid 47964:tid 47988] [client 161.97.137.114:57430] [client 161.97.137.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 161.97.137.114, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRNef16CQC3ebUS5pkQxswAAAZU"]
[Wed Nov 12 00:05:13.260525 2025] [:error] [pid 47931:tid 47954] [client 192.178.4.101:63358] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNeuTWP7ptQ6Y-gz69IVAAAAVQ"]
[Wed Nov 12 00:05:22.698584 2025] [:error] [pid 47931:tid 47952] [client 192.178.4.101:49384] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNewjWP7ptQ6Y-gz69IZQAAAVI"]
[Wed Nov 12 00:05:31.373432 2025] [:error] [pid 47931:tid 47950] [client 192.178.4.101:46512] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNeyzWP7ptQ6Y-gz69IeQAAAVA"]
[Wed Nov 12 00:05:41.003114 2025] [:error] [pid 49628:tid 49648] [client 192.178.4.101:58395] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNe1b82AgnfnwL7V2ZsxAAAAJI"]
[Wed Nov 12 00:05:50.694938 2025] [:error] [pid 47859:tid 47873] [client 192.178.4.101:35337] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNe3qRzLR7egYHK_4eiSQAAAAk"]
[Wed Nov 12 00:08:28.502572 2025] [:error] [pid 49628:tid 49649] [client 192.178.4.101:53331] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNffL82AgnfnwL7V2ZuCAAAAJM"]
[Wed Nov 12 00:08:32.532111 2025] [:error] [pid 47859:tid 47876] [client 192.178.4.101:39836] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNfgKRzLR7egYHK_4ejOwAAAAw"]
[Wed Nov 12 00:08:37.485939 2025] [:error] [pid 47964:tid 47977] [client 192.178.4.101:39311] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNfhV6CQC3ebUS5pkQzZwAAAYo"]
[Wed Nov 12 00:08:43.185526 2025] [:error] [pid 47931:tid 47947] [client 192.178.4.101:60111] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNfizWP7ptQ6Y-gz69JZwAAAU0"]
[Wed Nov 12 00:08:53.226068 2025] [:error] [pid 47964:tid 47989] [client 192.178.4.101:52429] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNflV6CQC3ebUS5pkQzgAAAAZY"]
[Wed Nov 12 00:09:11.844749 2025] [:error] [pid 47859:tid 47870] [client 192.178.4.101:39728] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNfp6RzLR7egYHK_4ejaQAAAAY"]
[Wed Nov 12 00:09:18.386097 2025] [:error] [pid 47860:tid 47908] [client 192.178.4.101:44889] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNfrqPe6bkmJWx80Cz6uAAAAFE"]
[Wed Nov 12 00:11:19.714811 2025] [:error] [pid 47860:tid 47901] [client 192.178.4.101:52597] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNgJ6Pe6bkmJWx80Cz7LwAAAEo"]
[Wed Nov 12 00:11:33.403736 2025] [:error] [pid 47964:tid 47979] [client 192.178.4.101:48447] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNgNV6CQC3ebUS5pkQ0VgAAAYw"]
[Wed Nov 12 00:11:33.831995 2025] [:error] [pid 49628:tid 49651] [client 192.178.4.101:49206] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNgNb82AgnfnwL7V2ZvJAAAAJU"]
[Wed Nov 12 00:13:04.406972 2025] [:error] [pid 47964:tid 47974] [client 192.178.4.101:43639] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNgkF6CQC3ebUS5pkQ0_QAAAYc"]
[Wed Nov 12 00:13:04.850179 2025] [:error] [pid 47964:tid 47984] [client 192.178.4.101:41411] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNgkF6CQC3ebUS5pkQ1AQAAAZE"]
[Wed Nov 12 00:13:15.584385 2025] [:error] [pid 47931:tid 47936] [client 192.178.4.101:50022] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNgmzWP7ptQ6Y-gz69LGAAAAUI"]
[Wed Nov 12 00:13:28.280112 2025] [:error] [pid 47860:tid 47907] [client 192.178.4.101:56598] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNgqKPe6bkmJWx80Cz8BAAAAFA"]
[Wed Nov 12 00:13:29.029062 2025] [:error] [pid 47931:tid 47950] [client 192.178.4.101:56908] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNgqTWP7ptQ6Y-gz69LKQAAAVA"]
[Wed Nov 12 00:13:37.122811 2025] [:error] [pid 47964:tid 47968] [client 192.178.4.101:54442] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNgsV6CQC3ebUS5pkQ1RAAAAYE"]
[Wed Nov 12 00:13:38.935466 2025] [:error] [pid 49628:tid 49638] [client 192.178.4.101:43657] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNgsr82AgnfnwL7V2ZwtwAAAIg"]
[Wed Nov 12 00:13:50.394728 2025] [:error] [pid 47964:tid 47983] [client 192.178.4.101:49915] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNgvl6CQC3ebUS5pkQ1fQAAAZA"]
[Wed Nov 12 00:13:52.562278 2025] [:error] [pid 49628:tid 49634] [client 192.178.4.101:46637] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNgwL82AgnfnwL7V2Zw2QAAAIQ"]
[Wed Nov 12 00:15:30.352388 2025] [:error] [pid 47964:tid 47970] [client 192.178.4.101:57051] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNhIl6CQC3ebUS5pkQ2HQAAAYM"]
[Wed Nov 12 00:15:31.961436 2025] [:error] [pid 47859:tid 47870] [client 192.178.4.101:52798] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNhI6RzLR7egYHK_4eloQAAAAY"]
[Wed Nov 12 00:15:40.806719 2025] [:error] [pid 47964:tid 47972] [client 192.178.4.101:39518] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNhLF6CQC3ebUS5pkQ2LAAAAYU"]
[Wed Nov 12 00:15:42.409538 2025] [:error] [pid 47859:tid 47883] [client 192.178.4.101:64163] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNhLqRzLR7egYHK_4eltAAAABM"]
[Wed Nov 12 00:16:17.409570 2025] [:error] [pid 47931:tid 47955] [client 192.178.4.101:64568] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNhUTWP7ptQ6Y-gz69MRgAAAVU"]
[Wed Nov 12 00:17:49.555799 2025] [:error] [pid 47964:tid 47976] [client 192.178.4.101:49110] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNhrV6CQC3ebUS5pkQ24gAAAYk"]
[Wed Nov 12 00:17:50.264889 2025] [:error] [pid 47964:tid 47987] [client 192.178.4.101:44172] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNhrl6CQC3ebUS5pkQ24wAAAZQ"]
[Wed Nov 12 00:18:26.292538 2025] [:error] [pid 47964:tid 47974] [client 192.178.4.101:45116] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNh0l6CQC3ebUS5pkQ3DwAAAYc"]
[Wed Nov 12 00:18:29.365902 2025] [:error] [pid 47859:tid 47876] [client 192.178.4.101:54256] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNh1aRzLR7egYHK_4emlgAAAAw"]
[Wed Nov 12 00:20:51.601051 2025] [:error] [pid 47860:tid 47915] [client 192.178.4.101:47793] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNiY6Pe6bkmJWx80Cz-WQAAAFg"]
[Wed Nov 12 00:20:53.087147 2025] [:error] [pid 47859:tid 47888] [client 192.178.4.101:48005] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNiZaRzLR7egYHK_4enQgAAABg"]
[Wed Nov 12 00:21:25.144452 2025] [:error] [pid 47931:tid 47934] [client 192.178.4.101:55518] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNihTWP7ptQ6Y-gz69N2wAAAUA"]
[Wed Nov 12 00:21:25.313385 2025] [:error] [pid 47964:tid 47988] [client 192.178.4.101:49561] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNihV6CQC3ebUS5pkQ4LAAAAZU"]
[Wed Nov 12 00:22:35.278300 2025] [:error] [pid 55206:tid 55218] [client 192.178.4.101:51032] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNiy-_aSLXgYkIZYTICHwAAAIo"]
[Wed Nov 12 00:22:44.323195 2025] [:error] [pid 54702:tid 55030] [client 192.178.4.101:59964] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNi1ICgou0IW-jKFfmFMAAAAZA"]
[Wed Nov 12 00:22:45.851667 2025] [:error] [pid 55206:tid 55224] [client 192.178.4.101:45955] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNi1e_aSLXgYkIZYTICOAAAAJA"]
[Wed Nov 12 00:22:53.326530 2025] [:error] [pid 54701:tid 55010] [client 192.178.4.101:36968] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNi3Rf-2zu56UfbUVKnLgAAAVg"]
[Wed Nov 12 00:22:54.146138 2025] [:error] [pid 54700:tid 54944] [client 192.178.4.101:47066] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNi3mB5AaOtkwsSKTr39wAAAEc"]
[Wed Nov 12 00:23:12.309229 2025] [:error] [pid 55206:tid 55228] [client 192.178.4.101:40601] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNi8O_aSLXgYkIZYTICdwAAAJQ"]
[Wed Nov 12 00:23:13.912076 2025] [:error] [pid 55206:tid 55218] [client 192.178.4.101:44036] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNi8e_aSLXgYkIZYTICewAAAIo"]
[Wed Nov 12 00:23:22.280338 2025] [:error] [pid 54702:tid 55032] [client 192.178.4.101:39185] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNi-oCgou0IW-jKFfmFegAAAZI"]
[Wed Nov 12 00:23:23.872621 2025] [:error] [pid 54701:tid 54989] [client 192.178.4.101:62527] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNi-xf-2zu56UfbUVKnawAAAUQ"]
[Wed Nov 12 00:24:30.100941 2025] [:error] [pid 54700:tid 54949] [client 192.178.4.101:57767] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNjPmB5AaOtkwsSKTr4kgAAAEw"]
[Wed Nov 12 00:24:41.207644 2025] [:error] [pid 55206:tid 55222] [client 192.178.4.101:35783] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNjSe_aSLXgYkIZYTIDXAAAAI4"]
[Wed Nov 12 00:24:42.079501 2025] [:error] [pid 54700:tid 54961] [client 192.178.4.101:45363] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNjSmB5AaOtkwsSKTr4qgAAAFg"]
[Wed Nov 12 00:24:54.033510 2025] [:error] [pid 54701:tid 54999] [client 192.178.4.101:57323] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNjVhf-2zu56UfbUVKoFAAAAU4"]
[Wed Nov 12 00:24:54.818273 2025] [:error] [pid 54702:tid 55038] [client 192.178.4.101:43945] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNjVoCgou0IW-jKFfmGAQAAAZg"]
[Wed Nov 12 00:25:02.228040 2025] [:error] [pid 54700:tid 54956] [client 192.178.4.101:39836] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNjXmB5AaOtkwsSKTr4xwAAAFM"]
[Wed Nov 12 00:25:25.044136 2025] [:error] [pid 54702:tid 55037] [client 192.178.4.101:46457] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNjdYCgou0IW-jKFfmGMAAAAZc"]
[Wed Nov 12 00:25:25.489434 2025] [:error] [pid 54700:tid 54957] [client 192.178.4.101:55613] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNjdWB5AaOtkwsSKTr46wAAAFQ"]
[Wed Nov 12 00:26:54.003110 2025] [:error] [pid 54700:tid 54942] [client 192.178.4.101:49105] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNjzmB5AaOtkwsSKTr5tQAAAEU"]
[Wed Nov 12 00:27:22.778036 2025] [:error] [pid 55206:tid 55210] [client 192.178.4.101:63676] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNj6u_aSLXgYkIZYTIE3AAAAII"]
[Wed Nov 12 00:27:42.832274 2025] [:error] [pid 55206:tid 55226] [client 192.178.4.101:35191] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNj_u_aSLXgYkIZYTIFIwAAAJI"]
[Wed Nov 12 00:27:43.030057 2025] [:error] [pid 54701:tid 55002] [client 192.178.4.101:63017] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNj_xf-2zu56UfbUVKp2QAAAVE"]
[Wed Nov 12 00:27:50.241621 2025] [:error] [pid 54702:tid 55016] [client 192.178.4.101:47853] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNkBoCgou0IW-jKFfmHkQAAAYI"]
[Wed Nov 12 00:27:51.975528 2025] [:error] [pid 55206:tid 55223] [client 192.178.4.101:39696] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNkB-_aSLXgYkIZYTIFRQAAAI8"]
[Wed Nov 12 00:29:16.512484 2025] [:error] [pid 55206:tid 55214] [client 192.178.4.101:36053] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNkXO_aSLXgYkIZYTIGHAAAAIY"]
[Wed Nov 12 00:29:29.620140 2025] [:error] [pid 55206:tid 55210] [client 192.178.4.101:56719] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNkae_aSLXgYkIZYTIGNAAAAII"]
[Wed Nov 12 00:29:31.361804 2025] [:error] [pid 55206:tid 55228] [client 192.178.4.101:38704] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNka-_aSLXgYkIZYTIGPAAAAJQ"]
[Wed Nov 12 00:29:44.082127 2025] [:error] [pid 54702:tid 55026] [client 192.178.4.101:56196] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNkeICgou0IW-jKFfmITQAAAYw"]
[Wed Nov 12 00:29:47.437020 2025] [:error] [pid 54701:tid 54998] [client 192.178.4.101:50901] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNkexf-2zu56UfbUVKq2QAAAU0"]
[Wed Nov 12 00:29:48.266497 2025] [:error] [pid 54701:tid 55008] [client 192.178.4.101:48499] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNkfBf-2zu56UfbUVKq2wAAAVY"]
[Wed Nov 12 00:29:57.987866 2025] [:error] [pid 54700:tid 54941] [client 192.178.4.101:37754] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNkhWB5AaOtkwsSKTr7ZAAAAEQ"]
[Wed Nov 12 00:29:59.885948 2025] [:error] [pid 54702:tid 55020] [client 192.178.4.101:42712] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNkh4Cgou0IW-jKFfmIYAAAAYY"]
[Wed Nov 12 00:30:10.675318 2025] [:error] [pid 54701:tid 54993] [client 192.178.4.101:63083] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNkkhf-2zu56UfbUVKq9AAAAUg"]
[Wed Nov 12 00:30:10.929926 2025] [:error] [pid 54700:tid 54960] [client 192.178.4.101:52669] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNkkmB5AaOtkwsSKTr7ewAAAFc"]
[Wed Nov 12 00:31:20.468610 2025] [:error] [pid 54702:tid 55020] [client 192.178.4.101:61880] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNk2ICgou0IW-jKFfmI8wAAAYY"]
[Wed Nov 12 00:31:21.381546 2025] [:error] [pid 55206:tid 55223] [client 192.178.4.101:63422] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNk2e_aSLXgYkIZYTIHJgAAAI8"]
[Wed Nov 12 00:31:33.898477 2025] [:error] [pid 54700:tid 54943] [client 192.178.4.101:36381] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNk5WB5AaOtkwsSKTr8DAAAAEY"]
[Wed Nov 12 00:31:36.371736 2025] [:error] [pid 54701:tid 55001] [client 192.178.4.101:49645] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNk6Bf-2zu56UfbUVKrowAAAVA"]
[Wed Nov 12 00:31:50.463850 2025] [:error] [pid 54700:tid 54961] [client 192.178.4.101:62012] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNk9mB5AaOtkwsSKTr8KgAAAFg"]
[Wed Nov 12 00:31:51.290285 2025] [:error] [pid 54702:tid 55024] [client 192.178.4.101:63453] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNk94Cgou0IW-jKFfmJSgAAAYo"]
[Wed Nov 12 00:32:00.033434 2025] [:error] [pid 55206:tid 55213] [client 192.178.4.101:50962] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNlAO_aSLXgYkIZYTIHjQAAAIU"]
[Wed Nov 12 00:32:00.912848 2025] [:error] [pid 55206:tid 55210] [client 192.178.4.101:48742] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNlAO_aSLXgYkIZYTIHkAAAAII"]
[Wed Nov 12 00:32:11.825398 2025] [:error] [pid 55206:tid 55230] [client 192.178.4.101:61524] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNlC-_aSLXgYkIZYTIH1wAAAJY"]
[Wed Nov 12 00:33:17.993720 2025] [:error] [pid 55206:tid 55232] [client 192.178.4.101:38480] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNlTe_aSLXgYkIZYTIIcwAAAJg"]
[Wed Nov 12 00:33:31.436008 2025] [:error] [pid 54700:tid 54944] [client 192.178.4.101:61529] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNlW2B5AaOtkwsSKTr80AAAAEc"]
[Wed Nov 12 00:33:32.288781 2025] [:error] [pid 55206:tid 55218] [client 192.178.4.101:59595] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNlXO_aSLXgYkIZYTIIowAAAIo"]
[Wed Nov 12 00:33:39.441218 2025] [:error] [pid 54702:tid 55016] [client 192.178.4.101:60528] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNlY4Cgou0IW-jKFfmJ4gAAAYI"]
[Wed Nov 12 00:33:40.158083 2025] [:error] [pid 54700:tid 54958] [client 192.178.4.101:63820] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNlZGB5AaOtkwsSKTr84QAAAFU"]
[Wed Nov 12 00:33:51.286617 2025] [:error] [pid 54702:tid 55015] [client 192.178.4.101:63843] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNlb4Cgou0IW-jKFfmJ-QAAAYE"]
[Wed Nov 12 00:33:52.862533 2025] [:error] [pid 55206:tid 55222] [client 192.178.4.101:36467] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNlcO_aSLXgYkIZYTII1wAAAI4"]
[Wed Nov 12 00:34:03.110959 2025] [:error] [pid 55206:tid 55226] [client 192.178.4.101:62765] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNle-_aSLXgYkIZYTII8wAAAJI"]
[Wed Nov 12 00:36:07.812766 2025] [:error] [pid 54702:tid 55016] [client 43.130.91.95:46588] [client 43.130.91.95] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.paramountbaldivis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.paramountbaldivis.com"] [uri "/"] [unique_id "aRNl94Cgou0IW-jKFfmK8AAAAYI"]
[Wed Nov 12 00:40:40.359498 2025] [:error] [pid 54702:tid 55031] [client 192.178.4.101:60146] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNnCICgou0IW-jKFfmMSQAAAZE"]
[Wed Nov 12 00:40:51.045703 2025] [:error] [pid 54700:tid 54950] [client 192.178.4.101:39390] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNnE2B5AaOtkwsSKTr_AgAAAE0"]
[Wed Nov 12 00:44:29.903416 2025] [:error] [pid 54700:tid 54937] [client 192.178.4.101:43278] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNn7WB5AaOtkwsSKTr_8gAAAEE"]
[Wed Nov 12 00:44:49.963483 2025] [:error] [pid 10618:tid 10639] [client 192.178.4.101:38794] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNoAdwQBPCH2K2NYdip4AAAABE"]
[Wed Nov 12 00:45:20.723766 2025] [:error] [pid 54700:tid 54955] [client 192.178.4.101:36674] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNoIGB5AaOtkwsSKToAPQAAAFI"]
[Wed Nov 12 00:47:43.345384 2025] [:error] [pid 10618:tid 10635] [client 192.178.4.101:51573] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNor9wQBPCH2K2NYdiriAAAAA0"]
[Wed Nov 12 00:47:48.767739 2025] [:error] [pid 55206:tid 55215] [client 192.178.4.101:40694] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNotO_aSLXgYkIZYTIO7AAAAIc"]
[Wed Nov 12 00:47:52.159841 2025] [:error] [pid 54700:tid 54958] [client 192.178.4.101:58688] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNouGB5AaOtkwsSKToBMAAAAFU"]
[Wed Nov 12 00:48:04.972132 2025] [:error] [pid 54701:tid 55006] [client 192.178.4.101:39136] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNoxBf-2zu56UfbUVKx5QAAAVQ"]
[Wed Nov 12 00:48:21.680995 2025] [:error] [pid 10618:tid 10623] [client 192.178.4.101:42315] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNo1dwQBPCH2K2NYdir8wAAAAE"]
[Wed Nov 12 00:48:24.638476 2025] [:error] [pid 55206:tid 55210] [client 192.178.4.101:63114] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNo2O_aSLXgYkIZYTIPFQAAAII"]
[Wed Nov 12 00:50:41.077591 2025] [:error] [pid 55206:tid 55224] [client 192.178.4.101:55616] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNpYe_aSLXgYkIZYTIQZAAAAJA"]
[Wed Nov 12 00:50:54.025977 2025] [:error] [pid 55206:tid 55229] [client 192.178.4.101:63428] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNpbu_aSLXgYkIZYTIQmwAAAJU"]
[Wed Nov 12 00:50:54.985098 2025] [:error] [pid 54701:tid 54995] [client 192.178.4.101:47609] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNpbhf-2zu56UfbUVKysAAAAUo"]
[Wed Nov 12 00:51:12.724577 2025] [:error] [pid 10618:tid 10637] [client 192.178.4.101:51879] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNpgNwQBPCH2K2NYdithgAAAA8"]
[Wed Nov 12 00:51:18.661478 2025] [:error] [pid 54700:tid 54937] [client 192.178.4.101:61399] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNphmB5AaOtkwsSKToCfgAAAEE"]
[Wed Nov 12 00:53:35.783665 2025] [:error] [pid 54702:tid 55027] [client 192.178.4.101:56810] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNqD4Cgou0IW-jKFfmRNwAAAY0"]
[Wed Nov 12 00:53:47.301910 2025] [:error] [pid 55206:tid 55220] [client 192.178.4.101:43864] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNqG-_aSLXgYkIZYTISRwAAAIw"]
[Wed Nov 12 00:53:54.966426 2025] [:error] [pid 54700:tid 54958] [client 192.178.4.101:57463] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNqImB5AaOtkwsSKToDiAAAAFU"]
[Wed Nov 12 00:54:03.388320 2025] [:error] [pid 54701:tid 55005] [client 192.178.4.101:60941] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNqKxf-2zu56UfbUVKz1QAAAVM"]
[Wed Nov 12 00:54:11.596388 2025] [:error] [pid 55206:tid 55209] [client 192.178.4.101:44011] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNqM-_aSLXgYkIZYTISiwAAAIE"]
[Wed Nov 12 00:54:15.650851 2025] [:error] [pid 54702:tid 55028] [client 192.178.4.101:56797] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNqN4Cgou0IW-jKFfmRbQAAAY4"]
[Wed Nov 12 00:55:46.517579 2025] [:error] [pid 54700:tid 54952] [client 192.178.4.101:55182] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNqkmB5AaOtkwsSKToEhQAAAE8"]
[Wed Nov 12 00:55:57.949232 2025] [:error] [pid 54702:tid 55020] [client 192.178.4.101:52930] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNqnYCgou0IW-jKFfmSIQAAAYY"]
[Wed Nov 12 00:56:14.605488 2025] [:error] [pid 55206:tid 55219] [client 192.178.4.101:51967] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNqru_aSLXgYkIZYTITzQAAAIs"]
[Wed Nov 12 00:56:19.749031 2025] [:error] [pid 54701:tid 54996] [client 192.178.4.101:60623] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNqsxf-2zu56UfbUVK0yAAAAUs"]
[Wed Nov 12 00:56:28.657247 2025] [:error] [pid 54702:tid 55036] [client 192.178.4.101:42249] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNqvICgou0IW-jKFfmSQgAAAZY"]
[Wed Nov 12 00:56:33.999826 2025] [:error] [pid 54702:tid 55034] [client 192.178.4.101:44451] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNqwYCgou0IW-jKFfmSTQAAAZQ"]
[Wed Nov 12 00:58:25.753767 2025] [:error] [pid 54700:tid 54944] [client 192.178.4.101:62154] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNrMWB5AaOtkwsSKToFlAAAAEc"]
[Wed Nov 12 00:58:33.566012 2025] [:error] [pid 55206:tid 55227] [client 192.178.4.101:61100] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNrOe_aSLXgYkIZYTIUkQAAAJM"]
[Wed Nov 12 00:58:40.595202 2025] [:error] [pid 54701:tid 55006] [client 192.178.4.101:58542] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNrQBf-2zu56UfbUVK1nQAAAVQ"]
[Wed Nov 12 00:58:45.196133 2025] [:error] [pid 54702:tid 55033] [client 192.178.4.101:61019] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNrRYCgou0IW-jKFfmTJQAAAZM"]
[Wed Nov 12 00:58:50.637948 2025] [:error] [pid 55206:tid 55222] [client 192.178.4.101:58770] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNrSu_aSLXgYkIZYTIUoQAAAI4"]
[Wed Nov 12 00:58:57.720897 2025] [:error] [pid 54701:tid 54990] [client 192.178.4.101:44431] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNrURf-2zu56UfbUVK1ugAAAUU"]
[Wed Nov 12 00:59:03.080701 2025] [:error] [pid 54701:tid 54996] [client 192.178.4.101:43687] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNrVxf-2zu56UfbUVK12gAAAUs"]
[Wed Nov 12 01:00:30.307959 2025] [:error] [pid 54702:tid 55022] [client 192.178.4.101:64619] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNrroCgou0IW-jKFfmTmAAAAYg"]
[Wed Nov 12 01:00:42.622786 2025] [:error] [pid 54700:tid 54941] [client 192.178.4.101:58584] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNrumB5AaOtkwsSKToGUQAAAEQ"]
[Wed Nov 12 01:00:47.592685 2025] [:error] [pid 54702:tid 55028] [client 192.178.4.101:60171] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNrv4Cgou0IW-jKFfmTpAAAAY4"]
[Wed Nov 12 01:00:55.234596 2025] [:error] [pid 54701:tid 55006] [client 192.178.4.101:63534] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNrxxf-2zu56UfbUVK2NAAAAVQ"]
[Wed Nov 12 01:00:58.685345 2025] [:error] [pid 27725:tid 27741] [client 192.178.4.101:50886] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNrygkyc7zt9UxDwPZ2NgAAAM0"]
[Wed Nov 12 01:03:16.123995 2025] [:error] [pid 54700:tid 54960] [client 192.178.4.101:55408] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNsVGB5AaOtkwsSKToHLgAAAFc"]
[Wed Nov 12 01:03:21.227212 2025] [:error] [pid 10618:tid 10629] [client 192.178.4.101:54130] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNsWdwQBPCH2K2NYdi0GgAAAAc"]
[Wed Nov 12 01:03:30.901270 2025] [:error] [pid 54701:tid 54987] [client 192.178.4.101:57163] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNsYhf-2zu56UfbUVK23wAAAUI"]
[Wed Nov 12 01:03:37.766958 2025] [:error] [pid 54701:tid 54990] [client 192.178.4.101:39959] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNsaRf-2zu56UfbUVK26AAAAUU"]
[Wed Nov 12 01:03:46.262646 2025] [:error] [pid 54700:tid 54954] [client 192.178.4.101:38772] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNscmB5AaOtkwsSKToHTwAAAFE"]
[Wed Nov 12 01:05:55.665053 2025] [:error] [pid 27725:tid 27750] [client 192.178.4.101:51698] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNs8wkyc7zt9UxDwPZ4KwAAANY"]
[Wed Nov 12 01:06:02.230339 2025] [:error] [pid 27725:tid 27744] [client 192.178.4.101:61335] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNs-gkyc7zt9UxDwPZ4NQAAANA"]
[Wed Nov 12 01:06:11.428350 2025] [:error] [pid 54702:tid 55019] [client 192.178.4.101:55942] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNtA4Cgou0IW-jKFfmU4wAAAYU"]
[Wed Nov 12 01:06:16.781939 2025] [:error] [pid 54702:tid 55034] [client 192.178.4.101:44671] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNtCICgou0IW-jKFfmU5wAAAZQ"]
[Wed Nov 12 01:06:20.855595 2025] [:error] [pid 54701:tid 55002] [client 192.178.4.101:54109] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNtDBf-2zu56UfbUVK3mgAAAVE"]
[Wed Nov 12 01:06:28.754825 2025] [:error] [pid 54701:tid 55001] [client 192.178.4.101:50831] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNtFBf-2zu56UfbUVK3qgAAAVA"]
[Wed Nov 12 01:06:35.406004 2025] [:error] [pid 54701:tid 55010] [client 192.178.4.101:62990] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNtGxf-2zu56UfbUVK3tgAAAVg"]
[Wed Nov 12 01:08:49.580029 2025] [:error] [pid 54700:tid 54941] [client 192.178.4.101:41724] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNtoWB5AaOtkwsSKToJCAAAAEQ"]
[Wed Nov 12 01:11:50.678375 2025] [:error] [pid 10618:tid 10626] [client 192.178.4.101:60399] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNuVtwQBPCH2K2NYdi2EwAAAAQ"]
[Wed Nov 12 01:12:32.502806 2025] [:error] [pid 54702:tid 55038] [client 192.178.4.101:37012] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNugICgou0IW-jKFfmW2QAAAZg"]
[Wed Nov 12 01:16:17.823048 2025] [:error] [pid 10618:tid 10646] [client 161.97.137.114:60239] [client 161.97.137.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 161.97.137.114, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRNvYdwQBPCH2K2NYdi3MQAAABg"]
[Wed Nov 12 01:18:45.875321 2025] [:error] [pid 27725:tid 27733] [client 192.178.4.101:50616] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNv9Qkyc7zt9UxDwPZ9fAAAAMU"]
[Wed Nov 12 01:18:51.362247 2025] [:error] [pid 54702:tid 55016] [client 192.178.4.101:62005] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNv-4Cgou0IW-jKFfmYagAAAYI"]
[Wed Nov 12 01:31:33.114017 2025] [:error] [pid 54702:tid 55021] [client 192.178.4.101:41519] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNy9YCgou0IW-jKFfmcQAAAAYc"]
[Wed Nov 12 01:31:40.706139 2025] [:error] [pid 10618:tid 10637] [client 192.178.4.101:45111] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNy_NwQBPCH2K2NYdi7vgAAAA8"]
[Wed Nov 12 01:34:20.678289 2025] [:error] [pid 54700:tid 54952] [client 192.178.4.101:40171] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNznGB5AaOtkwsSKToR8AAAAE8"]
[Wed Nov 12 01:34:26.890561 2025] [:error] [pid 54700:tid 54949] [client 192.178.4.101:39206] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNzomB5AaOtkwsSKToR9gAAAEw"]
[Wed Nov 12 01:34:37.100895 2025] [:error] [pid 55206:tid 55228] [client 192.178.4.101:63721] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNzre_aSLXgYkIZYTIfMAAAAJQ"]
[Wed Nov 12 01:34:47.141515 2025] [:error] [pid 10618:tid 10635] [client 192.178.4.101:44188] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNzt9wQBPCH2K2NYdi8kwAAAA0"]
[Wed Nov 12 01:34:57.646176 2025] [:error] [pid 54701:tid 55005] [client 192.178.4.101:35111] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRNzwRf-2zu56UfbUVK_TQAAAVM"]
[Wed Nov 12 02:14:20.645398 2025] [:error] [pid 54518:tid 54530] [client 187.188.79.71:20761] [client 187.188.79.71] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||paramountbaldivis.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "paramountbaldivis.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aRN8_KZo3QGSqi1oDHk_JwAAAQo"]
[Wed Nov 12 02:15:36.081032 2025] [:error] [pid 40746:tid 40794] [client 187.188.79.71:49933] [client 187.188.79.71] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 187.188.79.71, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aRN9SJ75CjGFTLdEMn77NwAAAFE"]
[Wed Nov 12 02:16:33.566013 2025] [:error] [pid 54518:tid 54530] [client 187.188.79.71:49477] [client 187.188.79.71] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 187.188.79.71, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aRN9gaZo3QGSqi1oDHlAPAAAAQo"]
[Wed Nov 12 02:29:02.708061 2025] [:error] [pid 40745:tid 40750] [client 161.97.137.114:62647] [client 161.97.137.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 161.97.137.114, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aROAbsdgIR-a_T0XcdAeEAAAAAA"]
[Wed Nov 12 03:40:43.256381 2025] [:error] [pid 37550:tid 37588] [client 161.97.137.114:56020] [client 161.97.137.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 161.97.137.114, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aROROyvFsd1PQUeibBc_xwAAAEc"]
[Wed Nov 12 04:21:54.511376 2025] [:error] [pid 32959:tid 32980] [client 213.209.143.137:55917] [client 213.209.143.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/excel-like-price-change-for-woocommerce-and-wp-e-commerce-light/readme.txt"] [unique_id "aROa4noyrq7OJfcFnDiVhAAAARE"]
[Wed Nov 12 04:22:04.342766 2025] [:error] [pid 32959:tid 32975] [client 213.209.143.137:57297] [client 213.209.143.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/wc-fields-factory/readme.txt"] [unique_id "aROa7Hoyrq7OJfcFnDiVmQAAAQw"]
[Wed Nov 12 04:22:04.841524 2025] [:error] [pid 57223:tid 57262] [client 213.209.143.137:51876] [client 213.209.143.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/wc-fields-factory/readme.txt"] [unique_id "aROa7BUU8_2aS__aG8Yu9wAAAEU"]
[Wed Nov 12 04:22:05.343034 2025] [:error] [pid 57224:tid 57298] [client 213.209.143.137:53462] [client 213.209.143.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/wc-fields-factory/readme.txt"] [unique_id "aROa7Rs7oZ7imwCSdAnobwAAAI4"]
[Wed Nov 12 04:22:33.816283 2025] [:error] [pid 32959:tid 32980] [client 213.209.143.137:54600] [client 213.209.143.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/baiduseo/readme.txt"] [unique_id "aRObCXoyrq7OJfcFnDiWFgAAARE"]
[Wed Nov 12 04:22:34.084994 2025] [:error] [pid 32959:tid 32984] [client 213.209.143.137:54774] [client 213.209.143.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/baiduseo/readme.txt"] [unique_id "aRObCnoyrq7OJfcFnDiWFwAAARU"]
[Wed Nov 12 04:22:34.590343 2025] [:error] [pid 32959:tid 32971] [client 213.209.143.137:57578] [client 213.209.143.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/baiduseo/readme.txt"] [unique_id "aRObCnoyrq7OJfcFnDiWGgAAAQg"]
[Wed Nov 12 04:22:35.112098 2025] [:error] [pid 32959:tid 32970] [client 213.209.143.137:59306] [client 213.209.143.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/baiduseo/readme.txt"] [unique_id "aRObC3oyrq7OJfcFnDiWHgAAAQc"]
[Wed Nov 12 04:27:28.842629 2025] [:error] [pid 57312:tid 57341] [client 37.140.223.248:42521] [client 37.140.223.248] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.248, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aROcMI0cuHgB17JK5qWi3wAAANg"]
[Wed Nov 12 04:52:49.531517 2025] [:error] [pid 57222:tid 57233] [client 161.97.137.114:51092] [client 161.97.137.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 161.97.137.114, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aROiIWGJazH5XCcA91cd3QAAAAY"]
[Wed Nov 12 05:54:36.225707 2025] [:error] [pid 57224:tid 57289] [client 37.140.223.237:47727] [client 37.140.223.237] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.237, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aROwnBs7oZ7imwCSdAkIAAAAAIU"]
[Wed Nov 12 06:05:12.658893 2025] [:error] [pid 57224:tid 57300] [client 161.97.137.114:61858] [client 161.97.137.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 161.97.137.114, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aROzGBs7oZ7imwCSdAkLeQAAAJA"]
[Wed Nov 12 06:56:30.644159 2025] [:error] [pid 57312:tid 57318] [client 85.248.226.9:49958] [client 85.248.226.9] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.248.226.9, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRO_Ho0cuHgB17JK5qXh3QAAAME"]
[Wed Nov 12 07:16:51.115994 2025] [:error] [pid 57222:tid 57228] [client 136.144.33.10:52005] [client 136.144.33.10] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.33.10, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRPD42GJazH5XCcA91dNfQAAAAE"]
[Wed Nov 12 07:17:20.845270 2025] [:error] [pid 57222:tid 57227] [client 161.97.137.114:60490] [client 161.97.137.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 161.97.137.114, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRPEAGGJazH5XCcA91dNmwAAAAA"]
[Wed Nov 12 07:30:43.601854 2025] [:error] [pid 57222:tid 57232] [client 37.140.223.226:46793] [client 37.140.223.226] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.226, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRPHI2GJazH5XCcA91dRVAAAAAU"]
[Wed Nov 12 07:44:49.627118 2025] [:error] [pid 32959:tid 32973] [client 136.144.33.11:20425] [client 136.144.33.11] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.33.11, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRPKcXoyrq7OJfcFnDgTGQAAAQo"]
2025/11/12 08:42:23 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=263097624 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=263097624", host: "paramountbaldivis.com"
2025/11/12 08:42:28 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=324804124 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=324804124", host: "paramountbaldivis.com"
2025/11/12 08:42:33 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=60049624 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=60049624", host: "paramountbaldivis.com"
2025/11/12 08:42:34 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=405782024 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=405782024", host: "paramountbaldivis.com"
2025/11/12 08:42:34 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=5529558 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=5529558", host: "paramountbaldivis.com"
2025/11/12 08:42:39 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=182746224 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=182746224", host: "paramountbaldivis.com"
2025/11/12 08:42:46 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=140554424 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=140554424", host: "paramountbaldivis.com"
2025/11/12 08:42:50 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=377207524 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=377207524", host: "paramountbaldivis.com"
2025/11/12 08:42:57 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=213615124 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=213615124", host: "paramountbaldivis.com"
2025/11/12 08:43:03 [error] 24798#24798: *181 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.103, server: paramountbaldivis.com, request: "GET /?p=460890724 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=460890724", host: "paramountbaldivis.com"
2025/11/12 08:43:08 [error] 24802#24802: *199 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.102, server: paramountbaldivis.com, request: "GET /?p=458171124 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=458171124", host: "paramountbaldivis.com"
2025/11/12 08:43:10 [error] 24802#24802: *199 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.102, server: paramountbaldivis.com, request: "GET /?p=490017224 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=490017224", host: "paramountbaldivis.com"
2025/11/12 08:43:13 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=185069324 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=185069324", host: "paramountbaldivis.com"
2025/11/12 08:43:22 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=302190124 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=302190124", host: "paramountbaldivis.com"
2025/11/12 08:43:29 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=297847924 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=297847924", host: "paramountbaldivis.com"
2025/11/12 08:43:34 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=220189524 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=220189524", host: "paramountbaldivis.com"
2025/11/12 08:43:40 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=285786824 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=285786824", host: "paramountbaldivis.com"
2025/11/12 08:43:45 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=394349724 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=394349724", host: "paramountbaldivis.com"
2025/11/12 08:43:50 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=107133624 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=107133624", host: "paramountbaldivis.com"
2025/11/12 08:43:51 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=412298524 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=412298524", host: "paramountbaldivis.com"
2025/11/12 08:43:54 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=63507724 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=63507724", host: "paramountbaldivis.com"
2025/11/12 08:43:59 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=416706924 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=416706924", host: "paramountbaldivis.com"
2025/11/12 08:43:59 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=492226524 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=492226524", host: "paramountbaldivis.com"
2025/11/12 08:44:06 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=451179524 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=451179524", host: "paramountbaldivis.com"
2025/11/12 08:44:11 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=315188324 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=315188324", host: "paramountbaldivis.com"
2025/11/12 08:44:15 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=498009124 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=498009124", host: "paramountbaldivis.com"
2025/11/12 08:44:19 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=145431524 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=145431524", host: "paramountbaldivis.com"
2025/11/12 08:44:23 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=322089624 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=322089624", host: "paramountbaldivis.com"
2025/11/12 08:44:28 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=290016824 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=290016824", host: "paramountbaldivis.com"
2025/11/12 08:44:30 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=283556824 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=283556824", host: "paramountbaldivis.com"
2025/11/12 08:44:35 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=97004424 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=97004424", host: "paramountbaldivis.com"
2025/11/12 08:44:40 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=50224424 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=50224424", host: "paramountbaldivis.com"
2025/11/12 08:44:47 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=88280324 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=88280324", host: "paramountbaldivis.com"
2025/11/12 08:44:52 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=201452224 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=201452224", host: "paramountbaldivis.com"
2025/11/12 08:44:53 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=300218224 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=300218224", host: "paramountbaldivis.com"
2025/11/12 08:44:59 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=169827524 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=169827524", host: "paramountbaldivis.com"
2025/11/12 08:45:04 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=53466424 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=53466424", host: "paramountbaldivis.com"
2025/11/12 08:45:10 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=231721924 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=231721924", host: "paramountbaldivis.com"
2025/11/12 08:45:14 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=316827224 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=316827224", host: "paramountbaldivis.com"
2025/11/12 08:45:15 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=90371124 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=90371124", host: "paramountbaldivis.com"
2025/11/12 08:45:19 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=455009124 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=455009124", host: "paramountbaldivis.com"
2025/11/12 08:45:24 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=237506824 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=237506824", host: "paramountbaldivis.com"
2025/11/12 08:45:30 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=270154724 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=270154724", host: "paramountbaldivis.com"
2025/11/12 08:45:31 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=125922224 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=125922224", host: "paramountbaldivis.com"
2025/11/12 08:45:34 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=91040624 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=91040624", host: "paramountbaldivis.com"
2025/11/12 08:45:41 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=397177924 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=397177924", host: "paramountbaldivis.com"
2025/11/12 08:45:46 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=34842524 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=34842524", host: "paramountbaldivis.com"
2025/11/12 08:45:48 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=151535124 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=151535124", host: "paramountbaldivis.com"
2025/11/12 08:45:55 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=388253424 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=388253424", host: "paramountbaldivis.com"
2025/11/12 08:46:16 [error] 24796#24796: *1165 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.103, server: paramountbaldivis.com, request: "GET /?p=88941724 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=88941724", host: "paramountbaldivis.com"
2025/11/12 08:46:24 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=7691324 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=7691324", host: "paramountbaldivis.com"
2025/11/12 08:46:37 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=114721824 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=114721824", host: "paramountbaldivis.com"
2025/11/12 08:46:41 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=319966124 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=319966124", host: "paramountbaldivis.com"
2025/11/12 08:46:53 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=130253424 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=130253424", host: "paramountbaldivis.com"
2025/11/12 08:47:03 [error] 24796#24796: *1165 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.103, server: paramountbaldivis.com, request: "GET /?p=188071624 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=188071624", host: "paramountbaldivis.com"
2025/11/12 08:47:17 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=159680824 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=159680824", host: "paramountbaldivis.com"
2025/11/12 08:47:23 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=303430924 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=303430924", host: "paramountbaldivis.com"
2025/11/12 08:47:33 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=221086524 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=221086524", host: "paramountbaldivis.com"
2025/11/12 08:47:45 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=216816824 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=216816824", host: "paramountbaldivis.com"
2025/11/12 08:47:55 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=233106524 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=233106524", host: "paramountbaldivis.com"
2025/11/12 08:48:01 [error] 24796#24796: *1165 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.103, server: paramountbaldivis.com, request: "GET /?p=209028724 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=209028724", host: "paramountbaldivis.com"
2025/11/12 08:48:10 [error] 24801#24801: *1595 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.102, server: paramountbaldivis.com, request: "GET /?p=129846224 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=129846224", host: "paramountbaldivis.com"
2025/11/12 08:48:17 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=447361524 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=447361524", host: "paramountbaldivis.com"
2025/11/12 08:48:25 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=203812924 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=203812924", host: "paramountbaldivis.com"
2025/11/12 08:48:33 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=151115224 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=151115224", host: "paramountbaldivis.com"
2025/11/12 08:48:41 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=94729324 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=94729324", host: "paramountbaldivis.com"
2025/11/12 08:48:49 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=162523624 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=162523624", host: "paramountbaldivis.com"
2025/11/12 08:48:58 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=37275924 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=37275924", host: "paramountbaldivis.com"
2025/11/12 08:49:06 [error] 24799#24799: *1826 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.103, server: paramountbaldivis.com, request: "GET /?p=458151324 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=458151324", host: "paramountbaldivis.com"
2025/11/12 08:49:14 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=381576124 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=381576124", host: "paramountbaldivis.com"
2025/11/12 08:49:20 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=506413724 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=506413724", host: "paramountbaldivis.com"
2025/11/12 08:49:30 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=437667824 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=437667824", host: "paramountbaldivis.com"
2025/11/12 08:49:36 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=16248824 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=16248824", host: "paramountbaldivis.com"
2025/11/12 08:49:46 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=64941224 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=64941224", host: "paramountbaldivis.com"
2025/11/12 08:49:54 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=245751324 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=245751324", host: "paramountbaldivis.com"
2025/11/12 08:49:56 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=66577224 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=66577224", host: "paramountbaldivis.com"
2025/11/12 08:50:04 [error] 24799#24799: *1826 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.103, server: paramountbaldivis.com, request: "GET /?p=246828124 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=246828124", host: "paramountbaldivis.com"
2025/11/12 08:50:12 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=370406424 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=370406424", host: "paramountbaldivis.com"
2025/11/12 08:50:20 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=326486824 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=326486824", host: "paramountbaldivis.com"
2025/11/12 08:50:28 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=460336824 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=460336824", host: "paramountbaldivis.com"
2025/11/12 08:50:36 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=316752524 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=316752524", host: "paramountbaldivis.com"
2025/11/12 08:50:44 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=301596924 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=301596924", host: "paramountbaldivis.com"
2025/11/12 08:50:52 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=51457924 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=51457924", host: "paramountbaldivis.com"
2025/11/12 08:51:01 [error] 24797#24797: *2278 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.102, server: paramountbaldivis.com, request: "GET /?p=20078424 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=20078424", host: "paramountbaldivis.com"
2025/11/12 08:51:08 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=215399424 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=215399424", host: "paramountbaldivis.com"
2025/11/12 08:51:14 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=302679824 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=302679824", host: "paramountbaldivis.com"
2025/11/12 08:51:24 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=423393624 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=423393624", host: "paramountbaldivis.com"
2025/11/12 08:51:30 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=6300224 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=6300224", host: "paramountbaldivis.com"
2025/11/12 08:51:38 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=25513124 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=25513124", host: "paramountbaldivis.com"
2025/11/12 08:51:46 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=36189724 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=36189724", host: "paramountbaldivis.com"
2025/11/12 08:51:54 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=421010824 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=421010824", host: "paramountbaldivis.com"
2025/11/12 08:52:02 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=214437024 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=214437024", host: "paramountbaldivis.com"
2025/11/12 08:52:11 [error] 24800#24800: *2614 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.102, server: paramountbaldivis.com, request: "GET /?p=145048524 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=145048524", host: "paramountbaldivis.com"
2025/11/12 08:52:18 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=495303224 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=495303224", host: "paramountbaldivis.com"
2025/11/12 08:52:26 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=333567024 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=333567024", host: "paramountbaldivis.com"
2025/11/12 08:52:34 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=414895624 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=414895624", host: "paramountbaldivis.com"
2025/11/12 08:52:42 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=252010424 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=252010424", host: "paramountbaldivis.com"
2025/11/12 08:52:48 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=465578824 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=465578824", host: "paramountbaldivis.com"
2025/11/12 08:52:58 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=223413724 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=223413724", host: "paramountbaldivis.com"
2025/11/12 08:53:04 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=237357224 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=237357224", host: "paramountbaldivis.com"
2025/11/12 08:53:15 [error] 24802#24802: *2928 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.102, server: paramountbaldivis.com, request: "GET /?p=91793224 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=91793224", host: "paramountbaldivis.com"
2025/11/12 08:53:20 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=503985524 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=503985524", host: "paramountbaldivis.com"
2025/11/12 08:53:28 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=735724 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=735724", host: "paramountbaldivis.com"
2025/11/12 08:53:36 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=458450124 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=458450124", host: "paramountbaldivis.com"
2025/11/12 08:53:44 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=445146324 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=445146324", host: "paramountbaldivis.com"
2025/11/12 08:53:52 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=474644924 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=474644924", host: "paramountbaldivis.com"
2025/11/12 08:54:00 [error] 24802#24802: *2928 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.102, server: paramountbaldivis.com, request: "GET /?p=295060324 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=295060324", host: "paramountbaldivis.com"
2025/11/12 08:54:08 [error] 24802#24802: *2928 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.102, server: paramountbaldivis.com, request: "GET /?p=267841824 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=267841824", host: "paramountbaldivis.com"
2025/11/12 08:54:16 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=89229424 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=89229424", host: "paramountbaldivis.com"
2025/11/12 08:54:24 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=63446224 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=63446224", host: "paramountbaldivis.com"
2025/11/12 08:54:32 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=490479724 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=490479724", host: "paramountbaldivis.com"
2025/11/12 08:54:40 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=31903824 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=31903824", host: "paramountbaldivis.com"
2025/11/12 08:54:50 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=259748224 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=259748224", host: "paramountbaldivis.com"
2025/11/12 08:54:56 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=13102424 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=13102424", host: "paramountbaldivis.com"
2025/11/12 08:55:05 [error] 24800#24800: *3347 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.103, server: paramountbaldivis.com, request: "GET /?p=21026724 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=21026724", host: "paramountbaldivis.com"
2025/11/12 08:55:12 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=482374824 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=482374824", host: "paramountbaldivis.com"
2025/11/12 08:55:20 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=89640024 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=89640024", host: "paramountbaldivis.com"
2025/11/12 08:55:28 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=405652024 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=405652024", host: "paramountbaldivis.com"
2025/11/12 08:55:36 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=246018824 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=246018824", host: "paramountbaldivis.com"
2025/11/12 08:55:42 [error] 24792#24792: *3503 connect() failed (111: Connection refused) while connecting to upstream, client: 37.140.223.227, server: paramountbaldivis.com, request: "POST /wp-login.php HTTP/1.1", upstream: "http://103.4.122.14:8181/wp-login.php", host: "paramountbaldivis.com"
2025/11/12 08:55:45 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=303532324 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=303532324", host: "paramountbaldivis.com"
2025/11/12 08:55:54 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=147024824 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=147024824", host: "paramountbaldivis.com"
2025/11/12 08:56:03 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=85499324 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=85499324", host: "paramountbaldivis.com"
2025/11/12 08:56:12 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=340309824 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=340309824", host: "paramountbaldivis.com"
2025/11/12 08:56:18 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=370406024 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=370406024", host: "paramountbaldivis.com"
2025/11/12 08:56:28 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=431613924 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=431613924", host: "paramountbaldivis.com"
2025/11/12 08:56:34 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=464897724 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=464897724", host: "paramountbaldivis.com"
2025/11/12 08:56:36 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=179391724 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=179391724", host: "paramountbaldivis.com"
2025/11/12 08:56:44 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=109005224 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=109005224", host: "paramountbaldivis.com"
2025/11/12 08:56:50 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=120994824 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=120994824", host: "paramountbaldivis.com"
2025/11/12 08:56:58 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=73746224 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=73746224", host: "paramountbaldivis.com"
2025/11/12 08:57:06 [error] 24803#24803: *4703 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.103, server: paramountbaldivis.com, request: "GET /?p=504984224 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=504984224", host: "paramountbaldivis.com"
2025/11/12 08:57:14 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=212142424 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=212142424", host: "paramountbaldivis.com"
2025/11/12 08:57:22 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=8792724 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=8792724", host: "paramountbaldivis.com"
2025/11/12 08:57:30 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=464947924 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=464947924", host: "paramountbaldivis.com"
2025/11/12 08:57:38 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=349516024 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=349516024", host: "paramountbaldivis.com"
2025/11/12 08:57:46 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=44877324 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=44877324", host: "paramountbaldivis.com"
2025/11/12 08:57:54 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=272253824 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=272253824", host: "paramountbaldivis.com"
2025/11/12 08:58:02 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=247703424 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=247703424", host: "paramountbaldivis.com"
2025/11/12 08:58:08 [error] 24803#24803: *6227 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.102, server: paramountbaldivis.com, request: "GET /?p=299711424 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=299711424", host: "paramountbaldivis.com"
2025/11/12 08:58:18 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=148549224 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=148549224", host: "paramountbaldivis.com"
2025/11/12 08:58:24 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=116557624 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=116557624", host: "paramountbaldivis.com"
2025/11/12 08:58:34 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=326830824 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=326830824", host: "paramountbaldivis.com"
2025/11/12 08:58:40 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=343086924 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=343086924", host: "paramountbaldivis.com"
2025/11/12 08:58:48 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=209293424 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=209293424", host: "paramountbaldivis.com"
2025/11/12 08:58:56 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=364737024 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=364737024", host: "paramountbaldivis.com"
2025/11/12 08:59:04 [error] 24803#24803: *6227 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.102, server: paramountbaldivis.com, request: "GET /?p=127527524 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=127527524", host: "paramountbaldivis.com"
2025/11/12 08:59:12 [error] 24803#24803: *6227 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.102, server: paramountbaldivis.com, request: "GET /?p=144045924 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=144045924", host: "paramountbaldivis.com"
2025/11/12 08:59:20 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=7955324 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=7955324", host: "paramountbaldivis.com"
2025/11/12 08:59:28 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=283421724 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=283421724", host: "paramountbaldivis.com"
2025/11/12 08:59:36 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=145123924 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=145123924", host: "paramountbaldivis.com"
2025/11/12 08:59:44 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=59251024 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=59251024", host: "paramountbaldivis.com"
2025/11/12 08:59:52 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=348157724 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=348157724", host: "paramountbaldivis.com"
2025/11/12 08:59:58 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=97320924 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=97320924", host: "paramountbaldivis.com"
2025/11/12 09:00:08 [error] 24803#24803: *6227 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.102, server: paramountbaldivis.com, request: "GET /?p=228430524 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=228430524", host: "paramountbaldivis.com"
2025/11/12 09:00:14 [error] 24803#24803: *6227 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.102, server: paramountbaldivis.com, request: "GET /?p=7435524 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=7435524", host: "paramountbaldivis.com"
2025/11/12 09:00:22 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=506539724 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=506539724", host: "paramountbaldivis.com"
2025/11/12 09:00:30 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=282970924 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=282970924", host: "paramountbaldivis.com"
2025/11/12 09:00:38 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=222242424 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=222242424", host: "paramountbaldivis.com"
2025/11/12 09:00:46 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=51969424 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=51969424", host: "paramountbaldivis.com"
2025/11/12 09:00:54 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=436438724 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=436438724", host: "paramountbaldivis.com"
2025/11/12 09:01:03 [error] 24798#24798: *8083 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.103, server: paramountbaldivis.com, request: "GET /?p=18546324 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=18546324", host: "paramountbaldivis.com"
2025/11/12 09:01:10 [error] 24803#24803: *6227 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.102, server: paramountbaldivis.com, request: "GET /?p=253042724 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=253042724", host: "paramountbaldivis.com"
2025/11/12 09:01:18 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=387727724 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=387727724", host: "paramountbaldivis.com"
2025/11/12 09:01:26 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=494861224 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=494861224", host: "paramountbaldivis.com"
2025/11/12 09:01:32 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=336941724 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=336941724", host: "paramountbaldivis.com"
2025/11/12 09:01:36 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=341098024 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=341098024", host: "paramountbaldivis.com"
2025/11/12 09:01:42 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=255152624 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=255152624", host: "paramountbaldivis.com"
2025/11/12 09:01:48 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=304704324 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=304704324", host: "paramountbaldivis.com"
2025/11/12 09:01:58 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=340295924 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=340295924", host: "paramountbaldivis.com"
2025/11/12 09:02:04 [error] 24803#24803: *6227 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.102, server: paramountbaldivis.com, request: "GET /?p=306359324 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=306359324", host: "paramountbaldivis.com"
2025/11/12 09:02:12 [error] 24803#24803: *6227 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.102, server: paramountbaldivis.com, request: "GET /?p=117221524 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=117221524", host: "paramountbaldivis.com"
2025/11/12 09:02:20 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=365729024 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=365729024", host: "paramountbaldivis.com"
2025/11/12 09:02:28 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=309726924 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=309726924", host: "paramountbaldivis.com"
2025/11/12 09:02:36 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=400593024 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=400593024", host: "paramountbaldivis.com"
2025/11/12 09:02:44 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=121110724 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=121110724", host: "paramountbaldivis.com"
2025/11/12 09:02:52 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=441658724 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=441658724", host: "paramountbaldivis.com"
2025/11/12 09:03:00 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=423313524 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=423313524", host: "paramountbaldivis.com"
2025/11/12 09:03:08 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=419475724 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=419475724", host: "paramountbaldivis.com"
2025/11/12 09:03:22 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=384732424 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=384732424", host: "paramountbaldivis.com"
2025/11/12 09:03:38 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=354389124 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=354389124", host: "paramountbaldivis.com"
2025/11/12 09:03:46 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=40308124 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=40308124", host: "paramountbaldivis.com"
2025/11/12 09:03:54 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=129483424 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=129483424", host: "paramountbaldivis.com"
2025/11/12 09:04:03 [error] 24800#24800: *9109 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.103, server: paramountbaldivis.com, request: "GET /?p=460243424 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=460243424", host: "paramountbaldivis.com"
2025/11/12 09:04:11 [error] 24795#24795: *9156 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.102, server: paramountbaldivis.com, request: "GET /?p=89198224 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=89198224", host: "paramountbaldivis.com"
2025/11/12 09:04:18 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=26437824 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=26437824", host: "paramountbaldivis.com"
2025/11/12 09:04:26 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=357256624 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=357256624", host: "paramountbaldivis.com"
2025/11/12 09:04:34 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=34905124 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=34905124", host: "paramountbaldivis.com"
2025/11/12 09:04:42 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=274978024 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=274978024", host: "paramountbaldivis.com"
2025/11/12 09:04:50 [error] 24804#24804: *1 connect() failed (111: Connection refused) while connecting to upstream, client: 192.178.4.101, server: paramountbaldivis.com, request: "GET /?p=291608324 HTTP/1.1", upstream: "http://103.4.122.14:8181/?p=291608324", host: "paramountbaldivis.com"
[Wed Nov 12 09:27:41.980276 2025] [:error] [pid 41830:tid 41915] [client 192.178.4.101:57195] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRPijdqZnx4EJABV9sTaGwAAAJc"]
[Wed Nov 12 09:28:14.850137 2025] [:error] [pid 42109:tid 42134] [client 192.178.4.101:60923] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRPirkSVaAu1Gvn5umFNCgAAARc"]
[Wed Nov 12 09:31:45.640836 2025] [:error] [pid 41829:tid 41891] [client 192.178.4.101:35363] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRPjgUUtUz3Zf1wIC3wj3QAAAFQ"]
[Wed Nov 12 09:31:58.603076 2025] [:error] [pid 41830:tid 41900] [client 192.178.4.101:36413] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRPjjtqZnx4EJABV9sTbTgAAAIg"]
[Wed Nov 12 09:41:57.910929 2025] [:error] [pid 41920:tid 41924] [client 37.140.223.234:28257] [client 37.140.223.234] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.234, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRPl5eXWVOMJCZeU4HGKIAAAAMI"]
[Wed Nov 12 09:42:13.319328 2025] [:error] [pid 41829:tid 41872] [client 192.178.4.101:52552] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRPl9UUtUz3Zf1wIC3wnpAAAAEc"]
[Wed Nov 12 09:42:18.353810 2025] [:error] [pid 41920:tid 41944] [client 192.178.4.101:51014] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRPl-uXWVOMJCZeU4HGKQgAAANY"]
[Wed Nov 12 09:42:30.887611 2025] [:error] [pid 41920:tid 41939] [client 192.178.4.101:40653] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRPmBuXWVOMJCZeU4HGKawAAANE"]
[Wed Nov 12 09:42:36.293407 2025] [:error] [pid 41829:tid 41866] [client 192.178.4.101:65269] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRPmDEUtUz3Zf1wIC3wnyQAAAEE"]
[Wed Nov 12 09:42:49.442939 2025] [:error] [pid 42109:tid 42134] [client 192.178.4.101:53749] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRPmGUSVaAu1Gvn5umFXQQAAARc"]
[Wed Nov 12 09:42:53.338385 2025] [:error] [pid 41920:tid 41930] [client 192.178.4.101:62461] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRPmHeXWVOMJCZeU4HGKkwAAAMg"]
[Wed Nov 12 09:46:18.759857 2025] [:error] [pid 41830:tid 41915] [client 192.178.4.101:47000] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRPm6tqZnx4EJABV9sThcAAAAJc"]
[Wed Nov 12 09:46:30.289701 2025] [:error] [pid 41830:tid 41890] [client 192.178.4.101:46804] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRPm9tqZnx4EJABV9sThewAAAIQ"]
[Wed Nov 12 09:46:47.134904 2025] [:error] [pid 41829:tid 41880] [client 192.178.4.101:35622] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRPnB0UtUz3Zf1wIC3wptQAAAE4"]
[Wed Nov 12 09:46:56.622708 2025] [:error] [pid 42109:tid 42112] [client 192.178.4.101:55645] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRPnEESVaAu1Gvn5umFZqgAAAQE"]
[Wed Nov 12 09:49:43.951737 2025] [:error] [pid 41828:tid 41839] [client 192.178.4.101:59009] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRPntyT41F5kJ-YvW6wqTAAAAAE"]
[Wed Nov 12 09:49:58.095296 2025] [:error] [pid 42109:tid 42134] [client 192.178.4.101:63461] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRPnxkSVaAu1Gvn5umFbAgAAARc"]
[Wed Nov 12 09:54:22.206237 2025] [:error] [pid 41830:tid 41894] [client 192.178.4.101:35694] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRPoztqZnx4EJABV9sTk9wAAAIY"]
[Wed Nov 12 09:54:32.256166 2025] [:error] [pid 41920:tid 41936] [client 192.178.4.101:44480] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRPo2OXWVOMJCZeU4HGQBwAAAM4"]
[Wed Nov 12 09:55:12.061906 2025] [:error] [pid 41829:tid 41865] [client 37.140.223.232:54827] [client 37.140.223.232] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.232, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRPpAEUtUz3Zf1wIC3wsnwAAAEA"]
[Wed Nov 12 09:57:44.210167 2025] [:error] [pid 60180:tid 60193] [client 192.178.4.101:36090] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRPpmFhgd7ccS8EZg1qQWAAAAUs"]
[Wed Nov 12 09:57:55.886660 2025] [:error] [pid 60096:tid 60136] [client 192.178.4.101:46586] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRPpozmzkhCvvk8DXOwBTQAAAIo"]
[Wed Nov 12 09:58:26.096221 2025] [:error] [pid 60097:tid 60149] [client 192.178.4.101:48021] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRPpwsdT5oio_TbWpi_WlQAAAMM"]
[Wed Nov 12 10:01:18.133335 2025] [:error] [pid 60180:tid 60199] [client 192.178.4.101:54529] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRPqblhgd7ccS8EZg1qTXwAAAVE"]
[Wed Nov 12 10:01:23.881750 2025] [:error] [pid 60405:tid 60430] [client 192.178.4.101:35306] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRPqc3MGv_mlVi6mf5pCcQAAABY"]
[Wed Nov 12 10:01:33.683216 2025] [:error] [pid 60095:tid 60123] [client 192.178.4.101:49783] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRPqfXlw2elroagFF1qeiwAAAFg"]
[Wed Nov 12 10:01:47.021958 2025] [:error] [pid 60096:tid 60136] [client 192.178.4.101:36209] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRPqizmzkhCvvk8DXOwDVAAAAIo"]
[Wed Nov 12 10:01:52.833529 2025] [:error] [pid 60096:tid 60156] [client 192.178.4.101:58845] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRPqkDmzkhCvvk8DXOwDXAAAAJY"]
[Wed Nov 12 10:01:59.528457 2025] [:error] [pid 60096:tid 60138] [client 192.178.4.101:48422] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRPqlzmzkhCvvk8DXOwDbQAAAIw"]
[Wed Nov 12 10:06:00.163891 2025] [:error] [pid 60095:tid 60099] [client 192.178.4.101:40396] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRPriHlw2elroagFF1qgRAAAAEA"]
[Wed Nov 12 10:06:08.675832 2025] [:error] [pid 60180:tid 60188] [client 192.178.4.101:39661] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRPrkFhgd7ccS8EZg1qWrAAAAUY"]
[Wed Nov 12 10:06:19.452569 2025] [:error] [pid 60180:tid 60205] [client 192.178.4.101:48290] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRPrm1hgd7ccS8EZg1qWuAAAAVc"]
[Wed Nov 12 10:06:26.772839 2025] [:error] [pid 60096:tid 60131] [client 192.178.4.101:61660] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRProjmzkhCvvk8DXOwFowAAAIU"]
[Wed Nov 12 10:09:35.933943 2025] [:error] [pid 60096:tid 60153] [client 37.140.223.236:21935] [client 37.140.223.236] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.236, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRPsXzmzkhCvvk8DXOwHHQAAAJQ"]
[Wed Nov 12 10:12:46.989258 2025] [:error] [pid 60180:tid 60192] [client 192.178.4.101:52739] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRPtHlhgd7ccS8EZg1qaJAAAAUo"]
[Wed Nov 12 10:12:58.261348 2025] [:error] [pid 60097:tid 60174] [client 192.178.4.101:38277] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRPtKsdT5oio_TbWpi_csQAAANU"]
[Wed Nov 12 10:13:04.861226 2025] [:error] [pid 60095:tid 60123] [client 192.178.4.101:38580] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRPtMHlw2elroagFF1qiqwAAAFg"]
[Wed Nov 12 10:13:25.563984 2025] [:error] [pid 60097:tid 60168] [client 192.178.4.101:63099] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRPtRcdT5oio_TbWpi_c5QAAAM8"]
[Wed Nov 12 10:13:32.119799 2025] [:error] [pid 60180:tid 60192] [client 192.178.4.101:41884] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRPtTFhgd7ccS8EZg1qagwAAAUo"]
[Wed Nov 12 10:22:55.518456 2025] [:error] [pid 60405:tid 60408] [client 192.178.4.101:52525] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRPvf3MGv_mlVi6mf5pO3gAAAAA"]
[Wed Nov 12 10:24:03.935354 2025] [:error] [pid 60097:tid 60177] [client 37.140.223.228:36611] [client 37.140.223.228] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.228, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRPvw8dT5oio_TbWpi_hWwAAANg"]
[Wed Nov 12 10:37:55.770320 2025] [:error] [pid 60180:tid 60188] [client 37.140.223.220:27137] [client 37.140.223.220] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.220, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRPzA1hgd7ccS8EZg1qkAgAAAUY"]
[Wed Nov 12 10:52:09.130528 2025] [:error] [pid 60096:tid 60148] [client 37.140.223.247:39131] [client 37.140.223.247] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.247, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRP2WTmzkhCvvk8DXOwXcQAAAJI"]
[Wed Nov 12 11:06:58.527360 2025] [:error] [pid 60096:tid 60135] [client 37.140.223.240:49417] [client 37.140.223.240] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.240, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRP50jmzkhCvvk8DXOwbvAAAAIk"]
[Wed Nov 12 11:16:29.138248 2025] [:error] [pid 12744:tid 12767] [client 46.105.230.99:35596] [client 46.105.230.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 46.105.230.99, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRP8DZ1cp_ouUvkFj0WQEAAAARM"]
[Wed Nov 12 11:21:12.594759 2025] [:error] [pid 12744:tid 12768] [client 172.245.102.84:59823] [client 172.245.102.84] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.245.102.84, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRP9KJ1cp_ouUvkFj0WR5QAAARQ"]
[Wed Nov 12 11:35:36.715420 2025] [:error] [pid 60180:tid 60199] [client 192.178.4.101:65076] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRQAiFhgd7ccS8EZg1q35wAAAVE"]
[Wed Nov 12 11:35:41.834677 2025] [:error] [pid 60097:tid 60170] [client 37.140.223.247:49701] [client 37.140.223.247] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.247, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRQAjcdT5oio_TbWpi_5TQAAANE"]
[Wed Nov 12 11:35:44.073783 2025] [:error] [pid 12744:tid 12757] [client 192.178.4.101:45147] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRQAkJ1cp_ouUvkFj0Wa4gAAAQk"]
[Wed Nov 12 11:49:14.249357 2025] [:error] [pid 60097:tid 60162] [client 37.140.223.232:21121] [client 37.140.223.232] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.232, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRQDusdT5oio_TbWpi_8rQAAAMk"]
[Wed Nov 12 12:03:00.592984 2025] [:error] [pid 12744:tid 12760] [client 37.140.223.251:37671] [client 37.140.223.251] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.251, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRQG9J1cp_ouUvkFj0WqWQAAAQw"]
[Wed Nov 12 12:14:46.836778 2025] [:error] [pid 60096:tid 60129] [client 178.18.247.115:51202] [client 178.18.247.115] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 178.18.247.115, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aRQJtjmzkhCvvk8DXOwyJgAAAIM"], referer: binance.com
[Wed Nov 12 12:17:19.949034 2025] [:error] [pid 12744:tid 12757] [client 136.144.33.11:41031] [client 136.144.33.11] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.33.11, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRQKT51cp_ouUvkFj0WxzAAAAQk"]
[Wed Nov 12 12:22:08.715595 2025] [:error] [pid 60096:tid 60134] [client 173.231.60.2:56186] [client 173.231.60.2] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.231.60.2, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRQLcDmzkhCvvk8DXOw0FgAAAIg"]
[Wed Nov 12 12:31:43.210246 2025] [:error] [pid 12744:tid 12771] [client 37.140.223.231:49191] [client 37.140.223.231] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.231, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRQNr51cp_ouUvkFj0W5fQAAARc"]
[Wed Nov 12 12:46:29.433278 2025] [:error] [pid 60097:tid 60162] [client 136.144.33.42:25373] [client 136.144.33.42] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.33.42, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRQRJcdT5oio_TbWpi8REwAAAMk"]
[Wed Nov 12 13:00:44.373389 2025] [:error] [pid 60095:tid 60116] [client 37.140.223.227:60449] [client 37.140.223.227] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.227, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRQUfHlw2elroagFF1rXmQAAAFE"]
[Wed Nov 12 13:15:55.629555 2025] [:error] [pid 60180:tid 60202] [client 37.140.223.234:50369] [client 37.140.223.234] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.234, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRQYC1hgd7ccS8EZg1rcswAAAVQ"]
[Wed Nov 12 13:30:44.204532 2025] [:error] [pid 12744:tid 12748] [client 37.140.223.223:38215] [client 37.140.223.223] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.223, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRQbhJ1cp_ouUvkFj0XYzgAAAQA"]
[Wed Nov 12 13:31:54.664346 2025] [:error] [pid 60095:tid 60110] [client 13.48.96.150:42908] [client 13.48.96.150] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 13.48.96.150, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRQbynlw2elroagFF1rkbAAAAEs"]
[Wed Nov 12 13:45:28.420296 2025] [:error] [pid 60405:tid 60428] [client 37.140.223.221:29331] [client 37.140.223.221] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.221, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRQe-HMGv_mlVi6mf5qhUwAAABQ"]
[Wed Nov 12 14:00:24.949683 2025] [:error] [pid 12744:tid 12757] [client 37.140.223.229:55479] [client 37.140.223.229] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.229, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRQieJ1cp_ouUvkFj0XmtgAAAQk"]
[Wed Nov 12 14:15:05.125378 2025] [:error] [pid 60096:tid 60146] [client 37.140.223.220:41067] [client 37.140.223.220] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.220, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRQl6TmzkhCvvk8DXOxa3QAAAJE"]
[Wed Nov 12 14:29:59.350763 2025] [:error] [pid 60097:tid 60169] [client 172.245.102.85:27819] [client 172.245.102.85] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.245.102.85, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRQpZ8dT5oio_TbWpi82PwAAANA"]
[Wed Nov 12 14:42:05.091008 2025] [:error] [pid 60405:tid 60431] [client 147.182.243.3:58252] [client 147.182.243.3] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 147.182.243.3, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRQsPXMGv_mlVi6mf5q1GQAAABc"]
[Wed Nov 12 14:44:43.937732 2025] [:error] [pid 60096:tid 60133] [client 37.140.223.240:34685] [client 37.140.223.240] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.240, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRQs2zmzkhCvvk8DXOxjsAAAAIc"]
[Wed Nov 12 14:59:43.690497 2025] [:error] [pid 60405:tid 60431] [client 37.140.223.241:49535] [client 37.140.223.241] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.241, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRQwX3MGv_mlVi6mf5q7BwAAABc"]
[Wed Nov 12 15:14:35.548462 2025] [:error] [pid 60180:tid 60191] [client 172.245.102.88:55903] [client 172.245.102.88] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.245.102.88, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRQz21hgd7ccS8EZg1oEIAAAAUk"]
[Wed Nov 12 15:23:39.742966 2025] [:error] [pid 60180:tid 60198] [client 192.178.4.101:50011] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRQ1-1hgd7ccS8EZg1oGHgAAAVA"]
[Wed Nov 12 15:23:51.298609 2025] [:error] [pid 60097:tid 60163] [client 192.178.4.101:43766] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRQ2B8dT5oio_TbWpi9DMAAAAMo"]
[Wed Nov 12 15:29:44.290502 2025] [:error] [pid 60097:tid 60176] [client 37.140.223.215:63967] [client 37.140.223.215] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.215, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRQ3aMdT5oio_TbWpi9EhgAAANc"]
[Wed Nov 12 15:41:43.693248 2025] [:error] [pid 60405:tid 60418] [client 192.178.4.101:51174] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRQ6N3MGv_mlVi6mf5rGAQAAAAo"]
[Wed Nov 12 15:41:49.276379 2025] [:error] [pid 12744:tid 12767] [client 192.178.4.101:35868] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRQ6PZ1cp_ouUvkFj0URdwAAARM"]
[Wed Nov 12 15:42:04.808519 2025] [:error] [pid 60095:tid 60108] [client 192.178.4.101:63010] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRQ6THlw2elroagFF1oFdwAAAEk"]
[Wed Nov 12 15:42:09.346707 2025] [:error] [pid 12744:tid 12748] [client 192.178.4.101:35152] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRQ6UZ1cp_ouUvkFj0URjQAAAQA"]
[Wed Nov 12 15:42:21.926132 2025] [:error] [pid 60097:tid 60161] [client 192.178.4.101:35860] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRQ6XcdT5oio_TbWpi9HcgAAAMg"]
[Wed Nov 12 15:42:27.080787 2025] [:error] [pid 12744:tid 12769] [client 192.178.4.101:56217] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRQ6Y51cp_ouUvkFj0UR0wAAARU"]
[Wed Nov 12 15:42:36.269673 2025] [:error] [pid 60095:tid 60110] [client 192.178.4.101:52571] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRQ6bHlw2elroagFF1oFlAAAAEs"]
[Wed Nov 12 15:43:53.763332 2025] [:error] [pid 60180:tid 60183] [client 192.178.4.101:38112] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRQ6uVhgd7ccS8EZg1oMYQAAAUE"]
[Wed Nov 12 15:43:57.763677 2025] [:error] [pid 60180:tid 60203] [client 192.178.4.101:56488] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRQ6vVhgd7ccS8EZg1oMZAAAAVU"]
[Wed Nov 12 15:43:59.339346 2025] [:error] [pid 12744:tid 12760] [client 192.178.4.101:55229] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRQ6v51cp_ouUvkFj0USggAAAQw"]
[Wed Nov 12 15:44:09.073102 2025] [:error] [pid 12744:tid 12748] [client 192.178.4.101:64091] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRQ6yZ1cp_ouUvkFj0USigAAAQA"]
[Wed Nov 12 15:44:14.489734 2025] [:error] [pid 12744:tid 12753] [client 192.178.4.101:57362] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRQ6zp1cp_ouUvkFj0USmAAAAQU"]
[Wed Nov 12 15:44:17.760565 2025] [:error] [pid 60180:tid 60192] [client 37.140.223.249:24903] [client 37.140.223.249] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.249, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRQ60Vhgd7ccS8EZg1oMdwAAAUo"]
[Wed Nov 12 15:44:18.040176 2025] [:error] [pid 60097:tid 60154] [client 192.178.4.101:57691] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRQ60sdT5oio_TbWpi9H4AAAAMY"]
[Wed Nov 12 15:44:28.047057 2025] [:error] [pid 60405:tid 60411] [client 192.178.4.101:58520] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRQ63HMGv_mlVi6mf5rHJwAAAAM"]
[Wed Nov 12 15:44:32.816879 2025] [:error] [pid 60097:tid 60172] [client 192.178.4.101:48760] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRQ64MdT5oio_TbWpi9H_gAAANM"]
[Wed Nov 12 15:44:37.637349 2025] [:error] [pid 60405:tid 60408] [client 192.178.4.101:53678] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRQ65XMGv_mlVi6mf5rHOgAAAAA"]
[Wed Nov 12 15:44:42.296727 2025] [:error] [pid 60405:tid 60420] [client 192.178.4.101:59351] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRQ66nMGv_mlVi6mf5rHSAAAAAw"]
[Wed Nov 12 15:44:44.458387 2025] [:error] [pid 60405:tid 60426] [client 192.178.4.101:61703] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRQ67HMGv_mlVi6mf5rHUQAAABI"]
[Wed Nov 12 15:45:38.393936 2025] [:error] [pid 60095:tid 60107] [client 192.178.4.101:61794] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRQ7Inlw2elroagFF1oGRAAAAEg"]
[Wed Nov 12 15:45:40.923616 2025] [:error] [pid 60095:tid 60115] [client 192.178.4.101:59327] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRQ7JHlw2elroagFF1oGRQAAAFA"]
[Wed Nov 12 15:45:44.349961 2025] [:error] [pid 60405:tid 60413] [client 192.178.4.101:43005] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRQ7KHMGv_mlVi6mf5rHtAAAAAU"]
[Wed Nov 12 15:45:47.897932 2025] [:error] [pid 60096:tid 60148] [client 192.178.4.101:52085] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRQ7KzmzkhCvvk8DXOxy6wAAAJI"]
[Wed Nov 12 15:45:55.532200 2025] [:error] [pid 60096:tid 60158] [client 192.178.4.101:37926] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRQ7MzmzkhCvvk8DXOxy7wAAAJg"]
[Wed Nov 12 15:45:57.566734 2025] [:error] [pid 60097:tid 60154] [client 192.178.4.101:46916] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRQ7NcdT5oio_TbWpi9IUwAAAMY"]
[Wed Nov 12 15:46:07.064009 2025] [:error] [pid 60096:tid 60158] [client 192.178.4.101:44410] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRQ7PzmzkhCvvk8DXOxy-gAAAJg"]
[Wed Nov 12 15:46:25.445541 2025] [:error] [pid 60405:tid 60418] [client 192.178.4.101:55620] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRQ7UXMGv_mlVi6mf5rH-gAAAAo"]
[Wed Nov 12 15:46:28.271453 2025] [:error] [pid 60097:tid 60160] [client 192.178.4.101:35672] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRQ7VMdT5oio_TbWpi9IdgAAAMc"]
[Wed Nov 12 15:47:17.631349 2025] [:error] [pid 60405:tid 60421] [client 192.178.4.101:45458] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRQ7hXMGv_mlVi6mf5rILAAAAA0"]
[Wed Nov 12 15:47:19.893615 2025] [:error] [pid 12744:tid 12765] [client 192.178.4.101:51495] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRQ7h51cp_ouUvkFj0UUCQAAARE"]
[Wed Nov 12 15:47:24.431255 2025] [:error] [pid 12744:tid 12759] [client 192.178.4.101:60833] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRQ7jJ1cp_ouUvkFj0UUEAAAAQs"]
[Wed Nov 12 15:47:25.917436 2025] [:error] [pid 12744:tid 12764] [client 192.178.4.101:52378] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRQ7jZ1cp_ouUvkFj0UUEQAAARA"]
[Wed Nov 12 15:47:31.179866 2025] [:error] [pid 12744:tid 12754] [client 192.178.4.101:60471] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRQ7k51cp_ouUvkFj0UUHwAAAQY"]
[Wed Nov 12 15:47:34.445829 2025] [:error] [pid 60405:tid 60425] [client 192.178.4.101:63187] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRQ7lnMGv_mlVi6mf5rINgAAABE"]
[Wed Nov 12 15:47:36.052515 2025] [:error] [pid 60405:tid 60423] [client 192.178.4.101:53854] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRQ7mHMGv_mlVi6mf5rIPgAAAA8"]
[Wed Nov 12 15:47:39.200657 2025] [:error] [pid 60097:tid 60142] [client 192.178.4.101:45339] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRQ7m8dT5oio_TbWpi9IyQAAAMA"]
[Wed Nov 12 15:47:42.846933 2025] [:error] [pid 60096:tid 60153] [client 192.178.4.101:46329] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRQ7njmzkhCvvk8DXOxzSQAAAJQ"]
[Wed Nov 12 15:47:46.207602 2025] [:error] [pid 12744:tid 12770] [client 192.178.4.101:34772] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRQ7op1cp_ouUvkFj0UUOQAAARY"]
[Wed Nov 12 15:47:47.827157 2025] [:error] [pid 60180:tid 60183] [client 192.178.4.101:54071] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRQ7o1hgd7ccS8EZg1oNqgAAAUE"]
[Wed Nov 12 15:47:56.108458 2025] [:error] [pid 60096:tid 60126] [client 192.178.4.101:43950] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRQ7rDmzkhCvvk8DXOxzWgAAAIA"]
[Wed Nov 12 15:48:13.569947 2025] [:error] [pid 60405:tid 60411] [client 192.178.4.101:52805] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRQ7vXMGv_mlVi6mf5rIfgAAAAM"]
[Wed Nov 12 15:49:23.364281 2025] [:error] [pid 60180:tid 60186] [client 192.178.4.101:48806] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRQ8A1hgd7ccS8EZg1oOIwAAAUQ"]
[Wed Nov 12 15:49:26.386316 2025] [:error] [pid 12744:tid 12756] [client 192.178.4.101:61258] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRQ8Bp1cp_ouUvkFj0UU3gAAAQg"]
[Wed Nov 12 15:49:32.086792 2025] [:error] [pid 60096:tid 60133] [client 192.178.4.101:50772] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRQ8DDmzkhCvvk8DXOxz1wAAAIc"]
[Wed Nov 12 15:49:34.907196 2025] [:error] [pid 12744:tid 12767] [client 192.178.4.101:38789] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRQ8Dp1cp_ouUvkFj0UU4QAAARM"]
[Wed Nov 12 15:49:37.675625 2025] [:error] [pid 60097:tid 60171] [client 192.178.4.101:36859] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRQ8EcdT5oio_TbWpi9JYwAAANI"]
[Wed Nov 12 15:49:42.978376 2025] [:error] [pid 60405:tid 60411] [client 192.178.4.101:57643] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRQ8FnMGv_mlVi6mf5rI5QAAAAM"]
[Wed Nov 12 15:49:45.506227 2025] [:error] [pid 60405:tid 60414] [client 192.178.4.101:62248] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRQ8GXMGv_mlVi6mf5rI6QAAAAY"]
[Wed Nov 12 15:49:53.103411 2025] [:error] [pid 60095:tid 60120] [client 192.178.4.101:59573] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRQ8IXlw2elroagFF1oG_wAAAFU"]
[Wed Nov 12 15:49:55.542468 2025] [:error] [pid 60180:tid 60194] [client 192.178.4.101:45464] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRQ8I1hgd7ccS8EZg1oOPwAAAUw"]
[Wed Nov 12 15:51:30.843179 2025] [:error] [pid 12744:tid 12762] [client 192.178.4.101:48698] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRQ8gp1cp_ouUvkFj0UVxAAAAQ4"]
[Wed Nov 12 15:51:38.551833 2025] [:error] [pid 60096:tid 60131] [client 192.178.4.101:56251] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRQ8ijmzkhCvvk8DXOx0fwAAAIU"]
[Wed Nov 12 15:51:40.831908 2025] [:error] [pid 12744:tid 12761] [client 192.178.4.101:49467] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRQ8jJ1cp_ouUvkFj0UV0AAAAQ0"]
[Wed Nov 12 15:51:48.717823 2025] [:error] [pid 12744:tid 12759] [client 192.178.4.101:57776] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRQ8lJ1cp_ouUvkFj0UV2gAAAQs"]
[Wed Nov 12 15:51:50.451234 2025] [:error] [pid 60097:tid 60169] [client 192.178.4.101:60996] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRQ8lsdT5oio_TbWpi9KYQAAANA"]
[Wed Nov 12 15:51:55.148598 2025] [:error] [pid 60405:tid 60428] [client 192.178.4.101:47879] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRQ8m3MGv_mlVi6mf5rJpAAAABQ"]
[Wed Nov 12 15:51:56.576104 2025] [:error] [pid 60095:tid 60108] [client 192.178.4.101:54054] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRQ8nHlw2elroagFF1oHvgAAAEk"]
[Wed Nov 12 15:53:27.518211 2025] [:error] [pid 60095:tid 60111] [client 192.178.4.101:46245] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRQ893lw2elroagFF1oIIQAAAEw"]
[Wed Nov 12 15:53:28.731551 2025] [:error] [pid 60180:tid 60182] [client 192.178.4.101:47500] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRQ8-Fhgd7ccS8EZg1oPogAAAUA"]
[Wed Nov 12 15:53:41.403605 2025] [:error] [pid 60405:tid 60412] [client 192.178.4.101:35395] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRQ9BXMGv_mlVi6mf5rKPwAAAAQ"]
[Wed Nov 12 15:53:42.822557 2025] [:error] [pid 60180:tid 60199] [client 192.178.4.101:59034] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRQ9Blhgd7ccS8EZg1oPrgAAAVE"]
[Wed Nov 12 15:53:55.008200 2025] [:error] [pid 60095:tid 60114] [client 192.178.4.101:58318] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRQ9E3lw2elroagFF1oIKgAAAE8"]
[Wed Nov 12 15:53:56.914154 2025] [:error] [pid 60180:tid 60189] [client 192.178.4.101:57497] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRQ9FFhgd7ccS8EZg1oPtwAAAUc"]
[Wed Nov 12 15:55:30.920614 2025] [:error] [pid 12744:tid 12770] [client 192.178.4.101:62886] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRQ9cp1cp_ouUvkFj0UXcAAAARY"]
[Wed Nov 12 15:55:33.920606 2025] [:error] [pid 12744:tid 12762] [client 192.178.4.101:55570] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRQ9dZ1cp_ouUvkFj0UXegAAAQ4"]
[Wed Nov 12 15:55:37.676064 2025] [:error] [pid 60405:tid 60412] [client 192.178.4.101:63525] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRQ9eXMGv_mlVi6mf5rK1QAAAAQ"]
[Wed Nov 12 15:55:42.466461 2025] [:error] [pid 60097:tid 60169] [client 192.178.4.101:46308] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRQ9fsdT5oio_TbWpi9LhQAAANA"]
[Wed Nov 12 15:55:49.404222 2025] [:error] [pid 60095:tid 60118] [client 192.178.4.101:64306] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRQ9hXlw2elroagFF1oIqwAAAFM"]
[Wed Nov 12 15:55:51.985861 2025] [:error] [pid 60180:tid 60202] [client 192.178.4.101:36436] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRQ9h1hgd7ccS8EZg1oQPgAAAVQ"]
[Wed Nov 12 15:55:54.208839 2025] [:error] [pid 12744:tid 12766] [client 192.178.4.101:51929] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRQ9ip1cp_ouUvkFj0UXqAAAARI"]
[Wed Nov 12 15:55:57.450322 2025] [:error] [pid 60405:tid 60417] [client 192.178.4.101:44787] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRQ9jXMGv_mlVi6mf5rK4wAAAAk"]
[Wed Nov 12 15:56:16.884663 2025] [:error] [pid 60095:tid 60123] [client 192.178.4.101:58163] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRQ9oHlw2elroagFF1oIvwAAAFg"]
[Wed Nov 12 15:56:21.924525 2025] [:error] [pid 60405:tid 60428] [client 192.178.4.101:46443] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRQ9pXMGv_mlVi6mf5rLBgAAABQ"]
[Wed Nov 12 15:57:53.684244 2025] [:error] [pid 60097:tid 60168] [client 192.178.4.101:64543] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRQ-AcdT5oio_TbWpi9L_gAAAM8"]
[Wed Nov 12 15:57:56.750105 2025] [:error] [pid 60097:tid 60173] [client 192.178.4.101:61199] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRQ-BMdT5oio_TbWpi9MAQAAANQ"]
[Wed Nov 12 15:58:00.664489 2025] [:error] [pid 60095:tid 60112] [client 192.178.4.101:59522] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRQ-CHlw2elroagFF1oJEwAAAE0"]
[Wed Nov 12 15:58:02.913182 2025] [:error] [pid 60097:tid 60171] [client 192.178.4.101:36029] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRQ-CsdT5oio_TbWpi9MAgAAANI"]
[Wed Nov 12 15:58:10.598100 2025] [:error] [pid 12744:tid 12761] [client 192.178.4.101:47216] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRQ-Ep1cp_ouUvkFj0UZxgAAAQ0"]
[Wed Nov 12 15:58:11.918434 2025] [:error] [pid 60096:tid 60132] [client 192.178.4.101:59370] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRQ-EzmzkhCvvk8DXOx25QAAAIY"]
[Wed Nov 12 15:58:16.691883 2025] [:error] [pid 12744:tid 12754] [client 192.178.4.101:63597] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRQ-GJ1cp_ouUvkFj0UZ2AAAAQY"]
[Wed Nov 12 15:58:19.850395 2025] [:error] [pid 12744:tid 12748] [client 192.178.4.101:63716] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRQ-G51cp_ouUvkFj0UZ4gAAAQA"]
[Wed Nov 12 15:58:29.572009 2025] [:error] [pid 60180:tid 60196] [client 192.178.4.101:62545] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRQ-JVhgd7ccS8EZg1oRLwAAAU4"]
[Wed Nov 12 15:59:33.008597 2025] [:error] [pid 60405:tid 60419] [client 136.144.33.13:59863] [client 136.144.33.13] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.33.13, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRQ-ZXMGv_mlVi6mf5rL_AAAAAs"]
[Wed Nov 12 15:59:59.066977 2025] [:error] [pid 60097:tid 60169] [client 192.178.4.101:50362] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRQ-f8dT5oio_TbWpi9MYwAAANA"]
[Wed Nov 12 16:00:01.778852 2025] [:error] [pid 12744:tid 12760] [client 192.178.4.101:64310] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRQ-gZ1cp_ouUvkFj0UafAAAAQw"]
[Wed Nov 12 16:00:11.900681 2025] [:error] [pid 60095:tid 60116] [client 192.178.4.101:51025] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRQ-i3lw2elroagFF1oJmAAAAFE"]
[Wed Nov 12 16:00:18.826269 2025] [:error] [pid 12744:tid 12761] [client 192.178.4.101:45970] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRQ-kp1cp_ouUvkFj0UapQAAAQ0"]
[Wed Nov 12 16:00:21.064678 2025] [:error] [pid 60405:tid 60416] [client 192.178.4.101:35331] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRQ-lXMGv_mlVi6mf5rMMgAAAAg"]
[Wed Nov 12 16:00:25.610712 2025] [:error] [pid 60097:tid 60161] [client 192.178.4.101:36001] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRQ-mcdT5oio_TbWpi9MpAAAAMg"]
[Wed Nov 12 16:00:30.086904 2025] [:error] [pid 12744:tid 12769] [client 192.178.4.101:62865] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRQ-np1cp_ouUvkFj0UatQAAARU"]
[Wed Nov 12 16:00:36.259692 2025] [:error] [pid 12744:tid 12753] [client 192.178.4.101:46095] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRQ-pJ1cp_ouUvkFj0UatwAAAQU"]
[Wed Nov 12 16:00:38.108346 2025] [:error] [pid 60405:tid 60416] [client 192.178.4.101:40055] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRQ-pnMGv_mlVi6mf5rMSwAAAAg"]
[Wed Nov 12 16:02:22.767193 2025] [:error] [pid 12744:tid 12770] [client 192.178.4.101:47357] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRQ_Dp1cp_ouUvkFj0UbMgAAARY"]
[Wed Nov 12 16:02:49.492404 2025] [:error] [pid 60180:tid 60191] [client 192.178.4.101:61382] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRQ_KVhgd7ccS8EZg1oSXQAAAUk"]
[Wed Nov 12 16:02:51.968937 2025] [:error] [pid 60097:tid 60168] [client 192.178.4.101:50300] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRQ_K8dT5oio_TbWpi9NGQAAAM8"]
[Wed Nov 12 16:06:52.992824 2025] [:error] [pid 60095:tid 60113] [client 192.178.4.101:60046] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRRAHHlw2elroagFF1oK8gAAAE4"]
[Wed Nov 12 16:06:59.477515 2025] [:error] [pid 60095:tid 60108] [client 192.178.4.101:38898] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRRAI3lw2elroagFF1oK9gAAAEk"]
[Wed Nov 12 16:07:08.185738 2025] [:error] [pid 60180:tid 60188] [client 47.101.196.72:47658] [client 47.101.196.72] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 47.101.196.72, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRRALFhgd7ccS8EZg1oTeAAAAUY"]
[Wed Nov 12 16:07:18.699997 2025] [:error] [pid 12744:tid 12763] [client 192.178.4.101:38451] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRRANp1cp_ouUvkFj0UckgAAAQ8"]
[Wed Nov 12 16:07:45.652177 2025] [:error] [pid 60097:tid 60168] [client 192.178.4.101:37983] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRRAUcdT5oio_TbWpi9OJgAAAM8"]
[Wed Nov 12 16:09:48.629559 2025] [:error] [pid 60180:tid 60205] [client 192.178.4.101:56976] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRRAzFhgd7ccS8EZg1oUHgAAAVc"]
[Wed Nov 12 16:09:54.744119 2025] [:error] [pid 60405:tid 60432] [client 192.178.4.101:43707] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRRA0nMGv_mlVi6mf5rPUQAAABg"]
[Wed Nov 12 16:09:56.130914 2025] [:error] [pid 60180:tid 60188] [client 192.178.4.101:35437] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRRA1Fhgd7ccS8EZg1oULAAAAUY"]
[Wed Nov 12 16:09:57.526119 2025] [:error] [pid 60095:tid 60122] [client 192.178.4.101:55014] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRRA1Xlw2elroagFF1oLwgAAAFc"]
[Wed Nov 12 16:10:18.235280 2025] [:error] [pid 12744:tid 12770] [client 192.178.4.101:57672] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRRA6p1cp_ouUvkFj0UdlQAAARY"]
[Wed Nov 12 16:14:31.957234 2025] [:error] [pid 60097:tid 60174] [client 37.140.223.235:53967] [client 37.140.223.235] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.235, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRRB58dT5oio_TbWpi9PjgAAANU"]
[Wed Nov 12 16:29:45.065650 2025] [:error] [pid 60096:tid 60135] [client 37.140.223.250:20293] [client 37.140.223.250] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.250, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRRFeTmzkhCvvk8DXOx9xQAAAIk"]
[Wed Nov 12 16:44:42.697491 2025] [:error] [pid 60180:tid 60186] [client 136.144.33.11:36393] [client 136.144.33.11] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.33.11, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRRI-lhgd7ccS8EZg1odxwAAAUQ"]
[Wed Nov 12 16:58:57.982908 2025] [:error] [pid 60180:tid 60182] [client 194.238.24.190:37866] [client 194.238.24.190] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.238.24.190, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRRMUVhgd7ccS8EZg1okRAAAAUA"]
[Wed Nov 12 16:59:36.927514 2025] [:error] [pid 60405:tid 60420] [client 172.245.102.85:27147] [client 172.245.102.85] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.245.102.85, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRRMeHMGv_mlVi6mf5rgLwAAAAw"]
[Wed Nov 12 17:14:56.425645 2025] [:error] [pid 60097:tid 60168] [client 37.140.223.243:56949] [client 37.140.223.243] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.243, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRRQEMdT5oio_TbWpi9ipwAAAM8"]
[Wed Nov 12 17:29:58.535599 2025] [:error] [pid 12744:tid 12748] [client 37.140.223.249:45353] [client 37.140.223.249] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.249, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRRTlp1cp_ouUvkFj0U_zAAAAQA"]
[Wed Nov 12 17:45:50.933050 2025] [:error] [pid 60095:tid 60117] [client 172.245.102.83:21783] [client 172.245.102.83] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.245.102.83, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRRXTnlw2elroagFF1oivwAAAFI"]
[Wed Nov 12 18:01:48.767153 2025] [:error] [pid 12744:tid 12751] [client 37.140.223.223:20607] [client 37.140.223.223] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.223, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRRbDJ1cp_ouUvkFj0VKbgAAAQM"]
[Wed Nov 12 18:10:40.254352 2025] [:error] [pid 60095:tid 60115] [client 20.93.54.24:29633] [client 20.93.54.24] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.93.54.24, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRRdIHlw2elroagFF1oohgAAAFA"]
[Wed Nov 12 18:17:43.135867 2025] [:error] [pid 60180:tid 60206] [client 172.245.102.88:44145] [client 172.245.102.88] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.245.102.88, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRRex1hgd7ccS8EZg1o56AAAAVg"]
[Wed Nov 12 18:34:26.609998 2025] [:error] [pid 60180:tid 60196] [client 37.140.223.242:32431] [client 37.140.223.242] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.242, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRRislhgd7ccS8EZg1o_rwAAAU4"]
[Wed Nov 12 18:50:12.905770 2025] [:error] [pid 60180:tid 60190] [client 136.144.33.11:65111] [client 136.144.33.11] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.33.11, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRRmZFhgd7ccS8EZg1pEBQAAAUg"]
[Wed Nov 12 18:50:50.886718 2025] [:error] [pid 12744:tid 12769] [client 192.178.4.101:39534] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRRmip1cp_ouUvkFj0VboAAAARU"]
[Wed Nov 12 18:53:58.865446 2025] [:error] [pid 60096:tid 60153] [client 192.178.4.101:37391] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRRnRjmzkhCvvk8DXOyisgAAAJQ"]
[Wed Nov 12 18:54:01.495949 2025] [:error] [pid 60180:tid 60193] [client 192.178.4.101:46204] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRRnSVhgd7ccS8EZg1pFDAAAAUs"]
[Wed Nov 12 19:01:53.229608 2025] [:error] [pid 60095:tid 60110] [client 192.178.4.101:56189] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRRpIXlw2elroagFF1o2NQAAAEs"]
[Wed Nov 12 19:01:58.395552 2025] [:error] [pid 60097:tid 60162] [client 192.178.4.101:42041] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRRpJsdT5oio_TbWpi9-igAAAMk"]
[Wed Nov 12 19:02:08.184597 2025] [:error] [pid 12744:tid 12765] [client 192.178.4.101:34912] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRRpMJ1cp_ouUvkFj0VevwAAARE"]
[Wed Nov 12 19:02:23.260814 2025] [:error] [pid 23737:tid 23761] [client 192.178.4.101:47948] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRRpPxQUsVVfOZWgW_WpagAAAYw"]
[Wed Nov 12 19:02:32.044312 2025] [:error] [pid 60096:tid 60153] [client 192.178.4.101:39098] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRRpSDmzkhCvvk8DXOykrwAAAJQ"]
[Wed Nov 12 19:02:39.812251 2025] [:error] [pid 60096:tid 60153] [client 192.178.4.101:63351] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRRpTzmzkhCvvk8DXOykvAAAAJQ"]
[Wed Nov 12 19:06:05.694320 2025] [:error] [pid 12744:tid 12754] [client 37.140.223.217:22787] [client 37.140.223.217] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.217, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRRqHZ1cp_ouUvkFj0VfzgAAAQY"]
[Wed Nov 12 19:20:44.003731 2025] [:error] [pid 60180:tid 60194] [client 192.178.4.101:37561] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRRtjFhgd7ccS8EZg1pLSwAAAUw"]
[Wed Nov 12 19:21:27.852185 2025] [:error] [pid 60405:tid 60431] [client 45.119.87.125:44684] [client 45.119.87.125] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.119.87.125, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRRtt3MGv_mlVi6mf5oG3wAAABc"]
[Wed Nov 12 19:22:05.028389 2025] [:error] [pid 23737:tid 23771] [client 37.140.223.233:38271] [client 37.140.223.233] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.233, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRRt3RQUsVVfOZWgW_WwAQAAAZY"]
[Wed Nov 12 19:25:50.080431 2025] [:error] [pid 60097:tid 60171] [client 192.178.4.101:40860] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRRuvsdT5oio_TbWpi-D5wAAANI"]
[Wed Nov 12 19:25:54.803093 2025] [:error] [pid 60405:tid 60426] [client 192.178.4.101:58290] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRRuwnMGv_mlVi6mf5oHywAAABI"]
[Wed Nov 12 19:26:13.906314 2025] [:error] [pid 60095:tid 60104] [client 192.178.4.101:48882] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRRu1Xlw2elroagFF1o65QAAAEU"]
[Wed Nov 12 19:38:15.799281 2025] [:error] [pid 60097:tid 60175] [client 136.144.33.42:58731] [client 136.144.33.42] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.33.42, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRRxp8dT5oio_TbWpi-GNAAAANY"]
[Wed Nov 12 19:54:24.055275 2025] [:error] [pid 60095:tid 60121] [client 136.144.33.232:39245] [client 136.144.33.232] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.33.232, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRR1cHlw2elroagFF1o_hwAAAFY"]
[Wed Nov 12 19:57:43.353505 2025] [:error] [pid 12744:tid 12755] [client 192.178.4.101:43981] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRR2N51cp_ouUvkFj0VrlwAAAQc"]
[Wed Nov 12 20:10:55.175172 2025] [:error] [pid 23737:tid 23757] [client 37.140.223.226:32519] [client 37.140.223.226] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.226, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRR5TxQUsVVfOZWgW_W9aQAAAYg"]
[Wed Nov 12 20:26:27.813274 2025] [:error] [pid 12744:tid 12759] [client 37.140.223.241:45833] [client 37.140.223.241] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.241, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRR8851cp_ouUvkFj0VxwgAAAQs"]
[Wed Nov 12 20:28:44.788788 2025] [:error] [pid 12744:tid 12765] [client 34.34.35.68:53140] [client 34.34.35.68] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 34.34.35.68, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRR9fJ1cp_ouUvkFj0VyUgAAARE"]
[Wed Nov 12 20:42:20.916172 2025] [:error] [pid 60405:tid 60426] [client 37.140.223.242:24531] [client 37.140.223.242] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.242, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRSArHMGv_mlVi6mf5oVygAAABI"]
[Wed Nov 12 20:57:41.327344 2025] [:error] [pid 60180:tid 60183] [client 172.245.102.85:43689] [client 172.245.102.85] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.245.102.85, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRSERVhgd7ccS8EZg1pfAQAAAUE"]
[Wed Nov 12 21:13:41.670154 2025] [:error] [pid 60180:tid 60188] [client 37.140.223.230:40593] [client 37.140.223.230] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.230, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRSIBVhgd7ccS8EZg1picAAAAUY"]
[Wed Nov 12 21:13:55.298777 2025] [:error] [pid 23737:tid 23765] [client 192.178.4.101:65282] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRSIExQUsVVfOZWgW_XTKgAAAZA"]
[Wed Nov 12 21:14:29.127209 2025] [:error] [pid 60096:tid 60151] [client 192.178.4.101:35735] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRSINTmzkhCvvk8DXOy-0AAAAJM"]
[Wed Nov 12 21:14:46.177889 2025] [:error] [pid 12744:tid 12767] [client 192.178.4.101:59320] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRSIRp1cp_ouUvkFj0V_3QAAARM"]
[Wed Nov 12 21:18:46.969206 2025] [:error] [pid 12744:tid 12764] [client 192.178.4.101:59082] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRSJNp1cp_ouUvkFj0WAngAAARA"]
[Wed Nov 12 21:21:29.623668 2025] [:error] [pid 60096:tid 60127] [client 192.178.4.101:45251] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRSJ2TmzkhCvvk8DXOy_xAAAAIE"]
[Wed Nov 12 21:21:54.317833 2025] [:error] [pid 60405:tid 60413] [client 192.178.4.101:58538] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRSJ8nMGv_mlVi6mf5oe6QAAAAU"]
[Wed Nov 12 21:21:58.658086 2025] [:error] [pid 23737:tid 23766] [client 192.178.4.101:52025] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRSJ9hQUsVVfOZWgW_XVKgAAAZE"]
[Wed Nov 12 21:25:57.192875 2025] [:error] [pid 23737:tid 23768] [client 192.178.4.101:64898] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRSK5RQUsVVfOZWgW_XWpwAAAZM"]
[Wed Nov 12 21:26:00.619590 2025] [:error] [pid 23737:tid 23763] [client 192.178.4.101:45310] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRSK6BQUsVVfOZWgW_XWswAAAY4"]
[Wed Nov 12 21:26:14.583321 2025] [:error] [pid 60096:tid 60157] [client 192.178.4.101:41980] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRSK9jmzkhCvvk8DXOzAxgAAAJc"]
[Wed Nov 12 21:26:29.614338 2025] [:error] [pid 60096:tid 60130] [client 192.178.4.101:57342] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRSLBTmzkhCvvk8DXOzA0AAAAIQ"]
[Wed Nov 12 21:29:06.970199 2025] [:error] [pid 60180:tid 60183] [client 37.140.223.233:23449] [client 37.140.223.233] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.233, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRSLolhgd7ccS8EZg1plSgAAAUE"]
[Wed Nov 12 21:33:29.306677 2025] [:error] [pid 60096:tid 60155] [client 51.68.153.131:58042] [client 51.68.153.131] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 51.68.153.131, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRSMqTmzkhCvvk8DXOzCbAAAAJU"]
[Wed Nov 12 21:44:28.443936 2025] [:error] [pid 60095:tid 60116] [client 37.140.223.231:47033] [client 37.140.223.231] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.231, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRSPPHlw2elroagFF1pSEgAAAFE"]
[Wed Nov 12 21:56:55.235572 2025] [:error] [pid 60405:tid 60409] [client 192.178.4.101:40634] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRSSJ3MGv_mlVi6mf5omwwAAAAE"]
[Wed Nov 12 21:57:13.067558 2025] [:error] [pid 12744:tid 12767] [client 192.178.4.101:64231] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRSSOZ1cp_ouUvkFj0WKeAAAARM"]
[Wed Nov 12 21:57:18.556309 2025] [:error] [pid 60180:tid 60184] [client 192.178.4.101:56905] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRSSPlhgd7ccS8EZg1pqyAAAAUI"]
[Wed Nov 12 21:57:30.325243 2025] [:error] [pid 60096:tid 60131] [client 192.178.4.101:62642] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRSSSjmzkhCvvk8DXOzGxwAAAIU"]
[Wed Nov 12 21:57:43.077733 2025] [:error] [pid 60096:tid 60132] [client 192.178.4.101:49435] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRSSVzmzkhCvvk8DXOzGygAAAIY"]
[Wed Nov 12 21:59:40.028266 2025] [:error] [pid 60097:tid 60170] [client 37.140.223.251:33275] [client 37.140.223.251] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.251, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRSSzMdT5oio_TbWpi-h-AAAANE"]
[Wed Nov 12 22:01:20.225324 2025] [:error] [pid 23737:tid 23756] [client 192.178.4.101:51931] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRSTMBQUsVVfOZWgW_Xh6gAAAYc"]
[Wed Nov 12 22:01:38.073882 2025] [:error] [pid 60095:tid 60101] [client 192.178.4.101:41599] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRSTQnlw2elroagFF1pU7AAAAEI"]
[Wed Nov 12 22:14:43.735672 2025] [:error] [pid 23737:tid 23771] [client 192.178.4.101:50948] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRSWUxQUsVVfOZWgW_Xk6wAAAZY"]
[Wed Nov 12 22:14:46.951124 2025] [:error] [pid 60095:tid 60107] [client 192.178.4.101:55427] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRSWVnlw2elroagFF1pXGgAAAEg"]
[Wed Nov 12 22:14:50.347315 2025] [:error] [pid 60097:tid 60150] [client 192.178.4.101:46115] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRSWWsdT5oio_TbWpi-ktAAAAMQ"]
[Wed Nov 12 22:14:53.640126 2025] [:error] [pid 23737:tid 23764] [client 192.178.4.101:51570] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRSWXRQUsVVfOZWgW_Xk8gAAAY8"]
[Wed Nov 12 22:15:23.519383 2025] [:error] [pid 12744:tid 12753] [client 37.140.223.232:46165] [client 37.140.223.232] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.232, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRSWe51cp_ouUvkFj0WOQQAAAQU"]
[Wed Nov 12 22:28:00.764805 2025] [:error] [pid 60405:tid 60428] [client 45.153.34.41:49752] [client 45.153.34.41] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paramountbaldivis.com"] [uri "/.git/config"] [unique_id "aRSZcHMGv_mlVi6mf5osKAAAABQ"]
[Wed Nov 12 22:30:51.144216 2025] [:error] [pid 23737:tid 23753] [client 37.140.223.247:23471] [client 37.140.223.247] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.247, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRSaGxQUsVVfOZWgW_XpXwAAAYQ"]
[Wed Nov 12 22:46:02.011112 2025] [:error] [pid 60405:tid 60411] [client 37.140.223.235:45867] [client 37.140.223.235] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.235, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRSdqnMGv_mlVi6mf5ovvQAAAAM"]
[Wed Nov 12 22:46:10.949893 2025] [:error] [pid 60405:tid 60417] [client 104.40.211.153:40352] [client 104.40.211.153] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.40.211.153, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRSdsnMGv_mlVi6mf5ovywAAAAk"]
[Wed Nov 12 22:47:23.875970 2025] [:error] [pid 60405:tid 60420] [client 192.178.4.101:60589] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRSd-3MGv_mlVi6mf5owHgAAAAw"]
[Wed Nov 12 22:47:26.861967 2025] [:error] [pid 60405:tid 60413] [client 192.178.4.101:57554] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRSd_nMGv_mlVi6mf5owIgAAAAU"]
[Wed Nov 12 22:56:02.683623 2025] [:error] [pid 60096:tid 60126] [client 45.153.34.41:45086] [client 45.153.34.41] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paramountbaldivis.com"] [uri "/.git/config"] [unique_id "aRSgAjmzkhCvvk8DXOzQJgAAAIA"]
[Wed Nov 12 22:56:52.717201 2025] [:error] [pid 60097:tid 60163] [client 192.178.4.101:65237] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRSgNMdT5oio_TbWpi-r6gAAAMo"]
[Wed Nov 12 22:56:58.333310 2025] [:error] [pid 12744:tid 12749] [client 192.178.4.101:43648] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRSgOp1cp_ouUvkFj0WXlgAAAQE"]
[Wed Nov 12 23:01:11.802274 2025] [:error] [pid 60180:tid 60206] [client 37.140.223.243:63045] [client 37.140.223.243] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.243, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRShN1hgd7ccS8EZg1p2yAAAAVg"]
[Wed Nov 12 23:15:29.663884 2025] [:error] [pid 60095:tid 60122] [client 192.178.4.101:55362] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRSkkXlw2elroagFF1phOQAAAFc"]
[Wed Nov 12 23:15:35.810355 2025] [:error] [pid 60405:tid 60408] [client 192.178.4.101:39650] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRSkl3MGv_mlVi6mf5o2FAAAAAA"]
[Wed Nov 12 23:15:38.834611 2025] [:error] [pid 23737:tid 23768] [client 192.178.4.101:50181] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRSkmhQUsVVfOZWgW_X4HQAAAZM"]
[Wed Nov 12 23:16:48.847696 2025] [:error] [pid 60097:tid 60165] [client 37.140.223.238:22237] [client 37.140.223.238] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.238, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRSk4MdT5oio_TbWpi-vyAAAAMw"]
[Wed Nov 12 23:28:48.784415 2025] [:error] [pid 60405:tid 60408] [client 192.178.4.101:50938] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRSnsHMGv_mlVi6mf5o4jAAAAAA"]
[Wed Nov 12 23:32:09.356659 2025] [:error] [pid 60095:tid 60103] [client 37.140.223.217:21131] [client 37.140.223.217] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.217, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRSoeXlw2elroagFF1pkQgAAAEQ"]
[Wed Nov 12 23:35:41.739647 2025] [:error] [pid 60095:tid 60104] [client 192.178.4.101:43257] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRSpTXlw2elroagFF1plXQAAAEU"]
[Wed Nov 12 23:35:59.794937 2025] [:error] [pid 23737:tid 23764] [client 192.178.4.101:44686] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRSpXxQUsVVfOZWgW_X-ygAAAY8"]
[Wed Nov 12 23:47:36.179360 2025] [:error] [pid 23737:tid 23761] [client 37.140.223.225:40305] [client 37.140.223.225] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.225, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRSsGBQUsVVfOZWgW_UCfgAAAYw"]
[Wed Nov 12 23:48:40.864658 2025] [:error] [pid 60097:tid 60169] [client 192.178.4.101:47708] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRSsWMdT5oio_TbWpi-16wAAANA"]
[Wed Nov 12 23:48:57.349663 2025] [:error] [pid 60180:tid 60196] [client 192.178.4.101:46083] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRSsaVhgd7ccS8EZg1qAkgAAAU4"]
[Wed Nov 12 23:53:57.081333 2025] [:error] [pid 23737:tid 23763] [client 192.178.4.101:64479] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRStlRQUsVVfOZWgW_UELAAAAY4"]
[Wed Nov 12 23:54:00.438160 2025] [:error] [pid 60095:tid 60116] [client 192.178.4.101:53831] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRStmHlw2elroagFF1ppDwAAAFE"]
[Wed Nov 12 23:54:27.297999 2025] [:error] [pid 12744:tid 12762] [client 192.178.4.101:57032] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRSts51cp_ouUvkFj0WmUgAAAQ4"]
[Thu Nov 13 00:03:06.033694 2025] [:error] [pid 12744:tid 12759] [client 37.140.223.246:22209] [client 37.140.223.246] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.246, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRSvup1cp_ouUvkFj0WotwAAAQs"]
[Thu Nov 13 00:04:58.772757 2025] [:error] [pid 12744:tid 12771] [client 20.51.210.179:38870] [client 20.51.210.179] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.51.210.179, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRSwKp1cp_ouUvkFj0WpLAAAARc"]
[Thu Nov 13 00:05:23.416004 2025] [:error] [pid 23737:tid 23772] [client 167.71.209.140:50626] [client 167.71.209.140] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 167.71.209.140, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRSwQxQUsVVfOZWgW_UHrAAAAZc"]
[Thu Nov 13 00:18:52.930938 2025] [:error] [pid 12744:tid 12752] [client 37.140.223.232:23347] [client 37.140.223.232] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.232, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRSzbJ1cp_ouUvkFj0WseQAAAQQ"]
[Thu Nov 13 00:32:46.477647 2025] [:error] [pid 60097:tid 60176] [client 192.178.4.101:48675] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRS2rsdT5oio_TbWpi--nwAAANc"]
[Thu Nov 13 00:32:51.250760 2025] [:error] [pid 12744:tid 12770] [client 192.178.4.101:44096] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRS2s51cp_ouUvkFj0WwPwAAARY"]
[Thu Nov 13 00:32:55.455532 2025] [:error] [pid 60097:tid 60168] [client 192.178.4.101:59689] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRS2t8dT5oio_TbWpi--pwAAAM8"]
[Thu Nov 13 00:32:59.649318 2025] [:error] [pid 60095:tid 60105] [client 192.178.4.101:45189] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRS2u3lw2elroagFF1pwkwAAAEY"]
[Thu Nov 13 00:34:20.898919 2025] [:error] [pid 60097:tid 60163] [client 136.144.33.43:60685] [client 136.144.33.43] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.33.43, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRS3DMdT5oio_TbWpi--ywAAAMo"]
[Thu Nov 13 00:48:32.017841 2025] [:error] [pid 23737:tid 23770] [client 46.105.230.99:63565] [client 46.105.230.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 46.105.230.99, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRS6YBQUsVVfOZWgW_UV2wAAAZU"]
[Thu Nov 13 00:49:30.295300 2025] [:error] [pid 60096:tid 60134] [client 37.140.223.225:36565] [client 37.140.223.225] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.225, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRS6mjmzkhCvvk8DXOzk4AAAAIg"]
[Thu Nov 13 00:58:20.268224 2025] [:error] [pid 60095:tid 60104] [client 192.178.4.101:50642] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRS8rHlw2elroagFF1p0ggAAAEU"]
[Thu Nov 13 00:58:24.129864 2025] [:error] [pid 23737:tid 23761] [client 192.178.4.101:56142] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRS8sBQUsVVfOZWgW_UY3QAAAYw"]
[Thu Nov 13 00:58:39.257423 2025] [:error] [pid 60405:tid 60432] [client 192.178.4.101:51575] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRS8v3MGv_mlVi6mf5pK9AAAABg"]
[Thu Nov 13 00:58:58.393651 2025] [:error] [pid 60180:tid 60200] [client 192.178.4.101:63972] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRS80lhgd7ccS8EZg1qNxAAAAVI"]
[Thu Nov 13 01:04:34.626013 2025] [:error] [pid 60096:tid 60156] [client 37.140.223.244:40991] [client 37.140.223.244] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.244, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRS-IjmzkhCvvk8DXOznsgAAAJY"]
[Thu Nov 13 01:04:52.179250 2025] [:error] [pid 60097:tid 60142] [client 192.178.4.101:55435] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRS-NMdT5oio_TbWpi_D9QAAAMA"]
[Thu Nov 13 01:05:20.971460 2025] [:error] [pid 60405:tid 60426] [client 192.178.4.101:38692] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRS-UHMGv_mlVi6mf5pMYAAAABI"]
[Thu Nov 13 01:05:30.662894 2025] [:error] [pid 60097:tid 60150] [client 192.178.4.101:35104] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRS-WsdT5oio_TbWpi_EAwAAAMQ"]
[Thu Nov 13 01:05:42.674085 2025] [:error] [pid 60097:tid 60173] [client 192.178.4.101:37372] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRS-ZsdT5oio_TbWpi_EBgAAANQ"]
[Thu Nov 13 01:09:11.832410 2025] [:error] [pid 60180:tid 60195] [client 192.178.4.101:37237] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRS_N1hgd7ccS8EZg1qPgQAAAU0"]
[Thu Nov 13 01:09:22.324190 2025] [:error] [pid 60097:tid 60160] [client 192.178.4.101:64720] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRS_QsdT5oio_TbWpi_EqQAAAMc"]
[Thu Nov 13 01:20:24.950133 2025] [:error] [pid 23737:tid 23763] [client 172.245.102.87:65293] [client 172.245.102.87] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.245.102.87, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRTB2BQUsVVfOZWgW_UemwAAAY4"]
[Thu Nov 13 01:29:49.563467 2025] [:error] [pid 60097:tid 60168] [client 192.178.4.101:49408] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRTEDcdT5oio_TbWpi_H3QAAAM8"]
[Thu Nov 13 01:30:34.459233 2025] [:error] [pid 60405:tid 60425] [client 192.178.4.101:42242] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRTEOnMGv_mlVi6mf5pQQwAAABE"]
[Thu Nov 13 01:35:38.368295 2025] [:error] [pid 60405:tid 60412] [client 136.144.33.248:36699] [client 136.144.33.248] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.33.248, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRTFanMGv_mlVi6mf5pROwAAAAQ"]
[Thu Nov 13 01:36:04.318149 2025] [:error] [pid 60095:tid 60102] [client 192.178.4.101:38409] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRTFhHlw2elroagFF1p6BgAAAEM"]
[Thu Nov 13 01:51:30.664970 2025] [:error] [pid 23737:tid 23762] [client 185.199.223.39:45094] [client 185.199.223.39] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.199.223.39, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRTJIhQUsVVfOZWgW_UomwAAAY0"]
[Thu Nov 13 01:58:28.848230 2025] [:error] [pid 60095:tid 60113] [client 192.178.4.101:36477] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRTKxHlw2elroagFF1p98AAAAE4"]
[Thu Nov 13 01:58:49.079819 2025] [:error] [pid 60405:tid 60420] [client 192.178.4.101:43994] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRTK2XMGv_mlVi6mf5pV3AAAAAw"]
[Thu Nov 13 02:03:59.509787 2025] [:error] [pid 23737:tid 23755] [client 192.178.4.101:50037] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRTMDxQUsVVfOZWgW_Us-wAAAYY"]
[Thu Nov 13 02:58:04.935660 2025] [:error] [pid 60405:tid 60410] [client 194.233.81.119:41090] [client 194.233.81.119] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.233.81.119, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRTYvHMGv_mlVi6mf5plKQAAAAI"]
[Thu Nov 13 04:02:20.777447 2025] [:error] [pid 33998:tid 34069] [client 134.209.152.133:41554] [client 134.209.152.133] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 134.209.152.133, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRTnzG2zmRY5XWK0KP4qDwAAAIg"]
[Thu Nov 13 04:03:33.602317 2025] [:error] [pid 55521:tid 55642] [client 192.178.4.101:47319] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRToFb1fVfM5DFq_4iPT0gAAAQ0"]
[Thu Nov 13 04:03:39.995254 2025] [:error] [pid 33996:tid 34014] [client 192.178.4.101:43750] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRToG2M3Kk5sdGS7me5TzQAAAAs"]
[Thu Nov 13 04:03:57.299095 2025] [:error] [pid 33997:tid 34039] [client 192.178.4.101:47264] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRToLTK7_s_cytfpsZ6RswAAAEU"]
[Thu Nov 13 04:04:17.360783 2025] [:error] [pid 7044:tid 7058] [client 192.178.4.101:57472] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRToQaJkvCEQaNp4Yht2cAAAAAQ"]
[Thu Nov 13 04:04:27.197281 2025] [:error] [pid 7045:tid 7105] [client 192.178.4.101:41442] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRToS-M1dyjPrDV86qS8XQAAAFg"]
[Thu Nov 13 04:06:56.946370 2025] [:error] [pid 7045:tid 7098] [client 192.178.4.101:48496] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRTo4OM1dyjPrDV86qS8_gAAAFE"]
[Thu Nov 13 05:12:49.702169 2025] [:error] [pid 30162:tid 30187] [client 192.178.4.101:52644] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRT4UZYPAuLETx2485WR0wAAAVc"]
[Thu Nov 13 05:16:49.592538 2025] [:error] [pid 30162:tid 30171] [client 51.210.4.238:36210] [client 51.210.4.238] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 51.210.4.238, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRT5QZYPAuLETx2485WStAAAAUc"]
[Thu Nov 13 05:45:34.155511 2025] [:error] [pid 22223:tid 22258] [client 192.178.4.101:38207] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRT__t6it_tNBGH9EAEWeQAAAEU"]
[Thu Nov 13 05:45:37.856504 2025] [:error] [pid 22224:tid 22304] [client 192.178.4.101:64796] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRUAAbuEVuTj3a_UBfD__gAAAJg"]
[Thu Nov 13 05:45:41.581422 2025] [:error] [pid 22224:tid 22302] [client 192.178.4.101:37039] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRUABbuEVuTj3a_UBfAAAQAAAJY"]
[Thu Nov 13 05:45:45.275840 2025] [:error] [pid 22222:tid 22235] [client 192.178.4.101:58548] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRUACTL-5qXvQuZkA4GibgAAAAk"]
[Thu Nov 13 05:45:48.945009 2025] [:error] [pid 22224:tid 22298] [client 192.178.4.101:65385] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRUADLuEVuTj3a_UBfAACQAAAJI"]
[Thu Nov 13 05:45:59.818077 2025] [:error] [pid 22566:tid 22574] [client 192.178.4.101:36531] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRUAFzfdqWaUbu3e06-LIgAAAQY"]
[Thu Nov 13 05:50:46.833271 2025] [:error] [pid 22223:tid 22272] [client 192.178.4.101:54700] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRUBNt6it_tNBGH9EAEYiwAAAFM"]
[Thu Nov 13 05:50:52.814684 2025] [:error] [pid 22566:tid 22588] [client 192.178.4.101:57649] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRUBPDfdqWaUbu3e06-OpgAAARQ"]
[Thu Nov 13 05:55:35.787739 2025] [:error] [pid 22566:tid 22587] [client 192.178.4.101:59522] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRUCVzfdqWaUbu3e06-Q-gAAARM"]
[Thu Nov 13 05:55:49.141967 2025] [:error] [pid 22566:tid 22585] [client 192.178.4.101:48077] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRUCZTfdqWaUbu3e06-REQAAARE"]
[Thu Nov 13 06:00:46.613909 2025] [:error] [pid 22307:tid 22326] [client 192.178.4.101:48224] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRUDjqr7fLMQQanZ_9yAbAAAANE"]
[Thu Nov 13 06:00:54.529958 2025] [:error] [pid 22222:tid 22236] [client 192.178.4.101:63527] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRUDljL-5qXvQuZkA4GpQgAAAAo"]
[Thu Nov 13 06:04:55.099928 2025] [:error] [pid 22222:tid 22245] [client 192.178.4.101:39592] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRUEhzL-5qXvQuZkA4GqfQAAABM"]
[Thu Nov 13 06:04:59.651016 2025] [:error] [pid 22566:tid 22586] [client 192.178.4.101:52963] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRUEizfdqWaUbu3e06-XggAAARI"]
[Thu Nov 13 06:05:25.723350 2025] [:error] [pid 22224:tid 22287] [client 192.178.4.101:53849] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRUEpbuEVuTj3a_UBfAK3AAAAIc"]
[Thu Nov 13 06:09:52.394190 2025] [:error] [pid 22222:tid 22250] [client 192.178.4.101:61050] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRUFsDL-5qXvQuZkA4GtuwAAABg"]
[Thu Nov 13 06:09:55.657615 2025] [:error] [pid 22566:tid 22590] [client 192.178.4.101:65022] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRUFszfdqWaUbu3e06-c9gAAARY"]
[Thu Nov 13 06:11:35.209764 2025] [:error] [pid 22224:tid 22286] [client 192.178.4.101:37075] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRUGF7uEVuTj3a_UBfAQjwAAAIY"]
[Thu Nov 13 06:11:37.400785 2025] [:error] [pid 22222:tid 22249] [client 192.178.4.101:57753] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRUGGTL-5qXvQuZkA4GuoQAAABc"]
[Thu Nov 13 06:11:46.836734 2025] [:error] [pid 22224:tid 22280] [client 192.178.4.101:65029] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRUGIruEVuTj3a_UBfAQugAAAIA"]
[Thu Nov 13 06:11:57.406388 2025] [:error] [pid 22307:tid 22320] [client 192.178.4.101:45588] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRUGLar7fLMQQanZ_9yIUwAAAMs"]
[Thu Nov 13 06:12:08.934212 2025] [:error] [pid 22224:tid 22283] [client 192.178.4.101:36474] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRUGOLuEVuTj3a_UBfARCQAAAIM"]
[Thu Nov 13 06:12:11.069833 2025] [:error] [pid 22566:tid 22577] [client 192.178.4.101:41996] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRUGOzfdqWaUbu3e06-e-gAAAQk"]
[Thu Nov 13 06:25:45.233800 2025] [:error] [pid 22307:tid 22311] [client 34.18.2.224:60956] [client 34.18.2.224] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 34.18.2.224, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRUJaar7fLMQQanZ_9yMXgAAAMI"]
[Thu Nov 13 06:32:39.604488 2025] [:error] [pid 22566:tid 22587] [client 192.178.4.101:50791] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRULBzfdqWaUbu3e06-ltAAAARM"]
[Thu Nov 13 06:32:43.169697 2025] [:error] [pid 34451:tid 34465] [client 192.178.4.101:51273] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRULCzRcD8KetQb4RaqRCAAAAUw"]
[Thu Nov 13 06:32:48.687456 2025] [:error] [pid 22224:tid 22283] [client 192.178.4.101:38106] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRULELuEVuTj3a_UBfAVugAAAIM"]
[Thu Nov 13 06:32:51.412594 2025] [:error] [pid 34451:tid 34455] [client 192.178.4.101:47981] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRULEzRcD8KetQb4RaqRTAAAAUI"]
[Thu Nov 13 06:32:59.680932 2025] [:error] [pid 22307:tid 22326] [client 192.178.4.101:41862] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRULG6r7fLMQQanZ_9yN0wAAANE"]
[Thu Nov 13 06:33:17.425042 2025] [:error] [pid 34451:tid 34468] [client 192.178.4.101:64995] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRULLTRcD8KetQb4RaqRYwAAAU8"]
[Thu Nov 13 06:33:23.556784 2025] [:error] [pid 22566:tid 22568] [client 192.178.4.101:52193] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRULMzfdqWaUbu3e06-l7QAAAQA"]
[Thu Nov 13 06:33:29.598985 2025] [:error] [pid 22222:tid 22236] [client 192.178.4.101:61258] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRULOTL-5qXvQuZkA4G0UQAAAAo"]
[Thu Nov 13 06:33:32.584171 2025] [:error] [pid 22222:tid 22242] [client 192.178.4.101:64820] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRULPDL-5qXvQuZkA4G0VgAAABA"]
[Thu Nov 13 06:34:56.047777 2025] [:error] [pid 22307:tid 22321] [client 192.178.4.101:63649] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRULkKr7fLMQQanZ_9yPFQAAAMw"]
[Thu Nov 13 06:34:58.433864 2025] [:error] [pid 22307:tid 22315] [client 192.178.4.101:36506] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRULkqr7fLMQQanZ_9yPIQAAAMY"]
[Thu Nov 13 06:35:32.822161 2025] [:error] [pid 22307:tid 22324] [client 192.178.4.101:41162] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRULtKr7fLMQQanZ_9yPpgAAAM8"]
[Thu Nov 13 06:35:38.452171 2025] [:error] [pid 34451:tid 34467] [client 192.178.4.101:44464] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRULujRcD8KetQb4RaqTOQAAAU4"]
[Thu Nov 13 06:35:41.228184 2025] [:error] [pid 22222:tid 22233] [client 192.178.4.101:58221] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRULvTL-5qXvQuZkA4G1ywAAAAc"]
[Thu Nov 13 06:35:44.041277 2025] [:error] [pid 34451:tid 34473] [client 192.178.4.101:55481] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRULwDRcD8KetQb4RaqTQAAAAVQ"]
[Thu Nov 13 06:41:58.028355 2025] [:error] [pid 22224:tid 22282] [client 192.178.4.101:60596] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRUNNruEVuTj3a_UBfAXqwAAAII"]
[Thu Nov 13 06:42:00.576856 2025] [:error] [pid 22307:tid 22330] [client 192.178.4.101:57111] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRUNOKr7fLMQQanZ_9yRKAAAANU"]
[Thu Nov 13 06:42:03.215494 2025] [:error] [pid 22224:tid 22302] [client 192.178.4.101:51491] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRUNO7uEVuTj3a_UBfAXvwAAAJY"]
[Thu Nov 13 06:42:18.062932 2025] [:error] [pid 22224:tid 22290] [client 192.178.4.101:58516] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRUNSruEVuTj3a_UBfAX1gAAAIo"]
[Thu Nov 13 06:42:20.274738 2025] [:error] [pid 22566:tid 22590] [client 192.178.4.101:44263] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRUNTDfdqWaUbu3e06-okAAAARY"]
[Thu Nov 13 06:42:22.515957 2025] [:error] [pid 22566:tid 22591] [client 192.178.4.101:49587] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRUNTjfdqWaUbu3e06-olAAAARc"]
[Thu Nov 13 06:42:32.666434 2025] [:error] [pid 22224:tid 22284] [client 192.178.4.101:40792] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRUNWLuEVuTj3a_UBfAX2QAAAIQ"]
[Thu Nov 13 06:42:35.164196 2025] [:error] [pid 34451:tid 34465] [client 192.178.4.101:41517] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRUNWzRcD8KetQb4RaqVqQAAAUw"]
[Thu Nov 13 06:42:37.691052 2025] [:error] [pid 22222:tid 22236] [client 192.178.4.101:44862] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRUNXTL-5qXvQuZkA4G29wAAAAo"]
[Thu Nov 13 06:42:42.607810 2025] [:error] [pid 34451:tid 34469] [client 192.178.4.101:49874] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRUNYjRcD8KetQb4RaqVuQAAAVA"]
[Thu Nov 13 06:45:07.998774 2025] [:error] [pid 22223:tid 22269] [client 192.178.4.101:62010] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRUN896it_tNBGH9EAEtjAAAAFA"]
[Thu Nov 13 06:45:11.643615 2025] [:error] [pid 22224:tid 22293] [client 192.178.4.101:64148] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRUN97uEVuTj3a_UBfAY1gAAAI0"]
[Thu Nov 13 06:45:22.158994 2025] [:error] [pid 22307:tid 22314] [client 192.178.4.101:47594] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRUOAqr7fLMQQanZ_9yTewAAAMU"]
[Thu Nov 13 06:45:25.393300 2025] [:error] [pid 22223:tid 22265] [client 192.178.4.101:56381] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRUOBd6it_tNBGH9EAEtswAAAEw"]
[Thu Nov 13 06:45:33.277059 2025] [:error] [pid 34451:tid 34477] [client 192.178.4.101:49667] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRUODTRcD8KetQb4RaqXjAAAAVg"]
[Thu Nov 13 06:45:40.251226 2025] [:error] [pid 22566:tid 22587] [client 192.178.4.101:45547] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRUOFDfdqWaUbu3e06-pwwAAARM"]
[Thu Nov 13 06:45:43.675322 2025] [:error] [pid 22307:tid 22328] [client 192.178.4.101:42481] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRUOF6r7fLMQQanZ_9yTiAAAANM"]
[Thu Nov 13 06:45:47.144089 2025] [:error] [pid 34451:tid 34473] [client 192.178.4.101:56967] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRUOGzRcD8KetQb4RaqXnwAAAVQ"]
[Thu Nov 13 06:47:39.435371 2025] [:error] [pid 22222:tid 22241] [client 192.178.4.101:48713] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRUOizL-5qXvQuZkA4G40QAAAA8"]
[Thu Nov 13 06:47:42.203412 2025] [:error] [pid 22222:tid 22229] [client 192.178.4.101:56989] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRUOjjL-5qXvQuZkA4G41wAAAAM"]
[Thu Nov 13 06:47:47.834329 2025] [:error] [pid 22307:tid 22309] [client 192.178.4.101:43003] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRUOk6r7fLMQQanZ_9yUpAAAAMA"]
[Thu Nov 13 06:50:21.073123 2025] [:error] [pid 22223:tid 22277] [client 103.159.36.210:55526] [client 103.159.36.210] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||paramountbaldivis.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "paramountbaldivis.com"] [uri "/Wp-JsOn/Wp/V2/UsErS"] [unique_id "aRUPLd6it_tNBGH9EAEu4QAAAFg"]
[Thu Nov 13 06:50:41.795427 2025] [:error] [pid 34451:tid 34458] [client 192.178.4.101:63784] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRUPQTRcD8KetQb4RaqZaAAAAUU"]
[Thu Nov 13 06:50:47.606333 2025] [:error] [pid 22307:tid 22314] [client 192.178.4.101:53774] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRUPR6r7fLMQQanZ_9yVPQAAAMU"]
[Thu Nov 13 06:50:59.045735 2025] [:error] [pid 22566:tid 22588] [client 192.178.4.101:35654] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRUPUzfdqWaUbu3e06-qxAAAARQ"]
[Thu Nov 13 06:51:01.990405 2025] [:error] [pid 22223:tid 22275] [client 192.178.4.101:41310] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRUPVd6it_tNBGH9EAEu_wAAAFY"]
[Thu Nov 13 06:51:11.461154 2025] [:error] [pid 22224:tid 22304] [client 192.178.4.101:60143] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRUPX7uEVuTj3a_UBfAaIAAAAJg"]
[Thu Nov 13 06:56:55.500339 2025] [:error] [pid 22223:tid 22274] [client 192.178.4.101:51399] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRUQt96it_tNBGH9EAEweAAAAFU"]
[Thu Nov 13 06:56:58.047143 2025] [:error] [pid 34451:tid 34471] [client 192.178.4.101:43522] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRUQujRcD8KetQb4RaqbkwAAAVI"]
[Thu Nov 13 06:57:14.289250 2025] [:error] [pid 22307:tid 22331] [client 192.178.4.101:61770] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRUQyqr7fLMQQanZ_9yXGgAAANY"]
[Thu Nov 13 06:57:31.994892 2025] [:error] [pid 22224:tid 22283] [client 192.178.4.101:64324] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRUQ27uEVuTj3a_UBfAbVwAAAIM"]
[Thu Nov 13 06:57:34.210427 2025] [:error] [pid 22307:tid 22331] [client 192.178.4.101:38072] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRUQ3qr7fLMQQanZ_9yXJQAAANY"]
[Thu Nov 13 06:57:38.546797 2025] [:error] [pid 22223:tid 22253] [client 192.178.4.101:43384] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRUQ4t6it_tNBGH9EAEwkQAAAEA"]
[Thu Nov 13 06:57:45.108106 2025] [:error] [pid 34451:tid 34475] [client 192.178.4.101:47534] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRUQ6TRcD8KetQb4Raqb1gAAAVY"]
[Thu Nov 13 06:59:46.492006 2025] [:error] [pid 34451:tid 34470] [client 192.178.4.101:64225] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRURYjRcD8KetQb4RaqdQQAAAVE"]
[Thu Nov 13 06:59:52.727792 2025] [:error] [pid 22223:tid 22262] [client 192.178.4.101:62259] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRURaN6it_tNBGH9EAEw7AAAAEk"]
[Thu Nov 13 07:00:05.121248 2025] [:error] [pid 34451:tid 34471] [client 192.178.4.101:50889] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRURdTRcD8KetQb4RaqdXgAAAVI"]
[Thu Nov 13 07:00:16.956802 2025] [:error] [pid 22307:tid 22310] [client 192.178.4.101:51540] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRURgKr7fLMQQanZ_9yXjgAAAME"]
[Thu Nov 13 07:00:31.764425 2025] [:error] [pid 34451:tid 34475] [client 192.178.4.101:43495] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRURjzRcD8KetQb4RaqdeQAAAVY"]
[Thu Nov 13 07:00:39.817983 2025] [:error] [pid 22566:tid 22572] [client 192.178.4.101:37015] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRURlzfdqWaUbu3e06-s4QAAAQQ"]
[Thu Nov 13 07:17:19.528415 2025] [:error] [pid 22566:tid 22569] [client 192.178.4.101:56381] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRUVfzfdqWaUbu3e06-wgAAAAQE"]
[Thu Nov 13 07:21:12.082928 2025] [:error] [pid 22307:tid 22322] [client 192.178.4.101:63199] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRUWaKr7fLMQQanZ_9ycfgAAAM0"]
[Thu Nov 13 07:21:15.470560 2025] [:error] [pid 22307:tid 22326] [client 192.178.4.101:38832] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRUWa6r7fLMQQanZ_9ycggAAANE"]
[Thu Nov 13 07:21:42.900620 2025] [:error] [pid 22223:tid 22266] [client 192.178.4.101:46410] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRUWht6it_tNBGH9EAE02gAAAE0"]
[Thu Nov 13 07:21:49.683271 2025] [:error] [pid 22566:tid 22571] [client 192.178.4.101:44189] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRUWjTfdqWaUbu3e06-x0wAAAQM"]
[Thu Nov 13 07:21:55.997041 2025] [:error] [pid 34451:tid 34472] [client 192.178.4.101:64310] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRUWkzRcD8KetQb4RaqkSQAAAVM"]
[Thu Nov 13 07:27:53.242860 2025] [:error] [pid 22307:tid 22317] [client 192.178.4.101:37022] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRUX-ar7fLMQQanZ_9yeswAAAMg"]
[Thu Nov 13 07:28:14.788959 2025] [:error] [pid 34451:tid 34460] [client 192.178.4.101:41075] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRUYDjRcD8KetQb4RaqmdwAAAUc"]
[Thu Nov 13 07:28:27.541013 2025] [:error] [pid 34451:tid 34467] [client 192.178.4.101:38932] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRUYGzRcD8KetQb4RaqmjQAAAU4"]
[Thu Nov 13 07:28:34.243842 2025] [:error] [pid 22224:tid 22282] [client 192.178.4.101:64324] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRUYIruEVuTj3a_UBfAhZQAAAII"]
[Thu Nov 13 07:28:36.439738 2025] [:error] [pid 22224:tid 22288] [client 192.178.4.101:41823] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRUYJLuEVuTj3a_UBfAhZwAAAIg"]
[Thu Nov 13 07:33:52.178675 2025] [:error] [pid 22307:tid 22313] [client 64.176.201.153:43512] [client 64.176.201.153] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.176.201.153, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRUZYKr7fLMQQanZ_9ygFgAAAMQ"]
[Thu Nov 13 07:37:54.488161 2025] [:error] [pid 22566:tid 22583] [client 85.203.36.128:35971] [client 85.203.36.128] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paramountbaldivis.com"] [uri "/.env"] [unique_id "aRUaUjfdqWaUbu3e06-1VAAAAQ8"]
[Thu Nov 13 08:40:27.136366 2025] [:error] [pid 22222:tid 22246] [client 178.128.250.184:51152] [client 178.128.250.184] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 178.128.250.184, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRUo-zL-5qXvQuZkA4HS8gAAABQ"]
[Thu Nov 13 08:45:56.039330 2025] [:error] [pid 22307:tid 22329] [client 192.178.4.101:43264] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRUqRKr7fLMQQanZ_9y1hQAAANQ"]
[Thu Nov 13 08:55:30.851674 2025] [:error] [pid 34451:tid 34474] [client 192.178.4.101:50740] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRUsgjRcD8KetQb4RarKBgAAAVU"]
[Thu Nov 13 09:00:27.461286 2025] [:error] [pid 22224:tid 22284] [client 192.178.4.101:53203] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRUtq7uEVuTj3a_UBfA24QAAAIQ"]
[Thu Nov 13 09:00:46.365064 2025] [:error] [pid 22223:tid 22268] [client 192.178.4.101:47674] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRUtvt6it_tNBGH9EAFKQQAAAE8"]
[Thu Nov 13 11:35:41.927740 2025] [:error] [pid 62216:tid 62251] [client 45.169.255.180:24283] [client 45.169.255.180] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.169.255.180, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aRVSDepyFB9M2aVQhwO-tgAAAAQ"]
[Thu Nov 13 11:36:33.732785 2025] [:error] [pid 62216:tid 62257] [client 45.169.255.180:32927] [client 45.169.255.180] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.169.255.180, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aRVSQepyFB9M2aVQhwO-_AAAAAo"]
[Thu Nov 13 12:08:22.310355 2025] [:error] [pid 6086:tid 6108] [client 192.250.232.94:46442] [client 192.250.232.94] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.250.232.94, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRVZtn9_6CRZzjZnAe2UIgAAARM"]
[Thu Nov 13 12:22:32.906902 2025] [:error] [pid 62215:tid 62233] [client 192.178.4.101:38290] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRVdCEvClof1c6XaOBU03wAAAM4"]
[Thu Nov 13 13:08:56.976032 2025] [:error] [pid 62215:tid 62226] [client 94.130.237.27:56698] [client 94.130.237.27] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.130.237.27, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRVn6EvClof1c6XaOBVENQAAAMc"]
[Thu Nov 13 14:02:38.487498 2025] [:error] [pid 62217:tid 62274] [client 43.159.143.187:35516] [client 43.159.143.187] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||paramountbaldivis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRV0fhjGU3T9wKBmdNfsNwAAAEA"]
[Thu Nov 13 15:25:21.501193 2025] [:error] [pid 6086:tid 6089] [client 65.109.98.205:51312] [client 65.109.98.205] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 65.109.98.205, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRWH4X9_6CRZzjZnAe0BmQAAAQA"]
[Thu Nov 13 16:40:07.329800 2025] [:error] [pid 6086:tid 6107] [client 185.199.223.93:45620] [client 185.199.223.93] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.199.223.93, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRWZZ39_6CRZzjZnAe0hoQAAARI"]
[Thu Nov 13 17:09:46.134033 2025] [:error] [pid 44354:tid 44372] [client 182.44.8.254:43974] [client 182.44.8.254] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||paramountbaldivis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRWgWnqKopQhy3G4s3loFgAAAY0"]
[Thu Nov 13 17:49:35.710597 2025] [:error] [pid 44245:tid 44262] [client 208.87.128.182:56446] [client 208.87.128.182] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 208.87.128.182, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRWpr4k7r-HKZdqw-dXNOQAAAUs"]
[Thu Nov 13 17:55:44.265062 2025] [:error] [pid 62303:tid 62320] [client 150.241.107.255:56601] [client 150.241.107.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRWrIL-hlFTtVrZw8jDoGAAAAI0"]
[Thu Nov 13 17:55:44.812713 2025] [:error] [pid 62216:tid 62258] [client 150.241.107.255:56807] [client 150.241.107.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRWrIOpyFB9M2aVQhwM0oAAAAAs"]
[Thu Nov 13 17:55:45.357988 2025] [:error] [pid 62303:tid 62324] [client 150.241.107.255:57142] [client 150.241.107.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aRWrIb-hlFTtVrZw8jDoKgAAAJE"]
[Thu Nov 13 17:57:39.411796 2025] [:error] [pid 44245:tid 44260] [client 136.144.19.208:62685] [client 136.144.19.208] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/txets.php"] [unique_id "aRWrk4k7r-HKZdqw-dXQYQAAAUk"]
[Thu Nov 13 17:57:40.374426 2025] [:error] [pid 62215:tid 62237] [client 136.144.19.201:20569] [client 136.144.19.201] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/txets.php"] [unique_id "aRWrlEvClof1c6XaOBWtVgAAANI"]
[Thu Nov 13 17:57:41.336691 2025] [:error] [pid 62217:tid 62274] [client 136.144.19.247:52899] [client 136.144.19.247] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/txets.php"] [unique_id "aRWrlRjGU3T9wKBmdNc30gAAAEA"]
[Thu Nov 13 18:20:09.390151 2025] [:error] [pid 44354:tid 44383] [client 43.153.102.138:45808] [client 43.153.102.138] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.paramountbaldivis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.paramountbaldivis.com"] [uri "/"] [unique_id "aRWw2XqKopQhy3G4s3l8tgAAAZg"]
[Thu Nov 13 19:02:05.885018 2025] [:error] [pid 62215:tid 62233] [client 82.223.83.78:51524] [client 82.223.83.78] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 82.223.83.78, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRW6rUvClof1c6XaOBXF3AAAAM4"]
[Thu Nov 13 20:59:24.812420 2025] [:error] [pid 44354:tid 44380] [client 192.178.4.101:38975] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRXWLHqKopQhy3G4s3movgAAAZU"]
[Thu Nov 13 20:59:49.427401 2025] [:error] [pid 44354:tid 44373] [client 192.178.4.101:62306] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRXWRXqKopQhy3G4s3mo0wAAAY4"]
[Thu Nov 13 21:00:01.965719 2025] [:error] [pid 44354:tid 44364] [client 192.178.4.101:37217] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRXWUXqKopQhy3G4s3mo4gAAAYU"]
[Thu Nov 13 21:08:29.958177 2025] [:error] [pid 6086:tid 6112] [client 192.178.4.101:45354] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRXYTX9_6CRZzjZnAe1dwgAAARc"]
[Thu Nov 13 21:09:08.492916 2025] [:error] [pid 62217:tid 62282] [client 192.178.4.101:55558] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRXYdBjGU3T9wKBmdNddqgAAAEg"]
[Thu Nov 13 21:11:44.829388 2025] [:error] [pid 62303:tid 62307] [client 192.178.4.101:57377] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRXZEL-hlFTtVrZw8jAPmgAAAIA"]
[Thu Nov 13 21:11:45.980149 2025] [:error] [pid 62216:tid 62270] [client 192.178.4.101:57249] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRXZEepyFB9M2aVQhwNZngAAABc"]
[Thu Nov 13 21:11:46.893104 2025] [:error] [pid 62217:tid 62277] [client 192.178.4.101:59549] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRXZEhjGU3T9wKBmdNdeMAAAAEM"]
[Thu Nov 13 21:12:02.500802 2025] [:error] [pid 44354:tid 44378] [client 192.178.4.101:61552] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRXZInqKopQhy3G4s3mr7wAAAZM"]
[Thu Nov 13 21:14:50.247986 2025] [:error] [pid 62216:tid 62263] [client 192.178.4.101:39235] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRXZyupyFB9M2aVQhwNaRQAAABA"]
[Thu Nov 13 21:14:55.079311 2025] [:error] [pid 62215:tid 62243] [client 192.178.4.101:39477] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRXZz0vClof1c6XaOBX00QAAANg"]
[Thu Nov 13 21:15:30.723460 2025] [:error] [pid 44245:tid 44252] [client 192.178.4.101:38741] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRXZ8ok7r-HKZdqw-dX5xAAAAUE"]
[Thu Nov 13 21:15:41.742285 2025] [:error] [pid 44245:tid 44257] [client 192.178.4.101:47904] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRXZ_Yk7r-HKZdqw-dX52AAAAUY"]
[Thu Nov 13 21:22:04.785589 2025] [:error] [pid 62217:tid 62287] [client 192.178.4.101:55067] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRXbfBjGU3T9wKBmdNdgTAAAAE0"]
[Thu Nov 13 21:22:21.251612 2025] [:error] [pid 6086:tid 6105] [client 192.178.4.101:41199] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRXbjX9_6CRZzjZnAe1goQAAARA"]
[Thu Nov 13 21:22:31.871795 2025] [:error] [pid 62215:tid 62232] [client 192.178.4.101:43389] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRXbl0vClof1c6XaOBX3XQAAAM0"]
[Thu Nov 13 21:22:46.731646 2025] [:error] [pid 62216:tid 62264] [client 192.178.4.101:41158] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRXbpupyFB9M2aVQhwNcCwAAABE"]
[Thu Nov 13 21:27:12.544250 2025] [:error] [pid 4994:tid 5069] [client 192.178.4.101:42096] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRXcsAVaYoYtjfBbabUCZQAAAJA"]
[Thu Nov 13 21:27:37.606176 2025] [:error] [pid 4993:tid 5045] [client 192.178.4.101:39402] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRXcycl_cC0Js5xNCU06RAAAABM"]
[Thu Nov 13 21:27:38.542700 2025] [:error] [pid 4992:tid 5006] [client 192.178.4.101:54920] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRXcyimsutP7nusdj-B20wAAAMo"]
[Thu Nov 13 21:27:50.443965 2025] [:error] [pid 4992:tid 5017] [client 192.178.4.101:63678] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRXc1imsutP7nusdj-B24gAAANU"]
[Thu Nov 13 21:27:59.652918 2025] [:error] [pid 5086:tid 5108] [client 192.178.4.101:62135] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRXc3x_dsYLFCHw574iY3AAAARM"]
[Thu Nov 13 21:31:43.277237 2025] [:error] [pid 5086:tid 5104] [client 192.178.4.101:42548] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRXdvx_dsYLFCHw574ibRwAAAQ8"]
[Thu Nov 13 21:31:58.405475 2025] [:error] [pid 4992:tid 5019] [client 192.178.4.101:56854] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRXdzimsutP7nusdj-B5MAAAANc"]
[Thu Nov 13 21:34:18.250433 2025] [:error] [pid 4994:tid 5054] [client 192.178.4.101:38668] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/app/%E0%B9%80%E0%B8%97%E0%B8%84%E0%B8%99%E0%B8%B4%E0%B8%84%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95pg.html"] [unique_id "aRXeWgVaYoYtjfBbabUFNwAAAIE"]
[Thu Nov 13 21:34:19.402469 2025] [:error] [pid 5086:tid 5102] [client 192.178.4.101:59353] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/casino/%E0%B9%80%E0%B8%81%E0%B8%A1%E0%B8%A2%E0%B8%B4%E0%B8%87%E0%B8%9B%E0%B8%A5%E0%B8%B2jili.html"] [unique_id "aRXeWx_dsYLFCHw574icwgAAAQ0"]
[Thu Nov 13 21:34:20.644903 2025] [:error] [pid 5086:tid 5101] [client 192.178.4.101:55319] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/gambling/%E0%B8%94%E0%B8%B9%20%E0%B8%9C%E0%B8%A5%E0%B8%9A%E0%B8%AD%E0%B8%A5%20888%20%E0%B8%AA%E0%B8%94%20%E0%B8%9F%E0%B8%B8%E0%B8%95%E0%B8%9A%E0%B8%AD%E0%B8%A5.html"] [unique_id "aRXeXB_dsYLFCHw574icywAAAQw"]
[Thu Nov 13 21:34:31.759664 2025] [:error] [pid 4992:tid 5012] [client 192.178.4.101:36008] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/gambling/pg%20slot%20auto%20168%20download.html"] [unique_id "aRXeZymsutP7nusdj-B6HAAAANA"]
[Thu Nov 13 21:34:35.780097 2025] [:error] [pid 4993:tid 5028] [client 192.178.4.101:43645] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ios/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95pg%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%871688.html"] [unique_id "aRXea8l_cC0Js5xNCU09DgAAAAI"]
[Thu Nov 13 21:34:37.427154 2025] [:error] [pid 4994:tid 5055] [client 192.178.4.101:59964] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRXebQVaYoYtjfBbabUFWgAAAII"]
[Thu Nov 13 21:34:43.869907 2025] [:error] [pid 4992:tid 5012] [client 192.178.4.101:53842] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/dabong/fortune%20tiger%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95pg.html"] [unique_id "aRXecymsutP7nusdj-B6LgAAANA"]
[Thu Nov 13 21:34:49.562214 2025] [:error] [pid 4992:tid 5007] [client 192.178.4.101:47135] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRXeeSmsutP7nusdj-B6OwAAAMs"]
[Thu Nov 13 21:35:00.193348 2025] [:error] [pid 4994:tid 5069] [client 192.178.4.101:47185] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRXehAVaYoYtjfBbabUFbgAAAJA"]
[Thu Nov 13 21:35:00.640895 2025] [:error] [pid 4994:tid 5056] [client 192.178.4.101:47892] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRXehAVaYoYtjfBbabUFcAAAAIM"]
[Thu Nov 13 21:35:02.449796 2025] [:error] [pid 5086:tid 5106] [client 192.178.4.101:64410] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRXehh_dsYLFCHw574idIwAAARE"]
[Thu Nov 13 21:37:53.207054 2025] [:error] [pid 5086:tid 5106] [client 192.178.4.101:38949] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRXfMR_dsYLFCHw574ifDgAAARE"]
[Thu Nov 13 21:38:23.189373 2025] [:error] [pid 4992:tid 5002] [client 192.178.4.101:43862] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRXfTymsutP7nusdj-B7swAAAMY"]
[Thu Nov 13 21:38:33.941272 2025] [:error] [pid 4993:tid 5036] [client 192.178.4.101:63843] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRXfWcl_cC0Js5xNCU0_lAAAAAo"]
[Thu Nov 13 21:42:22.513330 2025] [:error] [pid 4993:tid 5036] [client 192.178.4.101:62942] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRXgPsl_cC0Js5xNCU1BAQAAAAo"]
[Thu Nov 13 21:42:43.891332 2025] [:error] [pid 5086:tid 5108] [client 192.178.4.101:55512] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRXgUx_dsYLFCHw574iiWQAAARM"]
[Thu Nov 13 21:42:53.853344 2025] [:error] [pid 4994:tid 5073] [client 192.178.4.101:48441] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRXgXQVaYoYtjfBbabUIlgAAAJQ"]
[Thu Nov 13 21:46:36.000489 2025] [:error] [pid 5086:tid 5112] [client 192.178.4.101:58213] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRXhOx_dsYLFCHw574ilPgAAARc"]
[Thu Nov 13 21:46:52.686295 2025] [:error] [pid 4992:tid 5018] [client 192.178.4.101:46797] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRXhTCmsutP7nusdj-B_ogAAANY"]
[Thu Nov 13 21:47:47.893748 2025] [:error] [pid 5086:tid 5102] [client 147.182.243.3:49930] [client 147.182.243.3] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 147.182.243.3, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRXhgx_dsYLFCHw574imGQAAAQ0"]
[Thu Nov 13 21:49:41.221372 2025] [:error] [pid 5086:tid 5093] [client 192.178.4.101:36056] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRXh9R_dsYLFCHw574im4gAAAQQ"]
[Thu Nov 13 21:50:07.565589 2025] [:error] [pid 4994:tid 5059] [client 192.178.4.101:42799] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRXiDwVaYoYtjfBbabULPgAAAIY"]
[Thu Nov 13 21:50:16.843906 2025] [:error] [pid 4992:tid 5016] [client 192.178.4.101:59128] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRXiGCmsutP7nusdj-CBCgAAANQ"]
[Thu Nov 13 21:53:40.992127 2025] [:error] [pid 4992:tid 4998] [client 192.178.4.101:49886] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRXi5CmsutP7nusdj-CCjgAAAMI"]
[Thu Nov 13 22:17:38.589413 2025] [:error] [pid 19872:tid 19900] [client 192.178.4.101:51246] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRXogsusrN1b6ZJ_vbsaSAAAAFc"]
[Thu Nov 13 22:18:04.806519 2025] [:error] [pid 19872:tid 19883] [client 192.178.4.101:46197] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRXonMusrN1b6ZJ_vbsagQAAAEY"]
[Thu Nov 13 22:18:16.814239 2025] [:error] [pid 5086:tid 5110] [client 192.178.4.101:49425] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRXoqB_dsYLFCHw574i3DgAAARU"]
[Thu Nov 13 22:51:44.739316 2025] [:error] [pid 4993:tid 5034] [client 45.138.16.29:60804] [client 45.138.16.29] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/postnews.php"] [unique_id "aRXwgMl_cC0Js5xNCU1X8QAAAAg"]
[Thu Nov 13 22:51:45.266366 2025] [:error] [pid 28868:tid 28871] [client 45.138.16.29:60875] [client 45.138.16.29] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/postnews.php"] [unique_id "aRXwgYq9fgBJ6LAEEDzdHgAAAUE"]
[Thu Nov 13 22:51:45.790764 2025] [:error] [pid 4993:tid 5039] [client 45.138.16.29:61004] [client 45.138.16.29] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/postnews.php"] [unique_id "aRXwgcl_cC0Js5xNCU1YAwAAAA0"]
[Thu Nov 13 23:09:40.458370 2025] [:error] [pid 4994:tid 5061] [client 109.228.37.48:32878] [client 109.228.37.48] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 109.228.37.48, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRX0tAVaYoYtjfBbabUkhAAAAIg"]
[Thu Nov 13 23:55:00.942343 2025] [:error] [pid 4992:tid 5018] [client 159.223.72.153:62282] [client 159.223.72.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paramountbaldivis.com"] [uri "/sftp-config.json"] [unique_id "aRX_VCmsutP7nusdj-CnTQAAANY"]
[Fri Nov 14 00:19:39.962614 2025] [:error] [pid 56497:tid 56571] [client 23.166.40.70:51780] [client 23.166.40.70] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 23.166.40.70, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRYFG3satOTNIa5GK3tDjAAAAJA"]
[Fri Nov 14 02:50:20.450040 2025] [:error] [pid 56586:tid 56607] [client 198.71.53.139:56480] [client 198.71.53.139] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 198.71.53.139, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRYobK7eYD3G9deYMP5kywAAAZA"]
[Fri Nov 14 04:14:49.176479 2025] [:error] [pid 2479:tid 2531] [client 178.62.32.109:59680] [client 178.62.32.109] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 178.62.32.109, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRY8OU90HPPsimtVg8PaOQAAAEk"]
[Fri Nov 14 05:30:08.367979 2025] [:error] [pid 47630:tid 47647] [client 85.128.143.124:48778] [client 85.128.143.124] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.128.143.124, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRZN4MxXXNBfWgpfVJ4XzAAAAQ8"]
[Fri Nov 14 05:47:54.426163 2025] [:error] [pid 47156:tid 47239] [client 192.178.4.101:56875] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRZSCtjrQX_P-kC7M_7pRgAAAJg"]
[Fri Nov 14 05:48:16.702902 2025] [:error] [pid 47155:tid 47200] [client 192.178.4.101:35186] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRZSIJipxRXMZJH8hmjucwAAAE4"]
[Fri Nov 14 05:48:41.631006 2025] [:error] [pid 47630:tid 47652] [client 192.178.4.101:54870] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRZSOcxXXNBfWgpfVJ4jsgAAARQ"]
[Fri Nov 14 05:48:45.107766 2025] [:error] [pid 47155:tid 47209] [client 192.178.4.101:52174] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRZSPZipxRXMZJH8hmjuowAAAFc"]
[Fri Nov 14 05:54:16.335108 2025] [:error] [pid 47155:tid 47187] [client 192.178.4.101:38857] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRZTiJipxRXMZJH8hmjwrgAAAEE"]
[Fri Nov 14 05:54:27.927972 2025] [:error] [pid 47156:tid 47231] [client 192.178.4.101:62124] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRZTk9jrQX_P-kC7M_7saQAAAJE"]
[Fri Nov 14 05:54:36.379247 2025] [:error] [pid 47630:tid 47639] [client 192.178.4.101:44943] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRZTnMxXXNBfWgpfVJ4m6gAAAQc"]
[Fri Nov 14 05:54:52.850046 2025] [:error] [pid 47630:tid 47643] [client 192.178.4.101:50176] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRZTrMxXXNBfWgpfVJ4nHwAAAQs"]
[Fri Nov 14 05:59:08.994316 2025] [:error] [pid 47154:tid 47173] [client 192.178.4.101:52992] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRZUrEijA13A3g3ATrJtUQAAAA4"]
[Fri Nov 14 06:03:32.308422 2025] [:error] [pid 47242:tid 47261] [client 172.210.164.199:43271] [client 172.210.164.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/hehe.php"] [unique_id "aRZVtFPNnvrux3OMagyJQwAAANA"]
[Fri Nov 14 06:03:32.770995 2025] [:error] [pid 47156:tid 47239] [client 172.210.164.199:48403] [client 172.210.164.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/hehe.php"] [unique_id "aRZVtNjrQX_P-kC7M_7woQAAAJg"]
[Fri Nov 14 06:03:33.289477 2025] [:error] [pid 47154:tid 47180] [client 172.210.164.199:48429] [client 172.210.164.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/hehe.php"] [unique_id "aRZVtUijA13A3g3ATrJvPQAAABU"]
[Fri Nov 14 06:03:33.879378 2025] [:error] [pid 47156:tid 47216] [client 172.210.164.199:48446] [client 172.210.164.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/hehe.php"] [unique_id "aRZVtdjrQX_P-kC7M_7wpQAAAII"]
[Fri Nov 14 06:05:54.152835 2025] [:error] [pid 47630:tid 47636] [client 192.178.4.101:62028] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRZWQsxXXNBfWgpfVJ4uJgAAAQQ"]
[Fri Nov 14 06:05:57.511091 2025] [:error] [pid 47154:tid 47159] [client 192.178.4.101:35825] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRZWRUijA13A3g3ATrJwVQAAAAA"]
[Fri Nov 14 06:06:38.114390 2025] [:error] [pid 47630:tid 47650] [client 192.178.4.101:52526] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRZWbsxXXNBfWgpfVJ4unQAAARI"]
[Fri Nov 14 06:21:57.795658 2025] [:error] [pid 47156:tid 47236] [client 192.178.4.101:61271] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRZaBdjrQX_P-kC7M_75ywAAAJU"]
[Fri Nov 14 06:22:01.318017 2025] [:error] [pid 47156:tid 47218] [client 192.178.4.101:43899] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRZaCdjrQX_P-kC7M_75zgAAAIQ"]
[Fri Nov 14 06:22:19.566698 2025] [:error] [pid 47155:tid 47198] [client 192.178.4.101:37828] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRZaG5ipxRXMZJH8hmj89wAAAEw"]
[Fri Nov 14 06:22:33.234082 2025] [:error] [pid 47154:tid 47162] [client 192.178.4.101:51978] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRZaKUijA13A3g3ATrJ4GQAAAAM"]
[Fri Nov 14 06:34:42.309139 2025] [:error] [pid 47155:tid 47189] [client 192.178.4.101:55830] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRZdApipxRXMZJH8hmgC-wAAAEM"]
[Fri Nov 14 06:47:44.048798 2025] [:error] [pid 47155:tid 47191] [client 192.178.4.101:44908] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRZgEJipxRXMZJH8hmgH_QAAAEU"]
[Fri Nov 14 06:47:46.682006 2025] [:error] [pid 47242:tid 47261] [client 192.178.4.101:64939] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRZgElPNnvrux3OMagygbgAAANA"]
[Fri Nov 14 06:57:31.115884 2025] [:error] [pid 47156:tid 47217] [client 18.119.132.99:33038] [client 18.119.132.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 18.119.132.99, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRZiW9jrQX_P-kC7M_4K9AAAAIM"]
[Fri Nov 14 07:00:07.489475 2025] [:error] [pid 47630:tid 47646] [client 192.178.4.101:63763] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRZi98xXXNBfWgpfVJ5P0wAAAQ4"]
[Fri Nov 14 07:13:57.089618 2025] [:error] [pid 47155:tid 47192] [client 192.178.4.101:46339] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRZmNZipxRXMZJH8hmgRJAAAAEY"]
[Fri Nov 14 07:41:38.613898 2025] [:error] [pid 47154:tid 47159] [client 192.178.4.101:54199] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRZsskijA13A3g3ATrKTsQAAAAA"]
[Fri Nov 14 07:41:46.208016 2025] [:error] [pid 47156:tid 47228] [client 192.178.4.101:50650] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRZsutjrQX_P-kC7M_4eEAAAAI4"]
[Fri Nov 14 07:55:27.622814 2025] [:error] [pid 47156:tid 47233] [client 192.178.4.101:40822] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRZv79jrQX_P-kC7M_4keAAAAJM"]
[Fri Nov 14 07:55:32.898770 2025] [:error] [pid 47242:tid 47252] [client 192.178.4.101:38052] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRZv9FPNnvrux3OMagy3FgAAAMc"]
[Fri Nov 14 07:55:35.586563 2025] [:error] [pid 47156:tid 47221] [client 192.178.4.101:55037] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRZv99jrQX_P-kC7M_4kkwAAAIc"]
[Fri Nov 14 08:01:55.132661 2025] [:error] [pid 47156:tid 47230] [client 192.178.4.101:42293] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRZxc9jrQX_P-kC7M_4n7wAAAJA"]
[Fri Nov 14 08:28:21.609618 2025] [:error] [pid 47156:tid 47230] [client 192.178.4.101:38497] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRZ3pdjrQX_P-kC7M_44UAAAAJA"]
[Fri Nov 14 08:35:16.717432 2025] [:error] [pid 47156:tid 47227] [client 192.178.4.101:45739] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRZ5RNjrQX_P-kC7M_47vwAAAI0"]
[Fri Nov 14 08:35:42.333074 2025] [:error] [pid 59105:tid 59112] [client 192.178.4.101:45102] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRZ5Xrd-anP1JpNfuSKpzAAAAUU"]
[Fri Nov 14 08:35:52.034930 2025] [:error] [pid 47156:tid 47234] [client 192.178.4.101:49596] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRZ5aNjrQX_P-kC7M_48BwAAAJQ"]
[Fri Nov 14 08:39:11.147192 2025] [:error] [pid 47630:tid 47633] [client 192.178.4.101:38833] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRZ6L8xXXNBfWgpfVJ5yGAAAAQE"]
[Fri Nov 14 08:43:57.804328 2025] [:error] [pid 47155:tid 47197] [client 192.178.4.101:53896] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRZ7TZipxRXMZJH8hmgtJAAAAEs"]
[Fri Nov 14 08:44:37.307589 2025] [:error] [pid 47630:tid 47633] [client 192.178.4.101:65156] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRZ7dcxXXNBfWgpfVJ50ogAAAQE"]
[Fri Nov 14 08:55:49.363910 2025] [:error] [pid 47154:tid 47163] [client 192.178.4.101:52465] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRZ-FUijA13A3g3ATrKrYgAAAAQ"]
[Fri Nov 14 08:55:55.058455 2025] [:error] [pid 47155:tid 47205] [client 192.178.4.101:64194] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRZ-G5ipxRXMZJH8hmgxQQAAAFM"]
[Fri Nov 14 08:56:05.125062 2025] [:error] [pid 59105:tid 59107] [client 192.178.4.101:54159] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRZ-Jbd-anP1JpNfuSKyfAAAAUA"]
[Fri Nov 14 09:01:47.707092 2025] [:error] [pid 47242:tid 47267] [client 192.178.4.101:44870] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRZ_e1PNnvrux3OMagzOpwAAANY"]
[Fri Nov 14 09:01:58.692441 2025] [:error] [pid 47630:tid 47648] [client 192.178.4.101:54958] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRZ_hsxXXNBfWgpfVJ56hwAAARA"]
[Fri Nov 14 09:02:31.329128 2025] [:error] [pid 47156:tid 47236] [client 192.178.4.101:59300] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRZ_p9jrQX_P-kC7M_5KlwAAAJU"]
[Fri Nov 14 09:02:38.029840 2025] [:error] [pid 59105:tid 59107] [client 192.178.4.101:65100] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRZ_rrd-anP1JpNfuSK1UgAAAUA"]
[Fri Nov 14 09:05:34.000846 2025] [:error] [pid 47630:tid 47634] [client 192.178.4.101:35013] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRaAXcxXXNBfWgpfVJ574wAAAQI"]
[Fri Nov 14 09:05:44.056802 2025] [:error] [pid 47630:tid 47640] [client 192.178.4.101:41375] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRaAaMxXXNBfWgpfVJ578gAAAQg"]
[Fri Nov 14 09:05:47.039395 2025] [:error] [pid 47630:tid 47648] [client 192.178.4.101:35981] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRaAa8xXXNBfWgpfVJ57-gAAARA"]
[Fri Nov 14 09:05:50.221051 2025] [:error] [pid 47242:tid 47254] [client 192.178.4.101:41362] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRaAblPNnvrux3OMagzQCAAAAMk"]
[Fri Nov 14 09:05:58.778438 2025] [:error] [pid 47156:tid 47237] [client 192.178.4.101:46051] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRaAdtjrQX_P-kC7M_5MTAAAAJY"]
[Fri Nov 14 09:09:07.453520 2025] [:error] [pid 47156:tid 47223] [client 192.178.4.101:55725] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRaBM9jrQX_P-kC7M_5NjgAAAIk"]
[Fri Nov 14 09:09:18.807830 2025] [:error] [pid 47156:tid 47214] [client 192.178.4.101:58083] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRaBPtjrQX_P-kC7M_5NowAAAIA"]
[Fri Nov 14 09:09:22.270903 2025] [:error] [pid 47154:tid 47181] [client 192.178.4.101:53338] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRaBQkijA13A3g3ATrKvjQAAABY"]
[Fri Nov 14 09:09:33.009503 2025] [:error] [pid 47154:tid 47171] [client 192.178.4.101:46830] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRaBTUijA13A3g3ATrKvmwAAAAw"]
[Fri Nov 14 09:09:44.873850 2025] [:error] [pid 47154:tid 47179] [client 192.178.4.101:46344] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRaBWEijA13A3g3ATrKvpwAAABQ"]
[Fri Nov 14 09:14:07.484011 2025] [:error] [pid 47155:tid 47210] [client 192.178.4.101:35053] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRaCX5ipxRXMZJH8hmg28gAAAFg"]
[Fri Nov 14 09:14:08.597776 2025] [:error] [pid 47156:tid 47216] [client 192.178.4.101:61590] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRaCYNjrQX_P-kC7M_5QUwAAAII"]
[Fri Nov 14 09:14:12.946887 2025] [:error] [pid 59105:tid 59110] [client 192.178.4.101:47496] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRaCZLd-anP1JpNfuSK5iwAAAUM"]
[Fri Nov 14 09:14:15.889271 2025] [:error] [pid 47154:tid 47163] [client 192.178.4.101:63164] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRaCZ0ijA13A3g3ATrKwtQAAAAQ"]
[Fri Nov 14 09:14:20.267437 2025] [:error] [pid 47155:tid 47199] [client 192.178.4.101:42423] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRaCbJipxRXMZJH8hmg3EAAAAE0"]
[Fri Nov 14 09:14:21.709746 2025] [:error] [pid 47630:tid 47656] [client 192.178.4.101:58240] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRaCbcxXXNBfWgpfVJ5-XgAAARg"]
[Fri Nov 14 09:14:23.124968 2025] [:error] [pid 47154:tid 47159] [client 192.178.4.101:53043] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRaCb0ijA13A3g3ATrKwwAAAAAA"]
[Fri Nov 14 09:14:40.158292 2025] [:error] [pid 47242:tid 47267] [client 192.178.4.101:49972] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRaCgFPNnvrux3OMagzSmwAAANY"]
[Fri Nov 14 09:14:41.040788 2025] [:error] [pid 47630:tid 47642] [client 192.178.4.101:50761] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRaCgcxXXNBfWgpfVJ5-cAAAAQo"]
[Fri Nov 14 09:14:52.899239 2025] [:error] [pid 47242:tid 47265] [client 192.178.4.101:60617] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRaCjFPNnvrux3OMagzS4gAAANQ"]
[Fri Nov 14 09:17:44.714836 2025] [:error] [pid 47630:tid 47653] [client 192.178.4.101:36666] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRaDOMxXXNBfWgpfVJ5_aQAAARU"]
[Fri Nov 14 09:22:21.121437 2025] [:error] [pid 59105:tid 59114] [client 192.178.4.101:57744] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRaETbd-anP1JpNfuSK81QAAAUc"]
[Fri Nov 14 09:22:27.895504 2025] [:error] [pid 47155:tid 47207] [client 192.178.4.101:62531] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRaEU5ipxRXMZJH8hmg53gAAAFU"]
[Fri Nov 14 09:22:39.331187 2025] [:error] [pid 47156:tid 47227] [client 192.178.4.101:64554] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRaEX9jrQX_P-kC7M_5UdgAAAI0"]
[Fri Nov 14 09:22:51.086937 2025] [:error] [pid 47156:tid 47223] [client 192.178.4.101:60868] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRaEa9jrQX_P-kC7M_5UhgAAAIk"]
[Fri Nov 14 09:22:54.743156 2025] [:error] [pid 47156:tid 47215] [client 192.178.4.101:46282] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/gambling/%E0%B8%95%E0%B8%B2%E0%B8%A3%E0%B8%B2%E0%B8%87%E0%B8%84%E0%B8%B0%E0%B9%81%E0%B8%99%E0%B8%99%E0%B9%81%E0%B8%8A%E0%B8%A1%E0%B8%9B%E0%B9%8C%E0%B9%80%E0%B8%9B%E0%B8%B5%E0%B8%A2%E0%B8%99%E0%B8%A5%E0%B8%B5%E0%B8%81.html"] [unique_id "aRaEbtjrQX_P-kC7M_5UkAAAAIE"]
[Fri Nov 14 09:22:57.748870 2025] [:error] [pid 47630:tid 47653] [client 192.178.4.101:52233] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/fishing/%E0%B9%82%E0%B8%9B%E0%B8%A3%E0%B9%82%E0%B8%A1%E0%B8%8A%E0%B8%B1%E0%B9%88%E0%B8%99%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95777%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%202023.html"] [unique_id "aRaEccxXXNBfWgpfVJ6BUwAAARU"]
[Fri Nov 14 09:23:05.291718 2025] [:error] [pid 47630:tid 47641] [client 192.178.4.101:37477] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/gambling/g%20slot%20888.html"] [unique_id "aRaEecxXXNBfWgpfVJ6BXgAAAQk"]
[Fri Nov 14 09:23:15.065368 2025] [:error] [pid 47156:tid 47231] [client 192.178.4.101:46386] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/news/168galaxy%20pg.html"] [unique_id "aRaEg9jrQX_P-kC7M_5UsgAAAJE"]
[Fri Nov 14 09:25:04.037907 2025] [:error] [pid 59105:tid 59123] [client 192.178.4.101:36007] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/bet/%E0%B8%97%E0%B8%A3%E0%B8%B4%E0%B8%84%20H25%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B8%8A%E0%B8%99%E0%B8%B0%20%E0%B8%87%E0%B9%88%E0%B8%B2%E0%B8%A2%202023.html"] [unique_id "aRaE8Ld-anP1JpNfuSK90AAAAVA"]
[Fri Nov 14 09:25:18.649020 2025] [:error] [pid 47156:tid 47214] [client 192.178.4.101:53385] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/bet/Daftar%20%E0%B8%9C%E0%B8%A5%E0%B8%9A%E0%B8%AD%E0%B8%A5%E0%B8%9E%E0%B8%A3%E0%B8%B5%E0%B9%80%E0%B8%A1%E0%B8%B5%E0%B8%A2%E0%B8%A3%E0%B9%8C%E0%B8%A5%E0%B8%B5%E0%B8%81%E0%B9%80%E0%B8%A1%E0%B8%B7%E0%B9%88%E0%B8%AD%E0%B8%84%E0%B8%B7%E0%B8%99.html"] [unique_id "aRaE_tjrQX_P-kC7M_5VdgAAAIA"]
[Fri Nov 14 09:25:23.554528 2025] [:error] [pid 59105:tid 59108] [client 192.178.4.101:45050] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRaFA7d-anP1JpNfuSK97AAAAUE"]
[Fri Nov 14 09:25:32.533965 2025] [:error] [pid 59105:tid 59118] [client 192.178.4.101:49688] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/gambling/%E0%B9%80%E0%B8%95%E0%B8%B2%E0%B8%AD%E0%B8%9A%E0%B9%80%E0%B8%A1%E0%B8%B0%E0%B9%82%E0%B8%9B%E0%B9%89.html"] [unique_id "aRaFDLd-anP1JpNfuSK99gAAAUs"]
[Fri Nov 14 09:25:36.914128 2025] [:error] [pid 59105:tid 59123] [client 192.178.4.101:40025] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/nohu/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%20pg%20%E0%B9%80%E0%B8%81%E0%B8%A1%E0%B9%83%E0%B8%AB%E0%B8%A1%E0%B9%88.html"] [unique_id "aRaFELd-anP1JpNfuSK-AgAAAVA"]
[Fri Nov 14 09:25:46.957376 2025] [:error] [pid 47154:tid 47163] [client 192.178.4.101:51239] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRaFGkijA13A3g3ATrK0OQAAAAQ"]
[Fri Nov 14 09:28:47.789993 2025] [:error] [pid 47630:tid 47645] [client 192.178.4.101:39938] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRaFz8xXXNBfWgpfVJ6D_AAAAQ0"]
[Fri Nov 14 09:29:00.567710 2025] [:error] [pid 47630:tid 47647] [client 192.178.4.101:45453] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRaF3MxXXNBfWgpfVJ6EJAAAAQ8"]
[Fri Nov 14 09:29:13.560343 2025] [:error] [pid 47156:tid 47221] [client 192.178.4.101:56757] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRaF6djrQX_P-kC7M_5X2QAAAIc"]
[Fri Nov 14 09:29:18.151996 2025] [:error] [pid 47155:tid 47197] [client 192.178.4.101:65338] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRaF7pipxRXMZJH8hmg8QAAAAEs"]
[Fri Nov 14 09:29:27.051426 2025] [:error] [pid 47156:tid 47231] [client 192.178.4.101:51518] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRaF99jrQX_P-kC7M_5X7QAAAJE"]
[Fri Nov 14 09:33:28.867991 2025] [:error] [pid 47155:tid 47201] [client 192.178.4.101:42493] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/nohu/Login%20%E0%B9%82%E0%B8%9B%E0%B8%A3%E0%B9%81%E0%B8%81%E0%B8%A3%E0%B8%A1%E0%B9%80%E0%B8%95%E0%B8%B0%E0%B9%80%E0%B8%8A%E0%B8%A5%E0%B8%8B%E0%B8%B5.html"] [unique_id "aRaG6JipxRXMZJH8hmg9sQAAAE8"]
[Fri Nov 14 09:33:43.556782 2025] [:error] [pid 47242:tid 47253] [client 192.178.4.101:40304] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRaG91PNnvrux3OMagzZNAAAAMg"]
[Fri Nov 14 09:33:44.754104 2025] [:error] [pid 47154:tid 47160] [client 192.178.4.101:39360] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/app/www.ufa789.com%20%E0%B8%A5%E0%B8%B4%E0%B9%89%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A.html"] [unique_id "aRaG-EijA13A3g3ATrK3xAAAAAE"]
[Fri Nov 14 09:33:54.503020 2025] [:error] [pid 47242:tid 47256] [client 192.178.4.101:36060] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/xoso/Daftar%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%AA%E0%B8%A1%E0%B8%B1%E0%B8%84%E0%B8%A3%E0%B8%9C%E0%B9%88%E0%B8%B2%E0%B8%99%E0%B8%A7%E0%B8%AD%E0%B9%80%E0%B8%A5%E0%B8%97.html"] [unique_id "aRaHAlPNnvrux3OMagzZSAAAAMs"]
[Fri Nov 14 09:33:55.438671 2025] [:error] [pid 47156:tid 47218] [client 192.178.4.101:37096] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRaHA9jrQX_P-kC7M_5avAAAAIQ"]
[Fri Nov 14 09:33:59.467027 2025] [:error] [pid 47154:tid 47179] [client 192.178.4.101:64610] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/cash/%E0%B9%80%E0%B8%81%E0%B8%A1%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%E0%B9%81%E0%B8%8A%E0%B8%A3%E0%B9%8C%E0%B8%97%E0%B8%B8%E0%B8%99.html"] [unique_id "aRaHB0ijA13A3g3ATrK31wAAABQ"]
[Fri Nov 14 09:34:01.539256 2025] [:error] [pid 47154:tid 47162] [client 192.178.4.101:57381] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/deposit/%E0%B8%94%E0%B8%B9%20%E0%B8%9C%E0%B8%A5%E0%B8%9A%E0%B8%AD%E0%B8%A5%20888%20%E0%B8%AA%E0%B8%94%20%E0%B8%9F%E0%B8%B8%E0%B8%95%E0%B8%9A%E0%B8%AD%E0%B8%A5.html"] [unique_id "aRaHCUijA13A3g3ATrK33QAAAAM"]
[Fri Nov 14 09:34:18.853611 2025] [:error] [pid 47242:tid 47259] [client 192.178.4.101:52670] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/betting/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%20sbobet%20%E0%B8%84%E0%B8%AD%E0%B8%A1.html"] [unique_id "aRaHGlPNnvrux3OMagzZjAAAAM4"]
[Fri Nov 14 09:34:19.843038 2025] [:error] [pid 59105:tid 59130] [client 192.178.4.101:45505] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRaHG7d-anP1JpNfuSLCsAAAAVc"]
[Fri Nov 14 09:35:28.364920 2025] [:error] [pid 47156:tid 47226] [client 47.244.90.157:43974] [client 47.244.90.157] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 47.244.90.157, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRaHYNjrQX_P-kC7M_5bYwAAAIw"]
[Fri Nov 14 09:37:17.833001 2025] [:error] [pid 47156:tid 47215] [client 192.178.4.101:37559] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRaHzdjrQX_P-kC7M_5crgAAAIE"]
[Fri Nov 14 09:37:29.940141 2025] [:error] [pid 47154:tid 47176] [client 192.178.4.101:36274] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRaH2UijA13A3g3ATrK5EAAAABE"]
[Fri Nov 14 09:52:15.193962 2025] [:error] [pid 47156:tid 47218] [client 192.178.4.101:61070] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRaLT9jrQX_P-kC7M_5k1QAAAIQ"]
[Fri Nov 14 09:52:40.982625 2025] [:error] [pid 47156:tid 47227] [client 192.178.4.101:46680] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRaLaNjrQX_P-kC7M_5lQQAAAI0"]
[Fri Nov 14 09:52:52.340531 2025] [:error] [pid 47155:tid 47207] [client 192.178.4.101:46210] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRaLdJipxRXMZJH8hmhD_QAAAFU"]
[Fri Nov 14 10:07:41.867050 2025] [:error] [pid 47242:tid 47246] [client 192.178.4.101:45118] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRaO7VPNnvrux3OMagzmXwAAAME"]
[Fri Nov 14 10:15:02.083403 2025] [:error] [pid 47155:tid 47202] [client 192.178.4.101:38773] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRaQppipxRXMZJH8hmhNewAAAFA"]
[Fri Nov 14 10:15:14.849501 2025] [:error] [pid 59105:tid 59111] [client 192.178.4.101:37190] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRaQsrd-anP1JpNfuSLWqQAAAUQ"]
[Fri Nov 14 10:15:22.230894 2025] [:error] [pid 47156:tid 47238] [client 192.178.4.101:56080] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRaQutjrQX_P-kC7M_5zFQAAAJc"]
[Fri Nov 14 10:15:34.506591 2025] [:error] [pid 47242:tid 47259] [client 192.178.4.101:35022] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRaQxlPNnvrux3OMagzqbAAAAM4"]
[Fri Nov 14 10:17:33.905339 2025] [:error] [pid 47242:tid 47251] [client 192.178.4.101:40222] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRaRPVPNnvrux3OMagzq9wAAAMY"]
[Fri Nov 14 10:17:45.065303 2025] [:error] [pid 47242:tid 47250] [client 192.178.4.101:46247] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRaRSVPNnvrux3OMagzrDQAAAMU"]
[Fri Nov 14 10:17:56.133837 2025] [:error] [pid 47630:tid 47646] [client 192.178.4.101:64301] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRaRVMxXXNBfWgpfVJ6YFwAAAQ4"]
[Fri Nov 14 10:21:45.908992 2025] [:error] [pid 47156:tid 47218] [client 192.178.4.101:37856] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRaSOdjrQX_P-kC7M_519wAAAIQ"]
[Fri Nov 14 10:22:26.801791 2025] [:error] [pid 47242:tid 47266] [client 192.178.4.101:53153] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRaSYlPNnvrux3OMagztBgAAANU"]
[Fri Nov 14 10:26:27.188465 2025] [:error] [pid 59105:tid 59110] [client 192.178.4.101:57548] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRaTU7d-anP1JpNfuSLbUAAAAUM"]
[Fri Nov 14 10:26:39.060348 2025] [:error] [pid 47630:tid 47637] [client 192.178.4.101:56282] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRaTX8xXXNBfWgpfVJ6a-QAAAQU"]
[Fri Nov 14 10:32:48.797961 2025] [:error] [pid 59105:tid 59126] [client 192.178.4.101:52250] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRaU0Ld-anP1JpNfuSLeDgAAAVM"]
[Fri Nov 14 10:43:45.575774 2025] [:error] [pid 47242:tid 47252] [client 192.178.4.101:55042] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRaXYVPNnvrux3OMagz1PwAAAMc"]
[Fri Nov 14 10:43:58.881440 2025] [:error] [pid 47630:tid 47646] [client 192.178.4.101:36705] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRaXbsxXXNBfWgpfVJ6hxgAAAQ4"]
[Fri Nov 14 10:48:02.553773 2025] [:error] [pid 47242:tid 47248] [client 192.178.4.101:46289] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRaYYlPNnvrux3OMagz3RwAAAMM"]
[Fri Nov 14 10:48:13.725209 2025] [:error] [pid 47630:tid 47649] [client 192.178.4.101:36797] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRaYbcxXXNBfWgpfVJ6jiwAAARE"]
[Fri Nov 14 10:48:30.508926 2025] [:error] [pid 47154:tid 47174] [client 192.178.4.101:52578] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRaYfkijA13A3g3ATrLTdgAAAA8"]
[Fri Nov 14 10:48:31.586800 2025] [:error] [pid 59105:tid 59129] [client 192.178.4.101:52410] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRaYf7d-anP1JpNfuSLmCwAAAVY"]
[Fri Nov 14 10:48:42.550257 2025] [:error] [pid 47156:tid 47219] [client 192.178.4.101:60092] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRaYitjrQX_P-kC7M_6EPgAAAIU"]
[Fri Nov 14 10:52:57.289172 2025] [:error] [pid 47630:tid 47645] [client 192.178.4.101:60073] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRaZicxXXNBfWgpfVJ6lowAAAQ0"]
[Fri Nov 14 10:53:08.427364 2025] [:error] [pid 59105:tid 59125] [client 192.178.4.101:37270] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRaZlLd-anP1JpNfuSLouwAAAVI"]
[Fri Nov 14 10:53:33.608586 2025] [:error] [pid 47242:tid 47251] [client 192.178.4.101:41292] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRaZrVPNnvrux3OMagz6jwAAAMY"]
[Fri Nov 14 10:55:17.327142 2025] [:error] [pid 47156:tid 47227] [client 85.190.242.193:38646] [client 85.190.242.193] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.190.242.193, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRaaFdjrQX_P-kC7M_6IhgAAAI0"]
[Fri Nov 14 10:57:51.511791 2025] [:error] [pid 47242:tid 47257] [client 192.178.4.101:36959] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRaar1PNnvrux3OMagz8EwAAAMw"]
[Fri Nov 14 10:58:16.761111 2025] [:error] [pid 47156:tid 47219] [client 192.178.4.101:40983] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRaayNjrQX_P-kC7M_6J4gAAAIU"]
[Fri Nov 14 10:58:29.152892 2025] [:error] [pid 59105:tid 59124] [client 192.178.4.101:47661] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRaa1bd-anP1JpNfuSLq3wAAAVE"]
[Fri Nov 14 10:58:29.600409 2025] [:error] [pid 47155:tid 47189] [client 192.178.4.101:54700] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRaa1ZipxRXMZJH8hmhd1QAAAEM"]
[Fri Nov 14 11:01:26.078416 2025] [:error] [pid 59105:tid 59114] [client 192.178.4.101:52844] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRabhrd-anP1JpNfuSLscQAAAUc"]
[Fri Nov 14 11:01:49.547120 2025] [:error] [pid 59105:tid 59131] [client 192.178.4.101:39815] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRabnbd-anP1JpNfuSLshwAAAVg"]
[Fri Nov 14 11:02:00.785143 2025] [:error] [pid 47156:tid 47233] [client 192.178.4.101:63531] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRabqNjrQX_P-kC7M_6LwQAAAJM"]
[Fri Nov 14 11:29:31.184028 2025] [:error] [pid 47242:tid 47259] [client 43.166.136.24:55834] [client 43.166.136.24] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.paramountbaldivis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.paramountbaldivis.com"] [uri "/"] [unique_id "aRaiG1PNnvrux3OMagwJwAAAAM4"]
[Fri Nov 14 12:16:04.805379 2025] [:error] [pid 16575:tid 16650] [client 3.131.15.246:35124] [client 3.131.15.246] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 3.131.15.246, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRatBO6qT670YxigvbALCwAAANA"]
[Fri Nov 14 13:30:54.546123 2025] [:error] [pid 16573:tid 16580] [client 62.171.173.120:40324] [client 62.171.173.120] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.171.173.120, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRa-jiPGexfUk9FDoEI7-gAAAEI"]
[Fri Nov 14 13:35:57.853652 2025] [:error] [pid 16671:tid 16684] [client 192.178.4.101:54077] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRa_vTsoHwEAmeIzZXDuxgAAAQc"]
[Fri Nov 14 13:36:30.562962 2025] [:error] [pid 16573:tid 16579] [client 192.178.4.101:49929] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRa_3iPGexfUk9FDoEI9_QAAAEE"]
[Fri Nov 14 13:45:24.699835 2025] [:error] [pid 16671:tid 16680] [client 192.178.4.101:35795] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRbB9DsoHwEAmeIzZXDy2gAAAQM"]
[Fri Nov 14 13:45:37.996051 2025] [:error] [pid 16574:tid 16612] [client 192.178.4.101:60572] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRbCAf6XQqe4NqaoE9LjMQAAAIU"]
[Fri Nov 14 13:45:48.860981 2025] [:error] [pid 16671:tid 16685] [client 192.178.4.101:45948] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRbCDDsoHwEAmeIzZXDzAwAAAQg"]
[Fri Nov 14 13:45:53.668307 2025] [:error] [pid 16709:tid 16735] [client 192.178.4.101:44916] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRbCEaNdzfVNC4oipLXfhgAAAVg"]
[Fri Nov 14 13:47:41.024881 2025] [:error] [pid 16573:tid 16583] [client 192.178.4.101:44388] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRbCfSPGexfUk9FDoEJClAAAAEU"]
[Fri Nov 14 13:47:51.895675 2025] [:error] [pid 16573:tid 16583] [client 192.178.4.101:39269] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRbChyPGexfUk9FDoEJCqAAAAEU"]
[Fri Nov 14 13:48:02.204261 2025] [:error] [pid 16573:tid 16596] [client 192.178.4.101:44969] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRbCkiPGexfUk9FDoEJCuQAAAFI"]
[Fri Nov 14 13:48:13.635684 2025] [:error] [pid 16709:tid 16711] [client 192.178.4.101:48065] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRbCnaNdzfVNC4oipLXguAAAAUA"]
[Fri Nov 14 13:48:25.846992 2025] [:error] [pid 16709:tid 16717] [client 192.178.4.101:41733] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRbCqaNdzfVNC4oipLXg2gAAAUY"]
[Fri Nov 14 13:48:28.547393 2025] [:error] [pid 16573:tid 16589] [client 192.178.4.101:38106] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRbCrCPGexfUk9FDoEJCywAAAEs"]
[Fri Nov 14 14:02:02.000837 2025] [:error] [pid 16573:tid 16580] [client 192.178.4.101:49638] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRbF2SPGexfUk9FDoEJHIwAAAEI"]
[Fri Nov 14 14:49:55.672269 2025] [:error] [pid 16671:tid 16697] [client 65.21.135.163:46872] [client 65.21.135.163] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 65.21.135.163, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRbREzsoHwEAmeIzZXANRQAAARQ"]
[Fri Nov 14 15:30:00.081590 2025] [:error] [pid 16709:tid 16711] [client 192.178.4.101:41809] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRbaeKNdzfVNC4oipLUZPAAAAUA"]
[Fri Nov 14 15:30:12.945642 2025] [:error] [pid 16574:tid 16621] [client 192.178.4.101:51812] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRbahP6XQqe4NqaoE9IGFgAAAI4"]
[Fri Nov 14 15:35:31.161205 2025] [:error] [pid 16709:tid 16726] [client 192.178.4.101:41077] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRbbw6NdzfVNC4oipLUdqgAAAU8"]
[Fri Nov 14 15:35:55.909775 2025] [:error] [pid 16709:tid 16721] [client 192.178.4.101:37961] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRbb26NdzfVNC4oipLUd5gAAAUo"]
[Fri Nov 14 15:57:31.376332 2025] [:error] [pid 16709:tid 16735] [client 192.178.4.101:39153] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRbg66NdzfVNC4oipLUojQAAAVg"]
[Fri Nov 14 16:02:05.925962 2025] [:error] [pid 16709:tid 16715] [client 192.178.4.101:60692] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRbh_aNdzfVNC4oipLUqnQAAAUQ"]
[Fri Nov 14 16:02:29.074934 2025] [:error] [pid 16575:tid 16652] [client 192.178.4.101:50340] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRbiFe6qT670YxigvbBfUgAAANI"]
[Fri Nov 14 16:05:40.764012 2025] [:error] [pid 16709:tid 16723] [client 54.74.25.151:43966] [client 54.74.25.151] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.74.25.151, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRbi1KNdzfVNC4oipLUsRQAAAUw"]
[Fri Nov 14 16:06:33.578255 2025] [:error] [pid 16671:tid 16687] [client 192.178.4.101:65345] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRbjCTsoHwEAmeIzZXAqCgAAAQo"]
[Fri Nov 14 16:06:49.348946 2025] [:error] [pid 16575:tid 16653] [client 192.178.4.101:42090] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRbjGe6qT670YxigvbBhEgAAANM"]
[Fri Nov 14 16:06:55.416642 2025] [:error] [pid 16709:tid 16715] [client 192.178.4.101:36468] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRbjH6NdzfVNC4oipLUtAQAAAUQ"]
[Fri Nov 14 17:07:44.972302 2025] [:error] [pid 16573:tid 16586] [client 192.178.4.101:59050] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRbxYCPGexfUk9FDoEKLAAAAAEg"]
[Fri Nov 14 17:07:47.393986 2025] [:error] [pid 16574:tid 16613] [client 192.178.4.101:61985] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRbxY_6XQqe4NqaoE9IncAAAAIY"]
[Fri Nov 14 17:08:24.935307 2025] [:error] [pid 16573:tid 16578] [client 192.178.4.101:36634] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRbxiCPGexfUk9FDoEKLRgAAAEA"]
[Fri Nov 14 17:20:07.577476 2025] [:error] [pid 16575:tid 16639] [client 49.51.183.75:51708] [client 49.51.183.75] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||paramountbaldivis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRb0R-6qT670YxigvbB6WgAAAMU"]
[Fri Nov 14 19:05:12.771883 2025] [:error] [pid 16575:tid 16643] [client 192.178.4.101:57484] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRcM6O6qT670YxigvbCUmgAAAMk"]
[Fri Nov 14 19:55:53.657397 2025] [:error] [pid 16709:tid 16725] [client 192.178.4.101:37738] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRcYyaNdzfVNC4oipLWIQAAAAU4"]
[Fri Nov 14 19:55:57.060083 2025] [:error] [pid 1170:tid 1176] [client 192.178.4.101:63039] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRcYzQ5pkvzCDzzjItRpbAAAAAQ"]
[Fri Nov 14 19:55:59.513462 2025] [:error] [pid 16671:tid 16685] [client 192.178.4.101:64534] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRcYzzsoHwEAmeIzZXB1zQAAAQg"]
[Fri Nov 14 19:56:02.328577 2025] [:error] [pid 1170:tid 1186] [client 192.178.4.101:55457] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRcY0g5pkvzCDzzjItRpbwAAAA4"]
[Fri Nov 14 19:56:07.506172 2025] [:error] [pid 1170:tid 1177] [client 192.178.4.101:64489] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRcY1w5pkvzCDzzjItRpjQAAAAU"]
[Fri Nov 14 19:56:20.493666 2025] [:error] [pid 16574:tid 16608] [client 192.178.4.101:37163] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRcY5P6XQqe4NqaoE9JQiQAAAIE"]
[Fri Nov 14 19:56:30.893301 2025] [:error] [pid 16671:tid 16684] [client 192.178.4.101:43516] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRcY7jsoHwEAmeIzZXB2DQAAAQc"]
[Fri Nov 14 19:56:40.589983 2025] [:error] [pid 16574:tid 16619] [client 192.178.4.101:43777] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRcY-P6XQqe4NqaoE9JQwgAAAIw"]
[Fri Nov 14 19:58:44.481395 2025] [:error] [pid 16574:tid 16619] [client 192.178.4.101:61126] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRcZdP6XQqe4NqaoE9JRHAAAAIw"]
[Fri Nov 14 19:58:51.257379 2025] [:error] [pid 16575:tid 16642] [client 192.178.4.101:40157] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRcZe-6qT670YxigvbCiIgAAAMg"]
[Fri Nov 14 19:59:14.870341 2025] [:error] [pid 1170:tid 1185] [client 192.178.4.101:54643] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRcZkg5pkvzCDzzjItRqdgAAAA0"]
[Fri Nov 14 20:03:32.383169 2025] [:error] [pid 16574:tid 16631] [client 192.178.4.101:35757] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRcalP6XQqe4NqaoE9JSOQAAAJg"]
[Fri Nov 14 20:03:35.153035 2025] [:error] [pid 16574:tid 16608] [client 192.178.4.101:53961] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRcal_6XQqe4NqaoE9JSOgAAAIE"]
[Fri Nov 14 20:03:40.148820 2025] [:error] [pid 16574:tid 16613] [client 192.178.4.101:35519] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRcanP6XQqe4NqaoE9JSPwAAAIY"]
[Fri Nov 14 20:25:33.116913 2025] [:error] [pid 16575:tid 16639] [client 192.178.4.101:38209] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRcfve6qT670YxigvbCpQwAAAMU"]
[Fri Nov 14 20:25:36.826478 2025] [:error] [pid 1170:tid 1182] [client 192.178.4.101:38794] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRcfwA5pkvzCDzzjItR11QAAAAo"]
[Fri Nov 14 20:25:40.673368 2025] [:error] [pid 16574:tid 16623] [client 192.178.4.101:51869] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRcfxP6XQqe4NqaoE9JYigAAAJA"]
[Fri Nov 14 20:26:24.773080 2025] [:error] [pid 16573:tid 16583] [client 192.178.4.101:55994] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRcf8CPGexfUk9FDoEK-6wAAAEU"]
[Fri Nov 14 20:29:56.181738 2025] [:error] [pid 16709:tid 16723] [client 192.178.4.101:61148] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRcgxKNdzfVNC4oipLWTDgAAAUw"]
[Fri Nov 14 20:29:58.885039 2025] [:error] [pid 16573:tid 16599] [client 192.178.4.101:37272] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRcgxiPGexfUk9FDoELADgAAAFU"]
[Fri Nov 14 20:30:22.636377 2025] [:error] [pid 1170:tid 1193] [client 192.178.4.101:39368] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRcg3g5pkvzCDzzjItR4EwAAABU"]
[Fri Nov 14 20:32:14.251964 2025] [proxy_fcgi:error] [pid 16575:tid 16650] (70007)The timeout specified has expired: [client 192.178.4.102:40653] AH01075: Error dispatching request to : (polling)
[Fri Nov 14 20:58:51.957726 2025] [:error] [pid 16574:tid 16620] [client 192.178.4.101:48059] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRcni_6XQqe4NqaoE9JhmQAAAI0"]
[Fri Nov 14 20:58:54.691358 2025] [:error] [pid 16709:tid 16715] [client 192.178.4.101:49269] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRcnjqNdzfVNC4oipLWblwAAAUQ"]
[Fri Nov 14 20:59:37.979368 2025] [:error] [pid 16573:tid 16580] [client 192.178.4.101:58725] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRcnuSPGexfUk9FDoELHuQAAAEI"]
[Fri Nov 14 21:02:41.395307 2025] [:error] [pid 1170:tid 1186] [client 192.178.4.101:54572] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRcocQ5pkvzCDzzjItSEUgAAAA4"]
[Fri Nov 14 21:02:48.202192 2025] [:error] [pid 16573:tid 16602] [client 192.178.4.101:42636] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRcoeCPGexfUk9FDoELIhgAAAFg"]
[Fri Nov 14 21:02:51.652348 2025] [:error] [pid 16671:tid 16693] [client 192.178.4.101:59827] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRcoezsoHwEAmeIzZXCJ9gAAARA"]
[Fri Nov 14 21:06:54.254471 2025] [:error] [pid 16574:tid 16623] [client 192.178.4.101:38456] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRcpbv6XQqe4NqaoE9JjmQAAAJA"]
[Fri Nov 14 21:07:05.490721 2025] [:error] [pid 16671:tid 16696] [client 192.178.4.101:36169] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRcpeTsoHwEAmeIzZXCLAgAAARM"]
[Fri Nov 14 21:08:46.164880 2025] [:error] [pid 16573:tid 16602] [client 207.154.250.140:38682] [client 207.154.250.140] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 207.154.250.140, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRcp3iPGexfUk9FDoELJpAAAAFg"]
[Fri Nov 14 21:10:46.080615 2025] [:error] [pid 1170:tid 1173] [client 192.178.4.101:47991] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRcqVg5pkvzCDzzjItSHPQAAAAE"]
[Fri Nov 14 21:15:32.974607 2025] [:error] [pid 1170:tid 1192] [client 192.178.4.101:64018] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRcrdA5pkvzCDzzjItSJCQAAABQ"]
[Fri Nov 14 21:15:36.434624 2025] [:error] [pid 16575:tid 16653] [client 192.178.4.101:64544] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRcreO6qT670YxigvbC2kgAAANM"]
[Fri Nov 14 21:15:39.142085 2025] [:error] [pid 16574:tid 16615] [client 192.178.4.101:45828] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRcre_6XQqe4NqaoE9Jl4gAAAIg"]
[Fri Nov 14 21:15:59.297946 2025] [:error] [pid 16709:tid 16711] [client 192.178.4.101:62421] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRcrj6NdzfVNC4oipLWgUgAAAUA"]
[Fri Nov 14 21:16:28.223363 2025] [:error] [pid 1170:tid 1186] [client 43.135.172.89:34846] [client 43.135.172.89] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.paramountbaldivis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.paramountbaldivis.com"] [uri "/"] [unique_id "aRcrrA5pkvzCDzzjItSJagAAAA4"]
[Fri Nov 14 21:16:29.856142 2025] [:error] [pid 16574:tid 16628] [client 192.178.4.101:39096] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRcrrf6XQqe4NqaoE9JmIAAAAJU"]
[Fri Nov 14 21:20:41.835884 2025] [:error] [pid 16709:tid 16713] [client 192.178.4.101:39592] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRcsqaNdzfVNC4oipLWhygAAAUI"]
[Fri Nov 14 21:20:45.300800 2025] [:error] [pid 1170:tid 1179] [client 192.178.4.101:36612] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRcsrQ5pkvzCDzzjItSLNQAAAAc"]
[Fri Nov 14 21:24:40.826150 2025] [:error] [pid 16574:tid 16629] [client 192.178.4.101:64579] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRctmP6XQqe4NqaoE9JoCAAAAJY"]
[Fri Nov 14 21:24:43.432000 2025] [:error] [pid 1170:tid 1176] [client 192.178.4.101:54838] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRctmw5pkvzCDzzjItSM8gAAAAQ"]
[Fri Nov 14 21:25:05.607629 2025] [:error] [pid 1170:tid 1173] [client 192.178.4.101:64390] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRctsQ5pkvzCDzzjItSNJgAAAAE"]
[Fri Nov 14 21:28:53.032680 2025] [:error] [pid 16671:tid 16695] [client 192.178.4.101:43038] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRculTsoHwEAmeIzZXCQ-wAAARI"]
[Fri Nov 14 21:28:58.104168 2025] [:error] [pid 16709:tid 16731] [client 192.178.4.101:49479] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRcumqNdzfVNC4oipLWkKwAAAVQ"]
[Fri Nov 14 21:29:00.595189 2025] [:error] [pid 16575:tid 16634] [client 192.178.4.101:59427] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRcunO6qT670YxigvbC6EwAAAMA"]
[Fri Nov 14 21:29:02.957962 2025] [:error] [pid 16575:tid 16648] [client 192.178.4.101:55483] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRcunu6qT670YxigvbC6FgAAAM4"]
[Fri Nov 14 21:29:05.281853 2025] [:error] [pid 16574:tid 16617] [client 192.178.4.101:59615] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRcuof6XQqe4NqaoE9JpLQAAAIo"]
[Fri Nov 14 21:29:18.184820 2025] [:error] [pid 16671:tid 16688] [client 192.178.4.101:58595] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRcurjsoHwEAmeIzZXCRKQAAAQs"]
[Fri Nov 14 21:29:34.643430 2025] [:error] [pid 16574:tid 16610] [client 192.178.4.101:44807] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRcuvv6XQqe4NqaoE9JpUgAAAIM"]
[Fri Nov 14 21:29:37.832802 2025] [:error] [pid 16574:tid 16618] [client 192.178.4.101:59507] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRcuwf6XQqe4NqaoE9JpWQAAAIs"]
[Fri Nov 14 21:33:25.741064 2025] [:error] [pid 1170:tid 1179] [client 192.178.4.101:36246] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRcvpQ5pkvzCDzzjItSRVgAAAAc"]
[Fri Nov 14 21:33:32.907711 2025] [:error] [pid 16575:tid 16652] [client 192.178.4.101:64445] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRcvrO6qT670YxigvbC7_AAAANI"]
[Fri Nov 14 21:33:48.549405 2025] [:error] [pid 1170:tid 1189] [client 192.178.4.101:52558] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRcvvA5pkvzCDzzjItSRkwAAABE"]
[Fri Nov 14 21:45:53.243913 2025] [:error] [pid 16671:tid 16700] [client 192.178.4.101:53526] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRcykTsoHwEAmeIzZXCXXAAAARc"]
[Fri Nov 14 21:53:56.442688 2025] [:error] [pid 16709:tid 16720] [client 192.178.4.101:54595] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRc0dKNdzfVNC4oipLWs1gAAAUk"]
[Fri Nov 14 21:54:15.500668 2025] [:error] [pid 16573:tid 16595] [client 192.178.4.101:41195] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRc0hyPGexfUk9FDoELXRwAAAFE"]
[Fri Nov 14 21:57:10.286187 2025] [:error] [pid 16671:tid 16684] [client 192.178.4.101:53544] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRc1NjsoHwEAmeIzZXCangAAAQc"]
[Fri Nov 14 21:57:42.027286 2025] [:error] [pid 16709:tid 16729] [client 192.178.4.101:49941] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRc1VqNdzfVNC4oipLWt4wAAAVI"]
[Fri Nov 14 21:57:56.577477 2025] [:error] [pid 1170:tid 1182] [client 192.178.4.101:36963] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRc1ZA5pkvzCDzzjItScJwAAAAo"]
[Fri Nov 14 22:03:33.378081 2025] [:error] [pid 1170:tid 1193] [client 192.178.4.101:35299] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRc2tQ5pkvzCDzzjItSeYQAAABU"]
[Fri Nov 14 22:03:56.155984 2025] [:error] [pid 16573:tid 16581] [client 192.178.4.101:48479] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRc2zCPGexfUk9FDoELZugAAAEM"]
[Fri Nov 14 22:13:03.086003 2025] [:error] [pid 16671:tid 16677] [client 103.38.161.197:42618] [client 103.38.161.197] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.38.161.197, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRc47zsoHwEAmeIzZXCefgAAAQA"]
[Fri Nov 14 22:13:10.901228 2025] [:error] [pid 16575:tid 16637] [client 103.38.161.197:43080] [client 103.38.161.197] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||paramountbaldivis.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "paramountbaldivis.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aRc49u6qT670YxigvbDFywAAAMM"]
[Fri Nov 14 22:18:58.813777 2025] [:error] [pid 16573:tid 16594] [client 192.178.4.101:51590] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRc6UiPGexfUk9FDoELc-gAAAFA"]
[Fri Nov 14 22:19:33.924333 2025] [:error] [pid 16575:tid 16647] [client 192.178.4.101:54536] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRc6de6qT670YxigvbDHVgAAAM0"]
[Fri Nov 14 22:42:45.887212 2025] [:error] [pid 1170:tid 1194] [client 192.178.4.101:45368] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRc_5Q5pkvzCDzzjItStHAAAABY"]
[Fri Nov 14 22:42:48.996559 2025] [:error] [pid 16709:tid 16711] [client 192.178.4.101:54926] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRc_6KNdzfVNC4oipLW71wAAAUA"]
[Fri Nov 14 22:42:52.224280 2025] [:error] [pid 16709:tid 16731] [client 192.178.4.101:48062] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRc_7KNdzfVNC4oipLW74AAAAVQ"]
[Fri Nov 14 22:42:55.315132 2025] [:error] [pid 16573:tid 16583] [client 192.178.4.101:49236] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRc_7yPGexfUk9FDoELizgAAAEU"]
[Fri Nov 14 22:43:24.980481 2025] [:error] [pid 16575:tid 16648] [client 192.178.4.101:63460] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRdADO6qT670YxigvbDMkwAAAM4"]
[Fri Nov 14 22:48:00.130003 2025] [:error] [pid 1170:tid 1192] [client 192.178.4.101:48872] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRdBIA5pkvzCDzzjItSvEgAAABQ"]
[Fri Nov 14 22:48:16.672797 2025] [:error] [pid 16573:tid 16599] [client 192.178.4.101:65022] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRdBMCPGexfUk9FDoELkCwAAAFU"]
[Fri Nov 14 22:48:37.980072 2025] [:error] [pid 16709:tid 16723] [client 192.178.4.101:49803] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRdBRaNdzfVNC4oipLW9TgAAAUw"]
[Fri Nov 14 22:52:40.749370 2025] [:error] [pid 16575:tid 16652] [client 192.178.4.101:51317] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRdCOO6qT670YxigvbDPBQAAANI"]
[Fri Nov 14 22:52:53.815994 2025] [:error] [pid 16575:tid 16650] [client 192.178.4.101:57435] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRdCRe6qT670YxigvbDPFwAAANA"]
[Fri Nov 14 23:48:31.311514 2025] [:error] [pid 16574:tid 16615] [client 23.166.40.70:40648] [client 23.166.40.70] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 23.166.40.70, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRdPT_6XQqe4NqaoE9KOMwAAAIg"]
[Sat Nov 15 00:04:56.356312 2025] [:error] [pid 16574:tid 16617] [client 192.178.4.101:39292] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRdTKP6XQqe4NqaoE9KRpAAAAIo"]
[Sat Nov 15 00:05:28.995347 2025] [:error] [pid 16671:tid 16693] [client 192.178.4.101:64421] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRdTSDsoHwEAmeIzZXC_2gAAARA"]
[Sat Nov 15 00:46:25.624633 2025] [:error] [pid 45995:tid 46012] [client 34.23.179.107:58468] [client 34.23.179.107] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.paramountbaldivis.com"] [uri "/.git/config"] [unique_id "aRdc4cfhZrb6EV4SvFuyjgAAAgw"]
[Sat Nov 15 00:47:26.211688 2025] [:error] [pid 45909:tid 45977] [client 192.178.4.101:35751] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRddHsZqItrYybG86kiK_wAAAcw"]
[Sat Nov 15 00:47:31.320109 2025] [:error] [pid 18513:tid 18528] [client 192.178.4.101:63425] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRddI_c94upQFzRWlUmxrAAAAEo"]
[Sat Nov 15 00:47:35.595187 2025] [:error] [pid 18513:tid 18526] [client 192.178.4.101:43265] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRddJ_c94upQFzRWlUmxtAAAAEg"]
[Sat Nov 15 00:54:55.678890 2025] [:error] [pid 45995:tid 46001] [client 103.198.154.48:55124] [client 103.198.154.48] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.198.154.48, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aRde38fhZrb6EV4SvFu2aAAAAgE"]
[Sat Nov 15 01:05:14.058253 2025] [:error] [pid 18513:tid 18529] [client 47.244.90.157:41894] [client 47.244.90.157] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 47.244.90.157, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRdhSvc94upQFzRWlUm6jwAAAEs"]
[Sat Nov 15 02:23:15.908076 2025] [:error] [pid 45909:tid 45977] [client 18.198.136.112:43360] [client 18.198.136.112] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 18.198.136.112, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRdzk8ZqItrYybG86kip5wAAAcw"]
[Sat Nov 15 03:20:46.356287 2025] [:error] [pid 45995:tid 46014] [client 192.178.4.101:43221] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aReBDsfhZrb6EV4SvFvx7AAAAg4"]
[Sat Nov 15 03:20:51.553675 2025] [:error] [pid 18513:tid 18523] [client 192.178.4.101:42237] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aReBE_c94upQFzRWlUkC2AAAAEU"]
[Sat Nov 15 03:21:41.593876 2025] [:error] [pid 45909:tid 45987] [client 192.178.4.101:46391] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aReBRcZqItrYybG86ki-zQAAAdY"]
[Sat Nov 15 03:30:56.303663 2025] [proxy_fcgi:error] [pid 8226:tid 8237] (70007)The timeout specified has expired: [client 192.178.4.101:43561] AH01075: Error dispatching request to : (polling)
[Sat Nov 15 03:46:36.426965 2025] [:error] [pid 10489:tid 10506] [client 35.234.37.132:42126] [client 35.234.37.132] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 35.234.37.132, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aReHHFckOpF1_1u6OZzBXgAAAMw"]
[Sat Nov 15 03:58:35.060985 2025] [:error] [pid 48373:tid 48401] [client 192.178.4.101:51096] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aReJ61vujhTe_5A1RjAxWQAAAA0"]
[Sat Nov 15 03:58:41.007727 2025] [:error] [pid 48375:tid 48460] [client 192.178.4.101:43406] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aReJ8VKSzjz4qhL2ajz2bQAAAJE"]
[Sat Nov 15 03:58:50.019775 2025] [:error] [pid 48374:tid 48420] [client 192.178.4.101:64742] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aReJ-sQLERcVIJNVsrFeiAAAAEU"]
[Sat Nov 15 03:59:09.485795 2025] [:error] [pid 48375:tid 48456] [client 192.178.4.101:52201] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aReKDVKSzjz4qhL2ajz2pwAAAI0"]
[Sat Nov 15 04:25:48.280272 2025] [:error] [pid 37318:tid 37365] [client 192.178.4.101:43067] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aReQTOgM1rHoEAqoQDf-HgAAAQM"]
[Sat Nov 15 04:25:51.403921 2025] [:error] [pid 27997:tid 28000] [client 192.178.4.101:39158] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aReQT9pja_6cDxKbxFn6ZwAAAME"]
[Sat Nov 15 04:29:40.689775 2025] [:error] [pid 37318:tid 37380] [client 192.178.4.101:59827] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aReRNOgM1rHoEAqoQDcAQwAAARI"]
[Sat Nov 15 04:29:55.333894 2025] [:error] [pid 27911:tid 27984] [client 192.178.4.101:60891] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aReRQ8GzUdrhGBIfiKSmDgAAAJA"]
[Sat Nov 15 04:30:02.134835 2025] [:error] [pid 37318:tid 37377] [client 192.178.4.101:36869] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/gambling/pg777%20%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95.html"] [unique_id "aReRSugM1rHoEAqoQDcAagAAAQ8"]
[Sat Nov 15 04:30:11.273578 2025] [:error] [pid 27909:tid 27929] [client 192.178.4.101:56169] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aReRUyTfZ6B57n8HepVyqAAAABA"]
[Sat Nov 15 04:30:17.419783 2025] [:error] [pid 27910:tid 27956] [client 192.178.4.101:57114] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/sitemap/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%20%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%20%E0%B8%9F%E0%B8%A3%E0%B8%B5.html"] [unique_id "aReRWY6e1LusHMYkS7Y6HwAAAE8"]
[Sat Nov 15 04:30:23.443626 2025] [:error] [pid 37318:tid 37388] [client 192.178.4.101:38909] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aReRX-gM1rHoEAqoQDcAgAAAARY"]
[Sat Nov 15 04:34:44.509645 2025] [:error] [pid 27997:tid 28005] [client 192.178.4.101:59124] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aReSZNpja_6cDxKbxFn92AAAAMY"]
[Sat Nov 15 04:48:00.716837 2025] [:error] [pid 27909:tid 27925] [client 192.178.4.101:59997] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aReVgCTfZ6B57n8HepV5TwAAAAw"]
[Sat Nov 15 04:48:03.717245 2025] [:error] [pid 27909:tid 27924] [client 192.178.4.101:47908] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aReVgyTfZ6B57n8HepV5VgAAAAs"]
[Sat Nov 15 04:48:10.429929 2025] [:error] [pid 27910:tid 27959] [client 192.178.4.101:64839] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aReVio6e1LusHMYkS7ZAwQAAAFI"]
[Sat Nov 15 04:48:22.731212 2025] [:error] [pid 27910:tid 27959] [client 192.178.4.101:60536] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aReVlo6e1LusHMYkS7ZAzwAAAFI"]
[Sat Nov 15 04:48:25.827889 2025] [:error] [pid 27909:tid 27923] [client 192.178.4.101:59526] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aReVmSTfZ6B57n8HepV5bAAAAAo"]
[Sat Nov 15 04:48:35.557856 2025] [:error] [pid 27909:tid 27933] [client 192.178.4.101:38385] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aReVoyTfZ6B57n8HepV5egAAABQ"]
[Sat Nov 15 04:48:41.959939 2025] [:error] [pid 27910:tid 27958] [client 192.178.4.101:42096] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/games/pg%20slot%20168k.html"] [unique_id "aReVqY6e1LusHMYkS7ZA5wAAAFE"]
[Sat Nov 15 04:52:11.260329 2025] [:error] [pid 27997:tid 28002] [client 159.65.14.149:58613] [client 159.65.14.149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paramountbaldivis.com"] [uri "/sftp-config.json"] [unique_id "aReWe9pja_6cDxKbxFkE1gAAAMM"]
[Sat Nov 15 04:55:44.130707 2025] [:error] [pid 27909:tid 27936] [client 192.178.4.101:40621] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aReXUCTfZ6B57n8HepV8BAAAABc"]
[Sat Nov 15 04:55:46.610198 2025] [:error] [pid 27997:tid 28021] [client 192.178.4.101:43667] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aReXUtpja_6cDxKbxFkGZAAAANY"]
[Sat Nov 15 04:59:41.677726 2025] [:error] [pid 27910:tid 27962] [client 192.178.4.101:49696] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aReYPY6e1LusHMYkS7ZD7QAAAFU"]
[Sat Nov 15 05:04:05.536978 2025] [:error] [pid 27909:tid 27916] [client 162.243.15.109:59658] [client 162.243.15.109] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paramountbaldivis.com"] [uri "/.env"] [unique_id "aReZRSTfZ6B57n8HepV-hAAAAAM"]
[Sat Nov 15 05:04:18.034439 2025] [:error] [pid 37318:tid 37383] [client 162.243.15.109:24258] [client 162.243.15.109] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paramountbaldivis.com"] [uri "/.git/config"] [unique_id "aReZUugM1rHoEAqoQDcQqwAAARU"]
[Sat Nov 15 05:07:26.579716 2025] [:error] [pid 27909:tid 27917] [client 192.178.4.101:40237] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aReaDiTfZ6B57n8HepV_swAAAAQ"]
[Sat Nov 15 05:23:57.134192 2025] [:error] [pid 27910:tid 27958] [client 192.178.4.101:59294] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRed7Y6e1LusHMYkS7ZMAQAAAFE"]
[Sat Nov 15 05:24:20.352947 2025] [:error] [pid 37318:tid 37372] [client 192.178.4.101:40050] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aReeBOgM1rHoEAqoQDccZQAAAQo"]
[Sat Nov 15 05:24:40.798594 2025] [:error] [pid 27997:tid 28004] [client 192.178.4.101:55169] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aReeGNpja_6cDxKbxFkRYQAAAMU"]
[Sat Nov 15 05:27:31.061680 2025] [:error] [pid 27910:tid 27957] [client 192.178.4.101:48555] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aReew46e1LusHMYkS7ZNMgAAAFA"]
[Sat Nov 15 05:30:48.867854 2025] [:error] [pid 27997:tid 28022] [client 192.178.4.101:47527] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRefiNpja_6cDxKbxFkUSgAAANc"]
[Sat Nov 15 05:31:20.306812 2025] [:error] [pid 27997:tid 28022] [client 192.178.4.101:52615] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRefqNpja_6cDxKbxFkUegAAANc"]
[Sat Nov 15 05:34:47.279505 2025] [:error] [pid 27910:tid 27953] [client 192.178.4.101:53555] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRegd46e1LusHMYkS7ZQZgAAAEw"]
[Sat Nov 15 05:34:52.352377 2025] [:error] [pid 27909:tid 27923] [client 192.178.4.101:38533] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRegfCTfZ6B57n8HepWKUwAAAAo"]
[Sat Nov 15 05:35:37.480935 2025] [:error] [pid 27997:tid 28014] [client 192.178.4.101:48091] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRegqdpja_6cDxKbxFkW2AAAAM8"]
[Sat Nov 15 05:50:50.573460 2025] [:error] [pid 27911:tid 27973] [client 192.178.4.101:55964] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRekOsGzUdrhGBIfiKTD1AAAAIU"]
[Sat Nov 15 05:50:53.085847 2025] [:error] [pid 37318:tid 37388] [client 192.178.4.101:40857] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRekPegM1rHoEAqoQDcrDwAAARY"]
[Sat Nov 15 05:51:19.828265 2025] [:error] [pid 27910:tid 27949] [client 192.178.4.101:35089] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRekV46e1LusHMYkS7ZWjQAAAEg"]
[Sat Nov 15 05:51:22.102934 2025] [:error] [pid 37318:tid 37374] [client 192.178.4.101:53584] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRekWugM1rHoEAqoQDcrNgAAAQw"]
[Sat Nov 15 05:54:41.206539 2025] [:error] [pid 27997:tid 28023] [client 192.178.4.101:51836] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRelIdpja_6cDxKbxFkeigAAANg"]
[Sat Nov 15 05:55:13.130753 2025] [:error] [pid 27911:tid 27971] [client 192.178.4.101:35855] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRelQcGzUdrhGBIfiKTFfQAAAIM"]
[Sat Nov 15 05:55:23.791357 2025] [:error] [pid 27909:tid 27937] [client 192.178.4.101:39803] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRelSyTfZ6B57n8HepWRUwAAABg"]
[Sat Nov 15 05:59:06.864873 2025] [:error] [pid 27997:tid 28008] [client 192.178.4.101:61058] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRemKtpja_6cDxKbxFkgLAAAAMk"]
[Sat Nov 15 05:59:20.764949 2025] [:error] [pid 27997:tid 28021] [client 192.178.4.101:52110] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRemONpja_6cDxKbxFkgPAAAANY"]
[Sat Nov 15 05:59:45.306541 2025] [:error] [pid 37318:tid 37374] [client 192.178.4.101:53901] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRemUegM1rHoEAqoQDcvLQAAAQw"]
[Sat Nov 15 05:59:56.513439 2025] [:error] [pid 27997:tid 28012] [client 192.178.4.101:39833] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRemXNpja_6cDxKbxFkgjgAAAM0"]
[Sat Nov 15 06:00:58.195245 2025] [:error] [pid 37318:tid 37383] [client 18.188.70.231:33510] [client 18.188.70.231] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.paramountbaldivis.com"] [uri "/.git/config"] [unique_id "aRemmugM1rHoEAqoQDcvugAAARU"]
[Sat Nov 15 06:03:40.078293 2025] [:error] [pid 27997:tid 28009] [client 192.178.4.101:59951] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRenPNpja_6cDxKbxFkiHAAAAMo"]
[Sat Nov 15 06:03:45.641786 2025] [:error] [pid 37318:tid 37371] [client 192.178.4.101:40570] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRenQegM1rHoEAqoQDcxLwAAAQk"]
[Sat Nov 15 06:03:58.841419 2025] [:error] [pid 27909:tid 27922] [client 192.178.4.101:47926] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRenTiTfZ6B57n8HepWT4QAAAAk"]
[Sat Nov 15 06:08:34.728178 2025] [:error] [pid 27997:tid 27999] [client 192.178.4.101:61024] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aReoYtpja_6cDxKbxFkj4QAAAMA"]
[Sat Nov 15 06:33:36.233259 2025] [:error] [pid 37318:tid 37390] [client 13.200.17.171:41468] [client 13.200.17.171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paramountbaldivis.com"] [uri "/.git/config"] [unique_id "aReuQOgM1rHoEAqoQDdAMQAAARg"]
[Sat Nov 15 06:35:56.995966 2025] [:error] [pid 27910:tid 27942] [client 192.178.4.101:65089] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aReuzI6e1LusHMYkS7ZkYwAAAEE"]
[Sat Nov 15 06:36:10.175718 2025] [:error] [pid 27909:tid 27935] [client 192.178.4.101:63724] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aReu2iTfZ6B57n8HepWc1wAAABY"]
[Sat Nov 15 06:36:37.900661 2025] [:error] [pid 27909:tid 27928] [client 192.178.4.101:59108] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aReu9STfZ6B57n8HepWc9AAAAA8"]
[Sat Nov 15 06:51:31.324094 2025] [:error] [pid 27909:tid 27927] [client 192.178.4.101:49886] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aReycyTfZ6B57n8HepWhHQAAAA4"]
[Sat Nov 15 06:51:43.819464 2025] [:error] [pid 27997:tid 28017] [client 192.178.4.101:39307] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aReyf9pja_6cDxKbxFkyygAAANI"]
[Sat Nov 15 06:51:58.632858 2025] [:error] [pid 27997:tid 28001] [client 192.178.4.101:56509] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aReyjtpja_6cDxKbxFky5wAAAMI"]
[Sat Nov 15 06:55:37.052986 2025] [:error] [pid 27997:tid 28012] [client 192.178.4.101:50363] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRezadpja_6cDxKbxFk0eQAAAM0"]
[Sat Nov 15 06:55:38.938274 2025] [:error] [pid 37318:tid 37382] [client 192.178.4.101:52597] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRezaugM1rHoEAqoQDdJYwAAARQ"]
[Sat Nov 15 07:04:44.547503 2025] [:error] [pid 27909:tid 27927] [client 192.178.4.101:65509] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRe1jCTfZ6B57n8HepWlcQAAAA4"]
[Sat Nov 15 07:13:27.472226 2025] [:error] [pid 27911:tid 27981] [client 192.178.4.101:36068] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRe3l8GzUdrhGBIfiKTfIwAAAI0"]
[Sat Nov 15 07:13:42.702616 2025] [:error] [pid 27909:tid 27920] [client 192.178.4.101:36417] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRe3piTfZ6B57n8HepWoXAAAAAc"]
[Sat Nov 15 07:13:45.764301 2025] [:error] [pid 27910:tid 27963] [client 192.178.4.101:51145] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRe3qY6e1LusHMYkS7ZwawAAAFY"]
[Sat Nov 15 07:13:55.073940 2025] [:error] [pid 27997:tid 28023] [client 192.178.4.101:58990] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRe3s9pja_6cDxKbxFk8FQAAANg"]
[Sat Nov 15 07:13:58.242625 2025] [:error] [pid 37318:tid 37381] [client 192.178.4.101:43062] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRe3tugM1rHoEAqoQDdTtQAAARM"]
[Sat Nov 15 07:17:37.554731 2025] [:error] [pid 27997:tid 28012] [client 192.178.4.101:48501] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRe4kdpja_6cDxKbxFk9QwAAAM0"]
[Sat Nov 15 07:18:04.163686 2025] [:error] [pid 27909:tid 27919] [client 192.178.4.101:50212] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRe4rCTfZ6B57n8HepWpaQAAAAY"]
[Sat Nov 15 07:21:02.870079 2025] [:error] [pid 27997:tid 28017] [client 192.178.4.101:57530] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRe5Xtpja_6cDxKbxFk-MgAAANI"]
[Sat Nov 15 07:21:35.373717 2025] [:error] [pid 27909:tid 27926] [client 192.178.4.101:40005] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRe5fyTfZ6B57n8HepWqHQAAAA0"]
[Sat Nov 15 07:21:50.859010 2025] [:error] [pid 27909:tid 27936] [client 192.178.4.101:59374] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRe5jiTfZ6B57n8HepWqMwAAABc"]
[Sat Nov 15 07:25:41.338052 2025] [:error] [pid 37318:tid 37373] [client 192.178.4.101:62824] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRe6degM1rHoEAqoQDdYQgAAAQs"]
[Sat Nov 15 07:25:44.302268 2025] [:error] [pid 27910:tid 27950] [client 192.178.4.101:61273] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRe6eI6e1LusHMYkS7ZzrgAAAEk"]
[Sat Nov 15 07:25:57.728851 2025] [:error] [pid 37318:tid 37364] [client 192.178.4.101:47573] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRe6hegM1rHoEAqoQDdYTwAAAQI"]
[Sat Nov 15 07:25:59.933310 2025] [:error] [pid 27910:tid 27950] [client 192.178.4.101:65086] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRe6h46e1LusHMYkS7ZzwwAAAEk"]
[Sat Nov 15 07:26:04.379252 2025] [:error] [pid 37318:tid 37378] [client 192.178.4.101:45471] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRe6jOgM1rHoEAqoQDdYXgAAARA"]
[Sat Nov 15 07:26:11.316941 2025] [:error] [pid 27997:tid 28005] [client 192.178.4.101:54510] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRe6k9pja_6cDxKbxFlATQAAAMY"]
[Sat Nov 15 07:26:31.367275 2025] [:error] [pid 27910:tid 27948] [client 192.178.4.101:63568] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRe6p46e1LusHMYkS7Zz1AAAAEc"]
[Sat Nov 15 07:26:34.725000 2025] [:error] [pid 27910:tid 27955] [client 192.178.4.101:39228] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRe6qo6e1LusHMYkS7Zz2AAAAE4"]
[Sat Nov 15 07:30:03.765616 2025] [:error] [pid 27997:tid 28008] [client 192.178.4.101:47995] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRe7e9pja_6cDxKbxFlB3QAAAMk"]
[Sat Nov 15 07:30:29.647970 2025] [:error] [pid 27909:tid 27928] [client 192.178.4.101:57358] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRe7lSTfZ6B57n8HepWsjgAAAA8"]
[Sat Nov 15 07:33:14.093343 2025] [:error] [pid 27911:tid 27975] [client 192.178.4.101:35496] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRe8OsGzUdrhGBIfiKTlZAAAAIc"]
[Sat Nov 15 07:33:23.590048 2025] [:error] [pid 27911:tid 27969] [client 192.178.4.101:47502] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRe8Q8GzUdrhGBIfiKTldAAAAIE"]
[Sat Nov 15 07:33:38.027835 2025] [:error] [pid 27910:tid 27963] [client 192.178.4.101:47680] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRe8Uo6e1LusHMYkS7Z2PAAAAFY"]
[Sat Nov 15 07:33:40.994031 2025] [:error] [pid 37318:tid 37368] [client 192.178.4.101:47552] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRe8VOgM1rHoEAqoQDdcFwAAAQY"]
[Sat Nov 15 07:33:49.403793 2025] [:error] [pid 37318:tid 37377] [client 192.178.4.101:54078] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRe8XegM1rHoEAqoQDdcJAAAAQ8"]
[Sat Nov 15 07:38:33.141618 2025] [:error] [pid 27911:tid 27989] [client 192.178.4.101:58567] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRe9ecGzUdrhGBIfiKTnPwAAAJU"]
[Sat Nov 15 07:39:19.763228 2025] [:error] [pid 27997:tid 28005] [client 65.38.25.38:45235] [client 65.38.25.38] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 65.38.25.38, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRe9p9pja_6cDxKbxFlFZwAAAMY"]
[Sat Nov 15 07:43:59.656946 2025] [:error] [pid 37318:tid 37371] [client 192.178.4.101:36737] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRe-v-gM1rHoEAqoQDdhmQAAAQk"]
[Sat Nov 15 07:44:03.139764 2025] [:error] [pid 27997:tid 28003] [client 192.178.4.101:63179] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRe-w9pja_6cDxKbxFlIkgAAAMQ"]
[Sat Nov 15 07:44:29.926580 2025] [:error] [pid 27911:tid 27970] [client 192.178.4.101:51196] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRe-3cGzUdrhGBIfiKTqRQAAAII"]
[Sat Nov 15 07:44:32.405986 2025] [:error] [pid 27997:tid 28020] [client 192.178.4.101:47867] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRe-4Npja_6cDxKbxFlI1QAAANU"]
[Sat Nov 15 07:44:43.518914 2025] [:error] [pid 27909:tid 27924] [client 192.178.4.101:45584] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRe-6yTfZ6B57n8HepWxgwAAAAs"]
[Sat Nov 15 07:48:01.211981 2025] [:error] [pid 27909:tid 27926] [client 192.178.4.101:60810] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRe_sSTfZ6B57n8HepWyqQAAAA0"]
[Sat Nov 15 07:48:04.455241 2025] [:error] [pid 27910:tid 27951] [client 192.178.4.101:46087] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRe_tI6e1LusHMYkS7Z7rwAAAEo"]
[Sat Nov 15 07:48:15.233222 2025] [:error] [pid 27997:tid 28007] [client 192.178.4.101:60300] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRe_v9pja_6cDxKbxFlKYQAAAMg"]
[Sat Nov 15 07:48:31.429781 2025] [:error] [pid 27910:tid 27957] [client 192.178.4.101:63634] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRe_z46e1LusHMYkS7Z7zwAAAFA"]
[Sat Nov 15 07:53:40.810429 2025] [:error] [pid 27909:tid 27932] [client 192.178.4.101:41597] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRfBBCTfZ6B57n8HepWz4gAAABM"]
[Sat Nov 15 07:56:53.031439 2025] [:error] [pid 27997:tid 28010] [client 192.178.4.101:44822] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRfBxdpja_6cDxKbxFlNVAAAAMs"]
[Sat Nov 15 07:57:48.485320 2025] [:error] [pid 27911:tid 27984] [client 192.178.4.101:41519] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRfB_MGzUdrhGBIfiKTuugAAAJA"]
[Sat Nov 15 08:02:45.556110 2025] [:error] [pid 27909:tid 27925] [client 192.178.4.101:35750] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRfDJSTfZ6B57n8HepW2gAAAAAw"]
[Sat Nov 15 08:02:46.089043 2025] [:error] [pid 27910:tid 27943] [client 192.178.4.101:50164] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRfDJo6e1LusHMYkS7Z_2AAAAEI"]
[Sat Nov 15 08:02:56.870781 2025] [:error] [pid 37318:tid 37383] [client 192.178.4.101:42823] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRfDMOgM1rHoEAqoQDdqbQAAARU"]
[Sat Nov 15 08:02:57.887902 2025] [:error] [pid 27911:tid 27975] [client 192.178.4.101:42313] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRfDMcGzUdrhGBIfiKTxBwAAAIc"]
[Sat Nov 15 08:02:58.852964 2025] [:error] [pid 37318:tid 37373] [client 192.178.4.101:44106] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/betting/Daftar%20g%20slot%20888.html"] [unique_id "aRfDMugM1rHoEAqoQDdqdwAAAQs"]
[Sat Nov 15 08:02:59.199774 2025] [:error] [pid 27910:tid 27941] [client 192.178.4.101:37920] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRfDM46e1LusHMYkS7Z_4AAAAEA"]
[Sat Nov 15 08:03:00.689509 2025] [:error] [pid 27911:tid 27979] [client 192.178.4.101:39743] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/video/Daftar%20%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B8%9F%E0%B8%A3%E0%B8%B5.html"] [unique_id "aRfDNMGzUdrhGBIfiKTxCgAAAIs"]
[Sat Nov 15 08:03:11.666825 2025] [:error] [pid 37318:tid 37375] [client 192.178.4.101:52127] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRfDP-gM1rHoEAqoQDdqiQAAAQ0"]
[Sat Nov 15 08:03:12.612501 2025] [:error] [pid 27909:tid 27931] [client 192.178.4.101:62864] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/deposit/%E0%B8%9C%E0%B8%A5%E0%B8%9A%E0%B8%9A%E0%B8%B2%E0%B8%AA.html"] [unique_id "aRfDQCTfZ6B57n8HepW2nQAAABI"]
[Sat Nov 15 08:06:43.459155 2025] [:error] [pid 27910:tid 27944] [client 192.178.4.101:50472] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRfEE46e1LusHMYkS7aBMgAAAEM"]
[Sat Nov 15 08:06:43.738246 2025] [:error] [pid 27997:tid 28011] [client 192.178.4.101:64590] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRfEE9pja_6cDxKbxFlRVgAAAMw"]
[Sat Nov 15 08:06:52.987862 2025] [:error] [pid 27911:tid 27968] [client 192.178.4.101:38414] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRfEHMGzUdrhGBIfiKTyLgAAAIA"]
[Sat Nov 15 08:07:22.282645 2025] [:error] [pid 27911:tid 27984] [client 192.178.4.101:56059] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRfEOsGzUdrhGBIfiKTyYQAAAJA"]
[Sat Nov 15 08:52:54.310261 2025] [:error] [pid 27911:tid 27973] [client 57.129.79.233:59032] [client 57.129.79.233] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 57.129.79.233, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRfO5sGzUdrhGBIfiKQAXAAAAIU"]
[Sat Nov 15 10:05:56.940015 2025] [:error] [pid 27997:tid 28022] [client 51.89.116.113:60170] [client 51.89.116.113] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 51.89.116.113, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRfgBNpja_6cDxKbxFl2NwAAANc"]
[Sat Nov 15 11:24:16.202506 2025] [:error] [pid 19959:tid 19974] [client 46.105.230.99:7333] [client 46.105.230.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 46.105.230.99, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRfyYMjejiTUP1-IawN3AAAAAYg"]
[Sat Nov 15 12:09:26.243595 2025] [:error] [pid 19959:tid 19972] [client 138.197.23.42:64576] [client 138.197.23.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRf89sjejiTUP1-IawOAFQAAAYY"]
[Sat Nov 15 12:09:26.660608 2025] [:error] [pid 20654:tid 20672] [client 138.197.23.42:64735] [client 138.197.23.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRf89ncS7eC8vO76_ydthwAAA48"]
[Sat Nov 15 12:09:27.079778 2025] [:error] [pid 22765:tid 22794] [client 138.197.23.42:64886] [client 138.197.23.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRf896brQzjuZmPIWDafDQAAApg"]
[Sat Nov 15 12:09:27.513337 2025] [:error] [pid 20654:tid 20679] [client 138.197.23.42:65044] [client 138.197.23.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRf893cS7eC8vO76_ydtsgAAA5Y"]
[Sat Nov 15 12:09:27.950277 2025] [:error] [pid 22765:tid 22784] [client 138.197.23.42:65221] [client 138.197.23.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRf896brQzjuZmPIWDafRgAAAo4"]
[Sat Nov 15 12:41:04.116454 2025] [:error] [pid 27911:tid 27981] [client 62.169.28.251:41920] [client 62.169.28.251] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.169.28.251, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRgEYMGzUdrhGBIfiKQrcwAAAI0"]
[Sat Nov 15 12:56:34.977322 2025] [:error] [pid 27997:tid 28018] [client 192.178.4.101:45819] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRgIAtpja_6cDxKbxFmXvQAAANM"]
[Sat Nov 15 12:56:53.653083 2025] [:error] [pid 27997:tid 28017] [client 192.178.4.101:44003] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRgIFdpja_6cDxKbxFmXzgAAANI"]
[Sat Nov 15 13:54:55.233906 2025] [:error] [pid 20313:tid 20337] [client 197.221.14.57:42350] [client 197.221.14.57] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 197.221.14.57, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRgVrxI9DXIgPadBLUZimQAAAtU"]
[Sat Nov 15 14:08:36.556702 2025] [:error] [pid 19959:tid 19971] [client 156.38.203.70:49132] [client 156.38.203.70] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 156.38.203.70, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRgY5MjejiTUP1-IawOc8QAAAYU"]
[Sat Nov 15 15:06:39.164122 2025] [:error] [pid 22613:tid 22628] [client 152.53.164.187:56038] [client 152.53.164.187] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 152.53.164.187, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRgmfyoyR3cDsIRGPRmcvAAAAg0"]
[Sat Nov 15 16:20:08.098862 2025] [:error] [pid 20313:tid 20324] [client 46.105.230.99:57629] [client 46.105.230.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 46.105.230.99, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRg3uBI9DXIgPadBLUZ4JwAAAsg"]
[Sat Nov 15 17:31:51.768101 2025] [:error] [pid 20654:tid 20670] [client 94.130.237.27:33372] [client 94.130.237.27] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.130.237.27, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRhIh3cS7eC8vO76_yfWFwAAA40"]
[Sat Nov 15 17:38:43.363493 2025] [:error] [pid 20346:tid 20370] [client 139.59.79.159:41586] [client 139.59.79.159] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 139.59.79.159, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRhKI57hsydZdIoVTlsmoAAAAxU"]
[Sat Nov 15 17:51:42.531203 2025] [autoindex:error] [pid 19959:tid 19985] [client 20.2.83.141:53055] AH01276: Cannot serve directory /home/baldivis/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sat Nov 15 18:13:49.284089 2025] [:error] [pid 22765:tid 22776] [client 192.178.4.101:60017] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRhSXabrQzjuZmPIWDbphAAAAoY"]
[Sat Nov 15 18:14:42.164747 2025] [:error] [pid 27997:tid 28010] [client 192.178.4.101:44818] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRhSktpja_6cDxKbxFnV4AAAAMs"]
[Sat Nov 15 18:19:20.920032 2025] [:error] [pid 27997:tid 28008] [client 192.178.4.101:51525] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRhTqNpja_6cDxKbxFnXQgAAAMk"]
[Sat Nov 15 18:19:39.452628 2025] [:error] [pid 22765:tid 22783] [client 192.178.4.101:45859] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRhTu6brQzjuZmPIWDbrJQAAAo0"]
[Sat Nov 15 18:22:21.672675 2025] [:error] [pid 27997:tid 28001] [client 192.178.4.101:38490] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRhUXdpja_6cDxKbxFnX3QAAAMI"]
[Sat Nov 15 18:22:34.596751 2025] [:error] [pid 22765:tid 22770] [client 192.178.4.101:47262] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRhUaqbrQzjuZmPIWDbroQAAAoI"]
[Sat Nov 15 18:22:42.081478 2025] [:error] [pid 20654:tid 20681] [client 192.178.4.101:40663] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRhUcncS7eC8vO76_yfozAAAA5g"]
[Sat Nov 15 18:22:42.804235 2025] [:error] [pid 22613:tid 22630] [client 192.178.4.101:53298] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRhUcioyR3cDsIRGPRnAhwAAAg8"]
[Sat Nov 15 18:22:51.522366 2025] [:error] [pid 27911:tid 27992] [client 192.178.4.101:47929] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRhUe8GzUdrhGBIfiKRlmAAAAJg"]
[Sat Nov 15 18:22:59.124616 2025] [:error] [pid 20654:tid 20680] [client 192.178.4.101:42587] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRhUg3cS7eC8vO76_yfo3gAAA5c"]
[Sat Nov 15 18:25:35.754780 2025] [:error] [pid 20346:tid 20364] [client 192.178.4.101:38923] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRhVH57hsydZdIoVTlszwAAAAw8"]
[Sat Nov 15 18:25:49.301149 2025] [:error] [pid 20654:tid 20679] [client 192.178.4.101:61092] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRhVLXcS7eC8vO76_yfpvAAAA5Y"]
[Sat Nov 15 18:25:56.519968 2025] [:error] [pid 19961:tid 20005] [client 192.178.4.101:47893] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRhVNDar7Si-84EApVR2FwAAAcw"]
[Sat Nov 15 18:26:09.332869 2025] [:error] [pid 19961:tid 20012] [client 192.178.4.101:37008] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRhVQTar7Si-84EApVR2IwAAAdM"]
[Sat Nov 15 18:28:11.645815 2025] [:error] [pid 27909:tid 27935] [client 192.178.4.101:62058] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRhVuyTfZ6B57n8HepUt5QAAABY"]
[Sat Nov 15 18:28:19.233313 2025] [:error] [pid 20654:tid 20672] [client 192.178.4.101:34779] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRhVw3cS7eC8vO76_yfqgAAAA48"]
[Sat Nov 15 18:28:27.195561 2025] [:error] [pid 19959:tid 19988] [client 192.178.4.101:55954] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRhVy8jejiTUP1-IawPYWQAAAZY"]
[Sat Nov 15 18:28:42.230914 2025] [:error] [pid 22613:tid 22622] [client 192.178.4.101:45203] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRhV2ioyR3cDsIRGPRnBngAAAgc"]
[Sat Nov 15 18:28:43.457626 2025] [:error] [pid 27911:tid 27974] [client 192.178.4.101:53372] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRhV28GzUdrhGBIfiKRmigAAAIY"]
[Sat Nov 15 18:28:50.739252 2025] [:error] [pid 19961:tid 20010] [client 192.178.4.101:47589] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRhV4jar7Si-84EApVR2lgAAAdE"]
[Sat Nov 15 18:28:57.711196 2025] [:error] [pid 19959:tid 19988] [client 192.178.4.101:41347] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRhV6cjejiTUP1-IawPYcQAAAZY"]
[Sat Nov 15 18:30:52.431993 2025] [:error] [pid 22765:tid 22787] [client 192.178.4.101:62441] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRhWXKbrQzjuZmPIWDbtgQAAApE"]
[Sat Nov 15 18:30:53.522863 2025] [:error] [pid 20346:tid 20351] [client 192.178.4.101:41012] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRhWXZ7hsydZdIoVTls04QAAAwI"]
[Sat Nov 15 18:31:10.954142 2025] [:error] [pid 20313:tid 20326] [client 192.178.4.101:59543] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRhWbhI9DXIgPadBLUaPPQAAAso"]
[Sat Nov 15 18:31:17.972951 2025] [:error] [pid 27909:tid 27930] [client 192.178.4.101:35593] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRhWdSTfZ6B57n8HepUuaQAAABE"]
[Sat Nov 15 18:31:25.697426 2025] [:error] [pid 27911:tid 27992] [client 192.178.4.101:39860] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRhWfcGzUdrhGBIfiKRm8gAAAJg"]
[Sat Nov 15 18:31:42.295058 2025] [:error] [pid 19961:tid 20017] [client 192.178.4.101:56152] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRhWjjar7Si-84EApVR3DwAAAdg"]
[Sat Nov 15 18:33:24.903722 2025] [:error] [pid 22613:tid 22622] [client 192.178.4.101:55095] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRhW9CoyR3cDsIRGPRnChgAAAgc"]
[Sat Nov 15 18:33:25.933669 2025] [:error] [pid 20313:tid 20337] [client 192.178.4.101:44608] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRhW9RI9DXIgPadBLUaPlwAAAtU"]
[Sat Nov 15 18:33:26.962780 2025] [:error] [pid 20654:tid 20668] [client 192.178.4.101:54803] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRhW9ncS7eC8vO76_yfsbgAAA4s"]
[Sat Nov 15 18:33:27.994078 2025] [:error] [pid 20654:tid 20662] [client 192.178.4.101:46014] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ios/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg%20%E0%B8%9F%E0%B8%A3%E0%B8%B5%20%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95.html"] [unique_id "aRhW93cS7eC8vO76_yfscAAAA4U"]
[Sat Nov 15 18:33:42.823268 2025] [:error] [pid 22765:tid 22789] [client 192.178.4.101:64382] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRhXBqbrQzjuZmPIWDbuJwAAApM"]
[Sat Nov 15 18:33:46.398190 2025] [:error] [pid 22613:tid 22637] [client 192.178.4.101:52227] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRhXCioyR3cDsIRGPRnCmQAAAhY"]
[Sat Nov 15 18:33:53.926865 2025] [:error] [pid 20346:tid 20356] [client 192.178.4.101:55218] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRhXEZ7hsydZdIoVTls1rgAAAwc"]
[Sat Nov 15 18:35:48.495528 2025] [:error] [pid 22613:tid 22635] [client 192.178.4.101:46832] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRhXhCoyR3cDsIRGPRnDJwAAAhQ"]
[Sat Nov 15 18:35:55.443749 2025] [:error] [pid 19961:tid 20005] [client 192.178.4.101:38010] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRhXizar7Si-84EApVR33AAAAcw"]
[Sat Nov 15 18:35:58.884850 2025] [:error] [pid 22765:tid 22772] [client 192.178.4.101:38490] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRhXjqbrQzjuZmPIWDbuwQAAAoQ"]
[Sat Nov 15 18:36:34.324688 2025] [:error] [pid 20654:tid 20666] [client 192.178.4.101:42617] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRhXsncS7eC8vO76_yftcQAAA4k"]
[Sat Nov 15 18:38:41.505775 2025] [:error] [pid 27997:tid 28003] [client 192.178.4.101:64346] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRhYMdpja_6cDxKbxFnbNQAAAMQ"]
[Sat Nov 15 18:38:42.536434 2025] [:error] [pid 19961:tid 19996] [client 192.178.4.101:47168] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRhYMjar7Si-84EApVR4TAAAAcM"]
[Sat Nov 15 18:38:53.498260 2025] [:error] [pid 20654:tid 20661] [client 192.178.4.101:65522] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRhYPXcS7eC8vO76_yfuIgAAA4Q"]
[Sat Nov 15 18:38:54.653304 2025] [:error] [pid 22765:tid 22789] [client 192.178.4.101:43744] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRhYPqbrQzjuZmPIWDbvYwAAApM"]
[Sat Nov 15 18:39:12.731044 2025] [:error] [pid 27997:tid 28021] [client 192.178.4.101:36885] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRhYUNpja_6cDxKbxFnbYQAAANY"]
[Sat Nov 15 18:41:10.659240 2025] [:error] [pid 19959:tid 19990] [client 192.178.4.101:58077] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRhYxsjejiTUP1-IawPcAgAAAZg"]
[Sat Nov 15 18:41:18.041811 2025] [:error] [pid 20313:tid 20327] [client 192.178.4.101:57774] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRhYzhI9DXIgPadBLUaRBQAAAss"]
[Sat Nov 15 18:41:19.261381 2025] [:error] [pid 19961:tid 20014] [client 192.178.4.101:63906] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRhYzzar7Si-84EApVR41QAAAdU"]
[Sat Nov 15 18:41:26.529952 2025] [:error] [pid 20313:tid 20316] [client 192.178.4.101:42417] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRhY1hI9DXIgPadBLUaRCQAAAsA"]
[Sat Nov 15 18:41:31.143808 2025] [:error] [pid 27909:tid 27936] [client 192.178.4.101:64711] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRhY2yTfZ6B57n8HepUwWAAAABc"]
[Sat Nov 15 18:41:33.456816 2025] [:error] [pid 27997:tid 28014] [client 192.178.4.101:52670] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRhY3dpja_6cDxKbxFnb8wAAAM8"]
[Sat Nov 15 18:41:36.884048 2025] [:error] [pid 27909:tid 27917] [client 192.178.4.101:38768] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRhY4CTfZ6B57n8HepUwWQAAAAQ"]
[Sat Nov 15 18:41:51.820350 2025] [:error] [pid 27997:tid 28020] [client 192.178.4.101:38037] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRhY79pja_6cDxKbxFncBgAAANU"]
[Sat Nov 15 18:41:58.789037 2025] [:error] [pid 27997:tid 28002] [client 192.178.4.101:45148] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRhY9tpja_6cDxKbxFncCwAAAMM"]
[Sat Nov 15 18:44:04.189834 2025] [:error] [pid 19959:tid 19967] [client 192.178.4.101:44327] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRhZdMjejiTUP1-IawPc0wAAAYE"]
[Sat Nov 15 18:44:11.052460 2025] [:error] [pid 22613:tid 22626] [client 192.178.4.101:61812] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRhZeyoyR3cDsIRGPRnEZQAAAgs"]
[Sat Nov 15 18:44:19.479324 2025] [:error] [pid 27909:tid 27920] [client 192.178.4.101:44541] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRhZgyTfZ6B57n8HepUwvgAAAAc"]
[Sat Nov 15 18:44:28.042537 2025] [:error] [pid 19961:tid 20016] [client 192.178.4.101:45250] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRhZjDar7Si-84EApVR5RQAAAdc"]
[Sat Nov 15 18:44:40.078328 2025] [:error] [pid 22613:tid 22632] [client 192.178.4.101:36734] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRhZmCoyR3cDsIRGPRnEcgAAAhE"]
[Sat Nov 15 18:44:46.948252 2025] [:error] [pid 20313:tid 20329] [client 192.178.4.101:48813] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRhZnhI9DXIgPadBLUaRkgAAAs0"]
[Sat Nov 15 18:44:53.812944 2025] [:error] [pid 20654:tid 20670] [client 192.178.4.101:40915] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRhZpXcS7eC8vO76_yfwUwAAA40"]
[Sat Nov 15 18:46:46.064316 2025] [:error] [pid 22613:tid 22633] [client 192.178.4.101:52175] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRhaFioyR3cDsIRGPRnEzgAAAhI"]
[Sat Nov 15 18:46:59.635596 2025] [:error] [pid 20313:tid 20325] [client 192.178.4.101:65230] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRhaIxI9DXIgPadBLUaR0AAAAsk"]
[Sat Nov 15 18:47:06.604181 2025] [:error] [pid 20654:tid 20679] [client 192.178.4.101:42110] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRhaKncS7eC8vO76_yfw4gAAA5Y"]
[Sat Nov 15 18:47:17.901670 2025] [:error] [pid 20654:tid 20666] [client 192.178.4.101:63683] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRhaNXcS7eC8vO76_yfw_wAAA4k"]
[Sat Nov 15 18:50:47.185200 2025] [:error] [pid 22765:tid 22794] [client 192.178.4.101:49090] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRhbB6brQzjuZmPIWDbxmAAAApg"]
[Sat Nov 15 18:51:02.478792 2025] [:error] [pid 20654:tid 20672] [client 192.178.4.101:34834] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRhbFncS7eC8vO76_yfyVgAAA48"]
[Sat Nov 15 18:51:09.413407 2025] [:error] [pid 22765:tid 22770] [client 192.178.4.101:50480] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRhbHabrQzjuZmPIWDbxqAAAAoI"]
[Sat Nov 15 18:51:16.369617 2025] [:error] [pid 27997:tid 28018] [client 192.178.4.101:60933] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRhbJNpja_6cDxKbxFnd1QAAANM"]
[Sat Nov 15 18:51:23.247981 2025] [:error] [pid 19961:tid 20009] [client 192.178.4.101:50115] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRhbKzar7Si-84EApVR6UQAAAdA"]
[Sat Nov 15 18:51:36.330884 2025] [:error] [pid 22765:tid 22791] [client 192.178.4.101:51863] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRhbOKbrQzjuZmPIWDbx1gAAApU"]
[Sat Nov 15 18:53:30.374099 2025] [:error] [pid 20313:tid 20328] [client 192.178.4.101:58761] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRhbqhI9DXIgPadBLUaSzwAAAsw"]
[Sat Nov 15 18:53:49.276436 2025] [:error] [pid 20654:tid 20662] [client 192.178.4.101:60595] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRhbvXcS7eC8vO76_yfzOAAAA4U"]
[Sat Nov 15 18:53:57.211272 2025] [:error] [pid 27997:tid 28020] [client 192.178.4.101:53221] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRhbxdpja_6cDxKbxFneNQAAANU"]
[Sat Nov 15 18:56:17.196035 2025] [:error] [pid 22613:tid 22639] [client 192.178.4.101:39351] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRhcUSoyR3cDsIRGPRnGiwAAAhg"]
[Sat Nov 15 18:56:24.157746 2025] [:error] [pid 27997:tid 28018] [client 192.178.4.101:45360] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRhcWNpja_6cDxKbxFnetgAAANM"]
[Sat Nov 15 19:00:34.929520 2025] [:error] [pid 27911:tid 27970] [client 192.178.4.101:59680] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRhdUsGzUdrhGBIfiKRsDgAAAII"]
[Sat Nov 15 19:00:36.598221 2025] [:error] [pid 20313:tid 20336] [client 192.178.4.101:64444] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRhdVBI9DXIgPadBLUaUPgAAAtQ"]
[Sat Nov 15 19:00:37.609292 2025] [:error] [pid 20313:tid 20329] [client 192.178.4.101:44397] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRhdVRI9DXIgPadBLUaUPwAAAs0"]
[Sat Nov 15 19:00:39.595835 2025] [:error] [pid 20346:tid 20351] [client 192.178.4.101:63282] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRhdV57hsydZdIoVTls9CQAAAwI"]
[Sat Nov 15 19:00:41.031941 2025] [:error] [pid 20346:tid 20350] [client 192.178.4.101:48632] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRhdWZ7hsydZdIoVTls9CwAAAwE"]
[Sat Nov 15 19:09:11.438389 2025] [:error] [pid 22613:tid 22639] [client 192.178.4.101:36546] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRhfVyoyR3cDsIRGPRnI4AAAAhg"]
[Sat Nov 15 19:09:15.527115 2025] [:error] [pid 20654:tid 20659] [client 192.178.4.101:37281] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRhfW3cS7eC8vO76_yf4GgAAA4I"]
[Sat Nov 15 19:09:17.646717 2025] [:error] [pid 20654:tid 20660] [client 192.178.4.101:55933] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRhfXXcS7eC8vO76_yf4HgAAA4M"]
[Sat Nov 15 19:31:50.599392 2025] [:error] [pid 20346:tid 20368] [client 192.178.4.101:41700] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRhkpp7hsydZdIoVTltDJwAAAxM"]
[Sat Nov 15 19:31:52.152575 2025] [:error] [pid 22765:tid 22787] [client 192.178.4.101:59529] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRhkqKbrQzjuZmPIWDb4MgAAApE"]
[Sat Nov 15 19:31:58.407869 2025] [:error] [pid 20654:tid 20671] [client 192.178.4.101:37279] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRhkrncS7eC8vO76_yf9lAAAA44"]
[Sat Nov 15 19:32:20.705249 2025] [:error] [pid 20654:tid 20677] [client 192.178.4.101:49719] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRhkxHcS7eC8vO76_yf9sAAAA5Q"]
[Sat Nov 15 19:32:27.762760 2025] [:error] [pid 22613:tid 22631] [client 192.178.4.101:48987] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRhkyyoyR3cDsIRGPRnMVAAAAhA"]
[Sat Nov 15 19:32:33.290321 2025] [:error] [pid 27911:tid 27981] [client 192.178.4.101:42624] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRhk0cGzUdrhGBIfiKRwHQAAAI0"]
[Sat Nov 15 19:33:57.057067 2025] [:error] [pid 22613:tid 22622] [client 192.178.4.101:50369] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRhlJSoyR3cDsIRGPRnMfQAAAgc"]
[Sat Nov 15 19:34:17.287646 2025] [:error] [pid 22613:tid 22620] [client 192.178.4.101:57989] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRhlOSoyR3cDsIRGPRnMhwAAAgU"]
[Sat Nov 15 19:34:26.094669 2025] [:error] [pid 20654:tid 20668] [client 192.178.4.101:43354] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRhlQncS7eC8vO76_yf-FgAAA4s"]
[Sat Nov 15 19:34:35.342544 2025] [:error] [pid 20313:tid 20334] [client 192.178.4.101:64159] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRhlSxI9DXIgPadBLUaYkAAAAtI"]
[Sat Nov 15 19:37:30.713655 2025] [:error] [pid 20346:tid 20351] [client 192.178.4.101:37489] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRhl-p7hsydZdIoVTltEAgAAAwI"]
[Sat Nov 15 19:37:51.823737 2025] [:error] [pid 20654:tid 20662] [client 192.178.4.101:51235] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRhmD3cS7eC8vO76_yf-sAAAA4U"]
[Sat Nov 15 19:50:30.759877 2025] [:error] [pid 27909:tid 27936] [client 192.178.4.101:56602] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRhpBiTfZ6B57n8HepU5XQAAABc"]
[Sat Nov 15 19:50:38.577103 2025] [:error] [pid 27997:tid 28022] [client 192.178.4.101:51523] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRhpDtpja_6cDxKbxFnl8QAAANc"]
[Sat Nov 15 19:50:40.289754 2025] [:error] [pid 20313:tid 20321] [client 192.178.4.101:60904] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRhpEBI9DXIgPadBLUaaDgAAAsU"]
[Sat Nov 15 19:50:54.063615 2025] [:error] [pid 20346:tid 20363] [client 192.178.4.101:43569] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRhpHp7hsydZdIoVTltF8AAAAw4"]
[Sat Nov 15 19:50:55.095173 2025] [:error] [pid 20346:tid 20355] [client 192.178.4.101:58741] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRhpH57hsydZdIoVTltF8gAAAwY"]
[Sat Nov 15 19:57:03.743159 2025] [:error] [pid 27997:tid 28003] [client 157.90.144.101:33140] [client 157.90.144.101] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 157.90.144.101, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRhqj9pja_6cDxKbxFnmsQAAAMQ"]
[Sat Nov 15 20:03:28.554300 2025] [:error] [pid 20346:tid 20373] [client 192.178.4.101:35001] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRhsEJ7hsydZdIoVTltItgAAAxg"]
[Sat Nov 15 20:07:19.643509 2025] [:error] [pid 19959:tid 19981] [client 192.178.4.101:47037] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRhs98jejiTUP1-IawPqzwAAAY8"]
[Sat Nov 15 20:07:35.164744 2025] [:error] [pid 27997:tid 28017] [client 192.178.4.101:41136] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRhtB9pja_6cDxKbxFnorAAAANI"]
[Sat Nov 15 20:07:52.741836 2025] [:error] [pid 22765:tid 22787] [client 192.178.4.101:42514] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRhtGKbrQzjuZmPIWDb8CgAAApE"]
[Sat Nov 15 20:16:31.530237 2025] [:error] [pid 22765:tid 22785] [client 45.138.16.215:57991] [client 45.138.16.215] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/postnews.php"] [unique_id "aRhvH6brQzjuZmPIWDb9GAAAAo8"]
[Sat Nov 15 20:16:32.087998 2025] [:error] [pid 20654:tid 20669] [client 45.138.16.215:58095] [client 45.138.16.215] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/postnews.php"] [unique_id "aRhvIHcS7eC8vO76_ycGlwAAA4w"]
[Sat Nov 15 20:16:32.652047 2025] [:error] [pid 22613:tid 22631] [client 45.138.16.215:58195] [client 45.138.16.215] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/postnews.php"] [unique_id "aRhvICoyR3cDsIRGPRnRBwAAAhA"]
[Sat Nov 15 20:26:27.279962 2025] [:error] [pid 19959:tid 19982] [client 45.134.79.103:63788] [client 45.134.79.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRhxc8jejiTUP1-IawPttgAAAZA"]
[Sat Nov 15 20:26:27.929647 2025] [:error] [pid 27909:tid 27931] [client 45.134.79.103:64049] [client 45.134.79.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRhxcyTfZ6B57n8HepU9nwAAABI"]
[Sat Nov 15 20:26:28.566294 2025] [:error] [pid 19961:tid 20006] [client 45.134.79.103:64246] [client 45.134.79.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aRhxdDar7Si-84EApVSFswAAAc0"]
[Sat Nov 15 20:50:08.752412 2025] [:error] [pid 22765:tid 22792] [client 117.62.235.53:57239] [client 117.62.235.53] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||paramountbaldivis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRh3AKbrQzjuZmPIWDYB6wAAApY"]
[Sat Nov 15 20:51:37.923457 2025] [:error] [pid 27909:tid 27924] [client 192.178.4.101:47442] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/dabong/Slot%20pgslot99th%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.html"] [unique_id "aRh3WSTfZ6B57n8HepVA9AAAAAs"]
[Sat Nov 15 20:51:43.284102 2025] [:error] [pid 20654:tid 20668] [client 192.178.4.101:44588] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRh3X3cS7eC8vO76_ycP-AAAA4s"]
[Sat Nov 15 20:52:06.006776 2025] [:error] [pid 19959:tid 19975] [client 192.178.4.101:48125] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRh3dsjejiTUP1-IawPyegAAAYk"]
[Sat Nov 15 20:52:16.077372 2025] [:error] [pid 22613:tid 22635] [client 192.178.4.101:43414] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRh3gCoyR3cDsIRGPRnWPwAAAhQ"]
[Sat Nov 15 20:52:30.239067 2025] [:error] [pid 20654:tid 20668] [client 192.178.4.101:55156] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRh3jncS7eC8vO76_ycQLAAAA4s"]
[Sat Nov 15 20:57:26.106520 2025] [:error] [pid 20654:tid 20678] [client 192.178.4.101:63536] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRh4tncS7eC8vO76_ycRgAAAA5U"]
[Sat Nov 15 20:57:39.606233 2025] [:error] [pid 22765:tid 22786] [client 192.178.4.101:37010] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRh4w6brQzjuZmPIWDYDPAAAApA"]
[Sat Nov 15 20:57:41.332766 2025] [:error] [pid 22765:tid 22768] [client 192.178.4.101:38247] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRh4xabrQzjuZmPIWDYDPQAAAoA"]
[Sat Nov 15 20:57:42.972898 2025] [:error] [pid 22765:tid 22783] [client 192.178.4.101:58903] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRh4xqbrQzjuZmPIWDYDPwAAAo0"]
[Sat Nov 15 20:57:49.333243 2025] [:error] [pid 27997:tid 28021] [client 192.178.4.101:40604] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRh4zdpja_6cDxKbxFnv1wAAANY"]
[Sat Nov 15 20:59:17.061873 2025] [:error] [pid 20654:tid 20670] [client 192.178.4.101:60865] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRh5JXcS7eC8vO76_ycSGAAAA40"]
[Sat Nov 15 20:59:19.050554 2025] [:error] [pid 20346:tid 20362] [client 192.178.4.101:63458] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRh5J57hsydZdIoVTltTaAAAAw0"]
[Sat Nov 15 20:59:24.107452 2025] [:error] [pid 20313:tid 20329] [client 192.178.4.101:53554] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRh5LBI9DXIgPadBLUaiDQAAAs0"]
[Sat Nov 15 20:59:29.071604 2025] [:error] [pid 19959:tid 19969] [client 192.178.4.101:38124] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRh5McjejiTUP1-IawPzxwAAAYM"]
[Sat Nov 15 20:59:42.394042 2025] [:error] [pid 19959:tid 19985] [client 192.178.4.101:47069] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRh5PsjejiTUP1-IawPzzQAAAZM"]
[Sat Nov 15 20:59:55.246268 2025] [:error] [pid 20346:tid 20371] [client 192.178.4.101:52506] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRh5S57hsydZdIoVTltTfAAAAxY"]
[Sat Nov 15 20:59:59.787870 2025] [:error] [pid 22765:tid 22779] [client 192.178.4.101:55366] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRh5T6brQzjuZmPIWDYDvAAAAok"]
[Sat Nov 15 21:00:02.021680 2025] [:error] [pid 27909:tid 27917] [client 192.178.4.101:58380] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRh5UiTfZ6B57n8HepVCIgAAAAQ"]
[Sat Nov 15 21:00:03.136232 2025] [:error] [pid 19961:tid 19999] [client 192.178.4.101:35747] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRh5Uzar7Si-84EApVSJvwAAAcY"]
[Sat Nov 15 21:08:02.540232 2025] [:error] [pid 27911:tid 27992] [client 192.178.4.101:44735] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRh7MsGzUdrhGBIfiKR7uQAAAJg"]
[Sat Nov 15 21:13:01.108667 2025] [:error] [pid 20654:tid 20666] [client 144.126.204.244:52260] [client 144.126.204.244] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.126.204.244, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRh8XXcS7eC8vO76_ycU-AAAA4k"]
[Sat Nov 15 21:28:26.167653 2025] [:error] [pid 27909:tid 27914] [client 192.178.4.101:42386] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRh_-iTfZ6B57n8HepVFvAAAAAE"]
[Sat Nov 15 21:28:35.117873 2025] [:error] [pid 27909:tid 27919] [client 192.178.4.101:49299] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRiAAyTfZ6B57n8HepVFwwAAAAY"]
[Sat Nov 15 21:28:50.652687 2025] [:error] [pid 27909:tid 27931] [client 192.178.4.101:50598] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRiAEiTfZ6B57n8HepVFzAAAABI"]
[Sat Nov 15 21:28:51.683828 2025] [:error] [pid 22765:tid 22793] [client 192.178.4.101:55187] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRiAE6brQzjuZmPIWDYI3QAAApc"]
[Sat Nov 15 21:29:54.447583 2025] [:error] [pid 20654:tid 20657] [client 192.178.4.101:62515] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRiAUncS7eC8vO76_ycX1gAAA4A"]
[Sat Nov 15 21:30:12.387917 2025] [:error] [pid 20654:tid 20669] [client 192.178.4.101:59153] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRiAZHcS7eC8vO76_ycX4AAAA4w"]
[Sat Nov 15 21:30:20.604925 2025] [:error] [pid 27997:tid 28002] [client 192.178.4.101:36881] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRiAbNpja_6cDxKbxFn0PwAAAMM"]
[Sat Nov 15 21:30:24.034899 2025] [:error] [pid 20346:tid 20359] [client 192.178.4.101:48115] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRiAcJ7hsydZdIoVTltZTgAAAwo"]
[Sat Nov 15 21:30:35.849905 2025] [:error] [pid 22765:tid 22788] [client 192.178.4.101:43897] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRiAe6brQzjuZmPIWDYJVgAAApI"]
[Sat Nov 15 21:30:41.762767 2025] [:error] [pid 20313:tid 20324] [client 192.178.4.101:41817] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRiAgRI9DXIgPadBLUalYQAAAsg"]
[Sat Nov 15 21:32:31.165929 2025] [:error] [pid 20346:tid 20358] [client 192.178.4.101:45193] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRiA757hsydZdIoVTltZtQAAAwk"]
[Sat Nov 15 21:32:38.502499 2025] [:error] [pid 19959:tid 19974] [client 192.178.4.101:51500] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRiA9sjejiTUP1-IawP4nwAAAYg"]
[Sat Nov 15 21:32:46.171230 2025] [:error] [pid 22765:tid 22781] [client 192.178.4.101:64500] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRiA_qbrQzjuZmPIWDYJvwAAAos"]
[Sat Nov 15 21:32:55.380116 2025] [:error] [pid 22613:tid 22625] [client 192.178.4.101:55673] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRiBByoyR3cDsIRGPRnb_AAAAgo"]
[Sat Nov 15 21:32:58.076813 2025] [:error] [pid 22765:tid 22772] [client 192.178.4.101:62112] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRiBCqbrQzjuZmPIWDYJ0wAAAoQ"]
[Sat Nov 15 21:34:46.006101 2025] [:error] [pid 19961:tid 20001] [client 192.178.4.101:63846] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRiBdjar7Si-84EApVSNdQAAAcg"]
[Sat Nov 15 21:34:52.063533 2025] [:error] [pid 20654:tid 20662] [client 192.178.4.101:38857] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRiBfHcS7eC8vO76_ycYkwAAA4U"]
[Sat Nov 15 21:35:12.871152 2025] [:error] [pid 20346:tid 20357] [client 192.178.4.101:43882] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRiBkJ7hsydZdIoVTltafQAAAwg"]
[Sat Nov 15 21:35:26.384018 2025] [:error] [pid 22765:tid 22776] [client 192.178.4.101:51306] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRiBnqbrQzjuZmPIWDYKLgAAAoY"]
[Sat Nov 15 21:35:27.416383 2025] [:error] [pid 22613:tid 22635] [client 192.178.4.101:44558] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRiBnyoyR3cDsIRGPRncNQAAAhQ"]
[Sat Nov 15 21:35:28.629888 2025] [:error] [pid 20654:tid 20662] [client 192.178.4.101:64393] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRiBoHcS7eC8vO76_ycYngAAA4U"]
[Sat Nov 15 21:37:04.565469 2025] [:error] [pid 27997:tid 28014] [client 192.178.4.101:58267] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRiCANpja_6cDxKbxFn08gAAAM8"]
[Sat Nov 15 21:37:06.433207 2025] [:error] [pid 19959:tid 19969] [client 192.178.4.101:51582] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRiCAsjejiTUP1-IawP5WAAAAYM"]
[Sat Nov 15 21:37:15.999221 2025] [:error] [pid 22613:tid 22620] [client 192.178.4.101:35280] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRiCCyoyR3cDsIRGPRncTQAAAgU"]
[Sat Nov 15 21:37:30.257219 2025] [:error] [pid 22765:tid 22792] [client 192.178.4.101:51538] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRiCGqbrQzjuZmPIWDYKggAAApY"]
[Sat Nov 15 21:37:31.856036 2025] [:error] [pid 27911:tid 27981] [client 192.178.4.101:53227] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRiCG8GzUdrhGBIfiKR_LwAAAI0"]
[Sat Nov 15 21:37:38.597197 2025] [:error] [pid 19961:tid 19994] [client 192.178.4.101:44714] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRiCIjar7Si-84EApVSNuwAAAcE"]
[Sat Nov 15 21:37:44.569102 2025] [:error] [pid 20346:tid 20351] [client 192.178.4.101:56197] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRiCKJ7hsydZdIoVTlta6wAAAwI"]
[Sat Nov 15 21:37:54.932864 2025] [:error] [pid 27911:tid 27969] [client 192.178.4.101:36305] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRiCMsGzUdrhGBIfiKR_OAAAAIE"]
[Sat Nov 15 21:41:57.858864 2025] [:error] [pid 22613:tid 22627] [client 40.84.22.71:2634] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/filei.php"] [unique_id "aRiDJSoyR3cDsIRGPRnc2AAAAgw"]
[Sat Nov 15 21:42:02.343466 2025] [:error] [pid 27909:tid 27914] [client 40.84.22.71:2143] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/filei.php"] [unique_id "aRiDKiTfZ6B57n8HepVHHwAAAAE"]
[Sat Nov 15 21:42:03.938700 2025] [:error] [pid 20654:tid 20672] [client 40.84.22.71:11513] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/filei.php"] [unique_id "aRiDK3cS7eC8vO76_ycZ_gAAA48"]
[Sat Nov 15 21:42:06.456267 2025] [:error] [pid 19959:tid 19969] [client 40.84.22.71:5260] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/filei.php"] [unique_id "aRiDLsjejiTUP1-IawP57wAAAYM"]
[Sat Nov 15 21:42:07.682948 2025] [:error] [pid 19959:tid 19974] [client 40.84.22.71:11509] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/v2.php"] [unique_id "aRiDL8jejiTUP1-IawP58AAAAYg"]
[Sat Nov 15 21:42:08.710767 2025] [:error] [pid 19961:tid 20014] [client 40.84.22.71:8885] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/v2.php"] [unique_id "aRiDMDar7Si-84EApVSOOgAAAdU"]
[Sat Nov 15 21:42:10.307395 2025] [:error] [pid 20654:tid 20657] [client 40.84.22.71:9134] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/v2.php"] [unique_id "aRiDMncS7eC8vO76_ycaAgAAA4A"]
[Sat Nov 15 21:42:16.708566 2025] [:error] [pid 19961:tid 20003] [client 40.84.22.71:1129] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/v2.php"] [unique_id "aRiDODar7Si-84EApVSOPgAAAco"]
[Sat Nov 15 21:42:20.916725 2025] [:error] [pid 22765:tid 22785] [client 40.84.22.71:1121] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/3.php"] [unique_id "aRiDPKbrQzjuZmPIWDYLUgAAAo8"]
[Sat Nov 15 21:42:29.046247 2025] [:error] [pid 22613:tid 22633] [client 40.84.22.71:6593] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/3.php"] [unique_id "aRiDRSoyR3cDsIRGPRnc4QAAAhI"]
[Sat Nov 15 21:42:29.964829 2025] [:error] [pid 20654:tid 20679] [client 40.84.22.71:4326] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/3.php"] [unique_id "aRiDRXcS7eC8vO76_ycaJAAAA5Y"]
[Sat Nov 15 21:42:34.057882 2025] [:error] [pid 22765:tid 22785] [client 40.84.22.71:6261] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/10.php"] [unique_id "aRiDSqbrQzjuZmPIWDYLXgAAAo8"]
[Sat Nov 15 21:42:35.578340 2025] [:error] [pid 22613:tid 22638] [client 40.84.22.71:4000] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/10.php"] [unique_id "aRiDSyoyR3cDsIRGPRnc5wAAAhc"]
[Sat Nov 15 21:42:47.402373 2025] [:error] [pid 20346:tid 20363] [client 40.84.22.71:5414] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/10.php"] [unique_id "aRiDV57hsydZdIoVTltcaAAAAw4"]
[Sat Nov 15 21:42:50.106921 2025] [:error] [pid 22613:tid 22631] [client 40.84.22.71:10964] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/.well-known/info.php"] [unique_id "aRiDWioyR3cDsIRGPRnc9gAAAhA"]
[Sat Nov 15 21:42:52.464251 2025] [:error] [pid 20346:tid 20373] [client 40.84.22.71:6242] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/.well-known/info.php"] [unique_id "aRiDXJ7hsydZdIoVTltcbAAAAxg"]
[Sat Nov 15 21:43:58.603757 2025] [:error] [pid 19959:tid 19982] [client 40.84.22.71:10430] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/mo.php"] [unique_id "aRiDnsjejiTUP1-IawP6OQAAAZA"]
[Sat Nov 15 21:43:59.878970 2025] [:error] [pid 20313:tid 20325] [client 40.84.22.71:7424] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/mo.php"] [unique_id "aRiDnxI9DXIgPadBLUamqwAAAsk"]
[Sat Nov 15 21:44:04.074594 2025] [:error] [pid 27911:tid 27978] [client 40.84.22.71:1936] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/mo.php"] [unique_id "aRiDpMGzUdrhGBIfiKSADgAAAIo"]
[Sat Nov 15 21:44:05.291585 2025] [:error] [pid 20313:tid 20334] [client 40.84.22.71:7129] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/mo.php"] [unique_id "aRiDpRI9DXIgPadBLUamrwAAAtI"]
[Sat Nov 15 21:44:06.733901 2025] [:error] [pid 27911:tid 27969] [client 40.84.22.71:7470] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/nij.php"] [unique_id "aRiDpsGzUdrhGBIfiKSAEAAAAIE"]
[Sat Nov 15 21:44:14.504221 2025] [:error] [pid 20346:tid 20363] [client 40.84.22.71:8363] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/nij.php"] [unique_id "aRiDrp7hsydZdIoVTltcmwAAAw4"]
[Sat Nov 15 21:44:29.208732 2025] [:error] [pid 22765:tid 22790] [client 40.84.22.71:11202] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/gfile.php"] [unique_id "aRiDvabrQzjuZmPIWDYLtwAAApQ"]
[Sat Nov 15 21:44:31.064250 2025] [:error] [pid 20346:tid 20373] [client 40.84.22.71:6436] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/gfile.php"] [unique_id "aRiDv57hsydZdIoVTltcpQAAAxg"]
[Sat Nov 15 21:44:32.863665 2025] [:error] [pid 27997:tid 28016] [client 40.84.22.71:6456] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/gfile.php"] [unique_id "aRiDwNpja_6cDxKbxFn2dwAAANE"]
[Sat Nov 15 21:44:34.879391 2025] [:error] [pid 20346:tid 20350] [client 40.84.22.71:7200] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/gfile.php"] [unique_id "aRiDwp7hsydZdIoVTltcpwAAAwE"]
[Sat Nov 15 21:44:36.948537 2025] [:error] [pid 22765:tid 22769] [client 40.84.22.71:5044] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/xpas2.php"] [unique_id "aRiDxKbrQzjuZmPIWDYLuQAAAoE"]
[Sat Nov 15 21:44:43.300843 2025] [:error] [pid 27911:tid 27968] [client 40.84.22.71:6400] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/xpas2.php"] [unique_id "aRiDy8GzUdrhGBIfiKSAHQAAAIA"]
[Sat Nov 15 21:44:45.101145 2025] [:error] [pid 27911:tid 27975] [client 40.84.22.71:3587] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/xpas2.php"] [unique_id "aRiDzcGzUdrhGBIfiKSAHgAAAIc"]
[Sat Nov 15 21:44:46.927068 2025] [:error] [pid 20654:tid 20672] [client 40.84.22.71:3851] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/xpas2.php"] [unique_id "aRiDzncS7eC8vO76_ycbIQAAA48"]
[Sat Nov 15 21:44:53.184379 2025] [:error] [pid 20313:tid 20339] [client 40.84.22.71:3601] [client 40.84.22.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "paramountbaldivis.com"] [uri "/filemanager.php"] [unique_id "aRiD1RI9DXIgPadBLUam5gAAAtc"]
[Sat Nov 15 21:46:13.981231 2025] [:error] [pid 19961:tid 19997] [client 40.84.22.71:9996] [client 40.84.22.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "paramountbaldivis.com"] [uri "/tinyfilemanager.php"] [unique_id "aRiEJTar7Si-84EApVSPAwAAAcQ"]
[Sat Nov 15 21:46:25.073365 2025] [:error] [pid 20313:tid 20337] [client 40.84.22.71:2116] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/v3.php"] [unique_id "aRiEMRI9DXIgPadBLUanDAAAAtU"]
[Sat Nov 15 21:46:35.394987 2025] [:error] [pid 22613:tid 22627] [client 40.84.22.71:4681] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/v3.php"] [unique_id "aRiEOyoyR3cDsIRGPRndXwAAAgw"]
[Sat Nov 15 21:47:01.207021 2025] [:error] [pid 20346:tid 20351] [client 40.84.22.71:11490] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/.well-known/ws.php"] [unique_id "aRiEVZ7hsydZdIoVTltdNAAAAwI"]
[Sat Nov 15 21:47:02.697812 2025] [:error] [pid 22765:tid 22792] [client 40.84.22.71:2742] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/.well-known/ws.php"] [unique_id "aRiEVqbrQzjuZmPIWDYMdwAAApY"]
[Sat Nov 15 21:47:05.644610 2025] [:error] [pid 27997:tid 28000] [client 40.84.22.71:1556] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/.well-known/ws.php"] [unique_id "aRiEWdpja_6cDxKbxFn2vwAAAME"]
[Sat Nov 15 21:47:06.664539 2025] [:error] [pid 22765:tid 22776] [client 40.84.22.71:2301] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/.well-known/ws.php"] [unique_id "aRiEWqbrQzjuZmPIWDYMewAAAoY"]
[Sat Nov 15 21:47:09.007205 2025] [:error] [pid 19961:tid 19998] [client 40.84.22.71:4633] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wteed.php"] [unique_id "aRiEXTar7Si-84EApVSPEgAAAcU"]
[Sat Nov 15 21:47:10.279988 2025] [:error] [pid 19959:tid 19988] [client 40.84.22.71:2114] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wteed.php"] [unique_id "aRiEXsjejiTUP1-IawP6jQAAAZY"]
[Sat Nov 15 21:47:13.287527 2025] [:error] [pid 22765:tid 22772] [client 40.84.22.71:4297] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wteed.php"] [unique_id "aRiEYabrQzjuZmPIWDYMggAAAoQ"]
[Sat Nov 15 21:47:14.383480 2025] [:error] [pid 19959:tid 19985] [client 40.84.22.71:5826] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wteed.php"] [unique_id "aRiEYsjejiTUP1-IawP6jwAAAZM"]
[Sat Nov 15 21:47:16.062171 2025] [:error] [pid 20313:tid 20339] [client 40.84.22.71:4550] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/nc4.php"] [unique_id "aRiEZBI9DXIgPadBLUanKgAAAtc"]
[Sat Nov 15 21:47:54.856715 2025] [:error] [pid 22765:tid 22780] [client 40.84.22.71:10051] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/css/index.php"] [unique_id "aRiEiqbrQzjuZmPIWDYMuwAAAoo"]
[Sat Nov 15 21:48:07.458515 2025] [:error] [pid 27909:tid 27936] [client 40.84.22.71:2793] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/css/index.php"] [unique_id "aRiElyTfZ6B57n8HepVIFQAAABc"]
[Sat Nov 15 21:48:17.634452 2025] [:error] [pid 19961:tid 20007] [client 40.84.22.71:1631] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/unzip.php"] [unique_id "aRiEoTar7Si-84EApVSPMgAAAc4"]
[Sat Nov 15 21:48:18.818062 2025] [:error] [pid 22765:tid 22789] [client 40.84.22.71:5360] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/unzip.php"] [unique_id "aRiEoqbrQzjuZmPIWDYM2AAAApM"]
[Sat Nov 15 21:48:24.487458 2025] [:error] [pid 22613:tid 22625] [client 40.84.22.71:3232] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/unzip.php"] [unique_id "aRiEqCoyR3cDsIRGPRndkwAAAgo"]
[Sat Nov 15 21:48:25.374406 2025] [:error] [pid 19959:tid 19986] [client 40.84.22.71:1414] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/unzip.php"] [unique_id "aRiEqcjejiTUP1-IawP64AAAAZQ"]
[Sat Nov 15 21:48:49.705717 2025] [:error] [pid 19959:tid 19968] [client 40.84.22.71:1984] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/.well-known/xin1.php"] [unique_id "aRiEwcjejiTUP1-IawP7IQAAAYI"]
[Sat Nov 15 21:50:11.225398 2025] [:error] [pid 19959:tid 19974] [client 40.84.22.71:2865] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ahax.php"] [unique_id "aRiFE8jejiTUP1-IawP74QAAAYg"]
[Sat Nov 15 21:50:12.145624 2025] [:error] [pid 22613:tid 22619] [client 40.84.22.71:9737] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ahax.php"] [unique_id "aRiFFCoyR3cDsIRGPRnd2QAAAgQ"]
[Sat Nov 15 21:50:14.012451 2025] [:error] [pid 22765:tid 22771] [client 40.84.22.71:9786] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ahax.php"] [unique_id "aRiFFqbrQzjuZmPIWDYNgQAAAoM"]
[Sat Nov 15 21:50:24.991107 2025] [:error] [pid 27911:tid 27989] [client 40.84.22.71:3931] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/cache.php"] [unique_id "aRiFIMGzUdrhGBIfiKSBaQAAAJU"]
[Sat Nov 15 21:50:27.983240 2025] [:error] [pid 22613:tid 22627] [client 40.84.22.71:3989] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/cache.php"] [unique_id "aRiFIyoyR3cDsIRGPRnd4QAAAgw"]
[Sat Nov 15 21:50:32.878972 2025] [:error] [pid 20654:tid 20665] [client 40.84.22.71:3951] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/cache.php"] [unique_id "aRiFKHcS7eC8vO76_yccOQAAA4g"]
[Sat Nov 15 21:50:35.210109 2025] [:error] [pid 27997:tid 28014] [client 40.84.22.71:3087] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/cache.php"] [unique_id "aRiFK9pja_6cDxKbxFn3xAAAAM8"]
[Sat Nov 15 21:50:40.539294 2025] [:error] [pid 20313:tid 20321] [client 40.84.22.71:2856] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ffile.php"] [unique_id "aRiFMBI9DXIgPadBLUaoFQAAAsU"]
[Sat Nov 15 21:51:31.157967 2025] [:error] [pid 22765:tid 22780] [client 40.84.22.71:11300] [client 40.84.22.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/buy.php"] [unique_id "aRiFY6brQzjuZmPIWDYOKwAAAoo"]
[Sat Nov 15 21:52:04.040891 2025] [:error] [pid 19961:tid 20015] [client 40.84.22.71:5296] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/13k.php"] [unique_id "aRiFhDar7Si-84EApVSP2gAAAdY"]
[Sat Nov 15 21:52:13.468841 2025] [:error] [pid 27997:tid 27999] [client 40.84.22.71:5964] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/13k.php"] [unique_id "aRiFjdpja_6cDxKbxFn4GQAAAMA"]
[Sat Nov 15 21:52:16.539214 2025] [:error] [pid 22613:tid 22625] [client 40.84.22.71:5197] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/13k.php"] [unique_id "aRiFkCoyR3cDsIRGPRneJQAAAgo"]
[Sat Nov 15 21:52:17.299971 2025] [:error] [pid 27909:tid 27925] [client 40.84.22.71:11928] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/13k.php"] [unique_id "aRiFkSTfZ6B57n8HepVIrAAAAAw"]
[Sat Nov 15 21:52:26.466522 2025] [:error] [pid 20346:tid 20353] [client 40.84.22.71:10613] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ar.php"] [unique_id "aRiFmp7hsydZdIoVTlte5QAAAwQ"]
[Sat Nov 15 21:52:28.186206 2025] [:error] [pid 20346:tid 20360] [client 40.84.22.71:3024] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ar.php"] [unique_id "aRiFnJ7hsydZdIoVTlte5gAAAws"]
[Sat Nov 15 21:52:39.756374 2025] [:error] [pid 22765:tid 22783] [client 40.84.22.71:7258] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/bv3.php"] [unique_id "aRiFp6brQzjuZmPIWDYOaAAAAo0"]
[Sat Nov 15 21:52:42.803781 2025] [:error] [pid 20313:tid 20335] [client 40.84.22.71:6347] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/bv3.php"] [unique_id "aRiFqhI9DXIgPadBLUaogQAAAtM"]
[Sat Nov 15 21:52:45.470470 2025] [:error] [pid 22613:tid 22625] [client 40.84.22.71:7081] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/bv3.php"] [unique_id "aRiFrSoyR3cDsIRGPRneMQAAAgo"]
[Sat Nov 15 21:52:49.175031 2025] [:error] [pid 20346:tid 20362] [client 40.84.22.71:9110] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/bv3.php"] [unique_id "aRiFsZ7hsydZdIoVTlte9gAAAw0"]
[Sat Nov 15 21:52:51.050082 2025] [:error] [pid 22613:tid 22619] [client 40.84.22.71:3192] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/aa.php"] [unique_id "aRiFsyoyR3cDsIRGPRneNAAAAgQ"]
[Sat Nov 15 21:52:52.568658 2025] [:error] [pid 20346:tid 20357] [client 40.84.22.71:6289] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/aa.php"] [unique_id "aRiFtJ7hsydZdIoVTlte-AAAAwg"]
[Sat Nov 15 21:52:57.572986 2025] [:error] [pid 22765:tid 22787] [client 40.84.22.71:5139] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/aa.php"] [unique_id "aRiFuabrQzjuZmPIWDYOcwAAApE"]
[Sat Nov 15 21:52:59.567236 2025] [:error] [pid 20654:tid 20681] [client 40.84.22.71:5752] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/aa.php"] [unique_id "aRiFu3cS7eC8vO76_yccpAAAA5g"]
[Sat Nov 15 21:53:01.396257 2025] [:error] [pid 22613:tid 22634] [client 40.84.22.71:2653] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/racs3.php"] [unique_id "aRiFvSoyR3cDsIRGPRneOgAAAhM"]
[Sat Nov 15 21:54:05.064467 2025] [:error] [pid 27911:tid 27980] [client 40.84.22.71:5320] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/goods.php"] [unique_id "aRiF_cGzUdrhGBIfiKSB3AAAAIw"]
[Sat Nov 15 21:54:09.124742 2025] [:error] [pid 27997:tid 28012] [client 40.84.22.71:5536] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/goods.php"] [unique_id "aRiGAdpja_6cDxKbxFn4UgAAAM0"]
[Sat Nov 15 21:54:11.105514 2025] [:error] [pid 19961:tid 19993] [client 40.84.22.71:4171] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/goods.php"] [unique_id "aRiGAzar7Si-84EApVSQJQAAAcA"]
[Sat Nov 15 21:54:13.747074 2025] [:error] [pid 22613:tid 22623] [client 40.84.22.71:7345] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/goods.php"] [unique_id "aRiGBSoyR3cDsIRGPRnedQAAAgg"]
[Sat Nov 15 21:54:16.596663 2025] [:error] [pid 19959:tid 19971] [client 40.84.22.71:3789] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/6.php"] [unique_id "aRiGCMjejiTUP1-IawP8rAAAAYU"]
[Sat Nov 15 21:54:18.712390 2025] [:error] [pid 19961:tid 20003] [client 40.84.22.71:3698] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/6.php"] [unique_id "aRiGCjar7Si-84EApVSQKwAAAco"]
[Sat Nov 15 21:54:29.792200 2025] [:error] [pid 27997:tid 28006] [client 40.84.22.71:6714] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/xo.php"] [unique_id "aRiGFdpja_6cDxKbxFn4XwAAAMc"]
[Sat Nov 15 21:54:30.920448 2025] [:error] [pid 27911:tid 27986] [client 40.84.22.71:11574] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/xo.php"] [unique_id "aRiGFsGzUdrhGBIfiKSB4QAAAJI"]
[Sat Nov 15 21:54:35.174755 2025] [:error] [pid 20346:tid 20357] [client 40.84.22.71:3342] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/xo.php"] [unique_id "aRiGG57hsydZdIoVTltfPgAAAwg"]
[Sat Nov 15 21:54:36.042542 2025] [:error] [pid 27909:tid 27937] [client 40.84.22.71:6544] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/xo.php"] [unique_id "aRiGHCTfZ6B57n8HepVI4wAAABg"]
[Sat Nov 15 21:54:39.150872 2025] [:error] [pid 20346:tid 20368] [client 40.84.22.71:9263] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ggs.php"] [unique_id "aRiGH57hsydZdIoVTltfQgAAAxM"]
[Sat Nov 15 21:54:41.156383 2025] [:error] [pid 27909:tid 27921] [client 40.84.22.71:6528] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ggs.php"] [unique_id "aRiGISTfZ6B57n8HepVI6AAAAAg"]
[Sat Nov 15 21:54:42.675013 2025] [:error] [pid 19959:tid 19984] [client 40.84.22.71:3740] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ggs.php"] [unique_id "aRiGIsjejiTUP1-IawP8sQAAAZI"]
[Sat Nov 15 21:54:50.191842 2025] [:error] [pid 20654:tid 20671] [client 40.84.22.71:10810] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ggs.php"] [unique_id "aRiGKncS7eC8vO76_ycc0QAAA44"]
[Sat Nov 15 21:54:55.668709 2025] [:error] [pid 19959:tid 19986] [client 40.84.22.71:6569] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wsr2.php"] [unique_id "aRiGL8jejiTUP1-IawP8tAAAAZQ"]
[Sat Nov 15 21:55:02.833889 2025] [:error] [pid 20313:tid 20333] [client 40.84.22.71:6607] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wsr2.php"] [unique_id "aRiGNhI9DXIgPadBLUaozwAAAtE"]
[Sat Nov 15 21:55:26.516604 2025] [:error] [pid 22765:tid 22784] [client 40.84.22.71:1153] [client 40.84.22.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "paramountbaldivis.com"] [uri "/fm.php"] [unique_id "aRiGTqbrQzjuZmPIWDYO3AAAAo4"]
[Sat Nov 15 21:55:47.079989 2025] [:error] [pid 20346:tid 20353] [client 40.84.22.71:11504] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/sad.php"] [unique_id "aRiGY57hsydZdIoVTltfegAAAwQ"]
[Sat Nov 15 21:55:48.059802 2025] [:error] [pid 20654:tid 20657] [client 40.84.22.71:3405] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/sad.php"] [unique_id "aRiGZHcS7eC8vO76_ycc5AAAA4A"]
[Sat Nov 15 21:55:49.928993 2025] [:error] [pid 20654:tid 20677] [client 40.84.22.71:3987] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/sad.php"] [unique_id "aRiGZXcS7eC8vO76_ycc6QAAA5Q"]
[Sat Nov 15 21:55:51.962346 2025] [:error] [pid 27997:tid 28021] [client 40.84.22.71:10831] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/sad.php"] [unique_id "aRiGZ9pja_6cDxKbxFn4cwAAANY"]
[Sat Nov 15 21:55:53.765485 2025] [:error] [pid 27911:tid 27970] [client 40.84.22.71:3924] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp.php"] [unique_id "aRiGacGzUdrhGBIfiKSCFQAAAII"]
[Sat Nov 15 21:55:55.623009 2025] [:error] [pid 27997:tid 28011] [client 40.84.22.71:4733] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp.php"] [unique_id "aRiGa9pja_6cDxKbxFn4dgAAAMw"]
[Sat Nov 15 21:55:58.010468 2025] [:error] [pid 27911:tid 27984] [client 40.84.22.71:11780] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp.php"] [unique_id "aRiGbsGzUdrhGBIfiKSCFwAAAJA"]
[Sat Nov 15 21:56:00.122920 2025] [:error] [pid 22765:tid 22788] [client 40.84.22.71:2838] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp.php"] [unique_id "aRiGcKbrQzjuZmPIWDYPAgAAApI"]
[Sat Nov 15 21:56:09.643248 2025] [:error] [pid 20313:tid 20318] [client 40.84.22.71:10935] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-gr.php"] [unique_id "aRiGeRI9DXIgPadBLUao-gAAAsI"]
[Sat Nov 15 21:56:23.802103 2025] [:error] [pid 27997:tid 28012] [client 40.84.22.71:3570] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/cfile.php"] [unique_id "aRiGh9pja_6cDxKbxFn4hQAAAM0"]
[Sat Nov 15 21:56:31.515272 2025] [:error] [pid 27909:tid 27930] [client 40.84.22.71:1579] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/cfile.php"] [unique_id "aRiGjyTfZ6B57n8HepVJDQAAABE"]
[Sat Nov 15 21:56:32.271512 2025] [:error] [pid 27909:tid 27914] [client 40.84.22.71:7718] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/sder52u.php"] [unique_id "aRiGkCTfZ6B57n8HepVJDwAAAAE"]
[Sat Nov 15 21:56:38.016035 2025] [:error] [pid 22765:tid 22791] [client 40.84.22.71:7200] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/sder52u.php"] [unique_id "aRiGlqbrQzjuZmPIWDYPGwAAApU"]
[Sat Nov 15 21:57:58.894794 2025] [:error] [pid 22765:tid 22781] [client 40.84.22.71:6958] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/gifclass4.php"] [unique_id "aRiG5qbrQzjuZmPIWDYPUQAAAos"]
[Sat Nov 15 21:57:59.869836 2025] [:error] [pid 27909:tid 27935] [client 40.84.22.71:4115] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/gifclass4.php"] [unique_id "aRiG5yTfZ6B57n8HepVJLwAAABY"]
[Sat Nov 15 21:58:02.942863 2025] [:error] [pid 22613:tid 22622] [client 40.84.22.71:2472] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/gifclass4.php"] [unique_id "aRiG6ioyR3cDsIRGPRne4QAAAgc"]
[Sat Nov 15 21:58:07.578372 2025] [:error] [pid 20346:tid 20357] [client 40.84.22.71:5698] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/gifclass4.php"] [unique_id "aRiG757hsydZdIoVTltf8gAAAwg"]
[Sat Nov 15 21:58:16.246589 2025] [:error] [pid 27909:tid 27915] [client 40.84.22.71:6804] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/667.php"] [unique_id "aRiG-CTfZ6B57n8HepVJNgAAAAI"]
[Sat Nov 15 21:58:18.350469 2025] [:error] [pid 20654:tid 20673] [client 40.84.22.71:5955] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/667.php"] [unique_id "aRiG-ncS7eC8vO76_ycdXwAAA5A"]
[Sat Nov 15 21:58:19.842147 2025] [:error] [pid 20313:tid 20330] [client 40.84.22.71:2801] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/667.php"] [unique_id "aRiG-xI9DXIgPadBLUapLgAAAs4"]
[Sat Nov 15 21:58:22.093240 2025] [:error] [pid 20346:tid 20365] [client 40.84.22.71:7148] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/667.php"] [unique_id "aRiG_p7hsydZdIoVTltgBQAAAxA"]
[Sat Nov 15 21:58:25.002873 2025] [:error] [pid 20313:tid 20335] [client 40.84.22.71:6011] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/we.php"] [unique_id "aRiHARI9DXIgPadBLUapMQAAAtM"]
[Sat Nov 15 21:58:29.722243 2025] [:error] [pid 22765:tid 22788] [client 40.84.22.71:1715] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/we.php"] [unique_id "aRiHBabrQzjuZmPIWDYPYwAAApI"]
[Sat Nov 15 21:58:41.666596 2025] [:error] [pid 22765:tid 22770] [client 40.84.22.71:3324] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-su.php"] [unique_id "aRiHEabrQzjuZmPIWDYPagAAAoI"]
[Sat Nov 15 21:58:42.782338 2025] [:error] [pid 27997:tid 28006] [client 40.84.22.71:11550] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-su.php"] [unique_id "aRiHEtpja_6cDxKbxFn41QAAAMc"]
[Sat Nov 15 21:58:44.724751 2025] [:error] [pid 22765:tid 22793] [client 40.84.22.71:11582] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-su.php"] [unique_id "aRiHFKbrQzjuZmPIWDYPbgAAApc"]
[Sat Nov 15 21:58:47.313934 2025] [:error] [pid 20346:tid 20358] [client 40.84.22.71:11567] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-su.php"] [unique_id "aRiHF57hsydZdIoVTltgHQAAAwk"]
[Sat Nov 15 21:58:49.561397 2025] [:error] [pid 22765:tid 22776] [client 40.84.22.71:3364] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/t3x.php"] [unique_id "aRiHGabrQzjuZmPIWDYPcgAAAoY"]
[Sat Nov 15 21:58:54.140540 2025] [:error] [pid 20654:tid 20666] [client 40.84.22.71:4169] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/t3x.php"] [unique_id "aRiHHncS7eC8vO76_ycdawAAA4k"]
[Sat Nov 15 21:59:41.208666 2025] [:error] [pid 27997:tid 28017] [client 40.84.22.71:11537] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/akc.php"] [unique_id "aRiHTdpja_6cDxKbxFn48gAAANI"]
[Sat Nov 15 21:59:42.585531 2025] [:error] [pid 22765:tid 22781] [client 40.84.22.71:4536] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/akc.php"] [unique_id "aRiHTqbrQzjuZmPIWDYPrQAAAos"]
[Sat Nov 15 21:59:43.840848 2025] [:error] [pid 20313:tid 20319] [client 40.84.22.71:2156] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/akc.php"] [unique_id "aRiHTxI9DXIgPadBLUapTAAAAsM"]
[Sat Nov 15 21:59:44.957727 2025] [:error] [pid 22765:tid 22790] [client 40.84.22.71:5625] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/akc.php"] [unique_id "aRiHUKbrQzjuZmPIWDYPsAAAApQ"]
[Sat Nov 15 21:59:47.275921 2025] [:error] [pid 20654:tid 20661] [client 40.84.22.71:2588] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/s.php"] [unique_id "aRiHU3cS7eC8vO76_ycdtwAAA4Q"]
[Sat Nov 15 21:59:53.307141 2025] [:error] [pid 27909:tid 27937] [client 40.84.22.71:4781] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/s.php"] [unique_id "aRiHWSTfZ6B57n8HepVJZwAAABg"]
[Sat Nov 15 21:59:56.424141 2025] [:error] [pid 27911:tid 27969] [client 40.84.22.71:4770] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/s.php"] [unique_id "aRiHXMGzUdrhGBIfiKSCagAAAIE"]
[Sat Nov 15 21:59:58.241925 2025] [:error] [pid 19961:tid 19997] [client 40.84.22.71:3109] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/s.php"] [unique_id "aRiHXjar7Si-84EApVSQuwAAAcQ"]
[Sat Nov 15 21:59:59.648751 2025] [:error] [pid 20346:tid 20373] [client 40.84.22.71:6901] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/yzkvrell.php"] [unique_id "aRiHX57hsydZdIoVTltgXQAAAxg"]
[Sat Nov 15 22:00:02.468107 2025] [:error] [pid 22765:tid 22769] [client 40.84.22.71:4458] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/yzkvrell.php"] [unique_id "aRiHYqbrQzjuZmPIWDYPwgAAAoE"]
[Sat Nov 15 22:00:05.832712 2025] [:error] [pid 22765:tid 22771] [client 40.84.22.71:4430] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/yzkvrell.php"] [unique_id "aRiHZabrQzjuZmPIWDYPxAAAAoM"]
[Sat Nov 15 22:00:07.850780 2025] [:error] [pid 20346:tid 20360] [client 40.84.22.71:2055] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/yzkvrell.php"] [unique_id "aRiHZ57hsydZdIoVTltgYQAAAws"]
[Sat Nov 15 22:00:14.060181 2025] [:error] [pid 27997:tid 28018] [client 40.84.22.71:3984] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/gmo.php"] [unique_id "aRiHbtpja_6cDxKbxFn4-AAAANM"]
[Sat Nov 15 22:00:15.955246 2025] [:error] [pid 22613:tid 22629] [client 40.84.22.71:1151] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/gmo.php"] [unique_id "aRiHbyoyR3cDsIRGPRnfIwAAAg4"]
[Sat Nov 15 22:00:30.833615 2025] [:error] [pid 19959:tid 19987] [client 40.84.22.71:2711] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/zc-749.php"] [unique_id "aRiHfsjejiTUP1-IawP9YAAAAZU"]
[Sat Nov 15 22:00:37.309932 2025] [:error] [pid 27909:tid 27914] [client 40.84.22.71:2743] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/zc-749.php"] [unique_id "aRiHhSTfZ6B57n8HepVJlAAAAAE"]
[Sat Nov 15 22:01:45.369421 2025] [:error] [pid 20313:tid 20317] [client 40.84.22.71:11250] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/efile.php"] [unique_id "aRiHyRI9DXIgPadBLUapsQAAAsE"]
[Sat Nov 15 22:01:47.257022 2025] [:error] [pid 27997:tid 28010] [client 40.84.22.71:9299] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/efile.php"] [unique_id "aRiHy9pja_6cDxKbxFn5EgAAAMs"]
[Sat Nov 15 22:01:49.029397 2025] [:error] [pid 27909:tid 27933] [client 40.84.22.71:1921] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/efile.php"] [unique_id "aRiHzSTfZ6B57n8HepVJpQAAABQ"]
[Sat Nov 15 22:01:49.798675 2025] [:error] [pid 20346:tid 20350] [client 40.84.22.71:1955] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/efile.php"] [unique_id "aRiHzZ7hsydZdIoVTltggwAAAwE"]
[Sat Nov 15 22:01:54.720023 2025] [:error] [pid 20654:tid 20674] [client 40.84.22.71:1345] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/past1.php"] [unique_id "aRiH0ncS7eC8vO76_ycd-QAAA5E"]
[Sat Nov 15 22:01:56.335289 2025] [:error] [pid 19961:tid 19996] [client 40.84.22.71:8020] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/past1.php"] [unique_id "aRiH1Dar7Si-84EApVSQ2gAAAcM"]
[Sat Nov 15 22:01:58.359894 2025] [:error] [pid 22765:tid 22775] [client 40.84.22.71:11949] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/past1.php"] [unique_id "aRiH1qbrQzjuZmPIWDYQJwAAAoU"]
[Sat Nov 15 22:01:59.613114 2025] [:error] [pid 22765:tid 22776] [client 40.84.22.71:5001] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/past1.php"] [unique_id "aRiH16brQzjuZmPIWDYQKQAAAoY"]
[Sat Nov 15 22:02:07.420455 2025] [:error] [pid 19959:tid 19979] [client 40.84.22.71:6915] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/7.php"] [unique_id "aRiH38jejiTUP1-IawP9kQAAAY0"]
[Sat Nov 15 22:02:09.609837 2025] [:error] [pid 20654:tid 20671] [client 40.84.22.71:6922] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/7.php"] [unique_id "aRiH4XcS7eC8vO76_ycd_QAAA44"]
[Sat Nov 15 22:02:21.277364 2025] [:error] [pid 27909:tid 27927] [client 40.84.22.71:4270] [client 40.84.22.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/4563.php"] [unique_id "aRiH7STfZ6B57n8HepVJrAAAAA4"]
[Sat Nov 15 22:33:38.610706 2025] [:error] [pid 20654:tid 20664] [client 81.88.52.56:59526] [client 81.88.52.56] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 81.88.52.56, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRiPQncS7eC8vO76_ych0gAAA4c"]
[Sat Nov 15 22:33:46.605418 2025] [:error] [pid 22613:tid 22615] [client 81.88.52.56:39086] [client 81.88.52.56] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 81.88.52.56, incrementing brute counter"] [hostname "www.paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRiPSioyR3cDsIRGPRniBgAAAgA"]
[Sat Nov 15 22:33:55.157322 2025] [:error] [pid 20346:tid 20351] [client 81.88.52.56:58680] [client 81.88.52.56] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 81.88.52.56, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRiPU57hsydZdIoVTltk5QAAAwI"]
[Sat Nov 15 22:34:03.730665 2025] [:error] [pid 20654:tid 20660] [client 81.88.52.56:58684] [client 81.88.52.56] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 81.88.52.56, incrementing brute counter"] [hostname "www.paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRiPW3cS7eC8vO76_ych2gAAA4M"]
[Sun Nov 16 03:14:23.387759 2025] [:error] [pid 27814:tid 27950] [client 192.178.4.101:49148] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRjRD19TBobnN2ALG4iIxgAAAJM"]
[Sun Nov 16 03:14:25.890988 2025] [:error] [pid 27805:tid 27918] [client 192.178.4.101:40600] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRjRESBvBtHG_700S7taaAAAAE4"]
[Sun Nov 16 03:20:28.680972 2025] [:error] [pid 27972:tid 27994] [client 192.178.4.101:45874] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRjSfG8yq0TdrNn1vm1oBQAAANQ"]
[Sun Nov 16 03:20:31.571890 2025] [:error] [pid 27804:tid 27889] [client 192.178.4.101:49231] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRjSf-pRFMovjLDQaMiR0AAAAA0"]
[Sun Nov 16 03:20:34.584899 2025] [:error] [pid 27804:tid 27896] [client 192.178.4.101:58537] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRjSgupRFMovjLDQaMiR0QAAABQ"]
[Sun Nov 16 03:22:48.534035 2025] [:error] [pid 27972:tid 27992] [client 192.178.4.101:62803] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRjTCG8yq0TdrNn1vm1ovgAAANI"]
[Sun Nov 16 03:23:01.800592 2025] [:error] [pid 27805:tid 27912] [client 192.178.4.101:48690] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRjTFSBvBtHG_700S7tcBAAAAEg"]
[Sun Nov 16 03:23:17.015313 2025] [:error] [pid 27805:tid 27919] [client 192.178.4.101:45984] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRjTJSBvBtHG_700S7tcEgAAAE8"]
[Sun Nov 16 03:23:30.262352 2025] [:error] [pid 27972:tid 27992] [client 192.178.4.101:47336] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRjTMm8yq0TdrNn1vm1o6wAAANI"]
[Sun Nov 16 03:25:58.982303 2025] [:error] [pid 4648:tid 4669] [client 192.178.4.101:42841] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRjTxqig7tC2k2kvO7hMDgAAANE"]
[Sun Nov 16 03:26:13.226525 2025] [:error] [pid 4551:tid 4577] [client 192.178.4.101:52611] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRjT1QiGWU0kRG2iItFTMAAAABU"]
[Sun Nov 16 03:26:25.895803 2025] [:error] [pid 4552:tid 4602] [client 192.178.4.101:39900] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRjT4VEl_yRqZXQ6YPFsDQAAAFE"]
[Sun Nov 16 03:31:20.133991 2025] [:error] [pid 35213:tid 35227] [client 192.178.4.101:54734] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRjVCNk3HEFuy8Wlt5wMtQAAAAI"]
[Sun Nov 16 03:31:34.079231 2025] [:error] [pid 35214:tid 35252] [client 192.178.4.101:41645] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRjVFrAqALPrzmoBMZHzCwAAAEA"]
[Sun Nov 16 03:35:05.575347 2025] [:error] [pid 35305:tid 35328] [client 192.178.4.101:50306] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRjV6SiqH8BCseO3upnqngAAANI"]
[Sun Nov 16 03:35:14.285015 2025] [:error] [pid 35213:tid 35249] [client 192.178.4.101:35094] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRjV8tk3HEFuy8Wlt5wNMAAAABg"]
[Sun Nov 16 07:49:26.666218 2025] [:error] [pid 20556:tid 20580] [client 192.178.4.101:59898] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRkRhkkbyEckbWtBcCLC6gAAARY"]
[Sun Nov 16 07:58:53.549728 2025] [:error] [pid 20556:tid 20574] [client 192.178.4.101:53726] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRkTvUkbyEckbWtBcCLGKAAAARA"]
[Sun Nov 16 08:18:39.768933 2025] [:error] [pid 52470:tid 52525] [client 192.178.4.101:49651] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRkYX0g9mXF2ZFFtj1Xy6gAAAFQ"]
[Sun Nov 16 08:18:59.760228 2025] [:error] [pid 20556:tid 20573] [client 192.178.4.101:57664] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRkYc0kbyEckbWtBcCLMigAAAQ8"]
[Sun Nov 16 08:19:16.485477 2025] [:error] [pid 52469:tid 52501] [client 192.178.4.101:53522] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRkYhE6HaXpHeEZ98Z0snQAAABg"]
[Sun Nov 16 08:30:37.409696 2025] [:error] [pid 52563:tid 52569] [client 192.178.4.101:53409] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRkbLc-l3ey-hVJ5Ausi6AAAAMM"]
[Sun Nov 16 08:30:55.222120 2025] [:error] [pid 52469:tid 52501] [client 192.178.4.101:56574] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRkbP06HaXpHeEZ98Z0uzwAAABg"]
[Sun Nov 16 08:31:22.812438 2025] [:error] [pid 52471:tid 52547] [client 192.178.4.101:58499] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/games/%E0%B8%9A%E0%B9%89%E0%B8%B2%E0%B8%99%E0%B8%9C%E0%B8%A5%E0%B8%9A%E0%B8%AD%E0%B8%A5888%20%E0%B8%A7%E0%B8%B1%E0%B8%99%E0%B8%99%E0%B8%B5%E0%B9%89%20888%20%E0%B8%9E%E0%B8%A3%E0%B9%89%E0%B8%AD%E0%B8%A1%E0%B8%A3%E0%B8%B2%E0%B8%84%E0%B8%B2.html"] [unique_id "aRkbWtmWsFzjR5CEgDXOqgAAAI8"]
[Sun Nov 16 08:34:46.551970 2025] [:error] [pid 20556:tid 20575] [client 192.178.4.101:50189] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRkcJkkbyEckbWtBcCLRrwAAARE"]
[Sun Nov 16 08:39:00.439974 2025] [:error] [pid 52471:tid 52555] [client 192.178.4.101:41974] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRkdJNmWsFzjR5CEgDXQaAAAAJc"]
[Sun Nov 16 08:43:33.671031 2025] [:error] [pid 52563:tid 52571] [client 192.178.4.101:40092] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRkeNc-l3ey-hVJ5AusmsQAAAMU"]
[Sun Nov 16 08:43:46.158875 2025] [:error] [pid 52471:tid 52534] [client 192.178.4.101:41940] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRkeQtmWsFzjR5CEgDXSDQAAAII"]
[Sun Nov 16 10:07:59.434900 2025] [:error] [pid 52470:tid 52528] [client 192.178.4.101:62369] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRkx_0g9mXF2ZFFtj1UI_gAAAFc"]
[Sun Nov 16 10:56:17.613358 2025] [:error] [pid 52469:tid 52496] [client 192.178.4.101:42512] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/betflix%20%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2.aspx"] [unique_id "aRk9UU6HaXpHeEZ98Z1O8wAAABM"]
[Sun Nov 16 10:56:19.118360 2025] [:error] [pid 52470:tid 52519] [client 192.178.4.101:58928] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/1xbet%20%E0%B9%84%E0%B8%97%E0%B8%A2.aspx"] [unique_id "aRk9U0g9mXF2ZFFtj1UViQAAAE4"]
[Sun Nov 16 10:56:19.911014 2025] [:error] [pid 52470:tid 52521] [client 192.178.4.101:40694] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B9%80%E0%B8%95%E0%B8%B4%E0%B8%A1%20true%20wallet%20%E0%B8%9D%E0%B8%B2%E0%B8%81-%E0%B8%96%E0%B8%AD%E0%B8%99%20%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%20%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%20%E0%B8%95%E0%B9%88%E0%B9%8D%E0%B8%B2%202020.aspx"] [unique_id "aRk9U0g9mXF2ZFFtj1UVigAAAFA"]
[Sun Nov 16 10:56:20.803775 2025] [:error] [pid 52469:tid 52492] [client 192.178.4.101:43227] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/sbobet%20%E0%B8%A1%E0%B8%B7%E0%B8%AD%E0%B8%96%E0%B8%B7%E0%B8%AD777.aspx"] [unique_id "aRk9VE6HaXpHeEZ98Z1O9AAAAA8"]
[Sun Nov 16 10:56:39.114803 2025] [:error] [pid 52470:tid 52518] [client 192.178.4.101:60488] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRk9Z0g9mXF2ZFFtj1UVlQAAAE0"]
[Sun Nov 16 10:56:40.769886 2025] [:error] [pid 20556:tid 20565] [client 192.178.4.101:56563] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRk9aEkbyEckbWtBcCIE_gAAAQc"]
[Sun Nov 16 10:56:54.866312 2025] [:error] [pid 52471:tid 52537] [client 192.178.4.101:40606] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRk9dtmWsFzjR5CEgDXxhAAAAIU"]
[Sun Nov 16 11:00:58.479666 2025] [:error] [pid 52471:tid 52556] [client 192.178.4.101:65462] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRk-atmWsFzjR5CEgDXyewAAAJg"]
[Sun Nov 16 11:01:42.710234 2025] [:error] [pid 52563:tid 52573] [client 192.178.4.101:51799] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRk-ls-l3ey-hVJ5AutLfwAAAMc"]
[Sun Nov 16 11:01:43.800422 2025] [:error] [pid 52470:tid 52510] [client 192.178.4.101:42003] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRk-l0g9mXF2ZFFtj1UWrQAAAEU"]
[Sun Nov 16 11:04:20.112101 2025] [:error] [pid 52563:tid 52577] [client 119.28.140.106:36914] [client 119.28.140.106] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||paramountbaldivis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRk_NM-l3ey-hVJ5AutMBwAAAMs"]
[Sun Nov 16 11:24:56.628701 2025] [:error] [pid 52470:tid 52518] [client 192.178.4.101:64133] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRlECEg9mXF2ZFFtj1UcaAAAAE0"]
[Sun Nov 16 11:25:07.997997 2025] [:error] [pid 52563:tid 52568] [client 192.178.4.101:44256] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRlEE8-l3ey-hVJ5AutR-wAAAMI"]
[Sun Nov 16 11:29:49.152600 2025] [:error] [pid 20556:tid 20558] [client 192.178.4.101:39122] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRlFLUkbyEckbWtBcCIQMQAAAQA"]
[Sun Nov 16 11:30:30.673032 2025] [:error] [pid 52563:tid 52567] [client 192.178.4.101:54204] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRlFVs-l3ey-hVJ5AutTpwAAAME"]
[Sun Nov 16 11:30:35.850412 2025] [:error] [pid 52563:tid 52571] [client 192.178.4.101:34826] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRlFW8-l3ey-hVJ5AutTswAAAMU"]
[Sun Nov 16 11:36:34.876720 2025] [:error] [pid 52563:tid 52583] [client 192.178.4.101:62324] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRlGws-l3ey-hVJ5AutVsQAAANE"]
[Sun Nov 16 11:36:50.636291 2025] [:error] [pid 52471:tid 52535] [client 192.178.4.101:56053] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRlG0tmWsFzjR5CEgDX7tAAAAIM"]
[Sun Nov 16 11:43:49.469930 2025] [:error] [pid 52470:tid 52510] [client 192.178.4.101:63797] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRlIdUg9mXF2ZFFtj1Uh2gAAAEU"]
[Sun Nov 16 11:44:03.495668 2025] [:error] [pid 52469:tid 52501] [client 192.178.4.101:34863] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRlIg06HaXpHeEZ98Z1aigAAABg"]
[Sun Nov 16 11:47:58.108158 2025] [:error] [pid 52469:tid 52500] [client 192.178.4.101:41345] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRlJbk6HaXpHeEZ98Z1biwAAABc"]
[Sun Nov 16 11:47:58.765325 2025] [:error] [pid 52470:tid 52513] [client 192.178.4.101:35528] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRlJbkg9mXF2ZFFtj1UjJwAAAEg"]
[Sun Nov 16 11:48:21.354859 2025] [:error] [pid 52469:tid 52494] [client 192.178.4.101:35556] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRlJhU6HaXpHeEZ98Z1bmQAAABE"]
[Sun Nov 16 11:48:39.282176 2025] [:error] [pid 52469:tid 52494] [client 192.178.4.101:56889] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRlJl06HaXpHeEZ98Z1bqAAAABE"]
[Sun Nov 16 11:53:14.480722 2025] [:error] [pid 52563:tid 52567] [client 192.178.4.101:41868] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRlKqs-l3ey-hVJ5AutbOwAAAME"]
[Sun Nov 16 11:53:32.729793 2025] [:error] [pid 52471:tid 52536] [client 192.178.4.101:47263] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRlKvNmWsFzjR5CEgDUAcwAAAIQ"]
[Sun Nov 16 11:53:44.392218 2025] [:error] [pid 52469:tid 52492] [client 192.178.4.101:38449] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRlKyE6HaXpHeEZ98Z1dFQAAAA8"]
[Sun Nov 16 11:54:00.584510 2025] [:error] [pid 20556:tid 20568] [client 192.178.4.101:34883] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRlK2EkbyEckbWtBcCIbGgAAAQo"]
[Sun Nov 16 11:54:59.325658 2025] [:error] [pid 20556:tid 20581] [client 192.178.4.101:41446] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRlLE0kbyEckbWtBcCIbqwAAARc"]
[Sun Nov 16 11:55:28.468759 2025] [:error] [pid 52470:tid 52514] [client 192.178.4.101:49846] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRlLMEg9mXF2ZFFtj1UlOQAAAEk"]
[Sun Nov 16 11:55:42.245704 2025] [:error] [pid 20556:tid 20563] [client 192.178.4.101:40321] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRlLPkkbyEckbWtBcCIb_AAAAQU"]
[Sun Nov 16 11:57:55.443777 2025] [:error] [pid 52471:tid 52534] [client 192.178.4.101:48969] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRlLw9mWsFzjR5CEgDUBsQAAAII"]
[Sun Nov 16 11:58:37.104068 2025] [:error] [pid 52470:tid 52524] [client 192.178.4.101:44311] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRlL7Ug9mXF2ZFFtj1UmnwAAAFM"]
[Sun Nov 16 11:58:49.503844 2025] [:error] [pid 20556:tid 20574] [client 192.178.4.101:60434] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRlL-UkbyEckbWtBcCId5wAAARA"]
[Sun Nov 16 11:58:50.590595 2025] [:error] [pid 52471:tid 52538] [client 192.178.4.101:43765] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRlL-tmWsFzjR5CEgDUCAwAAAIY"]
[Sun Nov 16 12:02:00.200868 2025] [:error] [pid 52471:tid 52550] [client 192.178.4.101:40902] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRlMuNmWsFzjR5CEgDUDAQAAAJI"]
[Sun Nov 16 12:02:12.209752 2025] [:error] [pid 52471:tid 52546] [client 192.178.4.101:54814] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRlMxNmWsFzjR5CEgDUDCwAAAI4"]
[Sun Nov 16 12:02:25.196661 2025] [:error] [pid 52470:tid 52529] [client 192.178.4.101:61781] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRlM0Ug9mXF2ZFFtj1UoAgAAAFg"]
[Sun Nov 16 12:02:26.226000 2025] [:error] [pid 52470:tid 52516] [client 192.178.4.101:45839] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRlM0kg9mXF2ZFFtj1UoAwAAAEs"]
[Sun Nov 16 12:02:28.955462 2025] [:error] [pid 20556:tid 20564] [client 192.178.4.101:61740] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRlM1EkbyEckbWtBcCIfxAAAAQY"]
[Sun Nov 16 12:04:25.004935 2025] [:error] [pid 52469:tid 52482] [client 192.178.4.101:63299] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRlNSU6HaXpHeEZ98Z1gbwAAAAU"]
[Sun Nov 16 12:04:41.163599 2025] [:error] [pid 52469:tid 52488] [client 192.178.4.101:50026] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRlNWU6HaXpHeEZ98Z1ggAAAAAs"]
[Sun Nov 16 12:04:57.211020 2025] [:error] [pid 20556:tid 20558] [client 192.178.4.101:51637] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRlNaUkbyEckbWtBcCIg8AAAAQA"]
[Sun Nov 16 12:04:58.246820 2025] [:error] [pid 20556:tid 20581] [client 192.178.4.101:60997] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRlNakkbyEckbWtBcCIg9wAAARc"]
[Sun Nov 16 12:05:19.719934 2025] [:error] [pid 52469:tid 52501] [client 192.178.4.101:54012] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRlNf06HaXpHeEZ98Z1gqQAAABg"]
[Sun Nov 16 12:07:23.036835 2025] [:error] [pid 52470:tid 52514] [client 192.178.4.101:53161] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRlN-0g9mXF2ZFFtj1UprQAAAEk"]
[Sun Nov 16 12:07:26.137116 2025] [:error] [pid 20556:tid 20564] [client 192.178.4.101:45666] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRlN_kkbyEckbWtBcCIh4AAAAQY"]
[Sun Nov 16 12:07:28.202879 2025] [:error] [pid 52470:tid 52521] [client 192.178.4.101:44204] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRlOAEg9mXF2ZFFtj1UptgAAAFA"]
[Sun Nov 16 12:07:40.558848 2025] [:error] [pid 20556:tid 20577] [client 192.178.4.101:40352] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRlODEkbyEckbWtBcCIh6wAAARM"]
[Sun Nov 16 12:07:49.094634 2025] [:error] [pid 52563:tid 52580] [client 192.178.4.101:36126] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRlOFc-l3ey-hVJ5Autf2AAAAM4"]
[Sun Nov 16 12:07:59.051423 2025] [:error] [pid 52471:tid 52543] [client 192.178.4.101:62464] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRlOH9mWsFzjR5CEgDUEmQAAAIs"]
[Sun Nov 16 12:15:04.365810 2025] [:error] [pid 52471:tid 52550] [client 192.178.4.101:64257] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRlPyNmWsFzjR5CEgDUGkgAAAJI"]
[Sun Nov 16 12:15:12.524093 2025] [:error] [pid 52563:tid 52576] [client 192.178.4.101:42907] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRlP0M-l3ey-hVJ5AutiUwAAAMo"]
[Sun Nov 16 12:15:25.319118 2025] [:error] [pid 20556:tid 20573] [client 192.178.4.101:65075] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRlP3UkbyEckbWtBcCIkyQAAAQ8"]
[Sun Nov 16 12:15:27.622670 2025] [:error] [pid 52563:tid 52590] [client 192.178.4.101:45154] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRlP38-l3ey-hVJ5AutibgAAANg"]
[Sun Nov 16 12:15:37.351669 2025] [:error] [pid 52470:tid 52505] [client 192.178.4.101:42162] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRlP6Ug9mXF2ZFFtj1UsQAAAAEA"]
[Sun Nov 16 12:15:45.077774 2025] [:error] [pid 52471:tid 52552] [client 192.178.4.101:60010] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRlP8dmWsFzjR5CEgDUGwwAAAJQ"]
[Sun Nov 16 12:17:32.585441 2025] [:error] [pid 52563:tid 52576] [client 192.178.4.101:59525] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRlQXM-l3ey-hVJ5Auti5AAAAMo"]
[Sun Nov 16 12:17:37.209012 2025] [:error] [pid 20556:tid 20561] [client 192.178.4.101:63378] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRlQYUkbyEckbWtBcCIlogAAAQM"]
[Sun Nov 16 12:17:46.389716 2025] [:error] [pid 52471:tid 52551] [client 192.178.4.101:52481] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRlQatmWsFzjR5CEgDUHSgAAAJM"]
[Sun Nov 16 12:17:59.829633 2025] [:error] [pid 20556:tid 20573] [client 192.178.4.101:44191] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRlQd0kbyEckbWtBcCIlyQAAAQ8"]
[Sun Nov 16 12:27:02.350816 2025] [:error] [pid 34227:tid 34249] [client 192.178.4.101:49856] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRlSln108zGLYs9eMuj5UwAAAhQ"]
[Sun Nov 16 12:27:46.145419 2025] [:error] [pid 34271:tid 34283] [client 192.178.4.101:59363] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRlSwkNmlZhoZZV1BUB7dgAAAko"]
[Sun Nov 16 12:30:38.775819 2025] [:error] [pid 52563:tid 52579] [client 192.178.4.101:57584] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRlTbs-l3ey-hVJ5AutnzgAAAM0"]
[Sun Nov 16 12:30:54.022360 2025] [:error] [pid 52469:tid 52497] [client 192.178.4.101:55094] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRlTfk6HaXpHeEZ98Z1niwAAABQ"]
[Sun Nov 16 12:31:14.885657 2025] [:error] [pid 52469:tid 52494] [client 192.178.4.101:34869] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRlTkk6HaXpHeEZ98Z1nrAAAABE"]
[Sun Nov 16 12:31:24.547025 2025] [:error] [pid 34227:tid 34245] [client 192.178.4.101:63331] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRlTnH108zGLYs9eMuj6bwAAAhA"]
[Sun Nov 16 12:46:42.622133 2025] [:error] [pid 34165:tid 34215] [client 192.178.4.101:44435] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRlXMnhG2YTKEjXchwntDwAAAdQ"]
[Sun Nov 16 12:46:50.608354 2025] [:error] [pid 34164:tid 34169] [client 192.178.4.101:59163] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRlXOu93ccBCLD8-Q4YAkQAAAYE"]
[Sun Nov 16 12:46:59.921242 2025] [:error] [pid 34164:tid 34186] [client 192.178.4.101:60588] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRlXQ-93ccBCLD8-Q4YAmgAAAZI"]
[Sun Nov 16 12:47:08.029858 2025] [:error] [pid 52563:tid 52588] [client 192.178.4.101:54983] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRlXTM-l3ey-hVJ5AutqBQAAANY"]
[Sun Nov 16 12:47:19.519977 2025] [:error] [pid 34165:tid 34209] [client 192.178.4.101:47212] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRlXV3hG2YTKEjXchwntKQAAAc4"]
[Sun Nov 16 12:47:24.690785 2025] [:error] [pid 34227:tid 34229] [client 192.178.4.101:40514] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRlXXH108zGLYs9eMuj8vAAAAgA"]
[Sun Nov 16 12:53:44.791473 2025] [:error] [pid 52469:tid 52486] [client 192.178.4.101:53518] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRlY2E6HaXpHeEZ98Z1tFwAAAAk"]
[Sun Nov 16 12:54:18.865457 2025] [:error] [pid 20556:tid 20566] [client 192.178.4.101:40165] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRlY-kkbyEckbWtBcCIvfAAAAQg"]
[Sun Nov 16 12:54:24.215883 2025] [:error] [pid 34301:tid 34306] [client 192.178.4.101:48430] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRlZALGPoZwUGuFNREuLrAAAAoI"]
[Sun Nov 16 12:54:32.304400 2025] [:error] [pid 52563:tid 52573] [client 192.178.4.101:63339] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRlZCM-l3ey-hVJ5AutrRwAAAMc"]
[Sun Nov 16 12:54:33.643127 2025] [:error] [pid 34301:tid 34323] [client 192.178.4.101:42828] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRlZCbGPoZwUGuFNREuLswAAApM"]
[Sun Nov 16 12:57:42.741740 2025] [:error] [pid 52563:tid 52589] [client 192.178.4.101:59115] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRlZxs-l3ey-hVJ5AutrtAAAANc"]
[Sun Nov 16 12:57:51.889564 2025] [:error] [pid 20556:tid 20573] [client 192.178.4.101:58228] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRlZz0kbyEckbWtBcCIwGwAAAQ8"]
[Sun Nov 16 15:30:16.454990 2025] [:error] [pid 34133:tid 34157] [client 170.106.84.136:51564] [client 170.106.84.136] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.paramountbaldivis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.paramountbaldivis.com"] [uri "/"] [unique_id "aRl9iPSAB3iwXVRY0gF2JwAAAVY"]
[Sun Nov 16 16:33:31.441202 2025] [:error] [pid 34164:tid 34192] [client 192.178.4.101:49701] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmMW-93ccBCLD8-Q4Y1MQAAAZg"]
[Sun Nov 16 16:33:31.642354 2025] [:error] [pid 34164:tid 34175] [client 192.178.4.101:58343] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmMW-93ccBCLD8-Q4Y1MgAAAYc"]
[Sun Nov 16 16:34:00.019357 2025] [:error] [pid 34133:tid 34150] [client 192.178.4.101:40183] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmMePSAB3iwXVRY0gF--wAAAU8"]
[Sun Nov 16 16:34:22.128658 2025] [:error] [pid 52563:tid 52587] [client 192.178.4.101:54027] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmMjs-l3ey-hVJ5AuuU0AAAANU"]
[Sun Nov 16 16:38:57.826357 2025] [:error] [pid 20556:tid 20579] [client 192.178.4.101:61744] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmNoUkbyEckbWtBcCJqaAAAARU"]
[Sun Nov 16 16:39:23.592635 2025] [:error] [pid 34165:tid 34205] [client 192.178.4.101:52963] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmNu3hG2YTKEjXchwkUggAAAco"]
[Sun Nov 16 17:50:04.173169 2025] [:error] [pid 20556:tid 20567] [client 192.178.4.101:37311] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmeTEkbyEckbWtBcCJ9LQAAAQk"]
[Sun Nov 16 17:50:27.175056 2025] [:error] [pid 34133:tid 34153] [client 192.178.4.101:40364] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmeY_SAB3iwXVRY0gGKvQAAAVI"]
[Sun Nov 16 17:50:28.203094 2025] [:error] [pid 20556:tid 20562] [client 192.178.4.101:44801] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmeZEkbyEckbWtBcCJ9PwAAAQQ"]
[Sun Nov 16 17:50:35.193754 2025] [:error] [pid 34271:tid 34277] [client 192.178.4.101:47399] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmea0NmlZhoZZV1BUCymgAAAkQ"]
[Sun Nov 16 17:55:59.261182 2025] [:error] [pid 52471:tid 52546] [client 192.178.4.101:49355] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmfr9mWsFzjR5CEgDVOOwAAAI4"]
[Sun Nov 16 17:56:21.327438 2025] [:error] [pid 20556:tid 20558] [client 192.178.4.101:62394] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmfxUkbyEckbWtBcCJ-mgAAAQA"]
[Sun Nov 16 17:56:31.748313 2025] [:error] [pid 34271:tid 34284] [client 192.178.4.101:38701] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmfz0NmlZhoZZV1BUCz0gAAAks"]
[Sun Nov 16 17:56:35.066745 2025] [:error] [pid 34227:tid 34234] [client 192.178.4.101:48130] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmf03108zGLYs9eMugyFQAAAgU"]
[Sun Nov 16 17:56:38.368809 2025] [:error] [pid 52469:tid 52480] [client 192.178.4.101:59569] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmf1k6HaXpHeEZ98Z3PWgAAAAM"]
[Sun Nov 16 18:01:30.172035 2025] [:error] [pid 34271:tid 34280] [client 192.178.4.101:39701] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmg-kNmlZhoZZV1BUC09wAAAkc"]
[Sun Nov 16 18:01:39.189190 2025] [:error] [pid 20556:tid 20563] [client 192.178.4.101:62625] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmhA0kbyEckbWtBcCJ_xAAAAQU"]
[Sun Nov 16 18:01:47.449114 2025] [:error] [pid 20556:tid 20564] [client 192.178.4.101:59143] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmhC0kbyEckbWtBcCJ_yQAAAQY"]
[Sun Nov 16 18:04:48.198868 2025] [:error] [pid 34271:tid 34288] [client 192.178.4.101:36079] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmhwENmlZhoZZV1BUC1agAAAk8"]
[Sun Nov 16 18:06:45.476472 2025] [:error] [pid 34133:tid 34139] [client 192.178.4.101:59084] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmiNfSAB3iwXVRY0gGNLQAAAUQ"]
[Sun Nov 16 18:06:47.664198 2025] [:error] [pid 34133:tid 34135] [client 192.178.4.101:38586] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmiN_SAB3iwXVRY0gGNMwAAAUA"]
[Sun Nov 16 18:06:52.942646 2025] [:error] [pid 52471:tid 52554] [client 192.178.4.101:48909] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmiPNmWsFzjR5CEgDVQ3wAAAJY"]
[Sun Nov 16 18:06:53.876065 2025] [:error] [pid 34301:tid 34312] [client 192.178.4.101:57683] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmiPbGPoZwUGuFNREvGQgAAAog"]
[Sun Nov 16 18:06:55.310108 2025] [:error] [pid 34164:tid 34190] [client 192.178.4.101:53988] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmiP-93ccBCLD8-Q4ZK9AAAAZY"]
[Sun Nov 16 18:06:56.424315 2025] [:error] [pid 34165:tid 34201] [client 192.178.4.101:43169] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmiQHhG2YTKEjXchwkkNgAAAcY"]
[Sun Nov 16 18:06:58.646402 2025] [:error] [pid 52471:tid 52553] [client 192.178.4.101:38340] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmiQtmWsFzjR5CEgDVQ5gAAAJU"]
[Sun Nov 16 18:07:07.540830 2025] [:error] [pid 52469:tid 52497] [client 192.178.4.101:58505] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmiS06HaXpHeEZ98Z3StwAAABQ"]
[Sun Nov 16 18:07:18.844820 2025] [:error] [pid 34164:tid 34190] [client 192.178.4.101:55963] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmiVu93ccBCLD8-Q4ZLHQAAAZY"]
[Sun Nov 16 18:07:31.468529 2025] [:error] [pid 34133:tid 34137] [client 192.178.4.101:62691] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmiY_SAB3iwXVRY0gGNUwAAAUI"]
[Sun Nov 16 18:07:38.361943 2025] [:error] [pid 20556:tid 20578] [client 192.178.4.101:39796] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmiakkbyEckbWtBcCKBJAAAARQ"]
[Sun Nov 16 18:14:28.332957 2025] [:error] [pid 34164:tid 34175] [client 192.178.4.101:51953] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmkBO93ccBCLD8-Q4ZNFgAAAYc"]
[Sun Nov 16 18:14:39.767720 2025] [:error] [pid 34164:tid 34175] [client 192.178.4.101:57244] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmkD-93ccBCLD8-Q4ZNHQAAAYc"]
[Sun Nov 16 18:14:49.167170 2025] [:error] [pid 52471:tid 52555] [client 192.178.4.101:59020] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmkGdmWsFzjR5CEgDVTCAAAAJc"]
[Sun Nov 16 18:14:59.318110 2025] [:error] [pid 20556:tid 20566] [client 192.178.4.101:36925] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmkI0kbyEckbWtBcCKDcAAAAQg"]
[Sun Nov 16 18:15:12.929354 2025] [:error] [pid 34301:tid 34312] [client 192.178.4.101:43211] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmkMLGPoZwUGuFNREvH5QAAAog"]
[Sun Nov 16 18:17:50.899927 2025] [:error] [pid 34164:tid 34179] [client 192.178.4.101:36856] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmkzu93ccBCLD8-Q4ZN2gAAAYs"]
[Sun Nov 16 18:18:00.176533 2025] [:error] [pid 52563:tid 52578] [client 192.178.4.101:64833] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmk2M-l3ey-hVJ5AuuoggAAAMw"]
[Sun Nov 16 18:18:08.586907 2025] [:error] [pid 34227:tid 34240] [client 192.178.4.101:38551] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmk4H108zGLYs9eMug1pQAAAgs"]
[Sun Nov 16 18:18:18.332798 2025] [:error] [pid 34227:tid 34231] [client 192.178.4.101:58569] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmk6n108zGLYs9eMug1qgAAAgI"]
[Sun Nov 16 18:18:30.435192 2025] [:error] [pid 52471:tid 52540] [client 192.178.4.101:56490] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmk9tmWsFzjR5CEgDVT1gAAAIg"]
[Sun Nov 16 18:18:35.983688 2025] [:error] [pid 34227:tid 34238] [client 192.178.4.101:56938] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmk-3108zGLYs9eMug1tgAAAgk"]
[Sun Nov 16 18:21:18.729493 2025] [:error] [pid 34164:tid 34176] [client 192.178.4.101:60002] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmlnu93ccBCLD8-Q4ZOeQAAAYg"]
[Sun Nov 16 18:21:34.575140 2025] [:error] [pid 52469:tid 52499] [client 192.178.4.101:43503] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmlrk6HaXpHeEZ98Z3YWAAAABY"]
[Sun Nov 16 18:21:35.441193 2025] [:error] [pid 34164:tid 34191] [client 192.178.4.101:42789] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/cash/%E0%B8%A3%E0%B8%B1%E0%B8%9A%E0%B9%80%E0%B8%84%E0%B8%A3%E0%B8%94%E0%B8%B4%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%20100.html"] [unique_id "aRmlr-93ccBCLD8-Q4ZOfwAAAZc"]
[Sun Nov 16 18:21:50.331640 2025] [:error] [pid 34164:tid 34173] [client 192.178.4.101:45763] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmlvu93ccBCLD8-Q4ZOjQAAAYU"]
[Sun Nov 16 18:21:54.857239 2025] [:error] [pid 34133:tid 34148] [client 192.178.4.101:40157] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmlwvSAB3iwXVRY0gGP0AAAAU0"]
[Sun Nov 16 18:23:59.771875 2025] [:error] [pid 52469:tid 52500] [client 192.178.4.101:53560] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmmP06HaXpHeEZ98Z3Y3gAAABc"]
[Sun Nov 16 18:24:22.142784 2025] [:error] [pid 34164:tid 34180] [client 192.178.4.101:45984] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmmVu93ccBCLD8-Q4ZPKAAAAYw"]
[Sun Nov 16 18:24:32.521797 2025] [:error] [pid 34301:tid 34306] [client 192.178.4.101:46090] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmmYLGPoZwUGuFNREvJcQAAAoI"]
[Sun Nov 16 18:24:38.105098 2025] [:error] [pid 34164:tid 34173] [client 192.178.4.101:56566] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmmZu93ccBCLD8-Q4ZPMAAAAYU"]
[Sun Nov 16 18:24:46.593840 2025] [:error] [pid 34165:tid 34216] [client 192.178.4.101:62804] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmmbnhG2YTKEjXchwknHQAAAdU"]
[Sun Nov 16 18:24:50.623512 2025] [:error] [pid 34133:tid 34147] [client 192.178.4.101:56159] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmmcvSAB3iwXVRY0gGQOwAAAUw"]
[Sun Nov 16 18:27:31.789924 2025] [:error] [pid 52471:tid 52535] [client 192.178.4.101:42971] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmnE9mWsFzjR5CEgDVVbgAAAIM"]
[Sun Nov 16 18:27:40.648757 2025] [:error] [pid 20556:tid 20574] [client 192.178.4.101:46325] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmnHEkbyEckbWtBcCKGaAAAARA"]
[Sun Nov 16 18:27:46.334657 2025] [:error] [pid 20556:tid 20578] [client 192.178.4.101:40409] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmnIkkbyEckbWtBcCKGbgAAARQ"]
[Sun Nov 16 18:28:10.891604 2025] [:error] [pid 34301:tid 34307] [client 192.178.4.101:52054] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmnOrGPoZwUGuFNREvJ5gAAAoM"]
[Sun Nov 16 18:28:22.840489 2025] [:error] [pid 34271:tid 34288] [client 192.178.4.101:45171] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmnRkNmlZhoZZV1BUC6KQAAAk8"]
[Sun Nov 16 18:32:54.699946 2025] [:error] [pid 34271:tid 34294] [client 192.178.4.101:64292] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmoVkNmlZhoZZV1BUC6yAAAAlU"]
[Sun Nov 16 18:33:00.594420 2025] [:error] [pid 34165:tid 34205] [client 192.178.4.101:58363] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmoXHhG2YTKEjXchwkoSgAAAco"]
[Sun Nov 16 18:33:23.285568 2025] [:error] [pid 52563:tid 52584] [client 192.178.4.101:43986] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmoc8-l3ey-hVJ5AuurHQAAANI"]
[Sun Nov 16 18:33:35.902799 2025] [:error] [pid 52471:tid 52544] [client 192.178.4.101:48500] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmof9mWsFzjR5CEgDVWVwAAAIw"]
[Sun Nov 16 18:36:00.033750 2025] [:error] [pid 34165:tid 34218] [client 192.178.4.101:45752] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmpEHhG2YTKEjXchwkovgAAAdc"]
[Sun Nov 16 18:36:10.322603 2025] [:error] [pid 52563:tid 52568] [client 192.178.4.101:47590] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmpGs-l3ey-hVJ5AuurdAAAAMI"]
[Sun Nov 16 18:36:24.351004 2025] [:error] [pid 52471:tid 52547] [client 192.178.4.101:35196] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmpKNmWsFzjR5CEgDVWugAAAI8"]
[Sun Nov 16 18:36:30.716397 2025] [:error] [pid 34227:tid 34245] [client 192.178.4.101:43059] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmpLn108zGLYs9eMug4bgAAAhA"]
[Sun Nov 16 18:36:40.647822 2025] [:error] [pid 52471:tid 52534] [client 192.178.4.101:46508] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmpONmWsFzjR5CEgDVWxAAAAII"]
[Sun Nov 16 18:36:49.163863 2025] [:error] [pid 52469:tid 52477] [client 192.178.4.101:39732] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmpQU6HaXpHeEZ98Z3cdgAAAAA"]
[Sun Nov 16 18:39:01.083032 2025] [:error] [pid 34271:tid 34281] [client 192.178.4.101:47394] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmpxUNmlZhoZZV1BUC7pAAAAkg"]
[Sun Nov 16 18:39:20.357963 2025] [:error] [pid 34271:tid 34290] [client 192.178.4.101:52841] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmp2ENmlZhoZZV1BUC7ugAAAlE"]
[Sun Nov 16 18:39:48.545557 2025] [:error] [pid 34133:tid 34136] [client 192.178.4.101:53876] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmp9PSAB3iwXVRY0gGSMQAAAUE"]
[Sun Nov 16 18:42:54.535789 2025] [:error] [pid 34164:tid 34169] [client 192.178.4.101:42546] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmqru93ccBCLD8-Q4ZTeQAAAYE"]
[Sun Nov 16 18:43:02.534132 2025] [:error] [pid 52471:tid 52554] [client 192.178.4.101:55617] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmqttmWsFzjR5CEgDVYNAAAAJY"]
[Sun Nov 16 18:43:17.162182 2025] [:error] [pid 34133:tid 34146] [client 192.178.4.101:63192] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmqxfSAB3iwXVRY0gGSxgAAAUs"]
[Sun Nov 16 18:43:24.519958 2025] [:error] [pid 52563:tid 52576] [client 192.178.4.101:50545] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmqzM-l3ey-hVJ5AuusrwAAAMo"]
[Sun Nov 16 18:43:36.460244 2025] [:error] [pid 34227:tid 34231] [client 192.178.4.101:43969] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmq2H108zGLYs9eMug5WgAAAgI"]
[Sun Nov 16 18:43:39.966973 2025] [:error] [pid 20556:tid 20576] [client 192.178.4.101:45964] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmq20kbyEckbWtBcCKKlgAAARI"]
[Sun Nov 16 18:45:34.438600 2025] [:error] [pid 34164:tid 34175] [client 192.178.4.101:54370] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmrTu93ccBCLD8-Q4ZT_AAAAYc"]
[Sun Nov 16 18:45:39.212096 2025] [:error] [pid 34165:tid 34196] [client 192.178.4.101:48509] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmrU3hG2YTKEjXchwkqjAAAAcE"]
[Sun Nov 16 18:45:43.362297 2025] [:error] [pid 34165:tid 34208] [client 192.178.4.101:40421] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmrV3hG2YTKEjXchwkqkgAAAc0"]
[Sun Nov 16 18:45:48.282521 2025] [:error] [pid 20556:tid 20561] [client 192.178.4.101:56427] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmrXEkbyEckbWtBcCKLbAAAAQM"]
[Sun Nov 16 18:45:58.060348 2025] [:error] [pid 52563:tid 52585] [client 192.178.4.101:65487] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmrZs-l3ey-hVJ5AuutXQAAANM"]
[Sun Nov 16 18:46:00.026713 2025] [:error] [pid 34165:tid 34216] [client 192.178.4.101:46090] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmraHhG2YTKEjXchwkqnwAAAdU"]
[Sun Nov 16 18:46:10.923423 2025] [:error] [pid 34271:tid 34297] [client 192.178.4.101:61580] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmrckNmlZhoZZV1BUC9IQAAAlg"]
[Sun Nov 16 18:46:11.933329 2025] [:error] [pid 52469:tid 52477] [client 192.178.4.101:62792] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmrc06HaXpHeEZ98Z3fXwAAAAA"]
[Sun Nov 16 18:46:22.343199 2025] [:error] [pid 20556:tid 20573] [client 192.178.4.101:50078] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmrfkkbyEckbWtBcCKLjQAAAQ8"]
[Sun Nov 16 18:47:41.282363 2025] [:error] [pid 34227:tid 34245] [client 192.178.4.101:49276] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmrzX108zGLYs9eMug5_QAAAhA"]
[Sun Nov 16 18:47:50.987389 2025] [:error] [pid 34301:tid 34318] [client 192.178.4.101:54616] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmr1rGPoZwUGuFNREvNcwAAAo4"]
[Sun Nov 16 18:47:51.924676 2025] [:error] [pid 34271:tid 34289] [client 192.178.4.101:60574] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmr10NmlZhoZZV1BUC9cwAAAlA"]
[Sun Nov 16 18:47:55.224484 2025] [:error] [pid 20556:tid 20562] [client 192.178.4.101:53210] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmr20kbyEckbWtBcCKL5wAAAQQ"]
[Sun Nov 16 18:48:12.462664 2025] [:error] [pid 34301:tid 34328] [client 192.178.4.101:53307] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmr7LGPoZwUGuFNREvNggAAApg"]
[Sun Nov 16 18:48:19.058050 2025] [:error] [pid 20556:tid 20564] [client 192.178.4.101:50861] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmr80kbyEckbWtBcCKL-wAAAQY"]
[Sun Nov 16 18:48:20.151839 2025] [:error] [pid 52563:tid 52575] [client 192.178.4.101:53329] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmr9M-l3ey-hVJ5AuutxAAAAMk"]
[Sun Nov 16 18:48:31.599719 2025] [:error] [pid 34165:tid 34200] [client 192.178.4.101:63141] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmr_3hG2YTKEjXchwkq6QAAAcU"]
[Sun Nov 16 18:50:24.631781 2025] [:error] [pid 52563:tid 52587] [client 192.178.4.101:55680] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmscM-l3ey-hVJ5AuuuSQAAANU"]
[Sun Nov 16 18:50:26.893610 2025] [:error] [pid 20556:tid 20566] [client 192.178.4.101:48318] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmsckkbyEckbWtBcCKMoAAAAQg"]
[Sun Nov 16 18:50:40.938077 2025] [:error] [pid 52469:tid 52486] [client 192.178.4.101:45874] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmsgE6HaXpHeEZ98Z3gzwAAAAk"]
[Sun Nov 16 18:50:43.156783 2025] [:error] [pid 52563:tid 52575] [client 192.178.4.101:59383] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmsg8-l3ey-hVJ5AuuuWAAAAMk"]
[Sun Nov 16 18:52:33.750851 2025] [:error] [pid 34271:tid 34288] [client 192.178.4.101:58913] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRms8UNmlZhoZZV1BUC-eAAAAk8"]
[Sun Nov 16 18:52:37.391586 2025] [:error] [pid 34301:tid 34320] [client 192.178.4.101:51675] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRms9bGPoZwUGuFNREvOIAAAApA"]
[Sun Nov 16 18:52:46.107190 2025] [:error] [pid 52469:tid 52489] [client 192.178.4.101:38188] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRms_k6HaXpHeEZ98Z3hVwAAAAw"]
[Sun Nov 16 18:52:48.461793 2025] [:error] [pid 34271:tid 34293] [client 192.178.4.101:59796] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmtAENmlZhoZZV1BUC-gwAAAlQ"]
[Sun Nov 16 18:52:54.470313 2025] [:error] [pid 52471:tid 52547] [client 192.178.4.101:47068] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmtBtmWsFzjR5CEgDVaCgAAAI8"]
[Sun Nov 16 18:52:59.066693 2025] [:error] [pid 34165:tid 34204] [client 192.178.4.101:48422] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmtC3hG2YTKEjXchwkrqQAAAck"]
[Sun Nov 16 18:53:01.291385 2025] [:error] [pid 34164:tid 34177] [client 192.178.4.101:36242] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmtDe93ccBCLD8-Q4ZVZQAAAYk"]
[Sun Nov 16 18:53:01.491362 2025] [autoindex:error] [pid 34164:tid 34171] [client 155.94.163.116:64249] AH01276: Cannot serve directory /home/baldivis/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sun Nov 16 18:53:10.909210 2025] [:error] [pid 34165:tid 34201] [client 192.178.4.101:39757] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmtFnhG2YTKEjXchwkrsAAAAcY"]
[Sun Nov 16 18:53:14.829163 2025] [:error] [pid 34301:tid 34318] [client 192.178.4.101:39288] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmtGrGPoZwUGuFNREvOOAAAAo4"]
[Sun Nov 16 18:54:59.725057 2025] [:error] [pid 34271:tid 34294] [client 192.178.4.101:47312] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmtg0NmlZhoZZV1BUC-0QAAAlU"]
[Sun Nov 16 18:55:19.223192 2025] [:error] [pid 34301:tid 34321] [client 192.178.4.101:64733] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmtl7GPoZwUGuFNREvOhAAAApE"]
[Sun Nov 16 18:55:23.555904 2025] [:error] [pid 20556:tid 20558] [client 192.178.4.101:64844] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmtm0kbyEckbWtBcCKNsgAAAQA"]
[Sun Nov 16 18:55:35.550925 2025] [:error] [pid 34227:tid 34237] [client 192.178.4.101:51808] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmtp3108zGLYs9eMug68gAAAgg"]
[Sun Nov 16 18:55:40.521336 2025] [:error] [pid 52469:tid 52478] [client 192.178.4.101:50186] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmtrE6HaXpHeEZ98Z3iJgAAAAE"]
[Sun Nov 16 18:57:55.935384 2025] [:error] [pid 52563:tid 52588] [client 192.178.4.101:56045] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmuM8-l3ey-hVJ5Auuv5AAAANY"]
[Sun Nov 16 18:58:14.576985 2025] [:error] [pid 52471:tid 52536] [client 192.178.4.101:37643] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmuRtmWsFzjR5CEgDVbHgAAAIQ"]
[Sun Nov 16 18:58:26.175419 2025] [:error] [pid 52471:tid 52535] [client 192.178.4.101:49309] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmuUtmWsFzjR5CEgDVbJgAAAIM"]
[Sun Nov 16 18:58:29.639770 2025] [:error] [pid 34164:tid 34191] [client 192.178.4.101:59170] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmuVe93ccBCLD8-Q4ZWjQAAAZc"]
[Sun Nov 16 18:58:49.668332 2025] [:error] [pid 34165:tid 34218] [client 192.178.4.101:60978] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmuaXhG2YTKEjXchwksjwAAAdc"]
[Sun Nov 16 19:00:23.789275 2025] [:error] [pid 34164:tid 34184] [client 192.178.4.101:40946] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmux-93ccBCLD8-Q4ZXBAAAAZA"]
[Sun Nov 16 19:00:34.606197 2025] [:error] [pid 34227:tid 34249] [client 192.178.4.101:54861] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmu0n108zGLYs9eMug8HgAAAhQ"]
[Sun Nov 16 19:00:42.101726 2025] [:error] [pid 52469:tid 52489] [client 192.178.4.101:52844] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmu2k6HaXpHeEZ98Z3kPQAAAAw"]
[Sun Nov 16 19:00:45.625075 2025] [:error] [pid 52469:tid 52482] [client 192.178.4.101:63114] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmu3U6HaXpHeEZ98Z3kQQAAAAU"]
[Sun Nov 16 19:00:50.074867 2025] [:error] [pid 52469:tid 52489] [client 192.178.4.101:53496] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmu4k6HaXpHeEZ98Z3kRwAAAAw"]
[Sun Nov 16 19:00:54.531688 2025] [:error] [pid 52471:tid 52532] [client 192.178.4.101:37873] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmu5tmWsFzjR5CEgDVb_AAAAIA"]
[Sun Nov 16 19:02:44.297908 2025] [:error] [pid 34165:tid 34195] [client 192.178.4.101:46991] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmvVHhG2YTKEjXchwktKQAAAcA"]
[Sun Nov 16 19:02:51.392686 2025] [:error] [pid 34301:tid 34321] [client 192.178.4.101:57302] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmvW7GPoZwUGuFNREvQMQAAApE"]
[Sun Nov 16 19:02:59.274660 2025] [:error] [pid 20556:tid 20560] [client 192.178.4.101:58169] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmvY0kbyEckbWtBcCKQLQAAAQI"]
[Sun Nov 16 19:03:12.904564 2025] [:error] [pid 52469:tid 52490] [client 192.178.4.101:48671] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmvcE6HaXpHeEZ98Z3k2gAAAA0"]
[Sun Nov 16 19:03:21.593388 2025] [:error] [pid 52563:tid 52581] [client 192.178.4.101:37389] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmvec-l3ey-hVJ5AuuxJwAAAM8"]
[Sun Nov 16 19:03:22.669012 2025] [:error] [pid 52471:tid 52538] [client 192.178.4.101:63204] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmvetmWsFzjR5CEgDVcaQAAAIY"]
[Sun Nov 16 19:03:23.486096 2025] [:error] [pid 52563:tid 52588] [client 192.178.4.101:47469] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmve8-l3ey-hVJ5AuuxMAAAANY"]
[Sun Nov 16 19:04:29.507192 2025] [:error] [pid 52471:tid 52537] [client 192.178.4.101:53698] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmvvdmWsFzjR5CEgDVcpwAAAIU"]
[Sun Nov 16 19:04:32.923712 2025] [:error] [pid 52563:tid 52587] [client 192.178.4.101:49198] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmvwM-l3ey-hVJ5AuuxfwAAANU"]
[Sun Nov 16 19:04:41.792127 2025] [:error] [pid 34133:tid 34138] [client 192.178.4.101:64847] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmvyfSAB3iwXVRY0gGWRgAAAUM"]
[Sun Nov 16 19:04:42.747741 2025] [:error] [pid 52469:tid 52496] [client 192.178.4.101:38468] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmvyk6HaXpHeEZ98Z3lUQAAABM"]
[Sun Nov 16 19:04:45.346529 2025] [:error] [pid 52563:tid 52573] [client 192.178.4.101:58025] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmvzc-l3ey-hVJ5AuuxhgAAAMc"]
[Sun Nov 16 19:04:56.642467 2025] [:error] [pid 52563:tid 52580] [client 192.178.4.101:62137] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmv2M-l3ey-hVJ5AuuxkwAAAM4"]
[Sun Nov 16 19:05:11.997316 2025] [:error] [pid 34164:tid 34177] [client 192.178.4.101:43709] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmv5-93ccBCLD8-Q4ZYawAAAYk"]
[Sun Nov 16 19:05:14.401142 2025] [:error] [pid 52469:tid 52477] [client 192.178.4.101:63592] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmv6k6HaXpHeEZ98Z3ltAAAAAA"]
[Sun Nov 16 19:06:22.957863 2025] [:error] [pid 52469:tid 52479] [client 192.178.4.101:39963] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmwLk6HaXpHeEZ98Z3mTQAAAAI"]
[Sun Nov 16 19:06:32.065660 2025] [:error] [pid 52469:tid 52498] [client 192.178.4.101:64018] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmwOE6HaXpHeEZ98Z3mWAAAABU"]
[Sun Nov 16 19:06:33.155064 2025] [:error] [pid 34271:tid 34275] [client 192.178.4.101:47717] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmwOUNmlZhoZZV1BUDBNwAAAkI"]
[Sun Nov 16 19:06:38.796019 2025] [:error] [pid 52563:tid 52583] [client 192.178.4.101:40900] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmwPs-l3ey-hVJ5Auux_AAAANE"]
[Sun Nov 16 19:06:47.453267 2025] [:error] [pid 34301:tid 34310] [client 192.178.4.101:51290] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmwR7GPoZwUGuFNREvRRAAAAoY"]
[Sun Nov 16 19:06:48.396285 2025] [:error] [pid 34301:tid 34327] [client 192.178.4.101:37433] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmwSLGPoZwUGuFNREvRRwAAApc"]
[Sun Nov 16 19:07:09.325894 2025] [:error] [pid 52471:tid 52539] [client 192.178.4.101:61072] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmwXdmWsFzjR5CEgDVdrAAAAIc"]
[Sun Nov 16 19:07:12.498950 2025] [:error] [pid 52471:tid 52544] [client 192.178.4.101:48191] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmwYNmWsFzjR5CEgDVdsgAAAIw"]
[Sun Nov 16 19:07:16.024702 2025] [:error] [pid 34227:tid 34231] [client 192.178.4.101:59537] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmwZH108zGLYs9eMug9ZAAAAgI"]
[Sun Nov 16 19:08:32.352137 2025] [:error] [pid 34133:tid 34156] [client 192.178.4.101:50509] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmwsPSAB3iwXVRY0gGW_QAAAVU"]
[Sun Nov 16 19:08:33.320516 2025] [:error] [pid 34301:tid 34305] [client 192.178.4.101:59121] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmwsbGPoZwUGuFNREvRiQAAAoE"]
[Sun Nov 16 19:08:40.947798 2025] [:error] [pid 34164:tid 34187] [client 192.178.4.101:38711] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmwuO93ccBCLD8-Q4ZZdgAAAZM"]
[Sun Nov 16 19:08:42.108560 2025] [:error] [pid 34164:tid 34179] [client 192.178.4.101:45162] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmwuu93ccBCLD8-Q4ZZewAAAYs"]
[Sun Nov 16 19:08:44.948585 2025] [:error] [pid 34133:tid 34143] [client 192.178.4.101:51205] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmwvPSAB3iwXVRY0gGXAAAAAUg"]
[Sun Nov 16 19:08:53.854701 2025] [:error] [pid 52469:tid 52496] [client 192.178.4.101:60945] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmwxU6HaXpHeEZ98Z3m9QAAABM"]
[Sun Nov 16 19:08:54.404000 2025] [:error] [pid 20556:tid 20569] [client 192.178.4.101:55601] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmwxkkbyEckbWtBcCKR3wAAAQs"]
[Sun Nov 16 19:08:56.658483 2025] [:error] [pid 20556:tid 20578] [client 192.178.4.101:51794] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmwyEkbyEckbWtBcCKR5AAAARQ"]
[Sun Nov 16 19:09:08.854712 2025] [:error] [pid 34164:tid 34182] [client 192.178.4.101:49362] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmw1O93ccBCLD8-Q4ZZkgAAAY4"]
[Sun Nov 16 19:09:10.488320 2025] [:error] [pid 34271:tid 34295] [client 192.178.4.101:41264] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmw1kNmlZhoZZV1BUDBrQAAAlY"]
[Sun Nov 16 19:09:21.531371 2025] [:error] [pid 34133:tid 34152] [client 192.178.4.101:48506] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmw4fSAB3iwXVRY0gGXEAAAAVE"]
[Sun Nov 16 19:11:48.707870 2025] [:error] [pid 34164:tid 34182] [client 192.178.4.101:52209] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmxdO93ccBCLD8-Q4ZaNgAAAY4"]
[Sun Nov 16 19:15:17.918164 2025] [:error] [pid 52471:tid 52551] [client 192.178.4.101:40893] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmyRdmWsFzjR5CEgDVf7gAAAJM"]
[Sun Nov 16 19:15:20.428875 2025] [:error] [pid 20556:tid 20572] [client 192.178.4.101:63681] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmySEkbyEckbWtBcCKT-AAAAQ4"]
[Sun Nov 16 19:15:24.965056 2025] [:error] [pid 34301:tid 34323] [client 192.178.4.101:50573] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmyTLGPoZwUGuFNREvTFQAAApM"]
[Sun Nov 16 19:15:28.337564 2025] [:error] [pid 52563:tid 52581] [client 192.178.4.101:48944] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmyUM-l3ey-hVJ5Auuz8AAAAM8"]
[Sun Nov 16 19:15:31.245146 2025] [:error] [pid 52563:tid 52576] [client 192.178.4.101:65486] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmyU8-l3ey-hVJ5Auuz9wAAAMo"]
[Sun Nov 16 19:15:43.227718 2025] [:error] [pid 20556:tid 20572] [client 192.178.4.101:55063] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmyX0kbyEckbWtBcCKUEwAAAQ4"]
[Sun Nov 16 19:15:44.076945 2025] [:error] [pid 52469:tid 52482] [client 192.178.4.101:53495] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmyYE6HaXpHeEZ98Z3ppwAAAAU"]
[Sun Nov 16 19:15:46.960242 2025] [:error] [pid 52563:tid 52588] [client 192.178.4.101:37391] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmyYs-l3ey-hVJ5Auu0BQAAANY"]
[Sun Nov 16 19:17:19.990395 2025] [:error] [pid 52471:tid 52538] [client 192.178.4.101:63460] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmyv9mWsFzjR5CEgDVgcgAAAIY"]
[Sun Nov 16 19:17:20.939061 2025] [:error] [pid 20556:tid 20563] [client 192.178.4.101:57050] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmywEkbyEckbWtBcCKUawAAAQU"]
[Sun Nov 16 19:17:24.254019 2025] [:error] [pid 52471:tid 52550] [client 192.178.4.101:63188] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmyxNmWsFzjR5CEgDVgdwAAAJI"]
[Sun Nov 16 19:17:25.853700 2025] [:error] [pid 34227:tid 34231] [client 192.178.4.101:49487] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmyxX108zGLYs9eMug_SwAAAgI"]
[Sun Nov 16 19:17:28.032985 2025] [:error] [pid 20556:tid 20562] [client 192.178.4.101:37958] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmyyEkbyEckbWtBcCKUbgAAAQQ"]
[Sun Nov 16 19:17:33.902738 2025] [:error] [pid 34165:tid 34198] [client 192.178.4.101:57655] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmyzXhG2YTKEjXchwkwrAAAAcM"]
[Sun Nov 16 19:17:34.843659 2025] [:error] [pid 34301:tid 34303] [client 192.178.4.101:54697] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmyzrGPoZwUGuFNREvTjgAAAoA"]
[Sun Nov 16 19:17:35.777500 2025] [:error] [pid 34301:tid 34326] [client 192.178.4.101:64557] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmyz7GPoZwUGuFNREvTkAAAApY"]
[Sun Nov 16 19:17:42.276370 2025] [:error] [pid 52469:tid 52491] [client 192.178.4.101:58678] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmy1k6HaXpHeEZ98Z3qUgAAAA4"]
[Sun Nov 16 19:17:43.285036 2025] [:error] [pid 34271:tid 34292] [client 192.178.4.101:49149] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmy10NmlZhoZZV1BUDDmwAAAlM"]
[Sun Nov 16 19:17:46.891734 2025] [:error] [pid 20556:tid 20578] [client 192.178.4.101:40482] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmy2kkbyEckbWtBcCKUhwAAARQ"]
[Sun Nov 16 19:17:54.444870 2025] [:error] [pid 34301:tid 34319] [client 192.178.4.101:55736] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmy4rGPoZwUGuFNREvTpQAAAo8"]
[Sun Nov 16 19:19:39.473913 2025] [:error] [pid 52469:tid 52489] [client 192.178.4.101:58713] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmzS06HaXpHeEZ98Z3rGgAAAAw"]
[Sun Nov 16 19:19:46.908740 2025] [:error] [pid 20556:tid 20568] [client 192.178.4.101:40974] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmzUkkbyEckbWtBcCKVKgAAAQo"]
[Sun Nov 16 19:19:52.075665 2025] [:error] [pid 34164:tid 34177] [client 192.178.4.101:49060] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmzWO93ccBCLD8-Q4ZciQAAAYk"]
[Sun Nov 16 19:19:58.496810 2025] [:error] [pid 52563:tid 52571] [client 192.178.4.101:51518] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmzXs-l3ey-hVJ5Auu0_wAAAMU"]
[Sun Nov 16 19:19:59.564260 2025] [:error] [pid 52469:tid 52496] [client 192.178.4.101:54079] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmzX06HaXpHeEZ98Z3rRwAAABM"]
[Sun Nov 16 19:20:17.482144 2025] [:error] [pid 20556:tid 20572] [client 192.178.4.101:61892] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmzcUkbyEckbWtBcCKVSwAAAQ4"]
[Sun Nov 16 19:21:05.603630 2025] [:error] [pid 52469:tid 52495] [client 192.178.4.102:42162] [client 192.178.4.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmzoU6HaXpHeEZ98Z3r1QAAABI"]
[Sun Nov 16 19:21:16.693283 2025] [:error] [pid 34165:tid 34219] [client 192.178.4.102:37997] [client 192.178.4.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRmzrHhG2YTKEjXchwkxcwAAAdg"]
[Sun Nov 16 19:22:50.599373 2025] [:error] [pid 34301:tid 34318] [client 192.178.4.101:64093] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRm0CrGPoZwUGuFNREvUygAAAo4"]
[Sun Nov 16 19:22:54.159806 2025] [:error] [pid 34164:tid 34174] [client 192.178.4.101:54329] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRm0Du93ccBCLD8-Q4ZdegAAAYY"]
[Sun Nov 16 19:23:11.597714 2025] [:error] [pid 52469:tid 52487] [client 192.178.4.101:45639] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRm0H06HaXpHeEZ98Z3ssgAAAAo"]
[Sun Nov 16 19:23:26.747707 2025] [:error] [pid 52563:tid 52570] [client 192.178.4.101:63409] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRm0Ls-l3ey-hVJ5Auu1zAAAAMQ"]
[Sun Nov 16 19:24:37.842300 2025] [:error] [pid 34271:tid 34285] [client 192.178.4.101:58635] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRm0dUNmlZhoZZV1BUDFBwAAAkw"]
[Sun Nov 16 19:24:46.323724 2025] [:error] [pid 20556:tid 20576] [client 192.178.4.101:48142] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRm0fkkbyEckbWtBcCKW9AAAARI"]
[Sun Nov 16 19:24:51.394411 2025] [:error] [pid 34165:tid 34202] [client 192.178.4.101:51533] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRm0g3hG2YTKEjXchwkyDQAAAcc"]
[Sun Nov 16 19:24:55.684945 2025] [:error] [pid 20556:tid 20577] [client 192.178.4.101:62747] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRm0h0kbyEckbWtBcCKW_AAAARM"]
[Sun Nov 16 19:24:58.738251 2025] [:error] [pid 34164:tid 34170] [client 192.178.4.101:41944] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRm0iu93ccBCLD8-Q4ZeEgAAAYI"]
[Sun Nov 16 19:25:04.254773 2025] [:error] [pid 34133:tid 34144] [client 192.178.4.101:64450] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRm0kPSAB3iwXVRY0gGaDQAAAUk"]
[Sun Nov 16 19:25:18.759619 2025] [:error] [pid 52469:tid 52489] [client 192.178.4.101:50310] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRm0nk6HaXpHeEZ98Z3thwAAAAw"]
[Sun Nov 16 19:25:19.063038 2025] [:error] [pid 20556:tid 20558] [client 192.178.4.101:43981] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRm0n0kbyEckbWtBcCKXIAAAAQA"]
[Sun Nov 16 19:25:21.028395 2025] [:error] [pid 52469:tid 52482] [client 192.178.4.101:36003] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRm0oU6HaXpHeEZ98Z3tjQAAAAU"]
[Sun Nov 16 19:25:22.057836 2025] [:error] [pid 52469:tid 52485] [client 192.178.4.101:50418] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRm0ok6HaXpHeEZ98Z3tjwAAAAg"]
[Sun Nov 16 19:27:58.656639 2025] [:error] [pid 52469:tid 52481] [client 192.178.4.101:61376] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRm1Pk6HaXpHeEZ98Z3uTwAAAAQ"]
[Sun Nov 16 19:28:02.379696 2025] [:error] [pid 20556:tid 20570] [client 192.178.4.101:62118] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRm1QkkbyEckbWtBcCKX2wAAAQw"]
[Sun Nov 16 19:28:03.318256 2025] [:error] [pid 52469:tid 52497] [client 192.178.4.101:42987] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRm1Q06HaXpHeEZ98Z3uVAAAABQ"]
[Sun Nov 16 19:28:08.709415 2025] [:error] [pid 52469:tid 52500] [client 192.178.4.101:54647] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRm1SE6HaXpHeEZ98Z3uYQAAABc"]
[Sun Nov 16 19:28:20.236173 2025] [:error] [pid 34227:tid 34243] [client 192.178.4.101:36694] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRm1VH108zGLYs9eMuhBfAAAAg4"]
[Sun Nov 16 19:28:36.240271 2025] [:error] [pid 52469:tid 52500] [client 192.178.4.101:55900] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRm1ZE6HaXpHeEZ98Z3uigAAABc"]
[Sun Nov 16 19:28:50.517092 2025] [:error] [pid 34165:tid 34208] [client 192.178.4.101:35599] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRm1cnhG2YTKEjXchwkypAAAAc0"]
[Sun Nov 16 19:29:55.514015 2025] [:error] [pid 34227:tid 34250] [client 192.178.4.101:38610] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRm1s3108zGLYs9eMuhBwwAAAhU"]
[Sun Nov 16 19:30:00.672337 2025] [:error] [pid 34301:tid 34328] [client 192.178.4.101:56053] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRm1uLGPoZwUGuFNREvV9wAAApg"]
[Sun Nov 16 19:30:04.127733 2025] [:error] [pid 34164:tid 34190] [client 192.178.4.101:51244] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRm1vO93ccBCLD8-Q4ZfMwAAAZY"]
[Sun Nov 16 19:30:08.088140 2025] [:error] [pid 52471:tid 52536] [client 192.178.4.101:54639] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRm1wNmWsFzjR5CEgDVjiAAAAIQ"]
[Sun Nov 16 19:30:08.893776 2025] [:error] [pid 20556:tid 20568] [client 192.178.4.101:38304] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRm1wEkbyEckbWtBcCKYRQAAAQo"]
[Sun Nov 16 19:30:14.649362 2025] [:error] [pid 52469:tid 52479] [client 192.178.4.101:64292] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRm1xk6HaXpHeEZ98Z3u9gAAAAI"]
[Sun Nov 16 19:30:19.639079 2025] [:error] [pid 34164:tid 34190] [client 192.178.4.101:36007] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRm1y-93ccBCLD8-Q4ZfQAAAAZY"]
[Sun Nov 16 19:30:20.861923 2025] [:error] [pid 34165:tid 34215] [client 192.178.4.101:64920] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRm1zHhG2YTKEjXchwky4QAAAdQ"]
[Sun Nov 16 19:30:23.756641 2025] [:error] [pid 20556:tid 20577] [client 192.178.4.101:65272] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRm1z0kbyEckbWtBcCKYUwAAARM"]
[Sun Nov 16 19:30:27.608984 2025] [:error] [pid 52469:tid 52500] [client 192.178.4.101:56049] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRm1006HaXpHeEZ98Z3vMwAAABc"]
[Sun Nov 16 19:30:31.212082 2025] [:error] [pid 34227:tid 34230] [client 192.178.4.101:60599] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRm113108zGLYs9eMuhB2AAAAgE"]
[Sun Nov 16 19:30:37.310820 2025] [:error] [pid 52471:tid 52540] [client 192.178.4.101:60785] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRm13dmWsFzjR5CEgDVjnAAAAIg"]
[Sun Nov 16 19:30:38.847310 2025] [:error] [pid 34164:tid 34189] [client 192.178.4.101:39076] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRm13u93ccBCLD8-Q4ZfaAAAAZU"]
[Sun Nov 16 19:30:39.854227 2025] [:error] [pid 34164:tid 34190] [client 192.178.4.101:46284] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRm13-93ccBCLD8-Q4ZfaQAAAZY"]
[Sun Nov 16 19:30:47.969639 2025] [:error] [pid 34164:tid 34177] [client 192.178.4.101:39759] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRm15-93ccBCLD8-Q4ZfcgAAAYk"]
[Sun Nov 16 19:30:48.977921 2025] [:error] [pid 34164:tid 34184] [client 192.178.4.101:39766] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRm16O93ccBCLD8-Q4ZfdQAAAZA"]
[Sun Nov 16 19:30:50.318088 2025] [:error] [pid 34301:tid 34321] [client 192.178.4.101:38709] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRm16rGPoZwUGuFNREvWQQAAApE"]
[Sun Nov 16 19:30:51.268595 2025] [:error] [pid 34271:tid 34293] [client 192.178.4.101:58541] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRm160NmlZhoZZV1BUDGBQAAAlQ"]
[Sun Nov 16 19:30:52.201608 2025] [:error] [pid 20556:tid 20579] [client 192.178.4.101:39898] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRm17EkbyEckbWtBcCKYbQAAARU"]
[Sun Nov 16 19:31:39.064994 2025] [:error] [pid 34227:tid 34243] [client 192.178.4.101:48876] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRm2G3108zGLYs9eMuhCCQAAAg4"]
[Sun Nov 16 19:31:46.102413 2025] [:error] [pid 52563:tid 52579] [client 192.178.4.101:39666] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRm2Is-l3ey-hVJ5Auu3JQAAAM0"]
[Sun Nov 16 19:31:56.439083 2025] [:error] [pid 34133:tid 34140] [client 192.178.4.101:46588] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRm2LPSAB3iwXVRY0gGbawAAAUU"]
[Sun Nov 16 19:32:02.654955 2025] [:error] [pid 52471:tid 52545] [client 192.178.4.101:50451] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRm2MtmWsFzjR5CEgDVj-AAAAI0"]
[Sun Nov 16 19:32:29.172472 2025] [:error] [pid 34271:tid 34295] [client 192.178.4.101:35935] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRm2TUNmlZhoZZV1BUDGlQAAAlY"]
[Sun Nov 16 19:32:33.937250 2025] [:error] [pid 52563:tid 52570] [client 192.178.4.101:50785] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRm2Uc-l3ey-hVJ5Auu3UwAAAMQ"]
[Sun Nov 16 19:34:44.706210 2025] [:error] [pid 34165:tid 34197] [client 192.178.4.101:56381] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRm21HhG2YTKEjXchwkzgAAAAcI"]
[Sun Nov 16 19:34:56.125431 2025] [:error] [pid 52469:tid 52492] [client 192.178.4.101:46832] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRm24E6HaXpHeEZ98Z3wpwAAAA8"]
[Sun Nov 16 19:34:58.090031 2025] [:error] [pid 34133:tid 34149] [client 192.178.4.101:52104] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRm24vSAB3iwXVRY0gGb-gAAAU4"]
[Sun Nov 16 19:35:08.933670 2025] [:error] [pid 34164:tid 34172] [client 192.178.4.101:52693] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRm27O93ccBCLD8-Q4ZgrgAAAYQ"]
[Sun Nov 16 19:35:15.603903 2025] [:error] [pid 52563:tid 52568] [client 192.178.4.101:52531] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRm288-l3ey-hVJ5Auu3tQAAAMI"]
[Sun Nov 16 19:35:24.455947 2025] [:error] [pid 52563:tid 52566] [client 192.178.4.101:40092] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRm2_M-l3ey-hVJ5Auu3uQAAAMA"]
[Sun Nov 16 19:37:16.824289 2025] [:error] [pid 52471:tid 52533] [client 192.178.4.101:51514] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRm3bNmWsFzjR5CEgDVk-wAAAIE"]
[Sun Nov 16 19:37:17.791024 2025] [:error] [pid 34133:tid 34144] [client 192.178.4.101:50814] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRm3bfSAB3iwXVRY0gGcXwAAAUk"]
[Sun Nov 16 19:37:19.390868 2025] [:error] [pid 20556:tid 20559] [client 192.178.4.101:63442] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRm3b0kbyEckbWtBcCKaEwAAAQE"]
[Sun Nov 16 19:37:20.810031 2025] [:error] [pid 34164:tid 34182] [client 192.178.4.101:40099] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRm3cO93ccBCLD8-Q4ZhUwAAAY4"]
[Sun Nov 16 19:37:28.582711 2025] [:error] [pid 34227:tid 34252] [client 192.178.4.101:35749] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRm3eH108zGLYs9eMuhDNwAAAhc"]
[Sun Nov 16 19:37:38.781329 2025] [:error] [pid 20556:tid 20560] [client 192.178.4.101:40440] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRm3gkkbyEckbWtBcCKaHgAAAQI"]
[Sun Nov 16 19:37:41.046898 2025] [:error] [pid 52469:tid 52489] [client 192.178.4.101:60106] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRm3hU6HaXpHeEZ98Z3xmAAAAAw"]
[Sun Nov 16 19:37:46.229600 2025] [:error] [pid 34301:tid 34327] [client 192.178.4.101:34874] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRm3irGPoZwUGuFNREvXbwAAApc"]
[Sun Nov 16 19:37:46.383041 2025] [:error] [pid 34164:tid 34182] [client 192.178.4.101:37955] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRm3iu93ccBCLD8-Q4ZhagAAAY4"]
[Sun Nov 16 19:37:47.615141 2025] [:error] [pid 34301:tid 34326] [client 192.178.4.101:40684] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRm3i7GPoZwUGuFNREvXdgAAApY"]
[Sun Nov 16 19:37:53.296749 2025] [:error] [pid 34133:tid 34148] [client 192.178.4.101:49839] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRm3kfSAB3iwXVRY0gGcewAAAU0"]
[Sun Nov 16 19:40:31.277208 2025] [:error] [pid 52469:tid 52488] [client 192.178.4.101:50219] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRm4L06HaXpHeEZ98Z3yLwAAAAs"]
[Sun Nov 16 19:40:33.226746 2025] [:error] [pid 34301:tid 34309] [client 192.178.4.101:57907] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRm4MbGPoZwUGuFNREvYDwAAAoU"]
[Sun Nov 16 19:40:47.828606 2025] [:error] [pid 34164:tid 34178] [client 192.178.4.101:55380] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRm4P-93ccBCLD8-Q4Zh8wAAAYo"]
[Sun Nov 16 19:40:55.910628 2025] [:error] [pid 52471:tid 52553] [client 192.178.4.101:61010] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRm4R9mWsFzjR5CEgDVlsgAAAJU"]
[Sun Nov 16 19:41:02.133287 2025] [:error] [pid 34133:tid 34142] [client 192.178.4.101:62650] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRm4TvSAB3iwXVRY0gGc_gAAAUc"]
[Sun Nov 16 19:42:49.485896 2025] [:error] [pid 52563:tid 52583] [client 192.178.4.101:35388] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRm4uc-l3ey-hVJ5Auu5OwAAANE"]
[Sun Nov 16 19:43:21.370088 2025] [:error] [pid 34271:tid 34278] [client 192.178.4.101:53637] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRm42UNmlZhoZZV1BUDIkwAAAkU"]
[Sun Nov 16 19:43:28.732531 2025] [:error] [pid 34301:tid 34316] [client 192.178.4.101:64432] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRm44LGPoZwUGuFNREvYpAAAAow"]
[Sun Nov 16 19:43:36.220700 2025] [:error] [pid 20556:tid 20581] [client 192.178.4.101:43550] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRm46EkbyEckbWtBcCKbgwAAARc"]
[Sun Nov 16 19:45:58.226455 2025] [:error] [pid 34133:tid 34158] [client 192.178.4.101:48420] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRm5dvSAB3iwXVRY0gGeBwAAAVc"]
[Sun Nov 16 19:46:01.451789 2025] [:error] [pid 34301:tid 34312] [client 192.178.4.101:52125] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRm5ebGPoZwUGuFNREvZewAAAog"]
[Sun Nov 16 19:46:05.638796 2025] [:error] [pid 34165:tid 34211] [client 192.178.4.101:49210] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRm5fXhG2YTKEjXchwk1hAAAAdA"]
[Sun Nov 16 19:46:11.248352 2025] [:error] [pid 52563:tid 52585] [client 192.178.4.101:39467] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRm5g8-l3ey-hVJ5Auu56AAAANM"]
[Sun Nov 16 19:46:19.065723 2025] [:error] [pid 34301:tid 34321] [client 192.178.4.101:62044] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRm5i7GPoZwUGuFNREvZiQAAApE"]
[Sun Nov 16 19:46:21.125732 2025] [:error] [pid 34165:tid 34204] [client 192.178.4.101:45012] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRm5jXhG2YTKEjXchwk1jQAAAck"]
[Sun Nov 16 19:46:30.242735 2025] [:error] [pid 52471:tid 52552] [client 192.178.4.101:40083] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRm5ltmWsFzjR5CEgDVnLAAAAJQ"]
[Sun Nov 16 19:46:37.964610 2025] [:error] [pid 34164:tid 34176] [client 192.178.4.101:39523] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRm5ne93ccBCLD8-Q4ZjNwAAAYg"]
[Sun Nov 16 19:46:47.108409 2025] [:error] [pid 34133:tid 34153] [client 192.178.4.101:51795] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRm5p_SAB3iwXVRY0gGeKwAAAVI"]
[Sun Nov 16 19:46:48.124350 2025] [:error] [pid 34165:tid 34202] [client 192.178.4.101:60248] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRm5qHhG2YTKEjXchwk1lgAAAcc"]
[Sun Nov 16 19:48:53.230452 2025] [:error] [pid 34133:tid 34138] [client 192.178.4.101:53655] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRm6JfSAB3iwXVRY0gGekwAAAUM"]
[Sun Nov 16 19:49:03.507038 2025] [:error] [pid 52471:tid 52553] [client 192.178.4.101:48720] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRm6L9mWsFzjR5CEgDVn5AAAAJU"]
[Sun Nov 16 19:49:06.956502 2025] [:error] [pid 34133:tid 34140] [client 192.178.4.101:46350] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRm6MvSAB3iwXVRY0gGenwAAAUU"]
[Sun Nov 16 19:49:13.331784 2025] [:error] [pid 34165:tid 34197] [client 192.178.4.101:45097] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRm6OXhG2YTKEjXchwk2IAAAAcI"]
[Sun Nov 16 19:49:17.595981 2025] [:error] [pid 34227:tid 34253] [client 192.178.4.101:43714] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRm6PX108zGLYs9eMuhFyAAAAhg"]
[Sun Nov 16 19:49:26.267638 2025] [:error] [pid 52469:tid 52495] [client 192.178.4.101:38604] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRm6Rk6HaXpHeEZ98Z31fgAAABI"]
[Sun Nov 16 19:49:32.536383 2025] [:error] [pid 52563:tid 52582] [client 192.178.4.101:48213] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRm6TM-l3ey-hVJ5Auu6qgAAANA"]
[Sun Nov 16 19:49:36.735419 2025] [:error] [pid 34271:tid 34296] [client 192.178.4.101:54329] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRm6UENmlZhoZZV1BUDKGwAAAlc"]
[Sun Nov 16 19:49:39.942802 2025] [:error] [pid 52469:tid 52485] [client 192.178.4.101:62246] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRm6U06HaXpHeEZ98Z31lwAAAAg"]
[Sun Nov 16 19:49:44.881226 2025] [:error] [pid 34301:tid 34317] [client 192.178.4.101:42717] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRm6WLGPoZwUGuFNREvaZQAAAo0"]
[Sun Nov 16 19:49:45.674656 2025] [:error] [pid 34133:tid 34142] [client 192.178.4.101:60130] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRm6WfSAB3iwXVRY0gGetQAAAUc"]
[Sun Nov 16 19:51:00.848390 2025] [:error] [pid 52471:tid 52543] [client 192.178.4.101:61407] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRm6pNmWsFzjR5CEgDVoggAAAIs"]
[Sun Nov 16 19:51:09.055621 2025] [:error] [pid 52563:tid 52587] [client 192.178.4.101:45688] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRm6rc-l3ey-hVJ5Auu7BwAAANU"]
[Sun Nov 16 19:51:16.905735 2025] [:error] [pid 52563:tid 52586] [client 192.178.4.101:52425] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRm6tM-l3ey-hVJ5Auu7DwAAANQ"]
[Sun Nov 16 19:51:19.305351 2025] [:error] [pid 52471:tid 52556] [client 192.178.4.101:41107] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRm6t9mWsFzjR5CEgDVomAAAAJg"]
[Sun Nov 16 19:51:24.529824 2025] [:error] [pid 34164:tid 34178] [client 192.178.4.101:48984] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRm6vO93ccBCLD8-Q4ZkgAAAAYo"]
[Sun Nov 16 19:51:33.572953 2025] [:error] [pid 34164:tid 34173] [client 192.178.4.101:51701] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRm6xe93ccBCLD8-Q4ZkhgAAAYU"]
[Sun Nov 16 19:51:39.605971 2025] [:error] [pid 52469:tid 52477] [client 192.178.4.101:49995] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRm6y06HaXpHeEZ98Z32TAAAAAA"]
[Sun Nov 16 19:51:44.535006 2025] [:error] [pid 34227:tid 34249] [client 192.178.4.101:47377] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRm60H108zGLYs9eMuhGSwAAAhQ"]
[Sun Nov 16 19:54:02.183918 2025] [:error] [pid 34164:tid 34187] [client 192.178.4.101:39574] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRm7Wu93ccBCLD8-Q4ZlYAAAAZM"]
[Sun Nov 16 19:54:03.867718 2025] [:error] [pid 34165:tid 34195] [client 192.178.4.101:53992] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRm7W3hG2YTKEjXchwk3JwAAAcA"]
[Sun Nov 16 19:54:15.651848 2025] [:error] [pid 34227:tid 34230] [client 192.178.4.101:40418] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRm7Z3108zGLYs9eMuhGwQAAAgE"]
[Sun Nov 16 19:54:27.990891 2025] [:error] [pid 34164:tid 34177] [client 192.178.4.101:41407] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRm7c-93ccBCLD8-Q4ZlcAAAAYk"]
[Sun Nov 16 19:54:31.678094 2025] [:error] [pid 52471:tid 52540] [client 192.178.4.101:45256] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRm7d9mWsFzjR5CEgDVpRgAAAIg"]
[Sun Nov 16 19:54:50.027852 2025] [:error] [pid 34227:tid 34229] [client 192.178.4.101:51920] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRm7in108zGLYs9eMuhG3AAAAgA"]
[Sun Nov 16 19:56:48.412582 2025] [:error] [pid 52469:tid 52489] [client 192.178.4.101:48962] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRm8AE6HaXpHeEZ98Z34AgAAAAw"]
[Sun Nov 16 19:56:55.612270 2025] [:error] [pid 52469:tid 52478] [client 192.178.4.101:36933] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRm8B06HaXpHeEZ98Z34CgAAAAE"]
[Sun Nov 16 19:57:17.238810 2025] [:error] [pid 52563:tid 52577] [client 192.178.4.101:54857] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRm8Hc-l3ey-hVJ5Auu8uwAAAMs"]
[Sun Nov 16 20:04:35.048846 2025] [:error] [pid 52471:tid 52545] [client 192.178.4.101:56980] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRm909mWsFzjR5CEgDVrhgAAAI0"]
[Sun Nov 16 20:04:36.422417 2025] [:error] [pid 52469:tid 52480] [client 192.178.4.101:41465] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRm91E6HaXpHeEZ98Z36oAAAAAM"]
[Sun Nov 16 20:52:23.460271 2025] [:error] [pid 34227:tid 34241] [client 223.190.82.75:16827] [client 223.190.82.75] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.190.82.75, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aRnJB3108zGLYs9eMuhR4QAAAgw"]
[Sun Nov 16 20:59:25.957741 2025] [:error] [pid 52469:tid 52482] [client 192.178.4.101:61963] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnKrU6HaXpHeEZ98Z0MQwAAAAU"]
[Sun Nov 16 20:59:45.653324 2025] [:error] [pid 52471:tid 52541] [client 192.178.4.101:48685] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnKwdmWsFzjR5CEgDV3zgAAAIk"]
[Sun Nov 16 21:00:13.520447 2025] [:error] [pid 34164:tid 34172] [client 43.153.123.3:51898] [client 43.153.123.3] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.paramountbaldivis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.paramountbaldivis.com"] [uri "/"] [unique_id "aRnK3e93ccBCLD8-Q4Z2UgAAAYQ"]
[Sun Nov 16 21:03:05.848987 2025] [:error] [pid 52471:tid 52539] [client 192.178.4.101:52133] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnLidmWsFzjR5CEgDV4hAAAAIc"]
[Sun Nov 16 21:03:47.636375 2025] [:error] [pid 34227:tid 34237] [client 192.178.4.101:36945] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnLs3108zGLYs9eMuhT-QAAAgg"]
[Sun Nov 16 21:12:29.385706 2025] [:error] [pid 52471:tid 52537] [client 192.178.4.101:52955] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnNvdmWsFzjR5CEgDV6ggAAAIU"]
[Sun Nov 16 21:12:52.367709 2025] [:error] [pid 34165:tid 34218] [client 192.178.4.101:54911] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnN1HhG2YTKEjXchwlFWgAAAdc"]
[Sun Nov 16 21:17:16.629845 2025] [:error] [pid 20556:tid 20569] [client 192.178.4.101:36312] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnO3EkbyEckbWtBcCK1fwAAAQs"]
[Sun Nov 16 21:17:27.736701 2025] [:error] [pid 52469:tid 52488] [client 192.178.4.101:49808] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnO506HaXpHeEZ98Z0R5gAAAAs"]
[Sun Nov 16 21:17:34.704439 2025] [:error] [pid 52563:tid 52575] [client 192.178.4.101:59225] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnO7s-l3ey-hVJ5AuvNHAAAAMk"]
[Sun Nov 16 21:21:50.431259 2025] [:error] [pid 34133:tid 34144] [client 192.178.4.101:39959] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnP7vSAB3iwXVRY0gGvHwAAAUk"]
[Sun Nov 16 21:22:24.471504 2025] [:error] [pid 52563:tid 52578] [client 192.178.4.101:49617] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnQEM-l3ey-hVJ5AuvOYAAAAMw"]
[Sun Nov 16 21:29:48.132436 2025] [:error] [pid 20556:tid 20579] [client 192.178.4.101:61546] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnRzEkbyEckbWtBcCK48QAAARU"]
[Sun Nov 16 21:29:56.212270 2025] [:error] [pid 34271:tid 34289] [client 192.178.4.101:51829] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnR1ENmlZhoZZV1BUDdvQAAAlA"]
[Sun Nov 16 21:30:14.083448 2025] [:error] [pid 34271:tid 34284] [client 192.178.4.101:54668] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnR5kNmlZhoZZV1BUDdxQAAAks"]
[Sun Nov 16 21:30:26.247787 2025] [:error] [pid 52471:tid 52547] [client 192.178.4.101:54350] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnR8tmWsFzjR5CEgDV-HAAAAI8"]
[Sun Nov 16 21:33:34.739852 2025] [:error] [pid 52469:tid 52486] [client 192.178.4.101:45661] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnSrk6HaXpHeEZ98Z0XnQAAAAk"]
[Sun Nov 16 21:33:35.162863 2025] [:error] [pid 34301:tid 34309] [client 192.178.4.101:40901] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnSr7GPoZwUGuFNREvulAAAAoU"]
[Sun Nov 16 21:33:48.920936 2025] [:error] [pid 34227:tid 34236] [client 192.178.4.101:36148] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnSvH108zGLYs9eMuhZoQAAAgc"]
[Sun Nov 16 21:49:54.966617 2025] [:error] [pid 34301:tid 34309] [client 192.178.4.101:61270] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnWgrGPoZwUGuFNREvx4AAAAoU"]
[Sun Nov 16 21:49:59.393033 2025] [:error] [pid 52471:tid 52553] [client 192.178.4.101:50916] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnWh9mWsFzjR5CEgDWCRgAAAJU"]
[Sun Nov 16 21:50:35.976033 2025] [:error] [pid 34164:tid 34185] [client 192.178.4.101:65155] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnWq-93ccBCLD8-Q4aBzgAAAZE"]
[Sun Nov 16 21:54:32.854675 2025] [:error] [pid 34271:tid 34290] [client 192.178.4.101:41799] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnXmENmlZhoZZV1BUDipAAAAlE"]
[Sun Nov 16 21:54:41.607077 2025] [:error] [pid 52469:tid 52498] [client 192.178.4.101:42570] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnXoU6HaXpHeEZ98Z0fHgAAABU"]
[Sun Nov 16 21:54:49.956980 2025] [:error] [pid 34271:tid 34281] [client 192.178.4.101:45448] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnXqUNmlZhoZZV1BUDitAAAAkg"]
[Sun Nov 16 21:54:53.408096 2025] [:error] [pid 52563:tid 52589] [client 192.178.4.101:57257] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnXrc-l3ey-hVJ5AuvVWAAAANc"]
[Sun Nov 16 21:55:00.585616 2025] [:error] [pid 34165:tid 34218] [client 192.178.4.101:41527] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnXtHhG2YTKEjXchwlMYAAAAdc"]
[Sun Nov 16 21:55:08.429775 2025] [:error] [pid 20556:tid 20563] [client 192.178.4.101:53831] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnXvEkbyEckbWtBcCLAEwAAAQU"]
[Sun Nov 16 21:57:00.511996 2025] [:error] [pid 52469:tid 52498] [client 192.178.4.101:59127] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnYLE6HaXpHeEZ98Z0f3QAAABU"]
[Sun Nov 16 21:57:11.672369 2025] [:error] [pid 20556:tid 20582] [client 192.178.4.101:53110] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnYN0kbyEckbWtBcCLApwAAARg"]
[Sun Nov 16 21:57:17.299683 2025] [:error] [pid 34165:tid 34200] [client 192.178.4.101:60521] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnYPXhG2YTKEjXchwlMtgAAAcU"]
[Sun Nov 16 21:57:29.716820 2025] [:error] [pid 34227:tid 34235] [client 192.178.4.101:43715] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnYSX108zGLYs9eMuhdxgAAAgY"]
[Sun Nov 16 21:57:40.496794 2025] [:error] [pid 52469:tid 52501] [client 192.178.4.101:39769] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnYVE6HaXpHeEZ98Z0gDQAAABg"]
[Sun Nov 16 21:57:46.238930 2025] [:error] [pid 52469:tid 52483] [client 192.178.4.101:47835] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnYWk6HaXpHeEZ98Z0gHQAAAAY"]
[Sun Nov 16 21:59:19.290968 2025] [:error] [pid 52471:tid 52555] [client 192.178.4.101:42236] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnYt9mWsFzjR5CEgDWELgAAAJc"]
[Sun Nov 16 21:59:24.446795 2025] [:error] [pid 20556:tid 20561] [client 192.178.4.101:52424] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnYvEkbyEckbWtBcCLBXAAAAQM"]
[Sun Nov 16 21:59:25.793105 2025] [:error] [pid 34164:tid 34172] [client 192.178.4.101:56809] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnYve93ccBCLD8-Q4aD7wAAAYQ"]
[Sun Nov 16 21:59:30.060839 2025] [:error] [pid 52469:tid 52477] [client 192.178.4.101:43642] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnYwk6HaXpHeEZ98Z0gzAAAAAA"]
[Sun Nov 16 21:59:33.902324 2025] [:error] [pid 34227:tid 34253] [client 192.178.4.101:64280] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnYxX108zGLYs9eMuheJwAAAhg"]
[Sun Nov 16 21:59:35.556735 2025] [:error] [pid 52563:tid 52586] [client 192.178.4.101:58208] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnYx8-l3ey-hVJ5AuvWEwAAANQ"]
[Sun Nov 16 21:59:42.705732 2025] [:error] [pid 52471:tid 52535] [client 192.178.4.101:53949] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnYztmWsFzjR5CEgDWEYgAAAIM"]
[Sun Nov 16 21:59:51.941871 2025] [:error] [pid 34165:tid 34195] [client 192.178.4.101:36102] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnY13hG2YTKEjXchwlNEgAAAcA"]
[Sun Nov 16 21:59:57.941779 2025] [:error] [pid 52469:tid 52485] [client 192.178.4.101:58695] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnY3U6HaXpHeEZ98Z0hFAAAAAg"]
[Sun Nov 16 21:59:58.517410 2025] [:error] [pid 34227:tid 34240] [client 192.178.4.101:49134] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnY3n108zGLYs9eMuhePQAAAgs"]
[Sun Nov 16 22:01:36.644228 2025] [:error] [pid 34301:tid 34312] [client 192.178.4.101:34883] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnZQLGPoZwUGuFNREv0JgAAAog"]
[Sun Nov 16 22:01:43.222713 2025] [:error] [pid 34301:tid 34323] [client 192.178.4.101:44214] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnZR7GPoZwUGuFNREv0LAAAApM"]
[Sun Nov 16 22:01:49.992563 2025] [:error] [pid 20556:tid 20579] [client 192.178.4.101:53939] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnZTUkbyEckbWtBcCLCDwAAARU"]
[Sun Nov 16 22:01:57.578727 2025] [:error] [pid 52469:tid 52481] [client 192.178.4.101:64839] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnZVU6HaXpHeEZ98Z0hqgAAAAQ"]
[Sun Nov 16 22:02:04.966317 2025] [:error] [pid 52471:tid 52536] [client 192.178.4.101:45809] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnZXNmWsFzjR5CEgDWE6wAAAIQ"]
[Sun Nov 16 22:02:09.995219 2025] [:error] [pid 34133:tid 34142] [client 192.178.4.101:43728] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnZYfSAB3iwXVRY0gG2DQAAAUc"]
[Sun Nov 16 22:02:11.287301 2025] [:error] [pid 34165:tid 34219] [client 192.178.4.101:57233] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnZY3hG2YTKEjXchwlNfgAAAdg"]
[Sun Nov 16 22:02:12.367650 2025] [:error] [pid 34164:tid 34176] [client 192.178.4.101:43906] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnZZO93ccBCLD8-Q4aEiAAAAYg"]
[Sun Nov 16 22:02:21.216224 2025] [:error] [pid 52469:tid 52477] [client 192.178.4.101:37796] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnZbU6HaXpHeEZ98Z0h0QAAAAA"]
[Sun Nov 16 22:02:26.996813 2025] [:error] [pid 52469:tid 52498] [client 192.178.4.101:59461] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnZck6HaXpHeEZ98Z0h4wAAABU"]
[Sun Nov 16 22:04:11.831632 2025] [:error] [pid 52563:tid 52571] [client 192.178.4.101:54214] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnZ28-l3ey-hVJ5AuvW_QAAAMU"]
[Sun Nov 16 22:04:19.683706 2025] [:error] [pid 20556:tid 20568] [client 192.178.4.101:55893] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnZ40kbyEckbWtBcCLCpAAAAQo"]
[Sun Nov 16 22:04:21.738495 2025] [:error] [pid 52563:tid 52569] [client 192.178.4.101:38837] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnZ5c-l3ey-hVJ5AuvXCAAAAMM"]
[Sun Nov 16 22:04:25.944804 2025] [:error] [pid 20556:tid 20582] [client 192.178.4.101:53079] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnZ6UkbyEckbWtBcCLCrAAAARg"]
[Sun Nov 16 22:15:15.302266 2025] [:error] [pid 20556:tid 20558] [client 192.178.4.101:52151] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRncc0kbyEckbWtBcCLFkgAAAQA"]
[Sun Nov 16 22:15:20.742735 2025] [:error] [pid 52469:tid 52480] [client 192.178.4.101:59344] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnceE6HaXpHeEZ98Z0ljgAAAAM"]
[Sun Nov 16 22:15:28.268720 2025] [:error] [pid 52471:tid 52544] [client 192.178.4.101:47220] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRncgNmWsFzjR5CEgDWHmQAAAIw"]
[Sun Nov 16 22:15:34.993203 2025] [:error] [pid 52469:tid 52481] [client 192.178.4.101:40048] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnchk6HaXpHeEZ98Z0lwQAAAAQ"]
[Sun Nov 16 22:15:42.409213 2025] [:error] [pid 52563:tid 52580] [client 192.178.4.101:54198] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRncjs-l3ey-hVJ5AuvZBgAAAM4"]
[Sun Nov 16 22:15:46.920415 2025] [:error] [pid 34301:tid 34317] [client 192.178.4.101:35835] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnckrGPoZwUGuFNREv29gAAAo0"]
[Sun Nov 16 22:15:51.383023 2025] [:error] [pid 52469:tid 52491] [client 192.178.4.101:47220] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRncl06HaXpHeEZ98Z0l2AAAAA4"]
[Sun Nov 16 22:15:56.960340 2025] [:error] [pid 52563:tid 52568] [client 192.178.4.101:47297] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRncnM-l3ey-hVJ5AuvZDgAAAMI"]
[Sun Nov 16 22:17:12.688113 2025] [:error] [pid 34164:tid 34170] [client 192.178.4.101:44789] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnc6O93ccBCLD8-Q4aILgAAAYI"]
[Sun Nov 16 22:17:15.768713 2025] [:error] [pid 52563:tid 52589] [client 192.178.4.101:54368] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnc68-l3ey-hVJ5AuvZPAAAANc"]
[Sun Nov 16 22:17:21.350936 2025] [:error] [pid 34133:tid 34154] [client 192.178.4.101:57150] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnc8fSAB3iwXVRY0gG4YwAAAVM"]
[Sun Nov 16 22:17:27.085443 2025] [:error] [pid 52469:tid 52480] [client 192.178.4.101:53667] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnc906HaXpHeEZ98Z0mbQAAAAM"]
[Sun Nov 16 22:17:32.481111 2025] [:error] [pid 52469:tid 52484] [client 192.178.4.101:50696] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnc_E6HaXpHeEZ98Z0mdAAAAAc"]
[Sun Nov 16 22:17:37.830829 2025] [:error] [pid 20556:tid 20560] [client 192.178.4.101:65231] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRndAUkbyEckbWtBcCLGUgAAAQI"]
[Sun Nov 16 22:17:46.296835 2025] [:error] [pid 52469:tid 52492] [client 192.178.4.101:59909] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRndCk6HaXpHeEZ98Z0mhAAAAA8"]
[Sun Nov 16 22:17:54.372278 2025] [:error] [pid 52563:tid 52568] [client 192.178.4.101:56974] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRndEs-l3ey-hVJ5AuvZVgAAAMI"]
[Sun Nov 16 22:19:33.820444 2025] [:error] [pid 34133:tid 34140] [client 192.178.4.101:50842] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnddfSAB3iwXVRY0gG4qQAAAUU"]
[Sun Nov 16 22:19:41.036940 2025] [:error] [pid 52471:tid 52552] [client 192.178.4.101:35633] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRndfdmWsFzjR5CEgDWIVQAAAJQ"]
[Sun Nov 16 22:19:49.527915 2025] [:error] [pid 52471:tid 52548] [client 192.178.4.101:40659] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRndhdmWsFzjR5CEgDWIZwAAAJA"]
[Sun Nov 16 22:19:59.598176 2025] [:error] [pid 34301:tid 34306] [client 192.178.4.101:36807] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRndj7GPoZwUGuFNREv3lgAAAoI"]
[Sun Nov 16 22:22:26.646816 2025] [:error] [pid 34301:tid 34325] [client 192.178.4.101:38406] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRneIrGPoZwUGuFNREv4EQAAApU"]
[Sun Nov 16 22:22:39.328662 2025] [:error] [pid 52469:tid 52501] [client 192.178.4.101:47929] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRneL06HaXpHeEZ98Z0n3wAAABg"]
[Sun Nov 16 22:22:49.613977 2025] [:error] [pid 52471:tid 52553] [client 192.178.4.101:56958] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRneOdmWsFzjR5CEgDWI_AAAAJU"]
[Sun Nov 16 22:23:15.690510 2025] [:error] [pid 34164:tid 34170] [client 192.178.4.101:64375] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRneU-93ccBCLD8-Q4aJOAAAAYI"]
[Sun Nov 16 22:24:38.047276 2025] [:error] [pid 52563:tid 52568] [client 192.178.4.101:43969] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRneps-l3ey-hVJ5AuvalgAAAMI"]
[Sun Nov 16 22:24:39.858901 2025] [:error] [pid 34165:tid 34197] [client 192.178.4.101:48339] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnep3hG2YTKEjXchwlRBAAAAcI"]
[Sun Nov 16 22:24:53.872628 2025] [:error] [pid 52469:tid 52487] [client 192.178.4.101:44427] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnetU6HaXpHeEZ98Z0ovgAAAAo"]
[Sun Nov 16 22:24:55.172257 2025] [:error] [pid 52471:tid 52533] [client 192.178.4.101:52426] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnet9mWsFzjR5CEgDWJfwAAAIE"]
[Sun Nov 16 22:25:08.715917 2025] [:error] [pid 52563:tid 52566] [client 192.178.4.101:57508] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnexM-l3ey-hVJ5AuvatwAAAMA"]
[Sun Nov 16 22:26:52.979565 2025] [:error] [pid 34227:tid 34237] [client 192.178.4.101:64196] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnfLH108zGLYs9eMuhi5AAAAgg"]
[Sun Nov 16 22:27:18.572028 2025] [:error] [pid 52469:tid 52484] [client 192.178.4.101:44226] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnfRk6HaXpHeEZ98Z0ptAAAAAc"]
[Sun Nov 16 22:27:20.366914 2025] [:error] [pid 52471:tid 52545] [client 192.178.4.101:40537] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnfSNmWsFzjR5CEgDWKEgAAAI0"]
[Sun Nov 16 22:27:32.239730 2025] [:error] [pid 52471:tid 52545] [client 192.178.4.101:61767] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnfVNmWsFzjR5CEgDWKHAAAAI0"]
[Sun Nov 16 22:27:36.611416 2025] [:error] [pid 34164:tid 34177] [client 192.178.4.101:35394] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnfWO93ccBCLD8-Q4aKMAAAAYk"]
[Sun Nov 16 22:27:48.556659 2025] [:error] [pid 52469:tid 52486] [client 192.178.4.101:41743] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnfZE6HaXpHeEZ98Z0p2gAAAAk"]
[Sun Nov 16 22:29:16.990780 2025] [:error] [pid 34271:tid 34277] [client 192.178.4.102:35782] [client 192.178.4.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnfvENmlZhoZZV1BUDpEgAAAkQ"]
[Sun Nov 16 22:30:28.769268 2025] [:error] [pid 52469:tid 52484] [client 192.178.4.101:51997] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRngBE6HaXpHeEZ98Z0qiwAAAAc"]
[Sun Nov 16 22:30:30.933515 2025] [:error] [pid 20556:tid 20576] [client 192.178.4.101:47640] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRngBkkbyEckbWtBcCLJDwAAARI"]
[Sun Nov 16 22:30:43.509602 2025] [:error] [pid 34301:tid 34323] [client 192.178.4.101:46509] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRngE7GPoZwUGuFNREv5dQAAApM"]
[Sun Nov 16 22:30:44.325860 2025] [:error] [pid 34227:tid 34242] [client 192.178.4.101:54457] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRngFH108zGLYs9eMuhjYwAAAg0"]
[Sun Nov 16 22:30:57.291396 2025] [:error] [pid 52469:tid 52489] [client 192.178.4.101:36979] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRngIU6HaXpHeEZ98Z0qtgAAAAw"]
[Sun Nov 16 22:31:00.626021 2025] [:error] [pid 34271:tid 34278] [client 192.178.4.101:45565] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRngJENmlZhoZZV1BUDpUwAAAkU"]
[Sun Nov 16 22:32:39.550413 2025] [:error] [pid 52471:tid 52545] [client 192.178.4.101:48349] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRngh9mWsFzjR5CEgDWLLQAAAI0"]
[Sun Nov 16 22:32:40.611417 2025] [:error] [pid 34164:tid 34171] [client 192.178.4.101:40334] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRngiO93ccBCLD8-Q4aLNgAAAYM"]
[Sun Nov 16 22:32:54.354242 2025] [:error] [pid 20556:tid 20575] [client 192.178.4.101:60666] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnglkkbyEckbWtBcCLJfgAAARE"]
[Sun Nov 16 22:32:55.531818 2025] [:error] [pid 34164:tid 34185] [client 192.178.4.101:62694] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRngl-93ccBCLD8-Q4aLQQAAAZE"]
[Sun Nov 16 22:33:10.624890 2025] [:error] [pid 20556:tid 20561] [client 192.178.4.101:36080] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRngpkkbyEckbWtBcCLJlAAAAQM"]
[Sun Nov 16 22:34:49.808317 2025] [:error] [pid 52471:tid 52545] [client 192.178.4.101:64744] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnhCdmWsFzjR5CEgDWLfgAAAI0"]
[Sun Nov 16 22:34:51.304796 2025] [:error] [pid 34227:tid 34251] [client 192.178.4.101:58572] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnhC3108zGLYs9eMuhkAQAAAhY"]
[Sun Nov 16 22:35:20.848575 2025] [:error] [pid 34271:tid 34294] [client 192.178.4.101:45979] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnhKENmlZhoZZV1BUDp2gAAAlU"]
[Sun Nov 16 22:35:31.972728 2025] [:error] [pid 52469:tid 52497] [client 192.178.4.101:52668] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnhM06HaXpHeEZ98Z0r5gAAABQ"]
[Sun Nov 16 22:35:33.737437 2025] [:error] [pid 20556:tid 20568] [client 192.178.4.101:40057] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnhNUkbyEckbWtBcCLKQQAAAQo"]
[Sun Nov 16 22:37:05.464323 2025] [:error] [pid 34164:tid 34169] [client 192.178.4.101:63040] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnhke93ccBCLD8-Q4aMCwAAAYE"]
[Sun Nov 16 22:37:06.661630 2025] [:error] [pid 34271:tid 34273] [client 192.178.4.101:61541] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnhkkNmlZhoZZV1BUDqIgAAAkA"]
[Sun Nov 16 22:37:19.556202 2025] [:error] [pid 52469:tid 52485] [client 192.178.4.101:40605] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnhn06HaXpHeEZ98Z0sTQAAAAg"]
[Sun Nov 16 22:37:29.369367 2025] [:error] [pid 20556:tid 20572] [client 192.178.4.101:49865] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnhqUkbyEckbWtBcCLK1AAAAQ4"]
[Sun Nov 16 22:37:31.819968 2025] [:error] [pid 20556:tid 20579] [client 192.178.4.101:49203] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnhq0kbyEckbWtBcCLK1QAAARU"]
[Sun Nov 16 22:37:43.635468 2025] [:error] [pid 34164:tid 34178] [client 192.178.4.101:39212] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnht-93ccBCLD8-Q4aMLgAAAYo"]
[Sun Nov 16 22:37:44.071697 2025] [:error] [pid 52469:tid 52491] [client 192.178.4.101:60841] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnhuE6HaXpHeEZ98Z0sXAAAAA4"]
[Sun Nov 16 22:37:44.634473 2025] [:error] [pid 34271:tid 34274] [client 192.178.4.101:42712] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnhuENmlZhoZZV1BUDqNgAAAkE"]
[Sun Nov 16 22:43:25.682388 2025] [:error] [pid 20556:tid 20570] [client 192.178.4.101:43607] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnjDUkbyEckbWtBcCLLzwAAAQw"]
[Sun Nov 16 22:43:28.626230 2025] [:error] [pid 34227:tid 34230] [client 192.178.4.101:53211] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnjEH108zGLYs9eMuhlNQAAAgE"]
[Sun Nov 16 22:43:31.034992 2025] [:error] [pid 34165:tid 34209] [client 192.178.4.101:63022] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnjE3hG2YTKEjXchwlT0wAAAc4"]
[Sun Nov 16 22:43:32.879262 2025] [:error] [pid 34165:tid 34214] [client 192.178.4.101:41963] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnjFHhG2YTKEjXchwlT2AAAAdM"]
[Sun Nov 16 22:43:34.643795 2025] [:error] [pid 34133:tid 34144] [client 192.178.4.101:37632] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnjFvSAB3iwXVRY0gG7_QAAAUk"]
[Sun Nov 16 22:43:41.113779 2025] [:error] [pid 34165:tid 34209] [client 192.178.4.101:36633] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnjHXhG2YTKEjXchwlT3QAAAc4"]
[Sun Nov 16 22:43:49.339952 2025] [:error] [pid 34271:tid 34295] [client 192.178.4.101:51211] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnjJUNmlZhoZZV1BUDq-QAAAlY"]
[Sun Nov 16 22:43:54.551738 2025] [:error] [pid 34164:tid 34191] [client 192.178.4.101:36957] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnjKu93ccBCLD8-Q4aNbAAAAZc"]
[Sun Nov 16 22:44:08.319421 2025] [:error] [pid 52563:tid 52574] [client 192.178.4.101:41223] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnjOM-l3ey-hVJ5AuveCgAAAMg"]
[Sun Nov 16 22:45:53.601520 2025] [:error] [pid 52471:tid 52532] [client 192.178.4.101:40715] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnjodmWsFzjR5CEgDWNoQAAAIA"]
[Sun Nov 16 22:45:54.387632 2025] [:error] [pid 52469:tid 52500] [client 192.178.4.101:54481] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnjok6HaXpHeEZ98Z0uSgAAABc"]
[Sun Nov 16 22:45:57.045764 2025] [:error] [pid 52563:tid 52573] [client 192.178.4.101:51014] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnjpc-l3ey-hVJ5AuveTAAAAMc"]
[Sun Nov 16 22:46:15.987394 2025] [:error] [pid 52469:tid 52496] [client 192.178.4.101:50298] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnjt06HaXpHeEZ98Z0uWAAAABM"]
[Sun Nov 16 22:46:31.891530 2025] [:error] [pid 52469:tid 52486] [client 192.178.4.101:35147] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnjx06HaXpHeEZ98Z0uagAAAAk"]
[Sun Nov 16 22:48:03.823564 2025] [:error] [pid 34165:tid 34208] [client 192.178.4.101:47899] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnkI3hG2YTKEjXchwlUeQAAAc0"]
[Sun Nov 16 22:48:12.731250 2025] [:error] [pid 52471:tid 52556] [client 192.178.4.101:46163] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnkLNmWsFzjR5CEgDWN-gAAAJg"]
[Sun Nov 16 22:48:16.932360 2025] [:error] [pid 52563:tid 52584] [client 192.178.4.101:39689] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnkMM-l3ey-hVJ5AuvemAAAANI"]
[Sun Nov 16 22:48:19.063181 2025] [:error] [pid 34301:tid 34317] [client 192.178.4.101:65092] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnkM7GPoZwUGuFNREv8RwAAAo0"]
[Sun Nov 16 22:48:23.224190 2025] [:error] [pid 34165:tid 34210] [client 192.178.4.101:41842] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnkN3hG2YTKEjXchwlUhAAAAc8"]
[Sun Nov 16 22:48:27.334714 2025] [:error] [pid 52469:tid 52497] [client 192.178.4.101:43712] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnkO06HaXpHeEZ98Z0u-wAAABQ"]
[Sun Nov 16 22:48:37.514265 2025] [:error] [pid 20556:tid 20562] [client 192.178.4.101:47765] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnkRUkbyEckbWtBcCLNSgAAAQQ"]
[Sun Nov 16 22:48:45.422136 2025] [:error] [pid 34271:tid 34281] [client 192.178.4.101:45410] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnkTUNmlZhoZZV1BUDrqgAAAkg"]
[Sun Nov 16 22:48:50.144328 2025] [:error] [pid 34271:tid 34280] [client 192.178.4.101:47146] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnkUkNmlZhoZZV1BUDrrAAAAkc"]
[Sun Nov 16 22:50:57.603839 2025] [:error] [pid 34164:tid 34183] [client 192.178.4.101:59086] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnk0e93ccBCLD8-Q4aO5wAAAY8"]
[Sun Nov 16 22:50:58.266409 2025] [:error] [pid 52469:tid 52499] [client 192.178.4.101:35424] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnk0k6HaXpHeEZ98Z0vkAAAABY"]
[Sun Nov 16 22:51:05.128594 2025] [:error] [pid 34164:tid 34173] [client 192.178.4.101:52020] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnk2e93ccBCLD8-Q4aO8wAAAYU"]
[Sun Nov 16 22:51:15.368644 2025] [:error] [pid 52469:tid 52501] [client 192.178.4.101:38343] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnk406HaXpHeEZ98Z0vngAAABg"]
[Sun Nov 16 22:51:26.549813 2025] [:error] [pid 34301:tid 34324] [client 192.178.4.101:55351] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnk7rGPoZwUGuFNREv8tAAAApQ"]
[Sun Nov 16 22:51:30.337743 2025] [:error] [pid 34133:tid 34149] [client 192.178.4.101:47200] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnk8vSAB3iwXVRY0gG9DgAAAU4"]
[Sun Nov 16 22:51:42.468490 2025] [:error] [pid 52471:tid 52543] [client 192.178.4.101:43329] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnk_tmWsFzjR5CEgDWOfQAAAIs"]
[Sun Nov 16 22:51:43.585288 2025] [:error] [pid 52469:tid 52501] [client 192.178.4.101:64171] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnk_06HaXpHeEZ98Z0vsgAAABg"]
[Sun Nov 16 22:52:59.200205 2025] [:error] [pid 34227:tid 34237] [client 192.178.4.101:35062] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnlS3108zGLYs9eMuhmhQAAAgg"]
[Sun Nov 16 22:53:14.678861 2025] [:error] [pid 20556:tid 20563] [client 192.178.4.101:47449] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnlWkkbyEckbWtBcCLOTAAAAQU"]
[Sun Nov 16 22:53:25.447026 2025] [:error] [pid 34133:tid 34141] [client 192.178.4.101:61575] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnlZfSAB3iwXVRY0gG9TgAAAUY"]
[Sun Nov 16 22:53:30.467393 2025] [:error] [pid 34164:tid 34171] [client 192.178.4.101:47968] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnlau93ccBCLD8-Q4aPdgAAAYM"]
[Sun Nov 16 22:53:36.344155 2025] [:error] [pid 52471:tid 52550] [client 192.178.4.101:60683] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnlcNmWsFzjR5CEgDWOwAAAAJI"]
[Sun Nov 16 22:53:39.791165 2025] [:error] [pid 34301:tid 34315] [client 192.178.4.101:35970] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnlc7GPoZwUGuFNREv9CAAAAos"]
[Sun Nov 16 22:53:42.457821 2025] [:error] [pid 34164:tid 34178] [client 192.178.4.101:50933] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnldu93ccBCLD8-Q4aPgAAAAYo"]
[Sun Nov 16 22:53:52.882301 2025] [:error] [pid 52471:tid 52545] [client 192.178.4.101:43447] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnlgNmWsFzjR5CEgDWO0wAAAI0"]
[Sun Nov 16 22:53:54.147282 2025] [:error] [pid 52469:tid 52493] [client 192.178.4.101:56883] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnlgk6HaXpHeEZ98Z0wKAAAABA"]
[Sun Nov 16 22:55:38.517719 2025] [:error] [pid 52563:tid 52566] [client 192.178.4.101:62600] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnl6s-l3ey-hVJ5AuvfzAAAAMA"]
[Sun Nov 16 22:55:49.250654 2025] [:error] [pid 34133:tid 34136] [client 192.178.4.101:48639] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnl9fSAB3iwXVRY0gG9hwAAAUE"]
[Sun Nov 16 22:55:52.848393 2025] [:error] [pid 52563:tid 52571] [client 192.178.4.101:47672] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnl-M-l3ey-hVJ5Auvf2AAAAMU"]
[Sun Nov 16 22:56:06.057101 2025] [:error] [pid 34271:tid 34276] [client 192.178.4.101:40483] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnmBkNmlZhoZZV1BUDsjAAAAkM"]
[Sun Nov 16 22:56:16.989479 2025] [:error] [pid 34164:tid 34185] [client 192.178.4.101:39271] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnmEO93ccBCLD8-Q4aP6QAAAZE"]
[Sun Nov 16 22:56:18.076996 2025] [:error] [pid 34165:tid 34219] [client 192.178.4.101:56816] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnmEnhG2YTKEjXchwlVsQAAAdg"]
[Sun Nov 16 22:56:21.022659 2025] [:error] [pid 34165:tid 34205] [client 192.178.4.101:47009] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnmFXhG2YTKEjXchwlVtAAAAco"]
[Sun Nov 16 22:56:30.485560 2025] [:error] [pid 52563:tid 52589] [client 192.178.4.101:54000] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnmHs-l3ey-hVJ5Auvf9gAAANc"]
[Sun Nov 16 22:56:33.035159 2025] [:error] [pid 52469:tid 52481] [client 192.178.4.101:39743] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnmIU6HaXpHeEZ98Z0wzAAAAAQ"]
[Sun Nov 16 22:58:07.230305 2025] [:error] [pid 34271:tid 34291] [client 192.178.4.101:47245] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnmf0NmlZhoZZV1BUDsyQAAAlI"]
[Sun Nov 16 22:58:18.652866 2025] [:error] [pid 20556:tid 20582] [client 192.178.4.101:46709] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnmikkbyEckbWtBcCLPbgAAARg"]
[Sun Nov 16 22:58:19.304722 2025] [:error] [pid 52471:tid 52539] [client 192.178.4.101:41344] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnmi9mWsFzjR5CEgDWPpQAAAIc"]
[Sun Nov 16 22:58:23.778824 2025] [:error] [pid 52471:tid 52541] [client 192.178.4.101:48335] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnmj9mWsFzjR5CEgDWPpwAAAIk"]
[Sun Nov 16 22:58:31.808292 2025] [:error] [pid 52563:tid 52570] [client 192.178.4.101:44237] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnml8-l3ey-hVJ5AuvgdQAAAMQ"]
[Sun Nov 16 22:58:32.945725 2025] [:error] [pid 34133:tid 34147] [client 192.178.4.101:59184] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnmmPSAB3iwXVRY0gG93QAAAUw"]
[Sun Nov 16 22:58:35.166208 2025] [:error] [pid 34301:tid 34313] [client 192.178.4.101:47359] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnmm7GPoZwUGuFNREv9zgAAAok"]
[Sun Nov 16 22:58:40.720887 2025] [:error] [pid 52471:tid 52533] [client 192.178.4.101:50427] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnmoNmWsFzjR5CEgDWPsgAAAIE"]
[Sun Nov 16 22:58:43.549743 2025] [:error] [pid 34165:tid 34212] [client 192.178.4.101:42263] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnmo3hG2YTKEjXchwlWEAAAAdE"]
[Sun Nov 16 22:58:53.030757 2025] [:error] [pid 34301:tid 34316] [client 192.178.4.101:35637] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnmrbGPoZwUGuFNREv93gAAAow"]
[Sun Nov 16 23:00:27.158930 2025] [:error] [pid 20556:tid 20561] [client 192.178.4.101:55216] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnnC0kbyEckbWtBcCLPvAAAAQM"]
[Sun Nov 16 23:00:32.057562 2025] [:error] [pid 52563:tid 52568] [client 192.178.4.101:62431] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnnEM-l3ey-hVJ5AuvgwgAAAMI"]
[Sun Nov 16 23:00:51.147279 2025] [:error] [pid 20556:tid 20562] [client 192.178.4.101:53861] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnnI0kbyEckbWtBcCLPyQAAAQQ"]
[Sun Nov 16 23:00:53.661801 2025] [:error] [pid 34165:tid 34205] [client 192.178.4.101:42907] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnnJXhG2YTKEjXchwlWUgAAAco"]
[Sun Nov 16 23:00:59.888235 2025] [:error] [pid 20556:tid 20579] [client 192.178.4.101:48306] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnnK0kbyEckbWtBcCLP0QAAARU"]
[Sun Nov 16 23:01:00.860946 2025] [:error] [pid 34227:tid 34236] [client 192.178.4.101:53875] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnnLH108zGLYs9eMuhn0gAAAgc"]
[Sun Nov 16 23:02:34.442895 2025] [:error] [pid 34227:tid 34247] [client 192.178.4.101:36431] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnnin108zGLYs9eMuhoEwAAAhI"]
[Sun Nov 16 23:02:40.890506 2025] [:error] [pid 34227:tid 34241] [client 192.178.4.101:54525] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnnkH108zGLYs9eMuhoFwAAAgw"]
[Sun Nov 16 23:02:41.771583 2025] [:error] [pid 34165:tid 34214] [client 192.178.4.101:44085] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnnkXhG2YTKEjXchwlWogAAAdM"]
[Sun Nov 16 23:02:43.395427 2025] [:error] [pid 34164:tid 34168] [client 192.178.4.101:57743] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnnk-93ccBCLD8-Q4aRYQAAAYA"]
[Sun Nov 16 23:02:56.861747 2025] [:error] [pid 52469:tid 52500] [client 192.178.4.101:35674] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnnoE6HaXpHeEZ98Z0yWQAAABc"]
[Sun Nov 16 23:02:57.701712 2025] [:error] [pid 52469:tid 52491] [client 192.178.4.101:51376] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnnoU6HaXpHeEZ98Z0yWgAAAA4"]
[Sun Nov 16 23:03:21.648691 2025] [:error] [pid 34301:tid 34312] [client 192.178.4.101:53556] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnnubGPoZwUGuFNREv-fQAAAog"]
[Sun Nov 16 23:04:50.414917 2025] [:error] [pid 34164:tid 34171] [client 192.178.4.101:37330] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnoEu93ccBCLD8-Q4aRxAAAAYM"]
[Sun Nov 16 23:04:58.664831 2025] [:error] [pid 34301:tid 34305] [client 192.178.4.101:57756] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnoGrGPoZwUGuFNREv-ugAAAoE"]
[Sun Nov 16 23:04:59.653798 2025] [:error] [pid 34301:tid 34328] [client 192.178.4.101:65313] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnoG7GPoZwUGuFNREv-vQAAApg"]
[Sun Nov 16 23:05:19.602126 2025] [:error] [pid 34164:tid 34180] [client 192.178.4.101:65025] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnoL-93ccBCLD8-Q4aR2QAAAYw"]
[Sun Nov 16 23:05:24.133141 2025] [:error] [pid 52563:tid 52566] [client 192.178.4.101:61597] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnoNM-l3ey-hVJ5AuvhmQAAAMA"]
[Sun Nov 16 23:05:37.976554 2025] [:error] [pid 34301:tid 34327] [client 192.178.4.101:48599] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnoQbGPoZwUGuFNREv-2gAAApc"]
[Sun Nov 16 23:05:41.184850 2025] [:error] [pid 52563:tid 52574] [client 192.178.4.101:45922] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnoRc-l3ey-hVJ5AuvhpQAAAMg"]
[Sun Nov 16 23:05:47.458421 2025] [:error] [pid 52469:tid 52485] [client 192.178.4.101:63668] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnoS06HaXpHeEZ98Z0zQQAAAAg"]
[Sun Nov 16 23:06:40.823327 2025] [:error] [pid 20556:tid 20578] [client 192.178.4.101:51817] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnogEkbyEckbWtBcCLRLQAAARQ"]
[Sun Nov 16 23:06:44.766103 2025] [:error] [pid 52471:tid 52542] [client 192.178.4.101:48123] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnohNmWsFzjR5CEgDWRBgAAAIo"]
[Sun Nov 16 23:06:52.334370 2025] [:error] [pid 34271:tid 34287] [client 192.178.4.101:53575] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnojENmlZhoZZV1BUDuHAAAAk4"]
[Sun Nov 16 23:06:53.165121 2025] [:error] [pid 34165:tid 34197] [client 192.178.4.101:39543] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnojXhG2YTKEjXchwlXhAAAAcI"]
[Sun Nov 16 23:06:53.928689 2025] [:error] [pid 52471:tid 52536] [client 192.178.4.101:49138] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnojdmWsFzjR5CEgDWRCgAAAIQ"]
[Sun Nov 16 23:06:58.151038 2025] [:error] [pid 52469:tid 52499] [client 192.178.4.101:40891] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnokk6HaXpHeEZ98Z0zxQAAABY"]
[Sun Nov 16 23:07:14.556360 2025] [:error] [pid 34164:tid 34192] [client 192.178.4.102:39744] [client 192.178.4.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnoou93ccBCLD8-Q4aSNwAAAZg"]
[Sun Nov 16 23:07:23.257619 2025] [:error] [pid 34227:tid 34234] [client 192.178.4.101:35504] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnoq3108zGLYs9eMuhougAAAgU"]
[Sun Nov 16 23:07:30.835881 2025] [:error] [pid 34133:tid 34138] [client 192.178.4.101:35084] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnosvSAB3iwXVRY0gG_SQAAAUM"]
[Sun Nov 16 23:08:03.548349 2025] [:error] [pid 52469:tid 52497] [client 192.178.4.102:53300] [client 192.178.4.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRno006HaXpHeEZ98Z0z8QAAABQ"]
[Sun Nov 16 23:12:21.634904 2025] [:error] [pid 34271:tid 34277] [client 192.178.4.101:36174] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnp1UNmlZhoZZV1BUDu3wAAAkQ"]
[Sun Nov 16 23:12:29.318679 2025] [:error] [pid 52469:tid 52477] [client 192.178.4.101:50778] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnp3U6HaXpHeEZ98Z01AgAAAAA"]
[Sun Nov 16 23:12:36.641641 2025] [:error] [pid 52471:tid 52541] [client 192.178.4.101:57616] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnp5NmWsFzjR5CEgDWSCgAAAIk"]
[Sun Nov 16 23:12:47.736981 2025] [:error] [pid 52469:tid 52489] [client 192.178.4.101:40869] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnp706HaXpHeEZ98Z01HQAAAAw"]
[Sun Nov 16 23:12:53.976987 2025] [:error] [pid 52563:tid 52568] [client 192.178.4.101:45329] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnp9c-l3ey-hVJ5AuvjAQAAAMI"]
[Sun Nov 16 23:13:02.397250 2025] [:error] [pid 34133:tid 34152] [client 192.178.4.101:48639] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnp_vSAB3iwXVRY0gG__gAAAVE"]
[Sun Nov 16 23:16:55.646764 2025] [:error] [pid 34271:tid 34294] [client 192.178.4.101:45996] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnq50NmlZhoZZV1BUDvegAAAlU"]
[Sun Nov 16 23:17:22.797207 2025] [:error] [pid 34164:tid 34184] [client 192.178.4.101:63325] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnrAu93ccBCLD8-Q4aUKwAAAZA"]
[Sun Nov 16 23:22:21.548203 2025] [:error] [pid 34301:tid 34316] [client 192.178.4.101:56608] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnsLbGPoZwUGuFNREsBdAAAAow"]
[Sun Nov 16 23:22:37.880847 2025] [:error] [pid 52469:tid 52500] [client 192.178.4.101:38876] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnsPU6HaXpHeEZ98Z04JQAAABc"]
[Sun Nov 16 23:22:56.065806 2025] [:error] [pid 34227:tid 34237] [client 192.178.4.101:48881] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnsUH108zGLYs9eMuhq3wAAAgg"]
[Sun Nov 16 23:28:26.009718 2025] [:error] [pid 52469:tid 52490] [client 192.178.4.101:39319] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRntmk6HaXpHeEZ98Z06KQAAAA0"]
[Sun Nov 16 23:28:34.161860 2025] [:error] [pid 34271:tid 34294] [client 192.178.4.101:45301] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRntokNmlZhoZZV1BUDxNwAAAlU"]
[Sun Nov 16 23:28:50.431504 2025] [:error] [pid 52469:tid 52478] [client 192.178.4.101:35022] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRntsk6HaXpHeEZ98Z06NwAAAAE"]
[Sun Nov 16 23:31:59.318222 2025] [:error] [pid 52563:tid 52573] [client 192.178.4.101:56061] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnub8-l3ey-hVJ5AuvmAgAAAMc"]
[Sun Nov 16 23:32:13.731826 2025] [:error] [pid 34271:tid 34290] [client 192.178.4.101:62219] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnufUNmlZhoZZV1BUDxqAAAAlE"]
[Sun Nov 16 23:32:20.143247 2025] [:error] [pid 34164:tid 34182] [client 192.178.4.101:43003] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnuhO93ccBCLD8-Q4aX8AAAAY4"]
[Sun Nov 16 23:32:28.237644 2025] [:error] [pid 52469:tid 52498] [client 192.178.4.101:43076] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnujE6HaXpHeEZ98Z07OAAAABU"]
[Sun Nov 16 23:32:39.348861 2025] [:error] [pid 52469:tid 52495] [client 192.178.4.101:41858] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnul06HaXpHeEZ98Z07UQAAABI"]
[Sun Nov 16 23:36:30.884715 2025] [:error] [pid 34227:tid 34241] [client 192.178.4.101:47693] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnvfn108zGLYs9eMuhs5QAAAgw"]
[Sun Nov 16 23:36:31.852722 2025] [:error] [pid 20556:tid 20563] [client 192.178.4.101:43331] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnvf0kbyEckbWtBcCLYegAAAQU"]
[Sun Nov 16 23:36:41.136776 2025] [:error] [pid 34227:tid 34251] [client 192.178.4.101:42413] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnviX108zGLYs9eMuhs9wAAAhY"]
[Sun Nov 16 23:38:47.672753 2025] [:error] [pid 34301:tid 34303] [client 192.178.4.101:41032] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnwB7GPoZwUGuFNREsEOwAAAoA"]
[Sun Nov 16 23:38:54.553672 2025] [:error] [pid 34133:tid 34135] [client 192.178.4.101:49615] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnwDvSAB3iwXVRY0gHDZAAAAUA"]
[Sun Nov 16 23:43:58.293107 2025] [:error] [pid 34165:tid 34215] [client 192.178.4.101:64437] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnxPnhG2YTKEjXchwlc5gAAAdQ"]
[Sun Nov 16 23:44:04.391225 2025] [:error] [pid 34164:tid 34175] [client 192.178.4.101:64874] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnxRO93ccBCLD8-Q4aadAAAAYc"]
[Sun Nov 16 23:44:15.159762 2025] [:error] [pid 52469:tid 52485] [client 192.178.4.101:62101] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnxT06HaXpHeEZ98Z0-yAAAAAg"]
[Sun Nov 16 23:44:17.070825 2025] [:error] [pid 34133:tid 34140] [client 192.178.4.101:46572] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnxUfSAB3iwXVRY0gHESgAAAUU"]
[Sun Nov 16 23:44:25.278168 2025] [:error] [pid 34164:tid 34172] [client 192.178.4.101:62683] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnxWe93ccBCLD8-Q4aakAAAAYQ"]
[Sun Nov 16 23:44:32.787567 2025] [:error] [pid 52471:tid 52542] [client 192.178.4.101:63346] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnxYNmWsFzjR5CEgDWYYQAAAIo"]
[Sun Nov 16 23:44:41.734636 2025] [:error] [pid 52469:tid 52483] [client 192.178.4.101:46471] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnxaU6HaXpHeEZ98Z0-7QAAAAY"]
[Sun Nov 16 23:46:57.419437 2025] [:error] [pid 52469:tid 52487] [client 192.178.4.101:40867] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnx8U6HaXpHeEZ98Z0_nwAAAAo"]
[Sun Nov 16 23:47:04.240106 2025] [:error] [pid 52471:tid 52553] [client 192.178.4.101:44102] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnx-NmWsFzjR5CEgDWYzgAAAJU"]
[Sun Nov 16 23:47:30.633372 2025] [:error] [pid 34227:tid 34231] [client 192.178.4.101:39441] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnyEn108zGLYs9eMuhu3gAAAgI"]
[Sun Nov 16 23:47:31.600026 2025] [:error] [pid 20556:tid 20563] [client 192.178.4.101:41593] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnyE0kbyEckbWtBcCLbegAAAQU"]
[Sun Nov 16 23:47:38.709212 2025] [:error] [pid 52469:tid 52481] [client 192.178.4.101:43975] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnyGk6HaXpHeEZ98Z0_0AAAAAQ"]
[Sun Nov 16 23:49:27.270919 2025] [:error] [pid 34133:tid 34151] [client 192.178.4.101:44220] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnyh_SAB3iwXVRY0gHFGQAAAVA"]
[Sun Nov 16 23:49:31.967611 2025] [:error] [pid 52469:tid 52482] [client 192.178.4.101:38679] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnyi06HaXpHeEZ98Z1AfwAAAAU"]
[Sun Nov 16 23:49:40.997948 2025] [:error] [pid 34133:tid 34157] [client 192.178.4.101:43750] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnylPSAB3iwXVRY0gHFHwAAAVY"]
[Sun Nov 16 23:49:44.725886 2025] [:error] [pid 52471:tid 52538] [client 192.178.4.101:53077] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnymNmWsFzjR5CEgDWZdQAAAIY"]
[Sun Nov 16 23:49:52.444795 2025] [:error] [pid 52563:tid 52568] [client 192.178.4.101:39771] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnyoM-l3ey-hVJ5AuvpXAAAAMI"]
[Sun Nov 16 23:49:59.938335 2025] [:error] [pid 34271:tid 34278] [client 192.178.4.101:57114] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnyp0NmlZhoZZV1BUD0oQAAAkU"]
[Sun Nov 16 23:50:00.324650 2025] [:error] [pid 34164:tid 34169] [client 192.178.4.101:35708] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnyqO93ccBCLD8-Q4abxQAAAYE"]
[Sun Nov 16 23:50:08.192142 2025] [:error] [pid 52469:tid 52500] [client 192.178.4.101:36101] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnysE6HaXpHeEZ98Z1AxwAAABc"]
[Sun Nov 16 23:50:19.076355 2025] [:error] [pid 52469:tid 52486] [client 192.178.4.101:54002] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnyu06HaXpHeEZ98Z1A0wAAAAk"]
[Sun Nov 16 23:52:20.406977 2025] [:error] [pid 52563:tid 52570] [client 182.42.105.85:44988] [client 182.42.105.85] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||paramountbaldivis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnzNM-l3ey-hVJ5AuvpywAAAMQ"]
[Sun Nov 16 23:52:32.657985 2025] [:error] [pid 34164:tid 34172] [client 192.178.4.101:60247] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnzQO93ccBCLD8-Q4acUQAAAYQ"]
[Sun Nov 16 23:52:46.329111 2025] [:error] [pid 34227:tid 34237] [client 192.178.4.101:38933] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnzTn108zGLYs9eMuhwGQAAAgg"]
[Sun Nov 16 23:52:53.907211 2025] [:error] [pid 52469:tid 52500] [client 192.178.4.101:57918] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRnzVU6HaXpHeEZ98Z1BzAAAABc"]
[Mon Nov 17 02:26:23.280697 2025] [:error] [pid 55745:tid 55764] [client 192.178.4.101:49827] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRoXT4Zk0eT801XQsauS3wAAAFE"]
[Mon Nov 17 02:26:40.387458 2025] [:error] [pid 55745:tid 55750] [client 192.178.4.101:51663] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRoXYIZk0eT801XQsauTEQAAAEM"]
[Mon Nov 17 02:26:52.957858 2025] [:error] [pid 55657:tid 55705] [client 192.178.4.101:37088] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRoXbB2pywrNN427_XRWvQAAAcE"]
[Mon Nov 17 02:30:15.447588 2025] [:error] [pid 55656:tid 55697] [client 192.178.4.101:54642] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRoYN6ZDObyEN97tsHBtlAAAAIs"]
[Mon Nov 17 02:30:28.182667 2025] [:error] [pid 55657:tid 55709] [client 192.178.4.101:37946] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRoYRB2pywrNN427_XRX3AAAAcM"]
[Mon Nov 17 02:30:47.204964 2025] [:error] [pid 55657:tid 55733] [client 192.178.4.101:44708] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRoYVx2pywrNN427_XRX8wAAAdQ"]
[Mon Nov 17 02:33:58.413713 2025] [:error] [pid 65480:tid 328] [client 192.178.4.101:60068] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRoZFg3NjAS-v6ul5QCFxgAAAMc"]
[Mon Nov 17 02:34:44.102670 2025] [:error] [pid 65480:tid 322] [client 192.178.4.101:48547] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRoZRA3NjAS-v6ul5QCGEAAAAMI"]
[Mon Nov 17 02:38:19.579050 2025] [:error] [pid 55655:tid 55683] [client 192.178.4.101:63832] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRoaGyGT_hu1vaVuRSSK9AAAABg"]
[Mon Nov 17 02:38:31.083508 2025] [:error] [pid 55655:tid 55680] [client 192.178.4.101:36845] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRoaJyGT_hu1vaVuRSSK_gAAABU"]
[Mon Nov 17 02:38:41.554706 2025] [:error] [pid 55655:tid 55682] [client 192.178.4.101:58981] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRoaMSGT_hu1vaVuRSSLMgAAABc"]
[Mon Nov 17 02:42:32.027401 2025] [:error] [pid 55745:tid 55761] [client 192.178.4.101:57454] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRobGIZk0eT801XQsauZOAAAAE4"]
[Mon Nov 17 02:42:40.240942 2025] [:error] [pid 65480:tid 325] [client 192.178.4.101:59955] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRobIA3NjAS-v6ul5QCKSQAAAMU"]
[Mon Nov 17 02:42:58.318401 2025] [:error] [pid 55655:tid 55665] [client 192.178.4.101:62951] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRobMiGT_hu1vaVuRSSMoQAAAAY"]
[Mon Nov 17 02:48:28.485454 2025] [:error] [pid 55745:tid 55752] [client 192.178.4.101:45478] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRocfIZk0eT801XQsaucIgAAAEU"]
[Mon Nov 17 02:48:32.325594 2025] [:error] [pid 55656:tid 55690] [client 192.178.4.101:57912] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRocgKZDObyEN97tsHBzQAAAAIQ"]
[Mon Nov 17 02:49:07.959810 2025] [:error] [pid 55745:tid 55751] [client 192.178.4.101:62905] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRoco4Zk0eT801XQsaucTQAAAEQ"]
[Mon Nov 17 03:22:45.690807 2025] [:error] [pid 55657:tid 55705] [client 192.178.4.101:38412] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRokhR2pywrNN427_XRn6AAAAcE"]
[Mon Nov 17 03:43:54.525228 2025] [:error] [pid 56530:tid 56555] [client 192.178.4.101:42036] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRopehMBYsDZoSvAo7sI7gAAANY"]
[Mon Nov 17 03:44:07.222410 2025] [:error] [pid 56530:tid 56545] [client 192.178.4.101:57150] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRophxMBYsDZoSvAo7sJFgAAAMw"]
[Mon Nov 17 03:44:26.365290 2025] [:error] [pid 56441:tid 56474] [client 192.178.4.101:47452] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRopmux5BAxHML-VZJY2egAAAEM"]
[Mon Nov 17 03:44:31.997438 2025] [:error] [pid 56440:tid 56450] [client 192.178.4.101:43267] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRopn5VFxRVzdryU0otJiwAAAAY"]
[Mon Nov 17 09:41:52.542604 2025] [:error] [pid 39537:tid 39563] [client 192.178.4.101:39679] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRp9YIZRrh1pcrdcLB9FuwAAANc"]
[Mon Nov 17 09:42:26.387919 2025] [:error] [pid 39537:tid 39558] [client 192.178.4.101:59294] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRp9goZRrh1pcrdcLB9F5gAAANI"]
[Mon Nov 17 10:27:23.448806 2025] [:error] [pid 39450:tid 39492] [client 192.178.4.101:59538] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRqIC-oZqPB4_7vNEDTnTQAAAEs"]
[Mon Nov 17 10:27:26.523118 2025] [:error] [pid 39449:tid 39462] [client 192.178.4.101:36305] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRqIDqUCymTA3MDfzLPlBwAAAAg"]
[Mon Nov 17 10:41:04.126412 2025] [:error] [pid 40548:tid 40552] [client 192.178.4.101:50453] [client 192.178.4.101] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "110.235.136.71_b65d4251c8e62c95f917e0265d9e1c49a08ee7c5"): Internal error (specific information not available) [hostname "paramountbaldivis.com"] [uri "/index.php"] [unique_id "aRqLOAM_PykfYnxh-j8XlwAAAQI"]
[Mon Nov 17 10:46:51.796009 2025] [:error] [pid 39449:tid 39461] [client 192.178.4.101:35541] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRqMm6UCymTA3MDfzLPr8gAAAAc"]
[Mon Nov 17 10:47:18.189998 2025] [:error] [pid 40548:tid 40556] [client 192.178.4.101:59104] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRqMtgM_PykfYnxh-j8ZWwAAAQY"]
[Mon Nov 17 10:47:31.174162 2025] [:error] [pid 65302:tid 65314] [client 192.178.4.101:42413] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRqMwwPMSx2v85r8y7yZ8wAAAUo"]
[Mon Nov 17 10:47:37.468276 2025] [:error] [pid 15150:tid 15157] [client 192.178.4.101:50520] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRqMyX2DEo_rcsFuxj0uhAAAAYU"]
[Mon Nov 17 10:47:40.606412 2025] [:error] [pid 39449:tid 39457] [client 192.178.4.101:60710] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRqMzKUCymTA3MDfzLPsOwAAAAM"]
[Mon Nov 17 10:49:57.142764 2025] [:error] [pid 15150:tid 15155] [client 192.178.4.101:35380] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRqNVX2DEo_rcsFuxj0u-wAAAYM"]
[Mon Nov 17 10:50:00.696967 2025] [:error] [pid 40548:tid 40560] [client 192.178.4.101:57367] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRqNWAM_PykfYnxh-j8aFgAAAQo"]
[Mon Nov 17 10:50:15.850785 2025] [:error] [pid 15150:tid 15153] [client 192.178.4.101:39401] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRqNZ32DEo_rcsFuxj0vEwAAAYE"]
[Mon Nov 17 10:50:19.885470 2025] [:error] [pid 65302:tid 65315] [client 192.178.4.101:56499] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRqNawPMSx2v85r8y7ybIgAAAUs"]
[Mon Nov 17 10:50:27.694048 2025] [:error] [pid 40548:tid 40550] [client 192.178.4.101:53925] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRqNcwM_PykfYnxh-j8aLwAAAQA"]
[Mon Nov 17 10:50:45.501229 2025] [:error] [pid 65302:tid 65322] [client 192.178.4.101:50374] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRqNhQPMSx2v85r8y7ybPAAAAVI"]
[Mon Nov 17 10:54:11.410028 2025] [:error] [pid 39451:tid 39528] [client 192.178.4.101:49752] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRqOU-fgkqXTS0SO3fDLYgAAAJQ"]
[Mon Nov 17 11:00:43.651814 2025] [:error] [pid 15150:tid 15153] [client 192.178.4.101:52679] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRqP232DEo_rcsFuxj0xIgAAAYE"]
[Mon Nov 17 11:01:13.901846 2025] [:error] [pid 39449:tid 39478] [client 192.178.4.101:44058] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRqP-aUCymTA3MDfzLPvQQAAABg"]
[Mon Nov 17 11:01:22.972603 2025] [:error] [pid 15150:tid 15168] [client 192.178.4.101:53481] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRqQAn2DEo_rcsFuxj0xTgAAAZA"]
[Mon Nov 17 11:01:25.858828 2025] [:error] [pid 65302:tid 65308] [client 192.178.4.101:46715] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRqQBQPMSx2v85r8y7ye7QAAAUQ"]
[Mon Nov 17 11:01:31.654660 2025] [:error] [pid 39537:tid 39557] [client 192.178.4.101:56683] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRqQC4ZRrh1pcrdcLB9ifwAAANE"]
[Mon Nov 17 11:04:20.162829 2025] [:error] [pid 39537:tid 39540] [client 192.178.4.101:50873] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRqQtIZRrh1pcrdcLB9juQAAAMA"]
[Mon Nov 17 11:04:30.137441 2025] [:error] [pid 39451:tid 39519] [client 192.178.4.101:52609] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRqQvufgkqXTS0SO3fDOeAAAAIs"]
[Mon Nov 17 11:04:41.191943 2025] [:error] [pid 39537:tid 39540] [client 192.178.4.101:64570] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRqQyYZRrh1pcrdcLB9jzAAAAMA"]
[Mon Nov 17 11:04:44.587367 2025] [:error] [pid 39450:tid 39490] [client 192.178.4.101:54300] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRqQzOoZqPB4_7vNEDTxyAAAAEk"]
[Mon Nov 17 11:04:51.613207 2025] [:error] [pid 39451:tid 39518] [client 192.178.4.101:38041] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRqQ0-fgkqXTS0SO3fDOgQAAAIo"]
[Mon Nov 17 11:05:07.002184 2025] [:error] [pid 39537:tid 39547] [client 192.178.4.101:56682] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRqQ44ZRrh1pcrdcLB9j1AAAAMc"]
[Mon Nov 17 11:15:30.579677 2025] [:error] [pid 40548:tid 40570] [client 192.178.4.101:42913] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRqTUgM_PykfYnxh-j8gWwAAARQ"]
[Mon Nov 17 11:15:41.558840 2025] [:error] [pid 39449:tid 39455] [client 192.178.4.101:35172] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRqTXaUCymTA3MDfzLP0FQAAAAE"]
[Mon Nov 17 11:15:44.236877 2025] [:error] [pid 39450:tid 39485] [client 192.178.4.101:59301] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRqTYOoZqPB4_7vNEDT0xgAAAEQ"]
[Mon Nov 17 11:15:59.045187 2025] [:error] [pid 15150:tid 15168] [client 192.178.4.101:56796] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRqTb32DEo_rcsFuxj01EgAAAZA"]
[Mon Nov 17 11:16:15.637910 2025] [:error] [pid 40548:tid 40562] [client 192.178.4.101:53068] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRqTfwM_PykfYnxh-j8gegAAAQw"]
[Mon Nov 17 12:37:58.266429 2025] [proxy_fcgi:error] [pid 40548:tid 40554] (70007)The timeout specified has expired: [client 110.249.201.148:28762] AH01075: Error dispatching request to : (polling)
[Mon Nov 17 12:59:43.376060 2025] [:error] [pid 65302:tid 65307] [client 182.44.9.147:51506] [client 182.44.9.147] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||paramountbaldivis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRqrvwPMSx2v85r8y7zF2AAAAUM"]
[Mon Nov 17 15:26:39.379153 2025] [:error] [pid 65302:tid 65305] [client 192.178.4.101:60097] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRrOLwPMSx2v85r8y7zXNgAAAUE"]
[Mon Nov 17 15:26:52.301053 2025] [:error] [pid 39449:tid 39464] [client 192.178.4.101:54157] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRrOPKUCymTA3MDfzLMbnQAAAAo"]
[Mon Nov 17 15:27:03.602640 2025] [:error] [pid 30801:tid 30812] [client 192.178.4.101:51971] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRrORzbGAU49DhMTBD7E5gAAAkk"]
[Mon Nov 17 15:30:14.365933 2025] [:error] [pid 39537:tid 39560] [client 192.178.4.101:55390] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRrPBoZRrh1pcrdcLB-UAQAAANQ"]
[Mon Nov 17 15:30:29.766348 2025] [:error] [pid 32753:tid 32774] [client 192.178.4.101:51488] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRrPFU6YNqI5vkht920vJAAAA9I"]
[Mon Nov 17 15:30:43.090126 2025] [:error] [pid 20913:tid 20926] [client 192.178.4.101:53475] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRrPI-kafGNeN3nY1bco7wAAA0s"]
[Mon Nov 17 15:30:57.121222 2025] [:error] [pid 39449:tid 39456] [client 192.178.4.101:64695] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRrPMaUCymTA3MDfzLMcigAAAAI"]
[Mon Nov 17 15:32:55.618511 2025] [:error] [pid 15888:tid 15900] [client 192.178.4.101:41896] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRrPpwjAdDTBm4W3qW0RUAAAAck"]
[Mon Nov 17 15:33:07.094397 2025] [:error] [pid 30801:tid 30819] [client 192.178.4.101:47992] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRrPszbGAU49DhMTBD7F2gAAAlA"]
[Mon Nov 17 15:33:35.749491 2025] [:error] [pid 32753:tid 32760] [client 192.178.4.101:37338] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRrPz06YNqI5vkht920wDgAAA8Q"]
[Mon Nov 17 15:36:46.734227 2025] [:error] [pid 39537:tid 39553] [client 192.178.4.101:48560] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRrQjoZRrh1pcrdcLB-UzwAAAM0"]
[Mon Nov 17 15:36:51.135722 2025] [:error] [pid 39451:tid 39528] [client 192.178.4.101:36507] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRrQk-fgkqXTS0SO3fD9xwAAAJQ"]
[Mon Nov 17 15:36:56.937466 2025] [:error] [pid 40548:tid 40567] [client 192.178.4.101:60339] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRrQmAM_PykfYnxh-j9F6wAAARE"]
[Mon Nov 17 15:42:56.751858 2025] [:error] [pid 30801:tid 30823] [client 192.178.4.101:39814] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRrSADbGAU49DhMTBD7HOQAAAlQ"]
[Mon Nov 17 15:43:21.975370 2025] [:error] [pid 39451:tid 39526] [client 192.178.4.101:58237] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRrSGefgkqXTS0SO3fD-twAAAJI"]
[Mon Nov 17 15:43:38.537835 2025] [:error] [pid 39449:tid 39462] [client 192.178.4.101:56735] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRrSKqUCymTA3MDfzLMfywAAAAg"]
[Mon Nov 17 16:04:08.982226 2025] [:error] [pid 40548:tid 40560] [client 139.59.253.161:59834] [client 139.59.253.161] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 139.59.253.161, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aRrW-AM_PykfYnxh-j9JWQAAAQo"], referer: http://paramountbaldivis.com
[Mon Nov 17 16:07:15.953471 2025] [:error] [pid 32753:tid 32769] [client 51.255.71.164:39653] [client 51.255.71.164] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 51.255.71.164, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aRrXs06YNqI5vkht9206owAAA80"], referer: http://paramountbaldivis.com
[Mon Nov 17 16:10:58.449478 2025] [:error] [pid 20913:tid 20926] [client 209.42.16.52:39924] [client 209.42.16.52] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 209.42.16.52, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aRrYkukafGNeN3nY1bcwXgAAA0s"], referer: http://paramountbaldivis.com
[Mon Nov 17 16:18:33.123108 2025] [:error] [pid 31419:tid 31431] [client 103.149.169.120:45794] [client 103.149.169.120] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.149.169.120, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aRraWQHQ5Sbp7elmDZhrlQAAAoo"], referer: http://paramountbaldivis.com
[Mon Nov 17 16:22:28.446749 2025] [:error] [pid 30801:tid 30826] [client 81.88.52.32:42492] [client 81.88.52.32] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 81.88.52.32, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aRrbRDbGAU49DhMTBD7NOAAAAlc"], referer: http://paramountbaldivis.com
[Mon Nov 17 16:26:18.688157 2025] [:error] [pid 39449:tid 39474] [client 185.38.248.227:36128] [client 185.38.248.227] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.38.248.227, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aRrcKqUCymTA3MDfzLMn1AAAABQ"], referer: http://paramountbaldivis.com
[Mon Nov 17 16:30:13.117691 2025] [:error] [pid 39449:tid 39468] [client 95.216.226.184:52800] [client 95.216.226.184] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 95.216.226.184, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aRrdFaUCymTA3MDfzLMooQAAAA4"], referer: http://paramountbaldivis.com
[Mon Nov 17 16:34:07.577329 2025] [:error] [pid 39451:tid 39519] [client 92.114.50.2:45018] [client 92.114.50.2] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 92.114.50.2, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aRrd_-fgkqXTS0SO3fAE0QAAAIs"], referer: http://paramountbaldivis.com
[Mon Nov 17 16:38:14.709215 2025] [:error] [pid 31419:tid 31435] [client 151.80.151.56:38662] [client 151.80.151.56] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 151.80.151.56, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aRre9gHQ5Sbp7elmDZhunQAAAo4"], referer: http://paramountbaldivis.com
[Mon Nov 17 16:42:29.278742 2025] [:error] [pid 39537:tid 39561] [client 103.147.122.46:33412] [client 103.147.122.46] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.147.122.46, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aRrf9YZRrh1pcrdcLB-dfQAAANU"], referer: http://paramountbaldivis.com
[Mon Nov 17 16:55:21.854381 2025] [:error] [pid 20913:tid 20915] [client 124.156.178.131:53534] [client 124.156.178.131] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 124.156.178.131, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aRri-ekafGNeN3nY1bc3UgAAA0A"], referer: http://paramountbaldivis.com
[Mon Nov 17 16:57:47.568259 2025] [:error] [pid 31419:tid 31434] [client 67.23.254.96:47418] [client 67.23.254.96] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 67.23.254.96, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aRrjiwHQ5Sbp7elmDZhxnwAAAo0"]
[Mon Nov 17 16:59:36.628747 2025] [:error] [pid 65302:tid 65308] [client 107.170.0.7:41186] [client 107.170.0.7] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 107.170.0.7, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aRrj-APMSx2v85r8y7zkRgAAAUQ"], referer: http://paramountbaldivis.com
[Mon Nov 17 17:08:26.057605 2025] [:error] [pid 32753:tid 32770] [client 103.149.169.122:37076] [client 103.149.169.122] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.149.169.122, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aRrmCk6YNqI5vkht921MYgAAA84"], referer: http://paramountbaldivis.com
[Mon Nov 17 17:17:24.730566 2025] [:error] [pid 65302:tid 65319] [client 51.255.71.164:51010] [client 51.255.71.164] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 51.255.71.164, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aRroJAPMSx2v85r8y7zmnwAAAU8"], referer: http://paramountbaldivis.com
[Mon Nov 17 17:21:38.989714 2025] [:error] [pid 39537:tid 39547] [client 34.82.213.123:43226] [client 34.82.213.123] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.82.213.123, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aRrpIoZRrh1pcrdcLB-iwQAAAMc"], referer: http://paramountbaldivis.com
[Mon Nov 17 17:25:53.527533 2025] [:error] [pid 65302:tid 65318] [client 103.173.66.134:49668] [client 103.173.66.134] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.173.66.134, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aRrqIQPMSx2v85r8y7zoDAAAAU4"], referer: http://paramountbaldivis.com
[Mon Nov 17 17:38:38.059473 2025] [:error] [pid 32753:tid 32756] [client 115.190.136.123:49820] [client 115.190.136.123] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 115.190.136.123, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aRrtHk6YNqI5vkht921VbAAAA8A"], referer: http://paramountbaldivis.com
[Mon Nov 17 17:42:45.956219 2025] [:error] [pid 40548:tid 40572] [client 92.114.50.2:34174] [client 92.114.50.2] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 92.114.50.2, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aRruFQM_PykfYnxh-j9W7QAAARY"], referer: http://paramountbaldivis.com
[Mon Nov 17 17:51:14.135852 2025] [:error] [pid 31419:tid 31431] [client 103.163.214.6:57514] [client 103.163.214.6] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.163.214.6, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aRrwEgHQ5Sbp7elmDZh88QAAAoo"], referer: http://paramountbaldivis.com
[Mon Nov 17 17:55:31.786718 2025] [:error] [pid 39449:tid 39457] [client 152.53.103.246:38920] [client 152.53.103.246] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.53.103.246, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aRrxE6UCymTA3MDfzLM81gAAAAM"], referer: http://paramountbaldivis.com
[Mon Nov 17 17:59:49.399090 2025] [:error] [pid 40548:tid 40557] [client 103.161.170.99:50586] [client 103.161.170.99] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.161.170.99, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aRryFQM_PykfYnxh-j9ZjwAAAQc"], referer: http://paramountbaldivis.com
[Mon Nov 17 18:08:17.044881 2025] [:error] [pid 39451:tid 39517] [client 70.40.255.4:43256] [client 70.40.255.4] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 70.40.255.4, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aRr0EefgkqXTS0SO3fARxgAAAIk"], referer: http://paramountbaldivis.com
[Mon Nov 17 18:11:47.141086 2025] [:error] [pid 39451:tid 39509] [client 103.174.164.103:54647] [client 103.174.164.103] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.174.164.103, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aRr04-fgkqXTS0SO3fASUgAAAIE"]
[Mon Nov 17 18:12:26.031381 2025] [:error] [pid 32753:tid 32780] [client 167.172.113.201:59504] [client 167.172.113.201] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 167.172.113.201, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aRr1Ck6YNqI5vkht921gOAAAA9g"], referer: http://paramountbaldivis.com
[Mon Nov 17 18:25:45.756237 2025] [:error] [pid 20913:tid 20930] [client 159.223.46.114:54026] [client 159.223.46.114] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 159.223.46.114, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aRr4KekafGNeN3nY1bdInAAAA08"], referer: http://paramountbaldivis.com
[Mon Nov 17 18:29:59.767592 2025] [:error] [pid 39537:tid 39552] [client 213.156.43.111:47862] [client 213.156.43.111] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 213.156.43.111, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aRr5J4ZRrh1pcrdcLB-u5gAAAMw"], referer: http://paramountbaldivis.com
[Mon Nov 17 18:47:16.082419 2025] [:error] [pid 15888:tid 15894] [client 51.222.106.76:41984] [client 51.222.106.76] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 51.222.106.76, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aRr9NAjAdDTBm4W3qW0q3gAAAcM"], referer: http://paramountbaldivis.com
[Mon Nov 17 18:55:54.042366 2025] [:error] [pid 65302:tid 65306] [client 209.38.230.167:48936] [client 209.38.230.167] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 209.38.230.167, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aRr_OgPMSx2v85r8y7z3kAAAAUI"], referer: http://paramountbaldivis.com
[Mon Nov 17 19:00:45.705362 2025] [:error] [pid 39537:tid 39545] [client 103.169.160.163:54074] [client 103.169.160.163] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.169.160.163, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aRsAXYZRrh1pcrdcLB-z8AAAAMU"], referer: http://paramountbaldivis.com
[Mon Nov 17 19:09:22.099207 2025] [:error] [pid 31419:tid 31421] [client 162.240.6.87:57570] [client 162.240.6.87] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 162.240.6.87, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aRsCYgHQ5Sbp7elmDZiOoAAAAoA"], referer: http://paramountbaldivis.com
[Mon Nov 17 19:18:01.215079 2025] [:error] [pid 30801:tid 30826] [client 104.248.45.30:58868] [client 104.248.45.30] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.248.45.30, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aRsEaTbGAU49DhMTBD7o3AAAAlc"], referer: http://paramountbaldivis.com
[Mon Nov 17 19:22:23.584515 2025] [:error] [pid 40548:tid 40551] [client 42.96.17.195:37418] [client 42.96.17.195] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 42.96.17.195, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aRsFbwM_PykfYnxh-j9mswAAAQE"], referer: http://paramountbaldivis.com
[Mon Nov 17 19:26:49.770103 2025] [:error] [pid 30801:tid 30807] [client 193.71.134.130:49212] [client 193.71.134.130] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 193.71.134.130, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aRsGeTbGAU49DhMTBD7qNwAAAkQ"], referer: http://paramountbaldivis.com
[Mon Nov 17 19:31:06.516210 2025] [:error] [pid 32753:tid 32775] [client 170.106.196.7:60014] [client 170.106.196.7] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 170.106.196.7, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aRsHek6YNqI5vkht9216TwAAA9M"], referer: http://paramountbaldivis.com
[Mon Nov 17 19:35:27.415235 2025] [:error] [pid 32753:tid 32774] [client 103.72.97.210:33854] [client 103.72.97.210] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.72.97.210, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aRsIf06YNqI5vkht9217ogAAA9I"], referer: http://paramountbaldivis.com
[Mon Nov 17 19:42:47.650806 2025] [:error] [pid 30801:tid 30826] [client 121.229.185.160:41413] [client 121.229.185.160] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.paramountbaldivis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.paramountbaldivis.com"] [uri "/"] [unique_id "aRsKNzbGAU49DhMTBD7tNAAAAlc"]
[Mon Nov 17 19:44:10.943998 2025] [:error] [pid 65302:tid 65320] [client 157.230.20.249:49230] [client 157.230.20.249] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 157.230.20.249, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aRsKigPMSx2v85r8y7wA4AAAAVA"], referer: http://paramountbaldivis.com
[Mon Nov 17 19:52:54.805319 2025] [:error] [pid 20913:tid 20936] [client 185.153.49.40:44696] [client 185.153.49.40] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.153.49.40, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aRsMlukafGNeN3nY1bdZ3QAAA1U"], referer: http://paramountbaldivis.com
[Mon Nov 17 20:01:08.995134 2025] [:error] [pid 32753:tid 32762] [client 158.220.121.230:56398] [client 158.220.121.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.220.121.230, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aRsOhE6YNqI5vkht922CvAAAA8Y"]
[Mon Nov 17 20:06:27.415688 2025] [:error] [pid 20913:tid 20936] [client 103.92.85.202:41286] [client 103.92.85.202] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.92.85.202, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aRsPw-kafGNeN3nY1bdcfwAAA1U"], referer: http://paramountbaldivis.com
[Mon Nov 17 20:20:11.438014 2025] [:error] [pid 39451:tid 39514] [client 152.136.30.16:53048] [client 152.136.30.16] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.136.30.16, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aRsS--fgkqXTS0SO3fAkwQAAAIY"], referer: http://paramountbaldivis.com
[Mon Nov 17 20:28:58.018307 2025] [:error] [pid 65302:tid 65304] [client 20.204.164.126:49096] [client 20.204.164.126] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.204.164.126, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aRsVCgPMSx2v85r8y7wH6gAAAUA"], referer: http://paramountbaldivis.com
[Mon Nov 17 20:37:46.134784 2025] [:error] [pid 31419:tid 31433] [client 188.166.62.194:51484] [client 188.166.62.194] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 188.166.62.194, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aRsXGgHQ5Sbp7elmDZie1AAAAow"], referer: http://paramountbaldivis.com
[Mon Nov 17 20:50:55.171125 2025] [:error] [pid 31419:tid 31424] [client 51.222.106.76:34184] [client 51.222.106.76] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 51.222.106.76, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aRsaLwHQ5Sbp7elmDZig2wAAAoM"], referer: http://paramountbaldivis.com
[Mon Nov 17 20:55:20.291265 2025] [:error] [pid 30801:tid 30808] [client 107.180.224.51:52172] [client 107.180.224.51] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 107.180.224.51, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aRsbODbGAU49DhMTBD73WAAAAkU"], referer: http://paramountbaldivis.com
[Mon Nov 17 20:58:48.213448 2025] [:error] [pid 30801:tid 30825] [client 192.178.4.101:49915] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRscCDbGAU49DhMTBD73mgAAAlY"]
[Mon Nov 17 20:58:58.463752 2025] [:error] [pid 15888:tid 15896] [client 192.178.4.101:58674] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRscEgjAdDTBm4W3qW09gQAAAcU"]
[Mon Nov 17 20:59:01.646237 2025] [:error] [pid 39537:tid 39552] [client 192.178.4.101:46538] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRscFYZRrh1pcrdcLB_EuwAAAMw"]
[Mon Nov 17 20:59:04.642636 2025] [:error] [pid 20913:tid 20917] [client 192.178.4.101:35081] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRscGOkafGNeN3nY1bdjzwAAA0I"]
[Mon Nov 17 20:59:23.002822 2025] [:error] [pid 32753:tid 32773] [client 192.178.4.101:49168] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRscK06YNqI5vkht922SXgAAA9E"]
[Mon Nov 17 20:59:42.124614 2025] [:error] [pid 20913:tid 20915] [client 195.117.36.241:35388] [client 195.117.36.241] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 195.117.36.241, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aRscPukafGNeN3nY1bdj5gAAA0A"], referer: http://paramountbaldivis.com
[Mon Nov 17 21:04:14.370305 2025] [:error] [pid 30801:tid 30807] [client 188.166.188.97:13865] [client 188.166.188.97] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 188.166.188.97, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aRsdTjbGAU49DhMTBD74ZwAAAkQ"], referer: http://paramountbaldivis.com
[Mon Nov 17 21:13:08.858913 2025] [:error] [pid 65302:tid 65316] [client 67.205.23.217:48310] [client 67.205.23.217] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 67.205.23.217, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aRsfZAPMSx2v85r8y7wN6QAAAUw"], referer: http://paramountbaldivis.com
[Mon Nov 17 21:17:39.427094 2025] [:error] [pid 65302:tid 65320] [client 64.23.180.164:54664] [client 64.23.180.164] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 64.23.180.164, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aRsgcwPMSx2v85r8y7wOWwAAAVA"], referer: http://paramountbaldivis.com
[Mon Nov 17 21:22:05.126277 2025] [:error] [pid 32753:tid 32779] [client 77.68.76.200:32806] [client 77.68.76.200] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 77.68.76.200, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aRshfU6YNqI5vkht922XXwAAA9c"], referer: http://paramountbaldivis.com
[Mon Nov 17 21:24:12.355512 2025] [:error] [pid 30801:tid 30818] [client 95.154.198.138:33260] [client 95.154.198.138] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 95.154.198.138, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aRsh_DbGAU49DhMTBD76pAAAAk8"]
[Mon Nov 17 21:35:41.173438 2025] [:error] [pid 65302:tid 65323] [client 103.174.164.103:49226] [client 103.174.164.103] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||paramountbaldivis.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "paramountbaldivis.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aRskrQPMSx2v85r8y7wQywAAAVM"]
[Mon Nov 17 21:37:09.509826 2025] [:error] [pid 15888:tid 15908] [client 103.174.164.103:50752] [client 103.174.164.103] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.174.164.103, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aRslBQjAdDTBm4W3qW1BuQAAAdE"]
[Mon Nov 17 21:38:38.247980 2025] [:error] [pid 40548:tid 40564] [client 103.174.164.103:52013] [client 103.174.164.103] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.174.164.103, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aRslXgM_PykfYnxh-j93iwAAAQ4"]
[Mon Nov 17 21:39:48.386412 2025] [:error] [pid 32753:tid 32756] [client 68.78.37.77:35746] [client 68.78.37.77] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 68.78.37.77, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aRslpE6YNqI5vkht922bMQAAA8A"], referer: http://paramountbaldivis.com
[Mon Nov 17 21:39:48.992734 2025] [:error] [pid 31419:tid 31442] [client 103.174.164.103:54416] [client 103.174.164.103] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.174.164.103, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aRslpAHQ5Sbp7elmDZioDQAAApU"]
[Mon Nov 17 21:44:15.627358 2025] [:error] [pid 32753:tid 32773] [client 209.42.20.53:52706] [client 209.42.20.53] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 209.42.20.53, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aRsmr06YNqI5vkht922cHgAAA9E"], referer: http://paramountbaldivis.com
[Mon Nov 17 21:46:58.964518 2025] [proxy_fcgi:error] [pid 40548:tid 40564] (70007)The timeout specified has expired: [client 192.178.4.101:37745] AH01075: Error dispatching request to : (polling)
[Mon Nov 17 21:53:08.051060 2025] [:error] [pid 32753:tid 32773] [client 106.53.1.226:41904] [client 106.53.1.226] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.53.1.226, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aRsoxE6YNqI5vkht922dwgAAA9E"], referer: http://paramountbaldivis.com
[Mon Nov 17 21:54:53.971799 2025] [:error] [pid 40548:tid 40557] [client 192.178.4.101:41483] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRspLQM_PykfYnxh-j94wwAAAQc"]
[Mon Nov 17 21:55:25.820566 2025] [:error] [pid 65302:tid 65319] [client 192.178.4.101:63853] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRspTQPMSx2v85r8y7wTBQAAAU8"]
[Mon Nov 17 21:55:27.519576 2025] [:error] [pid 20913:tid 20919] [client 192.178.4.101:46452] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRspT-kafGNeN3nY1bdrRgAAA0Q"]
[Mon Nov 17 21:59:56.486361 2025] [:error] [pid 39449:tid 39473] [client 192.178.4.101:55696] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRsqXKUCymTA3MDfzLNxewAAABM"]
[Mon Nov 17 22:04:28.859465 2025] [:error] [pid 15888:tid 15913] [client 192.178.4.101:41068] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRsrbAjAdDTBm4W3qW1E4QAAAdY"]
[Mon Nov 17 22:04:40.906812 2025] [:error] [pid 65302:tid 65323] [client 192.178.4.101:40419] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRsreAPMSx2v85r8y7wU_gAAAVM"]
[Mon Nov 17 22:06:30.786753 2025] [:error] [pid 31419:tid 31431] [client 1.13.18.100:50934] [client 1.13.18.100] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 1.13.18.100, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aRsr5gHQ5Sbp7elmDZir7AAAAoo"], referer: http://paramountbaldivis.com
[Mon Nov 17 22:15:22.774374 2025] [:error] [pid 32753:tid 32776] [client 92.114.50.2:43838] [client 92.114.50.2] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 92.114.50.2, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aRst-k6YNqI5vkht922jdAAAA9Q"], referer: http://paramountbaldivis.com
[Mon Nov 17 22:24:17.617705 2025] [:error] [pid 39451:tid 39521] [client 134.122.6.46:53538] [client 134.122.6.46] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 134.122.6.46, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aRswEefgkqXTS0SO3fAysQAAAI0"], referer: http://paramountbaldivis.com
[Mon Nov 17 22:28:49.862888 2025] [:error] [pid 20913:tid 20924] [client 103.163.214.43:34514] [client 103.163.214.43] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.163.214.43, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aRsxIekafGNeN3nY1bdwGAAAA0k"], referer: http://paramountbaldivis.com
[Mon Nov 17 22:33:25.217957 2025] [:error] [pid 39449:tid 39460] [client 120.78.88.119:51638] [client 120.78.88.119] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 120.78.88.119, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aRsyNaUCymTA3MDfzLN3nAAAAAY"], referer: http://paramountbaldivis.com
[Mon Nov 17 22:37:47.906561 2025] [:error] [pid 39449:tid 39467] [client 103.163.214.6:44692] [client 103.163.214.6] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.163.214.6, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aRszO6UCymTA3MDfzLN4vQAAAA0"], referer: http://paramountbaldivis.com
[Mon Nov 17 22:52:43.233188 2025] [:error] [pid 39537:tid 39543] [client 157.245.109.248:37374] [client 157.245.109.248] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 157.245.109.248, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aRs2u4ZRrh1pcrdcLB_SBgAAAMM"], referer: http://paramountbaldivis.com
[Mon Nov 17 22:53:09.426690 2025] [:error] [pid 32753:tid 32760] [client 67.23.254.96:37844] [client 67.23.254.96] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 67.23.254.96, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aRs21U6YNqI5vkht922t3QAAA8Q"]
[Mon Nov 17 23:01:42.239753 2025] [:error] [pid 15888:tid 15891] [client 162.240.6.87:60152] [client 162.240.6.87] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 162.240.6.87, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aRs41gjAdDTBm4W3qW1MFwAAAcA"], referer: http://paramountbaldivis.com
[Mon Nov 17 23:10:29.530073 2025] [:error] [pid 30801:tid 30819] [client 209.42.20.53:48984] [client 209.42.20.53] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 209.42.20.53, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aRs65TbGAU49DhMTBD4I2QAAAlA"], referer: http://paramountbaldivis.com
[Mon Nov 17 23:14:44.349698 2025] [:error] [pid 39449:tid 39465] [client 159.223.46.114:36240] [client 159.223.46.114] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 159.223.46.114, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aRs75KUCymTA3MDfzLOBKQAAAAs"], referer: http://paramountbaldivis.com
[Mon Nov 17 23:32:49.984561 2025] [:error] [pid 31419:tid 31444] [client 103.166.182.115:41430] [client 103.166.182.115] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.166.182.115, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aRtAIQHQ5Sbp7elmDZi7JAAAApc"], referer: http://paramountbaldivis.com
[Mon Nov 17 23:41:49.510491 2025] [:error] [pid 32753:tid 32764] [client 118.17.236.56:45698] [client 118.17.236.56] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 118.17.236.56, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aRtCPU6YNqI5vkht9226vQAAA8g"], referer: http://paramountbaldivis.com
[Mon Nov 17 23:46:04.030779 2025] [:error] [pid 39537:tid 39550] [client 64.90.38.74:41814] [client 64.90.38.74] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 64.90.38.74, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aRtDPIZRrh1pcrdcLB_Z3wAAAMo"], referer: http://paramountbaldivis.com
[Mon Nov 17 23:47:25.149881 2025] [:error] [pid 40548:tid 40572] [client 162.241.216.173:59998] [client 162.241.216.173] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 162.241.216.173, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aRtDjQM_PykfYnxh-j-H7gAAARY"]
[Mon Nov 17 23:50:16.843323 2025] [:error] [pid 39449:tid 39457] [client 138.68.19.80:44540] [client 138.68.19.80] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 138.68.19.80, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aRtEOKUCymTA3MDfzLOIGwAAAAM"], referer: http://paramountbaldivis.com
[Tue Nov 18 00:02:50.965731 2025] [:error] [pid 15888:tid 15896] [client 165.22.218.230:51456] [client 165.22.218.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 165.22.218.230, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aRtHKgjAdDTBm4W3qW1ToQAAAcU"], referer: http://paramountbaldivis.com
[Tue Nov 18 00:07:29.296115 2025] [:error] [pid 32753:tid 32756] [client 216.37.42.34:47736] [client 216.37.42.34] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 216.37.42.34, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aRtIQU6YNqI5vkht923BEwAAA8A"], referer: http://paramountbaldivis.com
[Tue Nov 18 00:11:55.462954 2025] [:error] [pid 30801:tid 30824] [client 208.109.32.191:54532] [client 208.109.32.191] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 208.109.32.191, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aRtJSzbGAU49DhMTBD4Q6QAAAlU"], referer: http://paramountbaldivis.com
[Tue Nov 18 00:16:44.376564 2025] [:error] [pid 39449:tid 39460] [client 171.246.152.34:60448] [client 171.246.152.34] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 171.246.152.34, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aRtKbKUCymTA3MDfzLONLAAAAAY"], referer: http://paramountbaldivis.com
[Tue Nov 18 00:20:57.942999 2025] [:error] [pid 40793:tid 40858] [client 203.210.242.99:37316] [client 203.210.242.99] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 203.210.242.99, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aRtLaQzccxeNeH-NUVgTOQAAAEg"], referer: http://paramountbaldivis.com
[Tue Nov 18 00:25:06.914991 2025] [:error] [pid 40793:tid 40850] [client 116.193.190.94:57182] [client 116.193.190.94] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 116.193.190.94, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aRtMYgzccxeNeH-NUVgVTgAAAEA"], referer: http://paramountbaldivis.com
[Tue Nov 18 00:32:38.339270 2025] [:error] [pid 40553:tid 40571] [client 27.74.251.194:53382] [client 27.74.251.194] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 27.74.251.194, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aRtOJtuLE1BqoX0RcsLXYwAAAAM"]
[Tue Nov 18 00:33:15.456875 2025] [:error] [pid 40561:tid 40602] [client 35.242.252.164:42060] [client 35.242.252.164] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.242.252.164, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aRtOS5dU597fIdQPRD-vXAAAAMY"], referer: http://paramountbaldivis.com
[Tue Nov 18 00:37:08.935166 2025] [:error] [pid 40561:tid 40605] [client 128.199.79.81:49676] [client 128.199.79.81] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 128.199.79.81, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aRtPNJdU597fIdQPRD-wNgAAAMk"], referer: http://paramountbaldivis.com
[Tue Nov 18 00:41:07.015339 2025] [:error] [pid 39189:tid 39200] [client 103.163.214.43:48512] [client 103.163.214.43] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.163.214.43, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aRtQI5JJLi753QwyqGzEtAAAAIc"], referer: http://paramountbaldivis.com
[Tue Nov 18 00:44:58.302181 2025] [:error] [pid 39189:tid 39213] [client 77.24.94.97:60097] [client 77.24.94.97] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 77.24.94.97, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aRtRCpJJLi753QwyqGzGMwAAAJQ"], referer: http://paramountbaldivis.com
[Tue Nov 18 01:00:28.995817 2025] [:error] [pid 39189:tid 39198] [client 62.214.228.49:61980] [client 62.214.228.49] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 62.214.228.49, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aRtUrJJJLi753QwyqGzNYwAAAIU"], referer: http://paramountbaldivis.com
[Tue Nov 18 01:12:32.554018 2025] [:error] [pid 40562:tid 40629] [client 35.242.252.164:42068] [client 35.242.252.164] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.242.252.164, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aRtXgB18kaCmPuHE4a8JaAAAAUY"], referer: http://paramountbaldivis.com
[Tue Nov 18 01:18:07.210658 2025] [:error] [pid 40793:tid 40862] [client 93.86.61.74:56226] [client 93.86.61.74] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 93.86.61.74, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aRtYzwzccxeNeH-NUVgphAAAAEw"]
[Tue Nov 18 01:33:07.806411 2025] [:error] [pid 40561:tid 40610] [client 18.229.229.99:29949] [client 18.229.229.99] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 18.229.229.99, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aRtcU5dU597fIdQPRD_CdwAAAM4"], referer: http://paramountbaldivis.com
[Tue Nov 18 01:41:28.940454 2025] [:error] [pid 40793:tid 40863] [client 20.171.140.78:6141] [client 20.171.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/chosen/function.php"] [unique_id "aRteSAzccxeNeH-NUVgy3QAAAE0"]
[Tue Nov 18 01:41:29.779068 2025] [:error] [pid 40553:tid 40574] [client 20.171.140.78:6086] [client 20.171.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/chosen/function.php"] [unique_id "aRteSduLE1BqoX0RcsLtOAAAAAY"]
[Tue Nov 18 01:41:30.267460 2025] [:error] [pid 40562:tid 40645] [client 20.171.140.78:6022] [client 20.171.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/chosen/function.php"] [unique_id "aRteSh18kaCmPuHE4a8UAgAAAVY"]
[Tue Nov 18 01:41:31.933475 2025] [:error] [pid 40793:tid 40858] [client 20.171.140.78:6095] [client 20.171.140.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/chosen/function.php"] [unique_id "aRteSwzccxeNeH-NUVgy4wAAAEg"]
[Tue Nov 18 01:45:03.862337 2025] [:error] [pid 39189:tid 39204] [client 116.204.78.140:40008] [client 116.204.78.140] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 116.204.78.140, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aRtfH5JJLi753QwyqGzkPwAAAIs"], referer: http://paramountbaldivis.com
[Tue Nov 18 01:56:00.712632 2025] [:error] [pid 40553:tid 40583] [client 108.167.157.87:11108] [client 108.167.157.87] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 108.167.157.87, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aRthsNuLE1BqoX0RcsLy0QAAAA4"], referer: http://paramountbaldivis.com
[Tue Nov 18 01:59:06.501856 2025] [:error] [pid 40553:tid 40588] [client 192.178.4.101:61533] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRtiatuLE1BqoX0RcsL0kAAAABM"]
[Tue Nov 18 01:59:21.085805 2025] [:error] [pid 40553:tid 40580] [client 192.178.4.101:62870] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRtieduLE1BqoX0RcsL0pAAAAAs"]
[Tue Nov 18 02:03:35.391050 2025] [:error] [pid 39189:tid 39212] [client 128.199.79.81:40604] [client 128.199.79.81] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 128.199.79.81, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aRtjd5JJLi753QwyqGzu0gAAAJM"], referer: http://paramountbaldivis.com
[Tue Nov 18 02:04:55.149878 2025] [:error] [pid 39189:tid 39211] [client 192.178.4.101:60568] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRtjx5JJLi753QwyqGzvTgAAAJI"]
[Tue Nov 18 02:11:46.705174 2025] [:error] [pid 40561:tid 40617] [client 103.163.214.43:35230] [client 103.163.214.43] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.163.214.43, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aRtlYpdU597fIdQPRD_QYQAAANU"], referer: http://paramountbaldivis.com
[Tue Nov 18 02:25:21.458431 2025] [:error] [pid 40793:tid 40858] [client 203.2.64.59:32879] [client 203.2.64.59] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||paramountbaldivis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRtokQzccxeNeH-NUVhETwAAAEg"]
[Tue Nov 18 02:28:00.134015 2025] [:error] [pid 40561:tid 40607] [client 101.68.43.236:55108] [client 101.68.43.236] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 101.68.43.236, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aRtpMJdU597fIdQPRD_VsQAAAMs"], referer: http://paramountbaldivis.com
[Tue Nov 18 02:47:03.685878 2025] [:error] [pid 25054:tid 25080] [client 159.89.225.59:51646] [client 159.89.225.59] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 159.89.225.59, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aRttp7kemTDclsD2J9jZSgAAA5c"], referer: http://paramountbaldivis.com
[Tue Nov 18 02:54:19.763899 2025] [:error] [pid 39189:tid 39196] [client 103.163.214.43:45066] [client 103.163.214.43] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.163.214.43, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aRtvW5JJLi753QwyqGwAxwAAAIM"], referer: http://paramountbaldivis.com
[Tue Nov 18 02:57:58.840634 2025] [:error] [pid 25055:tid 25104] [client 114.215.206.33:35354] [client 114.215.206.33] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 114.215.206.33, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aRtwNi1ycIUMyo0DEcLsIwAAA9Q"], referer: http://paramountbaldivis.com
[Tue Nov 18 03:05:14.805566 2025] [:error] [pid 24777:tid 24786] [client 104.207.254.70:41919] [client 104.207.254.70] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.207.254.70, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aRtx6vYMFHMtkgWmmlKYyQAAAQc"], referer: http://paramountbaldivis.com
[Tue Nov 18 03:09:14.539005 2025] [:error] [pid 25054:tid 25074] [client 171.244.34.211:59198] [client 171.244.34.211] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 171.244.34.211, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aRty2rkemTDclsD2J9jfFwAAA5E"], referer: http://paramountbaldivis.com
[Tue Nov 18 03:13:01.876713 2025] [:error] [pid 24928:tid 24949] [client 62.214.228.49:60175] [client 62.214.228.49] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 62.214.228.49, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aRtzvee2a38O8HjCzurwxwAAApM"], referer: http://paramountbaldivis.com
[Tue Nov 18 03:32:30.833156 2025] [:error] [pid 12063:tid 12084] [client 160.30.113.129:44652] [client 160.30.113.129] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 160.30.113.129, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aRt4TmcPvwr0xkF6QF4JOwAAANE"], referer: http://paramountbaldivis.com
[Tue Nov 18 03:40:04.067606 2025] [:error] [pid 43059:tid 43102] [client 120.78.88.119:44392] [client 120.78.88.119] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 120.78.88.119, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aRt6FFGovOS5Clvw1z1A1QAAAEQ"], referer: http://paramountbaldivis.com
[Tue Nov 18 03:44:01.590908 2025] [:error] [pid 43154:tid 43182] [client 206.189.153.166:54554] [client 206.189.153.166] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 206.189.153.166, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aRt7ARss0cH8aoO-cLKwaAAAANc"], referer: http://paramountbaldivis.com
[Tue Nov 18 03:47:42.140071 2025] [:error] [pid 16434:tid 16516] [client 192.241.128.246:46666] [client 192.241.128.246] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 192.241.128.246, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aRt73u59VW7UV0FYXhWDuAAAAI8"], referer: http://paramountbaldivis.com
[Tue Nov 18 03:51:10.758764 2025] [:error] [pid 16539:tid 16546] [client 190.89.248.245:47848] [client 190.89.248.245] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 190.89.248.245, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aRt8rgclzOJxc0_BvTjx1gAAAMI"], referer: http://paramountbaldivis.com
[Tue Nov 18 03:55:38.500590 2025] [:error] [pid 61393:tid 61468] [client 74.113.250.38:37910] [client 74.113.250.38] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 74.113.250.38, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aRt9umH9XjlbVPv9gQX4lgAAAIw"]
[Tue Nov 18 03:58:18.000236 2025] [:error] [pid 61392:tid 61442] [client 159.89.225.59:40748] [client 159.89.225.59] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 159.89.225.59, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aRt-WXSmvb496zZxueKpGgAAAE0"], referer: http://paramountbaldivis.com
[Tue Nov 18 04:17:53.909346 2025] [:error] [pid 61482:tid 61508] [client 81.88.53.97:40070] [client 81.88.53.97] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 81.88.53.97, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aRuC8ftNHsWZClVWav4p_wAAANU"], referer: http://paramountbaldivis.com
[Tue Nov 18 04:26:07.139626 2025] [:error] [pid 61393:tid 61470] [client 160.30.113.129:42788] [client 160.30.113.129] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 160.30.113.129, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aRuE32H9XjlbVPv9gQUC8QAAAI4"], referer: http://paramountbaldivis.com
[Tue Nov 18 04:31:59.254615 2025] [:error] [pid 61393:tid 61475] [client 152.42.231.133:45666] [client 152.42.231.133] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.42.231.133, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aRuGP2H9XjlbVPv9gQUEWgAAAJM"]
[Tue Nov 18 04:34:15.527908 2025] [:error] [pid 61391:tid 61418] [client 203.217.101.237:37970] [client 203.217.101.237] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 203.217.101.237, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aRuGx4wXIKmhlnkP3-dGSgAAABI"], referer: http://paramountbaldivis.com
[Tue Nov 18 04:45:06.685108 2025] [:error] [pid 61482:tid 61489] [client 152.42.168.23:51922] [client 152.42.168.23] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paramountbaldivis.com"] [uri "/sftp-config.json"] [unique_id "aRuJUvtNHsWZClVWav4zJgAAAMI"]
[Tue Nov 18 05:56:50.254710 2025] [:error] [pid 61391:tid 61403] [client 27.74.251.194:57522] [client 27.74.251.194] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 27.74.251.194, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aRuaIowXIKmhlnkP3-dbhgAAAAM"]
[Tue Nov 18 06:33:53.261684 2025] [:error] [pid 61482:tid 61492] [client 192.178.4.101:47583] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRui0ftNHsWZClVWav5SoQAAAMU"]
[Tue Nov 18 06:34:46.592405 2025] [:error] [pid 61393:tid 61468] [client 192.178.4.101:53210] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRujBmH9XjlbVPv9gQUkpwAAAIw"]
[Tue Nov 18 06:50:41.363828 2025] [:error] [pid 61482:tid 61505] [client 192.178.4.101:49185] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRumwftNHsWZClVWav5YKQAAANI"]
[Tue Nov 18 07:00:09.936989 2025] [:error] [pid 61391:tid 61424] [client 192.178.4.101:42263] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRuo-YwXIKmhlnkP3-dq4AAAABg"]
[Tue Nov 18 07:00:33.695999 2025] [:error] [pid 9935:tid 9951] [client 192.178.4.101:55787] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRupEQWOMXsrZFRF6sjXSgAAAY4"]
[Tue Nov 18 07:00:43.907903 2025] [:error] [pid 61482:tid 61487] [client 192.178.4.101:63058] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRupG_tNHsWZClVWav5avwAAAMA"]
[Tue Nov 18 07:15:18.706378 2025] [:error] [pid 61391:tid 61413] [client 192.178.4.101:39434] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRushowXIKmhlnkP3-du6gAAAA0"]
[Tue Nov 18 07:15:50.520183 2025] [:error] [pid 42804:tid 42820] [client 192.178.4.101:57251] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRuspvpXARlE6tIuBnloNQAAAU4"]
[Tue Nov 18 07:21:54.435972 2025] [:error] [pid 9935:tid 9960] [client 192.178.4.101:47190] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/betting/Daftar%20%E0%B8%9A%E0%B8%AD%E0%B8%A5%2024.html"] [unique_id "aRuuEgWOMXsrZFRF6sjgDgAAAZc"]
[Tue Nov 18 07:22:37.970566 2025] [:error] [pid 61393:tid 61473] [client 192.178.4.101:49131] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRuuPWH9XjlbVPv9gQUvgAAAAJE"]
[Tue Nov 18 07:56:48.185563 2025] [:error] [pid 9935:tid 9950] [client 108.179.211.98:49226] [client 108.179.211.98] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 108.179.211.98, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRu2QAWOMXsrZFRF6sjsyQAAAY0"]
[Tue Nov 18 08:35:59.653545 2025] [:error] [pid 61393:tid 61456] [client 120.71.59.24:42836] [client 120.71.59.24] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.paramountbaldivis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.paramountbaldivis.com"] [uri "/"] [unique_id "aRu_b2H9XjlbVPv9gQU-RQAAAIA"]
[Tue Nov 18 11:41:58.021493 2025] [:error] [pid 29195:tid 29207] [client 162.241.225.117:19908] [client 162.241.225.117] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 162.241.225.117, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aRvrBhMeonxy_4yeOTWI9wAAAQo"]
[Tue Nov 18 14:15:45.331112 2025] [:error] [pid 44471:tid 44520] [client 41.210.143.205:10792] [client 41.210.143.205] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.210.143.205, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aRwPEe_6m0bQO14XwtMJrgAAARA"]
[Tue Nov 18 14:40:00.245731 2025] [:error] [pid 44624:tid 44636] [client 43.165.69.68:48232] [client 43.165.69.68] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.paramountbaldivis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.paramountbaldivis.com"] [uri "/"] [unique_id "aRwUwCllffozoBluWCUXJgAAAYk"]
[Tue Nov 18 15:03:20.068203 2025] [:error] [pid 44470:tid 44494] [client 182.43.70.143:58129] [client 182.43.70.143] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||paramountbaldivis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRwaODv-RLYfULjlgDaIGAAAAFM"]
[Tue Nov 18 16:24:54.168855 2025] [:error] [pid 44624:tid 44641] [client 43.135.133.194:47092] [client 43.135.133.194] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||paramountbaldivis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRwtVillffozoBluWCVH-QAAAY4"]
[Tue Nov 18 17:33:17.770476 2025] [:error] [pid 44624:tid 44640] [client 181.43.150.137:17246] [client 181.43.150.137] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 181.43.150.137, incrementing ddos counter"] [hostname "www.paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aRw9XSllffozoBluWCVs2gAAAY0"]
[Tue Nov 18 17:33:22.120148 2025] [:error] [pid 44470:tid 44478] [client 181.43.150.137:17259] [client 181.43.150.137] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 181.43.150.137, incrementing brute counter"] [hostname "www.paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRw9Yjv-RLYfULjlgDa2TwAAAEM"]
[Tue Nov 18 18:26:37.258680 2025] [:error] [pid 1387:tid 1389] [client 185.177.72.29:64084] [client 185.177.72.29] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paramountbaldivis.com"] [uri "/.git/HEAD"] [unique_id "aRxJ3UzBvalKyx3hMvVpCQAAAAA"]
[Tue Nov 18 18:26:37.259958 2025] [:error] [pid 44470:tid 44490] [client 185.177.72.29:64098] [client 185.177.72.29] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paramountbaldivis.com"] [uri "/.env"] [unique_id "aRxJ3Tv-RLYfULjlgDbHsQAAAE8"]
[Tue Nov 18 18:26:38.096116 2025] [:error] [pid 44560:tid 44595] [client 185.177.72.29:64128] [client 185.177.72.29] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paramountbaldivis.com"] [uri "/backend/.env"] [unique_id "aRxJ3gnbP7etF3q5-5uWOgAAANg"]
[Tue Nov 18 18:26:39.497807 2025] [:error] [pid 44560:tid 44576] [client 185.177.72.29:64166] [client 185.177.72.29] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paramountbaldivis.com"] [uri "/laravel/.env"] [unique_id "aRxJ3wnbP7etF3q5-5uWPAAAAMU"]
[Tue Nov 18 19:15:29.836037 2025] [:error] [pid 44470:tid 44497] [client 84.247.191.22:63847] [client 84.247.191.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/css/"] [unique_id "aRxVUTv-RLYfULjlgDbWdgAAAFY"], referer: binance.com
[Tue Nov 18 20:54:21.362714 2025] [:error] [pid 3500:tid 3525] [client 8.218.212.177:48568] [client 8.218.212.177] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 8.218.212.177, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aRxsffCbRC7k2D7mjbR95QAAAdc"]
[Tue Nov 18 21:37:31.184321 2025] [:error] [pid 44560:tid 44587] [client 45.134.79.103:51696] [client 45.134.79.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRx2mwnbP7etF3q5-5vI6gAAANA"]
[Tue Nov 18 21:37:31.835119 2025] [:error] [pid 44471:tid 44517] [client 45.134.79.103:60249] [client 45.134.79.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRx2m-_6m0bQO14XwtOC6AAAAQ0"]
[Tue Nov 18 21:37:32.493217 2025] [:error] [pid 44470:tid 44491] [client 45.134.79.103:53731] [client 45.134.79.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aRx2nDv-RLYfULjlgDb_YwAAAFA"]
[Tue Nov 18 23:57:49.055656 2025] [:error] [pid 1387:tid 1399] [client 50.116.92.142:31416] [client 50.116.92.142] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 50.116.92.142, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aRyXfUzBvalKyx3hMvXEoQAAAAY"]
[Wed Nov 19 00:49:57.629843 2025] [:error] [pid 43882:tid 43942] [client 31.171.130.70:20529] [client 31.171.130.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "aRyjtd5CQQLff3maRMLU1QAAAAI"]
[Wed Nov 19 00:50:00.359260 2025] [:error] [pid 3052:tid 3150] [client 31.171.130.86:27787] [client 31.171.130.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/bk/index.php"] [unique_id "aRyjuFNM6bOMTTuJnz1lHgAAANU"]
[Wed Nov 19 00:50:15.807946 2025] [:error] [pid 43881:tid 43924] [client 31.171.130.88:57773] [client 31.171.130.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/theme-compat/chosen.php"] [unique_id "aRyjx3_TrIND5buvEyfGLwAAAUs"]
[Wed Nov 19 00:50:20.198558 2025] [:error] [pid 44063:tid 44126] [client 31.171.130.66:55003] [client 31.171.130.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/IXR/chosen.php"] [unique_id "aRyjzEVOSC7H33BBqQ3dFQAAAIk"]
[Wed Nov 19 00:50:21.106251 2025] [:error] [pid 44063:tid 44136] [client 31.171.130.61:55529] [client 31.171.130.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/js/chosen.php"] [unique_id "aRyjzUVOSC7H33BBqQ3dGQAAAJM"]
[Wed Nov 19 00:50:22.545473 2025] [:error] [pid 3052:tid 3151] [client 31.171.130.67:23497] [client 31.171.130.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/pomo/wp-conflg.php"] [unique_id "aRyjzlNM6bOMTTuJnz1lcwAAANY"]
[Wed Nov 19 00:50:25.771266 2025] [:error] [pid 3052:tid 3144] [client 31.171.130.67:65523] [client 31.171.130.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aRyj0VNM6bOMTTuJnz1lfAAAAM8"]
[Wed Nov 19 00:50:28.261765 2025] [:error] [pid 3052:tid 3128] [client 31.171.130.94:32397] [client 31.171.130.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "aRyj1FNM6bOMTTuJnz1lkAAAAMA"]
[Wed Nov 19 00:50:39.159174 2025] [:error] [pid 3052:tid 3142] [client 31.171.130.65:47299] [client 31.171.130.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aRyj31NM6bOMTTuJnz1l2wAAAM0"]
[Wed Nov 19 00:50:40.592155 2025] [:error] [pid 43880:tid 43887] [client 31.171.130.77:47221] [client 31.171.130.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aRyj4O1q1HNbKyNr9SZQAwAAAEI"]
[Wed Nov 19 00:51:43.907854 2025] [:error] [pid 43882:tid 43940] [client 31.171.130.76:41323] [client 31.171.130.76] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.76, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRykH95CQQLff3maRMLV8QAAAAA"]
[Wed Nov 19 00:51:50.073939 2025] [:error] [pid 43882:tid 43947] [client 31.171.130.76:41323] [client 31.171.130.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/css/modules.php"] [unique_id "aRykJt5CQQLff3maRMLV-wAAAAc"]
[Wed Nov 19 00:52:10.479499 2025] [:error] [pid 43881:tid 43924] [client 31.171.130.101:20847] [client 31.171.130.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/codeboy1877_up.php"] [unique_id "aRykOn_TrIND5buvEyfHKgAAAUs"]
[Wed Nov 19 00:53:04.284534 2025] [:error] [pid 43880:tid 43904] [client 31.171.130.78:28667] [client 31.171.130.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/lx.php"] [unique_id "aRykcO1q1HNbKyNr9SZRMgAAAFM"]
[Wed Nov 19 00:54:32.089994 2025] [:error] [pid 43882:tid 43950] [client 31.171.130.82:51049] [client 31.171.130.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/css/F0x.php"] [unique_id "aRykyN5CQQLff3maRMLXOwAAAAo"]
[Wed Nov 19 00:55:22.591919 2025] [:error] [pid 43882:tid 43947] [client 31.171.130.79:46001] [client 31.171.130.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/IXR/index.php"] [unique_id "aRyk-t5CQQLff3maRMLXzAAAAAc"]
[Wed Nov 19 00:55:23.593653 2025] [:error] [pid 43880:tid 43888] [client 31.171.130.101:65387] [client 31.171.130.101] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 31.171.130.101, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aRyk--1q1HNbKyNr9SZSYAAAAEM"]
[Wed Nov 19 00:55:27.999711 2025] [:error] [pid 43880:tid 43893] [client 31.171.130.101:65387] [client 31.171.130.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aRyk_-1q1HNbKyNr9SZSZQAAAEg"]
[Wed Nov 19 00:55:43.344811 2025] [:error] [pid 44063:tid 44125] [client 31.171.130.71:59225] [client 31.171.130.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "aRylD0VOSC7H33BBqQ3gAQAAAIg"]
[Wed Nov 19 00:56:10.511212 2025] [:error] [pid 44063:tid 44125] [client 31.171.130.71:30713] [client 31.171.130.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/css/index.php"] [unique_id "aRylKkVOSC7H33BBqQ3gPAAAAIg"]
[Wed Nov 19 00:56:11.490399 2025] [:error] [pid 44063:tid 44118] [client 31.171.130.56:36307] [client 31.171.130.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "aRylK0VOSC7H33BBqQ3gPQAAAIE"]
[Wed Nov 19 00:56:12.604848 2025] [:error] [pid 44063:tid 44128] [client 31.171.130.96:30051] [client 31.171.130.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/Text/about.php"] [unique_id "aRylLEVOSC7H33BBqQ3gQgAAAIs"]
[Wed Nov 19 00:56:13.485695 2025] [:error] [pid 43882:tid 43959] [client 31.171.130.95:64813] [client 31.171.130.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/css/about.php"] [unique_id "aRylLd5CQQLff3maRMLYHwAAABM"]
[Wed Nov 19 00:56:18.941331 2025] [:error] [pid 3052:tid 3146] [client 31.171.130.84:22857] [client 31.171.130.84] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.84, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/images/wp-login.php"] [unique_id "aRylMlNM6bOMTTuJnz1pSQAAANE"]
[Wed Nov 19 00:56:41.953085 2025] [:error] [pid 3052:tid 3139] [client 31.171.130.84:22857] [client 31.171.130.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/blocks/about.php"] [unique_id "aRylSVNM6bOMTTuJnz1plAAAAMo"]
[Wed Nov 19 00:56:47.345731 2025] [:error] [pid 43881:tid 43929] [client 31.171.130.59:50919] [client 31.171.130.59] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.59, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aRylT3_TrIND5buvEyfJPAAAAVA"]
[Wed Nov 19 00:56:59.878134 2025] [:error] [pid 43881:tid 43928] [client 31.171.130.59:50919] [client 31.171.130.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/makeasmtp.php"] [unique_id "aRylW3_TrIND5buvEyfJVAAAAU8"]
[Wed Nov 19 00:57:00.929139 2025] [:error] [pid 3052:tid 3153] [client 31.171.130.58:47671] [client 31.171.130.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/about.php"] [unique_id "aRylXFNM6bOMTTuJnz1pywAAANg"]
[Wed Nov 19 00:57:05.075093 2025] [proxy_fcgi:error] [pid 43880:tid 43901] [client 31.171.130.62:29939] AH01071: Got error 'Primary script unknown'
[Wed Nov 19 00:57:15.097769 2025] [proxy_fcgi:error] [pid 43880:tid 43893] [client 31.171.130.62:29939] AH01071: Got error 'Primary script unknown'
[Wed Nov 19 00:57:33.957691 2025] [:error] [pid 43880:tid 43906] [client 31.171.130.62:29939] [client 31.171.130.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aRylfe1q1HNbKyNr9SZTtQAAAFU"]
[Wed Nov 19 00:57:42.762769 2025] [:error] [pid 43881:tid 43922] [client 31.171.130.55:30057] [client 31.171.130.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/bak.php"] [unique_id "aRylhn_TrIND5buvEyfJsgAAAUk"]
[Wed Nov 19 00:57:45.428883 2025] [:error] [pid 3052:tid 3129] [client 31.171.130.65:42647] [client 31.171.130.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aRyliVNM6bOMTTuJnz1qZgAAAME"]
[Wed Nov 19 00:57:55.054456 2025] [:error] [pid 44063:tid 44137] [client 31.171.130.75:48867] [client 31.171.130.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "paramountbaldivis.com"] [uri "/fm.php"] [unique_id "aRylk0VOSC7H33BBqQ3hEgAAAJQ"]
[Wed Nov 19 00:57:55.947052 2025] [:error] [pid 43880:tid 43891] [client 31.171.130.54:20215] [client 31.171.130.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/customize/index.php"] [unique_id "aRylk-1q1HNbKyNr9SZT9QAAAEY"]
[Wed Nov 19 00:57:56.877609 2025] [:error] [pid 43881:tid 43919] [client 31.171.130.77:45613] [client 31.171.130.77] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.77, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-content/upgrade-temp-backup/wp-login.php"] [unique_id "aRyllH_TrIND5buvEyfJvQAAAUY"]
[Wed Nov 19 00:58:01.204077 2025] [:error] [pid 43881:tid 43926] [client 31.171.130.77:45613] [client 31.171.130.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/themes.php"] [unique_id "aRylmX_TrIND5buvEyfJzAAAAU0"]
[Wed Nov 19 00:58:11.053843 2025] [autoindex:error] [pid 3052:tid 3149] [client 31.171.130.62:34455] AH01276: Cannot serve directory /home/baldivis/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Nov 19 00:58:13.026831 2025] [:error] [pid 3052:tid 3145] [client 31.171.130.62:34455] [client 31.171.130.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/wp-includes_function.php"] [unique_id "aRylpVNM6bOMTTuJnz1qoAAAANA"]
[Wed Nov 19 00:58:17.495937 2025] [:error] [pid 43880:tid 43905] [client 31.171.130.87:47465] [client 31.171.130.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/images/about.php"] [unique_id "aRylqe1q1HNbKyNr9SZUKgAAAFQ"]
[Wed Nov 19 00:58:21.779328 2025] [:error] [pid 3052:tid 3143] [client 31.171.130.78:60627] [client 31.171.130.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/js/codemirror/about.php"] [unique_id "aRylrVNM6bOMTTuJnz1qrgAAAM4"]
[Wed Nov 19 00:58:27.257782 2025] [:error] [pid 43882:tid 43952] [client 31.171.130.56:63997] [client 31.171.130.56] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.56, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-content/languages/themes/wp-login.php"] [unique_id "aRyls95CQQLff3maRMLZRgAAAAw"]
[Wed Nov 19 00:58:32.763705 2025] [:error] [pid 43882:tid 43941] [client 31.171.130.56:63997] [client 31.171.130.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/block-supports/index.php"] [unique_id "aRyluN5CQQLff3maRMLZTAAAAAE"]
[Wed Nov 19 00:58:33.615650 2025] [:error] [pid 43880:tid 43906] [client 31.171.130.90:63015] [client 31.171.130.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aRylue1q1HNbKyNr9SZUVQAAAFU"]
[Wed Nov 19 00:58:52.108694 2025] [:error] [pid 3052:tid 3137] [client 31.171.130.92:25619] [client 31.171.130.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "aRylzFNM6bOMTTuJnz1rHQAAAMg"]
[Wed Nov 19 00:58:54.600081 2025] [autoindex:error] [pid 43882:tid 43964] [client 31.171.130.55:65351] AH01276: Cannot serve directory /home/baldivis/public_html/wp-content/uploads/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Nov 19 00:58:55.071724 2025] [:error] [pid 43882:tid 43952] [client 31.171.130.55:65351] [client 31.171.130.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/assets/about.php"] [unique_id "aRylz95CQQLff3maRMLZaAAAAAw"]
[Wed Nov 19 00:58:56.095839 2025] [:error] [pid 44063:tid 44126] [client 31.171.130.99:25439] [client 31.171.130.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/widgets/about.php"] [unique_id "aRyl0EVOSC7H33BBqQ3huwAAAIk"]
[Wed Nov 19 00:58:57.017055 2025] [:error] [pid 43881:tid 43925] [client 31.171.130.53:58361] [client 31.171.130.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/SimplePie/Content/index.php"] [unique_id "aRyl0X_TrIND5buvEyfKEgAAAUw"]
[Wed Nov 19 00:58:58.010983 2025] [:error] [pid 3052:tid 3140] [client 31.171.130.88:24531] [client 31.171.130.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aRyl0lNM6bOMTTuJnz1rMQAAAMs"]
[Wed Nov 19 00:59:03.079629 2025] [autoindex:error] [pid 3052:tid 3129] [client 31.171.130.102:29491] AH01276: Cannot serve directory /home/baldivis/public_html/.well-known/pki-validation/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Nov 19 00:59:07.690165 2025] [:error] [pid 3052:tid 3152] [client 31.171.130.102:29491] [client 31.171.130.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/ID3/autoload_classmap.php"] [unique_id "aRyl21NM6bOMTTuJnz1rUQAAANc"]
[Wed Nov 19 00:59:13.293777 2025] [:error] [pid 43882:tid 43947] [client 31.171.130.86:21869] [client 31.171.130.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/pomo/about.php"] [unique_id "aRyl4d5CQQLff3maRMLZjAAAAAc"]
[Wed Nov 19 00:59:17.894914 2025] [:error] [pid 3052:tid 3134] [client 31.171.130.90:41901] [client 31.171.130.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aRyl5VNM6bOMTTuJnz1rbwAAAMU"]
[Wed Nov 19 00:59:20.374167 2025] [:error] [pid 3052:tid 3141] [client 31.171.130.73:30415] [client 31.171.130.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/IXR/autoload_classmap.php"] [unique_id "aRyl6FNM6bOMTTuJnz1rdwAAAMw"]
[Wed Nov 19 00:59:26.450067 2025] [:error] [pid 43881:tid 43929] [client 31.171.130.95:60441] [client 31.171.130.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aRyl7n_TrIND5buvEyfKQQAAAVA"]
[Wed Nov 19 00:59:27.380437 2025] [:error] [pid 3052:tid 3129] [client 31.171.130.62:37001] [client 31.171.130.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/sitemaps/providers/zmFM.php"] [unique_id "aRyl71NM6bOMTTuJnz1rhgAAAME"]
[Wed Nov 19 00:59:30.963455 2025] [:error] [pid 3052:tid 3139] [client 31.171.130.101:35811] [client 31.171.130.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aRyl8lNM6bOMTTuJnz1rjQAAAMo"]
[Wed Nov 19 00:59:38.648634 2025] [:error] [pid 44063:tid 44134] [client 31.171.130.103:47117] [client 31.171.130.103] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.103, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/cgi-bin/wp-login.php"] [unique_id "aRyl-kVOSC7H33BBqQ3iBQAAAJE"]
[Wed Nov 19 00:59:41.702934 2025] [:error] [pid 44063:tid 44131] [client 31.171.130.103:47117] [client 31.171.130.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/sodium_compat/wp-login.php"] [unique_id "aRyl_UVOSC7H33BBqQ3iDQAAAI4"]
[Wed Nov 19 00:59:42.707826 2025] [:error] [pid 43880:tid 43891] [client 31.171.130.96:54065] [client 31.171.130.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aRyl_u1q1HNbKyNr9SZU4gAAAEY"]
[Wed Nov 19 00:59:56.169369 2025] [:error] [pid 43881:tid 43923] [client 31.171.130.82:21247] [client 31.171.130.82] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.82, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/maint/wp-login.php"] [unique_id "aRymDH_TrIND5buvEyfKmQAAAUo"]
[Wed Nov 19 00:59:57.903025 2025] [:error] [pid 43881:tid 43916] [client 31.171.130.82:21247] [client 31.171.130.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aRymDX_TrIND5buvEyfKnAAAAUM"]
[Wed Nov 19 00:59:58.892155 2025] [:error] [pid 44063:tid 44120] [client 31.171.130.94:40215] [client 31.171.130.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/Text/network.php"] [unique_id "aRymDkVOSC7H33BBqQ3iKQAAAIM"]
[Wed Nov 19 00:59:59.842619 2025] [:error] [pid 3052:tid 3144] [client 31.171.130.55:39943] [client 31.171.130.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/index.php"] [unique_id "aRymD1NM6bOMTTuJnz1ruwAAAM8"]
[Wed Nov 19 01:00:10.874051 2025] [:error] [pid 44063:tid 44117] [client 31.171.130.89:48257] [client 31.171.130.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/php-compat/autoload_classmap.php"] [unique_id "aRymGkVOSC7H33BBqQ3iTQAAAIA"]
[Wed Nov 19 01:00:40.597388 2025] [:error] [pid 43882:tid 43955] [client 31.171.130.71:63021] [client 31.171.130.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aRymON5CQQLff3maRMLaLAAAAA8"]
[Wed Nov 19 01:00:46.358997 2025] [:error] [pid 43881:tid 43934] [client 31.171.130.94:59835] [client 31.171.130.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aRymPn_TrIND5buvEyfLBwAAAVU"]
[Wed Nov 19 01:00:55.384814 2025] [:error] [pid 43880:tid 43893] [client 31.171.130.71:36411] [client 31.171.130.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/IXR/about.php"] [unique_id "aRymR-1q1HNbKyNr9SZVggAAAEg"]
[Wed Nov 19 01:00:57.903643 2025] [:error] [pid 44063:tid 44128] [client 31.171.130.78:21281] [client 31.171.130.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aRymSUVOSC7H33BBqQ3ilAAAAIs"]
[Wed Nov 19 01:01:00.289609 2025] [:error] [pid 43880:tid 43895] [client 31.171.130.71:55705] [client 31.171.130.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/js/index.php"] [unique_id "aRymTO1q1HNbKyNr9SZViAAAAEo"]
[Wed Nov 19 01:01:03.377057 2025] [:error] [pid 43881:tid 43914] [client 31.171.130.97:44335] [client 31.171.130.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aRymT3_TrIND5buvEyfLIwAAAUE"]
[Wed Nov 19 01:01:07.967278 2025] [:error] [pid 3052:tid 3139] [client 31.171.130.56:49307] [client 31.171.130.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aRymU1NM6bOMTTuJnz1sSAAAAMo"]
[Wed Nov 19 01:01:12.172715 2025] [:error] [pid 43880:tid 43896] [client 31.171.130.61:54417] [client 31.171.130.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aRymWO1q1HNbKyNr9SZVmgAAAEs"]
[Wed Nov 19 01:01:17.888229 2025] [:error] [pid 3052:tid 3139] [client 31.171.130.59:33029] [client 31.171.130.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aRymXVNM6bOMTTuJnz1sWgAAAMo"]
[Wed Nov 19 01:01:25.496737 2025] [:error] [pid 43880:tid 43902] [client 31.171.130.104:60739] [client 31.171.130.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aRymZe1q1HNbKyNr9SZVtAAAAFE"]
[Wed Nov 19 01:01:31.362741 2025] [:error] [pid 43880:tid 43891] [client 31.171.130.88:20771] [client 31.171.130.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aRyma-1q1HNbKyNr9SZVwwAAAEY"]
[Wed Nov 19 01:01:37.480593 2025] [proxy_fcgi:error] [pid 43880:tid 43905] [client 31.171.130.63:54097] AH01071: Got error 'Primary script unknown'
[Wed Nov 19 01:01:41.103327 2025] [:error] [pid 43880:tid 43890] [client 31.171.130.63:54097] [client 31.171.130.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/css/autoload_classmap.php"] [unique_id "aRymde1q1HNbKyNr9SZV2gAAAEU"]
[Wed Nov 19 01:02:03.579045 2025] [:error] [pid 3052:tid 3153] [client 31.171.130.71:31233] [client 31.171.130.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/Text/autoload_classmap.php"] [unique_id "aRymi1NM6bOMTTuJnz1s1gAAANg"]
[Wed Nov 19 01:02:04.551859 2025] [:error] [pid 3052:tid 3147] [client 31.171.130.65:54829] [client 31.171.130.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aRymjFNM6bOMTTuJnz1s2AAAANI"]
[Wed Nov 19 01:02:10.378541 2025] [:error] [pid 43882:tid 43963] [client 31.171.130.83:33475] [client 31.171.130.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/html-api/index.php"] [unique_id "aRymkt5CQQLff3maRMLaoAAAABc"]
[Wed Nov 19 01:02:11.259637 2025] [:error] [pid 43881:tid 43915] [client 31.171.130.66:52913] [client 31.171.130.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aRymk3_TrIND5buvEyfLiwAAAUI"]
[Wed Nov 19 01:02:13.654813 2025] [:error] [pid 3052:tid 3147] [client 31.171.130.79:42169] [client 31.171.130.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/fonts/wp-login.php"] [unique_id "aRymlVNM6bOMTTuJnz1s6QAAANI"]
[Wed Nov 19 01:02:24.511218 2025] [:error] [pid 43881:tid 43925] [client 31.171.130.89:48747] [client 31.171.130.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aRymoH_TrIND5buvEyfLrgAAAUw"]
[Wed Nov 19 01:02:26.903031 2025] [:error] [pid 43881:tid 43924] [client 31.171.130.87:26641] [client 31.171.130.87] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.87, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/wp-login.php"] [unique_id "aRymon_TrIND5buvEyfLswAAAUs"]
[Wed Nov 19 01:02:30.018319 2025] [:error] [pid 43881:tid 43936] [client 31.171.130.87:26641] [client 31.171.130.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aRympn_TrIND5buvEyfLtQAAAVc"]
[Wed Nov 19 01:02:30.907210 2025] [:error] [pid 44063:tid 44140] [client 31.171.130.76:26521] [client 31.171.130.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/Text/index.php"] [unique_id "aRympkVOSC7H33BBqQ3jKwAAAJc"]
[Wed Nov 19 01:02:36.384925 2025] [:error] [pid 43881:tid 43913] [client 31.171.130.100:38361] [client 31.171.130.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/css/dist/autoload_classmap.php"] [unique_id "aRymrH_TrIND5buvEyfLwwAAAUA"]
[Wed Nov 19 01:02:38.837414 2025] [:error] [pid 43882:tid 43963] [client 31.171.130.72:58901] [client 31.171.130.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/rk2.php"] [unique_id "aRymrt5CQQLff3maRMLaxwAAABc"]
[Wed Nov 19 01:02:44.112213 2025] [proxy_fcgi:error] [pid 44063:tid 44126] [client 31.171.130.73:62655] AH01071: Got error 'Primary script unknown'
[Wed Nov 19 01:02:52.478910 2025] [proxy_fcgi:error] [pid 44063:tid 44117] [client 31.171.130.73:62655] AH01071: Got error 'Primary script unknown'
[Wed Nov 19 01:02:54.457801 2025] [:error] [pid 44063:tid 44137] [client 31.171.130.73:62655] [client 31.171.130.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/plugin.php"] [unique_id "aRymvkVOSC7H33BBqQ3jVgAAAJQ"]
[Wed Nov 19 01:02:59.630034 2025] [:error] [pid 43880:tid 43897] [client 31.171.130.65:57753] [client 31.171.130.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/js/tinymce/wp-tinymce.php"] [unique_id "aRymw-1q1HNbKyNr9SZWRQAAAEw"]
[Wed Nov 19 01:03:05.178393 2025] [:error] [pid 43882:tid 43955] [client 31.171.130.78:49911] [client 31.171.130.78] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.78, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aRymyd5CQQLff3maRMLa8QAAAA8"]
[Wed Nov 19 01:03:05.183568 2025] [proxy_fcgi:error] [pid 43882:tid 43955] [client 31.171.130.78:49911] AH01071: Got error 'Primary script unknown'
[Wed Nov 19 01:03:14.207640 2025] [:error] [pid 43882:tid 43947] [client 31.171.130.78:49911] [client 31.171.130.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/mah.php"] [unique_id "aRym0t5CQQLff3maRMLbBQAAAAc"]
[Wed Nov 19 01:03:15.105881 2025] [:error] [pid 43880:tid 43899] [client 31.171.130.87:45617] [client 31.171.130.87] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.87, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/css/colors/sunrise/wp-login.php"] [unique_id "aRym0-1q1HNbKyNr9SZWWAAAAE4"]
[Wed Nov 19 01:03:16.756260 2025] [:error] [pid 43880:tid 43906] [client 31.171.130.87:45617] [client 31.171.130.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/customize/lmfi.php"] [unique_id "aRym1O1q1HNbKyNr9SZWWwAAAFU"]
[Wed Nov 19 01:03:26.573860 2025] [proxy_fcgi:error] [pid 3052:tid 3137] [client 31.171.130.87:62725] AH01071: Got error 'Primary script unknown'
[Wed Nov 19 01:03:30.657255 2025] [:error] [pid 3052:tid 3152] [client 31.171.130.87:62725] [client 31.171.130.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "aRym4lNM6bOMTTuJnz1tlAAAANc"]
[Wed Nov 19 01:03:38.562042 2025] [:error] [pid 3052:tid 3133] [client 31.171.130.75:62207] [client 31.171.130.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/customize/about.php"] [unique_id "aRym6lNM6bOMTTuJnz1tqQAAAMQ"]
[Wed Nov 19 01:03:42.079117 2025] [:error] [pid 43882:tid 43948] [client 31.171.130.104:50735] [client 31.171.130.104] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.104, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/css/colors/light/wp-login.php"] [unique_id "aRym7t5CQQLff3maRMLbNQAAAAg"]
[Wed Nov 19 01:03:53.480373 2025] [:error] [pid 43882:tid 43952] [client 31.171.130.104:50735] [client 31.171.130.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/blocks/button/index.php"] [unique_id "aRym-d5CQQLff3maRMLbSQAAAAw"]
[Wed Nov 19 01:03:55.876146 2025] [:error] [pid 43881:tid 43926] [client 31.171.130.67:30775] [client 31.171.130.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/packed.php"] [unique_id "aRym-3_TrIND5buvEyfMNgAAAU0"]
[Wed Nov 19 01:04:10.563731 2025] [:error] [pid 43881:tid 43923] [client 31.171.130.59:46853] [client 31.171.130.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/file.php"] [unique_id "aRynCn_TrIND5buvEyfMSgAAAUo"]
[Wed Nov 19 01:04:12.857155 2025] [:error] [pid 43881:tid 43928] [client 31.171.130.70:23369] [client 31.171.130.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/css/chosen.php"] [unique_id "aRynDH_TrIND5buvEyfMTwAAAU8"]
[Wed Nov 19 01:04:15.261450 2025] [:error] [pid 44063:tid 44141] [client 31.171.130.78:34527] [client 31.171.130.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/SimplePie/Cache/about.php"] [unique_id "aRynD0VOSC7H33BBqQ3jvgAAAJg"]
[Wed Nov 19 01:04:22.770988 2025] [:error] [pid 43880:tid 43901] [client 31.171.130.77:59653] [client 31.171.130.77] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.77, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-content/languages/wp-login.php"] [unique_id "aRynFu1q1HNbKyNr9SZWxQAAAFA"]
[Wed Nov 19 01:04:24.320917 2025] [:error] [pid 43880:tid 43900] [client 31.171.130.77:59653] [client 31.171.130.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aRynGO1q1HNbKyNr9SZWxwAAAE8"]
[Wed Nov 19 01:04:36.102154 2025] [:error] [pid 44063:tid 44123] [client 31.171.130.82:32307] [client 31.171.130.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aRynJEVOSC7H33BBqQ3kEgAAAIY"]
[Wed Nov 19 01:04:36.978718 2025] [:error] [pid 3052:tid 3132] [client 31.171.130.53:46757] [client 31.171.130.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/Text/wp-login.php"] [unique_id "aRynJFNM6bOMTTuJnz1uPwAAAMM"]
[Wed Nov 19 01:04:43.986902 2025] [proxy_fcgi:error] [pid 43882:tid 43945] [client 31.171.130.94:58351] AH01071: Got error 'Primary script unknown'
[Wed Nov 19 01:04:47.374962 2025] [proxy_fcgi:error] [pid 43882:tid 43964] [client 31.171.130.94:58351] AH01071: Got error 'Primary script unknown'
[Wed Nov 19 01:04:47.812599 2025] [:error] [pid 43882:tid 43962] [client 31.171.130.94:58351] [client 31.171.130.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/function.php"] [unique_id "aRynL95CQQLff3maRMLbmAAAABY"]
[Wed Nov 19 01:04:54.658701 2025] [:error] [pid 43880:tid 43892] [client 31.171.130.55:51509] [client 31.171.130.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/images/votes.php"] [unique_id "aRynNu1q1HNbKyNr9SZXAAAAAEc"]
[Wed Nov 19 01:05:07.415407 2025] [proxy_fcgi:error] [pid 43881:tid 43936] [client 31.171.130.64:64531] AH01071: Got error 'Primary script unknown'
[Wed Nov 19 01:05:09.800633 2025] [:error] [pid 43881:tid 43919] [client 31.171.130.64:64531] [client 31.171.130.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/certificates/file.php"] [unique_id "aRynRX_TrIND5buvEyfMqAAAAUY"]
[Wed Nov 19 01:05:18.479787 2025] [:error] [pid 44063:tid 44126] [client 31.171.130.96:62211] [client 31.171.130.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/fonts/parx.php"] [unique_id "aRynTkVOSC7H33BBqQ3kYgAAAIk"]
[Wed Nov 19 01:05:31.000363 2025] [proxy_fcgi:error] [pid 43882:tid 43962] [client 31.171.130.103:40011] AH01071: Got error 'Primary script unknown'
[Wed Nov 19 01:05:31.483458 2025] [:error] [pid 43882:tid 43955] [client 31.171.130.103:40011] [client 31.171.130.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/css/dist/components/about.php"] [unique_id "aRynW95CQQLff3maRMLb1gAAAA8"]
[Wed Nov 19 01:05:34.613030 2025] [proxy_fcgi:error] [pid 43880:tid 43886] [client 31.171.130.65:62637] AH01071: Got error 'Primary script unknown'
[Wed Nov 19 01:05:39.485933 2025] [proxy_fcgi:error] [pid 43880:tid 43908] [client 31.171.130.65:62637] AH01071: Got error 'PHP message: PHP Warning: Use of undefined constant ABSPATH - assumed 'ABSPATH' (this will throw an Error in a future version of PHP) in /home/baldivis/public_html/wp-settings.php on line 33PHP message: PHP Warning: require(ABSPATHwp-includes/version.php): failed to open stream: No such file or directory in /home/baldivis/public_html/wp-settings.php on line 33PHP message: PHP Warning: require(ABSPATHwp-includes/version.php): failed to open stream: No such file or directory in /home/baldivis/public_html/wp-settings.php on line 33PHP message: PHP Fatal error: require(): Failed opening required 'ABSPATHwp-includes/version.php' (include_path='.:') in /home/baldivis/public_html/wp-settings.php on line 33'
[Wed Nov 19 01:05:40.352080 2025] [:error] [pid 43881:tid 43935] [client 31.171.130.95:50909] [client 31.171.130.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aRynZH_TrIND5buvEyfM1gAAAVY"]
[Wed Nov 19 01:05:57.402114 2025] [:error] [pid 44063:tid 44137] [client 31.171.130.54:46951] [client 31.171.130.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/js/item.php"] [unique_id "aRyndUVOSC7H33BBqQ3kuQAAAJQ"]
[Wed Nov 19 01:06:07.212227 2025] [:error] [pid 43880:tid 43899] [client 31.171.130.56:46323] [client 31.171.130.56] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.56, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/.well-known/pki-validation/wp-login.php"] [unique_id "aRynf-1q1HNbKyNr9SZXsgAAAE4"]
[Wed Nov 19 01:06:09.298173 2025] [:error] [pid 43880:tid 43885] [client 31.171.130.56:46323] [client 31.171.130.56] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.56, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/classic-editor/wp-login.php"] [unique_id "aRynge1q1HNbKyNr9SZXwAAAAEA"]
[Wed Nov 19 01:06:10.768527 2025] [:error] [pid 43880:tid 43906] [client 31.171.130.56:46323] [client 31.171.130.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/mani.php"] [unique_id "aRyngu1q1HNbKyNr9SZXxAAAAFU"]
[Wed Nov 19 01:06:23.537136 2025] [:error] [pid 3052:tid 3146] [client 31.171.130.74:24111] [client 31.171.130.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/network.php"] [unique_id "aRynj1NM6bOMTTuJnz1vRAAAANE"]
[Wed Nov 19 01:06:27.298651 2025] [:error] [pid 44063:tid 44122] [client 31.171.130.57:45545] [client 31.171.130.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/defaults.php"] [unique_id "aRynk0VOSC7H33BBqQ3k9wAAAIU"]
[Wed Nov 19 01:06:35.024456 2025] [proxy_fcgi:error] [pid 43882:tid 43950] [client 31.171.130.58:31603] AH01071: Got error 'Primary script unknown'
[Wed Nov 19 01:06:39.385070 2025] [proxy_fcgi:error] [pid 43882:tid 43955] [client 31.171.130.58:31603] AH01071: Got error 'Primary script unknown'
[Wed Nov 19 01:06:41.269899 2025] [:error] [pid 43882:tid 43961] [client 31.171.130.58:31603] [client 31.171.130.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "aRynod5CQQLff3maRMLcWwAAABU"]
[Wed Nov 19 01:06:42.101312 2025] [:error] [pid 43882:tid 43958] [client 31.171.130.57:35297] [client 31.171.130.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/block-supports/about.php"] [unique_id "aRynot5CQQLff3maRMLcXAAAABI"]
[Wed Nov 19 01:06:48.838203 2025] [:error] [pid 43882:tid 43964] [client 31.171.130.65:50341] [client 31.171.130.65] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.65, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-content/wp-login.php"] [unique_id "aRynqN5CQQLff3maRMLcbAAAABg"]
[Wed Nov 19 01:06:54.760213 2025] [:error] [pid 43882:tid 43943] [client 31.171.130.65:50341] [client 31.171.130.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/PHPMailer/file.php"] [unique_id "aRynrt5CQQLff3maRMLcdAAAAAM"]
[Wed Nov 19 01:06:57.001918 2025] [:error] [pid 43882:tid 43948] [client 31.171.130.83:56001] [client 31.171.130.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/Requests/xBrain.php"] [unique_id "aRynsd5CQQLff3maRMLcegAAAAg"]
[Wed Nov 19 01:06:57.928125 2025] [:error] [pid 44063:tid 44135] [client 31.171.130.89:53913] [client 31.171.130.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aRynsUVOSC7H33BBqQ3lNAAAAJI"]
[Wed Nov 19 01:07:00.915787 2025] [:error] [pid 44063:tid 44135] [client 31.171.130.58:47349] [client 31.171.130.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/Requests/index.php"] [unique_id "aRyntEVOSC7H33BBqQ3lPgAAAJI"]
[Wed Nov 19 01:07:13.865149 2025] [proxy_fcgi:error] [pid 43882:tid 43940] [client 31.171.130.54:62547] AH01071: Got error 'Primary script unknown'
[Wed Nov 19 01:07:16.515384 2025] [:error] [pid 43882:tid 43944] [client 31.171.130.54:62547] [client 31.171.130.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/css/dist/widgets/about.php"] [unique_id "aRynxN5CQQLff3maRMLclAAAAAQ"]
[Wed Nov 19 01:07:19.520026 2025] [proxy_fcgi:error] [pid 43881:tid 43932] [client 31.171.130.102:30485] AH01071: Got error 'Primary script unknown'
[Wed Nov 19 01:07:39.201831 2025] [:error] [pid 43881:tid 43929] [client 31.171.130.102:30485] [client 31.171.130.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/radio.php"] [unique_id "aRyn23_TrIND5buvEyfNqQAAAVA"]
[Wed Nov 19 01:07:54.183454 2025] [:error] [pid 3052:tid 3129] [client 31.171.130.54:37143] [client 31.171.130.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/sodium_compat/src/Core/Curve25519/Ge/wp_blog.php"] [unique_id "aRyn6lNM6bOMTTuJnz1wSQAAAME"]
[Wed Nov 19 01:08:03.123346 2025] [:error] [pid 44063:tid 44134] [client 31.171.130.70:23533] [client 31.171.130.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/wp-class.php"] [unique_id "aRyn80VOSC7H33BBqQ3lpgAAAJE"]
[Wed Nov 19 01:08:05.459047 2025] [:error] [pid 43881:tid 43917] [client 31.171.130.56:31991] [client 31.171.130.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/fonts/index.php"] [unique_id "aRyn9X_TrIND5buvEyfN6QAAAUQ"]
[Wed Nov 19 01:08:19.894515 2025] [:error] [pid 43882:tid 43947] [client 31.171.130.97:55865] [client 31.171.130.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/js/tinymce/plugins/compat3x/css/index.php"] [unique_id "aRyoA95CQQLff3maRMLc6wAAAAc"]
[Wed Nov 19 01:08:21.840669 2025] [:error] [pid 3052:tid 3133] [client 31.171.130.82:47747] [client 31.171.130.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/Requests/Text/index.php"] [unique_id "aRyoBVNM6bOMTTuJnz1whQAAAMQ"]
[Wed Nov 19 01:08:25.774677 2025] [:error] [pid 43881:tid 43935] [client 31.171.130.90:61089] [client 31.171.130.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/random_compat/about.php"] [unique_id "aRyoCX_TrIND5buvEyfOCgAAAVY"]
[Wed Nov 19 01:09:12.316938 2025] [proxy_fcgi:error] [pid 43880:tid 43889] [client 31.171.130.102:57297] AH01071: Got error 'Primary script unknown'
[Wed Nov 19 01:09:14.178679 2025] [:error] [pid 43880:tid 43885] [client 31.171.130.102:57297] [client 31.171.130.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/images/include.php"] [unique_id "aRyoOu1q1HNbKyNr9SZZDgAAAEA"]
[Wed Nov 19 01:09:29.086663 2025] [:error] [pid 44063:tid 44129] [client 31.171.130.96:36841] [client 31.171.130.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/fonts/css.php"] [unique_id "aRyoSUVOSC7H33BBqQ3mdQAAAIw"]
[Wed Nov 19 01:09:51.492077 2025] [autoindex:error] [pid 3052:tid 3141] [client 31.171.130.97:47841] AH01276: Cannot serve directory /home/baldivis/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Nov 19 01:09:52.072934 2025] [autoindex:error] [pid 3052:tid 3146] [client 31.171.130.97:47841] AH01276: Cannot serve directory /home/baldivis/public_html/.well-known/pki-validation/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Nov 19 01:09:52.588558 2025] [autoindex:error] [pid 3052:tid 3139] [client 31.171.130.97:47841] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Nov 19 02:40:42.243034 2025] [:error] [pid 43882:tid 43946] [client 185.26.122.20:57172] [client 185.26.122.20] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.26.122.20, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRy9qt5CQQLff3maRMICcAAAAAY"], referer: http://paramountbaldivis.com
[Wed Nov 19 02:52:32.791371 2025] [:error] [pid 43881:tid 43931] [client 50.6.156.83:39888] [client 50.6.156.83] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 50.6.156.83, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRzAcH_TrIND5buvEyf33gAAAVI"], referer: http://paramountbaldivis.com
[Wed Nov 19 02:56:33.006350 2025] [:error] [pid 44063:tid 44139] [client 116.193.190.94:46402] [client 116.193.190.94] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 116.193.190.94, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRzBYUVOSC7H33BBqQ0ZHgAAAJY"], referer: http://paramountbaldivis.com
[Wed Nov 19 03:09:50.648771 2025] [:error] [pid 44063:tid 44119] [client 50.116.66.14:48124] [client 50.116.66.14] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 50.116.66.14, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRzEfkVOSC7H33BBqQ0e2gAAAII"], referer: http://paramountbaldivis.com
[Wed Nov 19 03:19:19.544651 2025] [:error] [pid 43882:tid 43940] [client 34.87.147.222:36990] [client 34.87.147.222] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 34.87.147.222, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRzGt95CQQLff3maRMIW7gAAAAA"], referer: http://paramountbaldivis.com
[Wed Nov 19 03:41:54.031014 2025] [:error] [pid 48892:tid 48954] [client 124.156.178.131:52730] [client 124.156.178.131] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 124.156.178.131, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRzMAhhxnv8zXa7h8e1HnwAAAFI"], referer: http://paramountbaldivis.com
[Wed Nov 19 04:07:42.459750 2025] [:error] [pid 52818:tid 52861] [client 119.96.24.54:54648] [client 119.96.24.54] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||paramountbaldivis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRzSDlzWKQQnfSU-G5w2OwAAAEo"]
[Wed Nov 19 04:42:55.503826 2025] [:error] [pid 6644:tid 6660] [client 34.87.147.222:35608] [client 34.87.147.222] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 34.87.147.222, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aRzaT00i6Rf788MB6saUrwAAAM4"], referer: http://paramountbaldivis.com
[Wed Nov 19 04:52:57.198825 2025] [:error] [pid 6556:tid 6642] [client 192.178.4.101:48006] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRzcqZuL7hhgrmdM1ms-ewAAAJg"]
[Wed Nov 19 04:53:08.948288 2025] [:error] [pid 6554:tid 6580] [client 192.178.4.101:45786] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aRzctN8rvPWLafJFqmUflAAAABQ"]
[Wed Nov 19 07:30:38.704532 2025] [:error] [pid 6554:tid 6560] [client 18.191.165.250:56502] [client 18.191.165.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aR0Bnt8rvPWLafJFqmVW1wAAAAE"]
[Wed Nov 19 07:30:39.105631 2025] [:error] [pid 6644:tid 6656] [client 18.191.165.250:56654] [client 18.191.165.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aR0Bn00i6Rf788MB6sbZxQAAAMo"]
[Wed Nov 19 07:30:39.500361 2025] [:error] [pid 6919:tid 6929] [client 18.191.165.250:56750] [client 18.191.165.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aR0Bn0YFdN1s_9xJVUmrLgAAAQc"]
[Wed Nov 19 07:30:39.898072 2025] [:error] [pid 6556:tid 6623] [client 18.191.165.250:56834] [client 18.191.165.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aR0Bn5uL7hhgrmdM1mt7QAAAAIU"]
[Wed Nov 19 07:30:40.306878 2025] [:error] [pid 26664:tid 26670] [client 18.191.165.250:56920] [client 18.191.165.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aR0BoIpWc1yoj2P7MeASEwAAAUM"]
[Wed Nov 19 08:20:31.111537 2025] [:error] [pid 6554:tid 6577] [client 45.70.101.251:45128] [client 45.70.101.251] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.70.101.251, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aR0NT98rvPWLafJFqmVjDwAAABE"]
[Wed Nov 19 08:28:48.338561 2025] [:error] [pid 6644:tid 6656] [client 192.178.4.101:53434] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aR0PQE0i6Rf788MB6sbrIAAAAMo"]
[Wed Nov 19 08:29:04.877030 2025] [:error] [pid 6555:tid 6606] [client 192.178.4.101:44158] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aR0PUEbVJm8eMsGMTCOb9gAAAE8"]
[Wed Nov 19 08:53:46.937121 2025] [:error] [pid 6555:tid 6615] [client 51.79.250.168:44314] [client 51.79.250.168] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 51.79.250.168, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aR0VGkbVJm8eMsGMTCOitQAAAFg"], referer: http://paramountbaldivis.com
[Wed Nov 19 09:55:06.829635 2025] [:error] [pid 26664:tid 26668] [client 184.168.126.97:53914] [client 184.168.126.97] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 184.168.126.97, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aR0jeopWc1yoj2P7MeBTyAAAAUE"]
[Wed Nov 19 10:47:58.415885 2025] [:error] [pid 6919:tid 6943] [client 103.189.234.33:43530] [client 103.189.234.33] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.189.234.33, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aR0v3kYFdN1s_9xJVUnyYwAAARU"], referer: http://paramountbaldivis.com
[Wed Nov 19 11:02:47.385206 2025] [:error] [pid 26664:tid 26674] [client 101.68.43.236:57522] [client 101.68.43.236] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 101.68.43.236, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aR0zV4pWc1yoj2P7MeB0jwAAAUc"], referer: http://paramountbaldivis.com
[Wed Nov 19 11:07:49.210754 2025] [:error] [pid 6556:tid 6638] [client 184.168.126.97:45140] [client 184.168.126.97] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 184.168.126.97, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aR00hZuL7hhgrmdM1mu7dAAAAJQ"]
[Wed Nov 19 12:08:22.965069 2025] [:error] [pid 6554:tid 6579] [client 68.183.83.88:46218] [client 68.183.83.88] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 68.183.83.88, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aR1Ctt8rvPWLafJFqmWksQAAABM"], referer: http://paramountbaldivis.com
[Wed Nov 19 12:24:49.743210 2025] [:error] [pid 6919:tid 6937] [client 185.2.4.118:36564] [client 185.2.4.118] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.2.4.118, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aR1GkUYFdN1s_9xJVUkaDQAAAQ8"]
[Wed Nov 19 12:50:25.019687 2025] [:error] [pid 26664:tid 26684] [client 115.79.196.94:43020] [client 115.79.196.94] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 115.79.196.94, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aR1MkYpWc1yoj2P7MeCoQgAAAVA"]
[Wed Nov 19 13:41:16.580955 2025] [:error] [pid 26664:tid 26675] [client 162.241.225.30:12804] [client 162.241.225.30] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.241.225.30, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aR1YfIpWc1yoj2P7MeDCdgAAAUg"], referer: http://paramountbaldivis.com
[Wed Nov 19 14:08:55.048016 2025] [:error] [pid 6555:tid 6605] [client 51.79.250.168:53464] [client 51.79.250.168] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 51.79.250.168, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aR1e90bVJm8eMsGMTCP76AAAAE4"], referer: http://paramountbaldivis.com
[Wed Nov 19 14:53:21.765560 2025] [:error] [pid 6644:tid 6667] [client 101.35.56.33:54256] [client 101.35.56.33] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 101.35.56.33, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aR1pYU0i6Rf788MB6sZpHAAAANU"], referer: http://paramountbaldivis.com
[Wed Nov 19 15:14:24.397378 2025] [:error] [pid 12643:tid 12647] [client 162.241.224.155:10778] [client 162.241.224.155] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.241.224.155, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aR1uUMaLCNSdLHNAGt7CDQAAAYE"], referer: http://paramountbaldivis.com
[Wed Nov 19 15:39:43.694830 2025] [:error] [pid 6644:tid 6654] [client 162.241.224.62:10334] [client 162.241.224.62] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 162.241.224.62, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aR10P00i6Rf788MB6sZ5AAAAAMg"]
[Wed Nov 19 16:15:05.466346 2025] [:error] [pid 12672:tid 12685] [client 43.159.149.56:45610] [client 43.159.149.56] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||paramountbaldivis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aR18if9vojl6X1cc5mX5GQAAAcg"]
[Wed Nov 19 16:28:36.082297 2025] [:error] [pid 6644:tid 6663] [client 182.42.105.144:50202] [client 182.42.105.144] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||paramountbaldivis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aR1_tE0i6Rf788MB6saFagAAANE"]
[Wed Nov 19 20:35:57.928818 2025] [:error] [pid 26664:tid 26667] [client 104.196.176.201:58226] [client 104.196.176.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/media/system/js/core.js"] [unique_id "aR25rYpWc1yoj2P7MeADiQAAAUA"]
[Wed Nov 19 22:42:29.972998 2025] [proxy_fcgi:error] [pid 6644:tid 6663] (70007)The timeout specified has expired: [client 192.178.4.102:50446] AH01075: Error dispatching request to : (polling)
[Wed Nov 19 23:06:32.207307 2025] [:error] [pid 26664:tid 26667] [client 123.187.240.242:33441] [client 123.187.240.242] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.paramountbaldivis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.paramountbaldivis.com"] [uri "/"] [unique_id "aR3c-IpWc1yoj2P7MeAYtgAAAUA"]
[Thu Nov 20 02:13:23.402710 2025] [:error] [pid 50210:tid 50329] [client 115.79.196.94:44654] [client 115.79.196.94] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 115.79.196.94, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aR4Iw99KVfTGhSw-ebu9awAAABc"]
[Thu Nov 20 02:21:07.505914 2025] [:error] [pid 50223:tid 50359] [client 49.51.50.147:49178] [client 49.51.50.147] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.paramountbaldivis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.paramountbaldivis.com"] [uri "/"] [unique_id "aR4Kkz4iSUKl66cdvvbjJQAAAFg"]
[Thu Nov 20 02:27:30.593798 2025] [:error] [pid 8908:tid 8930] [client 122.169.90.65:64961] [client 122.169.90.65] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.169.90.65, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aR4MErVPLa0l9KdQm6z1pQAAA5I"]
[Thu Nov 20 02:27:34.548720 2025] [:error] [pid 8909:tid 8945] [client 91.92.242.56:57386] [client 91.92.242.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/themes/civi/style.css"] [unique_id "aR4MFmnKNOWZ-UbT97B4YgAAA8Y"]
[Thu Nov 20 02:27:35.111957 2025] [:error] [pid 8909:tid 8957] [client 91.92.242.56:51822] [client 91.92.242.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/themes/civi/style.css"] [unique_id "aR4MF2nKNOWZ-UbT97B4ZAAAA9I"]
[Thu Nov 20 02:27:38.691208 2025] [:error] [pid 50223:tid 50358] [client 91.92.242.56:52200] [client 91.92.242.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/themes/jobcareer/style.css"] [unique_id "aR4MGj4iSUKl66cdvvbkaQAAAFc"]
[Thu Nov 20 02:27:39.255230 2025] [:error] [pid 8365:tid 8384] [client 91.92.242.56:54206] [client 91.92.242.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/themes/jobcareer/style.css"] [unique_id "aR4MGxhyiKKdRMrEbr2tFQAAAo8"]
[Thu Nov 20 02:27:39.431589 2025] [:error] [pid 8822:tid 8837] [client 45.249.68.167:56703] [client 45.249.68.167] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.249.68.167, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aR4MGzHA2IF8PiYVHyhmdwAAAw0"]
[Thu Nov 20 02:27:44.809379 2025] [:error] [pid 8293:tid 8319] [client 91.92.242.56:54522] [client 91.92.242.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/chaty-pro/css/chaty-front.min.css"] [unique_id "aR4MICGLhDa8A92KWiILUwAAAlg"]
[Thu Nov 20 02:27:45.392931 2025] [:error] [pid 8908:tid 8925] [client 91.92.242.56:57590] [client 91.92.242.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/chaty-pro/css/chaty-front.min.css"] [unique_id "aR4MIbVPLa0l9KdQm6z1swAAA40"]
[Thu Nov 20 02:27:45.979249 2025] [:error] [pid 50236:tid 50386] [client 91.92.242.56:57924] [client 91.92.242.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/chaty-pro/css/chaty-front.min.css"] [unique_id "aR4MIWT-l-atWVKihhsu3wAAAJg"]
[Thu Nov 20 02:27:46.542634 2025] [:error] [pid 50236:tid 50372] [client 91.92.242.56:58255] [client 91.92.242.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/chaty-pro/css/chaty-front.min.css"] [unique_id "aR4MImT-l-atWVKihhsu4AAAAIo"]
[Thu Nov 20 02:52:32.074341 2025] [:error] [pid 50223:tid 50339] [client 108.167.157.155:11752] [client 108.167.157.155] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 108.167.157.155, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aR4R8D4iSUKl66cdvvbpyQAAAEQ"]
[Thu Nov 20 03:37:29.966042 2025] [proxy_fcgi:error] [pid 50223:tid 50343] [client 192.178.4.103:51295] AH01071: Got error 'PHP message: PHP Warning: mysqli_query(): (HY000/2006): MySQL server has gone away in /home/baldivis/public_html/wp-includes/wp-db.php on line 2056'
[Thu Nov 20 05:25:47.972718 2025] [:error] [pid 55343:tid 55403] [client 182.40.104.255:35534] [client 182.40.104.255] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||paramountbaldivis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aR4121WlO3EnyVMV7w71HgAAAIQ"]
[Thu Nov 20 07:38:11.505531 2025] [:error] [pid 55343:tid 55416] [client 172.64.223.162:13071] [client 172.64.223.162] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.paramountbaldivis.com"] [uri "/.git/config"] [unique_id "aR5U41WlO3EnyVMV7w4U8wAAAJE"]
[Thu Nov 20 10:23:55.837482 2025] [:error] [pid 55342:tid 55387] [client 89.185.82.43:39222] [client 89.185.82.43] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.paramountbaldivis.com"] [uri "/.git/config"] [unique_id "aR57u7g6x32Tvk7fIG94PQAAAE8"]
[Thu Nov 20 11:37:26.891471 2025] [:error] [pid 55343:tid 55410] [client 89.185.82.43:40496] [client 89.185.82.43] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.paramountbaldivis.com"] [uri "/.env"] [unique_id "aR6M9lWlO3EnyVMV7w5bhgAAAIs"]
[Thu Nov 20 12:10:22.133424 2025] [:error] [pid 55343:tid 55407] [client 98.81.111.26:49481] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aR6UrlWlO3EnyVMV7w5lGAAAAIg"]
[Thu Nov 20 12:10:22.541309 2025] [:error] [pid 55342:tid 55381] [client 98.81.111.26:62980] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aR6Urrg6x32Tvk7fIG-L9wAAAEk"]
[Thu Nov 20 12:10:22.958285 2025] [:error] [pid 55340:tid 55354] [client 98.81.111.26:55160] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aR6UrvOxD-NeMydTybBJ8gAAAAk"]
[Thu Nov 20 12:10:23.370397 2025] [:error] [pid 55343:tid 55403] [client 98.81.111.26:59835] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aR6Ur1WlO3EnyVMV7w5lVQAAAIQ"]
[Thu Nov 20 12:10:23.856363 2025] [:error] [pid 34405:tid 34421] [client 98.81.111.26:55927] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aR6UrzFpvu8oRK7ATfvJcwAAAQ4"]
[Thu Nov 20 12:15:51.581361 2025] [:error] [pid 55340:tid 55348] [client 98.81.111.26:55762] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aR6V9_OxD-NeMydTybBNUQAAAAM"]
[Thu Nov 20 12:15:51.990381 2025] [:error] [pid 55430:tid 55439] [client 98.81.111.26:59653] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aR6V9_PZXaIMEU4pE7umHQAAAMY"]
[Thu Nov 20 12:15:52.397374 2025] [:error] [pid 55343:tid 55408] [client 98.81.111.26:61802] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aR6V-FWlO3EnyVMV7w5orwAAAIk"]
[Thu Nov 20 12:15:52.802653 2025] [:error] [pid 34444:tid 34446] [client 98.81.111.26:64258] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aR6V-FNEol4jlmmA_GP0nAAAAUA"]
[Thu Nov 20 12:15:53.210965 2025] [:error] [pid 55340:tid 55352] [client 98.81.111.26:50016] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aR6V-fOxD-NeMydTybBNiAAAAAc"]
[Fri Nov 21 06:49:13.383715 2025] [:error] [pid 13325:tid 13348] [client 49.7.227.204:60676] [client 49.7.227.204] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||paramountbaldivis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aR-a6SBUXj9tD75On3C-QwAAABI"]
[Fri Nov 21 11:58:49.514630 2025] [:error] [pid 13412:tid 13425] [client 146.190.140.214:36732] [client 146.190.140.214] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 146.190.140.214, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aR_jeX3-knz3ZB6HogEIkAAAAMg"]
[Fri Nov 21 12:59:14.003174 2025] [:error] [pid 13327:tid 13396] [client 4.224.244.18:45838] [client 4.224.244.18] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 4.224.244.18, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aR_xovBXf-8B6mFkLePpcAAAAIs"], referer: http://paramountbaldivis.com
[Fri Nov 21 13:01:55.127092 2025] [:error] [pid 46237:tid 46249] [client 121.43.150.118:35382] [client 121.43.150.118] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 121.43.150.118, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aR_yQyo2qlis7MUDbMI5RAAAAco"], referer: http://paramountbaldivis.com
[Fri Nov 21 13:04:41.857370 2025] [:error] [pid 13325:tid 13330] [client 89.235.79.29:42288] [client 89.235.79.29] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 89.235.79.29, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aR_y6SBUXj9tD75On3AP_AAAAAA"], referer: http://paramountbaldivis.com
[Fri Nov 21 13:09:00.526496 2025] [:error] [pid 13327:tid 13408] [client 182.43.70.143:48470] [client 182.43.70.143] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.paramountbaldivis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.paramountbaldivis.com"] [uri "/"] [unique_id "aR_z7PBXf-8B6mFkLePreAAAAJc"]
[Fri Nov 21 13:10:37.233145 2025] [:error] [pid 17882:tid 17900] [client 159.89.225.59:36118] [client 159.89.225.59] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 159.89.225.59, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aR_0TYwFFssEn348h96YEAAAAVA"], referer: http://paramountbaldivis.com
[Fri Nov 21 13:24:49.562248 2025] [:error] [pid 17882:tid 17886] [client 61.59.6.105:55482] [client 61.59.6.105] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 61.59.6.105, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aR_3oYwFFssEn348h96fwQAAAUI"], referer: http://paramountbaldivis.com
[Fri Nov 21 13:35:58.180629 2025] [:error] [pid 13325:tid 13336] [client 104.219.248.116:42690] [client 104.219.248.116] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.219.248.116, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aR_6PiBUXj9tD75On3AgpQAAAAY"], referer: http://paramountbaldivis.com
[Fri Nov 21 13:52:16.603047 2025] [:error] [pid 13327:tid 13403] [client 92.205.167.152:36082] [client 92.205.167.152] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 92.205.167.152, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aR_-EPBXf-8B6mFkLeP5dgAAAJI"], referer: http://paramountbaldivis.com
[Fri Nov 21 14:00:19.040959 2025] [:error] [pid 46237:tid 46259] [client 51.79.250.168:47518] [client 51.79.250.168] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 51.79.250.168, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aR__8yo2qlis7MUDbMJOVAAAAdQ"], referer: http://paramountbaldivis.com
[Fri Nov 21 14:15:38.260992 2025] [:error] [pid 13325:tid 13331] [client 103.147.122.46:47788] [client 103.147.122.46] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.147.122.46, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSADiiBUXj9tD75On3AsQAAAAAE"], referer: http://paramountbaldivis.com
[Fri Nov 21 14:48:34.281145 2025] [:error] [pid 25554:tid 25570] [client 117.72.221.141:47182] [client 117.72.221.141] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 117.72.221.141, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSALQh-NtB-9AzFZrk4VGgAAAQw"], referer: http://paramountbaldivis.com
[Fri Nov 21 14:54:36.229857 2025] [:error] [pid 25430:tid 25469] [client 50.62.183.56:44886] [client 50.62.183.56] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 50.62.183.56, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSAMrKpnWJcWt_4foXkcDgAAAEk"]
[Fri Nov 21 15:17:56.629978 2025] [:error] [pid 25429:tid 25451] [client 64.90.38.74:35898] [client 64.90.38.74] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 64.90.38.74, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSASJD4rZbRSr7vu-NOJUQAAABI"], referer: http://paramountbaldivis.com
[Fri Nov 21 15:27:17.547135 2025] [:error] [pid 25521:tid 25541] [client 92.205.224.57:37600] [client 92.205.224.57] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 92.205.224.57, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSAUVfhXnBMilDddn3XIXAAAANI"]
[Fri Nov 21 15:30:26.603299 2025] [:error] [pid 25521:tid 25523] [client 89.252.135.62:53114] [client 89.252.135.62] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 89.252.135.62, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSAVEvhXnBMilDddn3XMPAAAAMA"], referer: http://paramountbaldivis.com
[Fri Nov 21 15:45:35.869050 2025] [:error] [pid 25431:tid 25502] [client 139.59.253.161:40278] [client 139.59.253.161] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 139.59.253.161, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSAYn8klhXxmoIExII0dtwAAAI8"], referer: http://paramountbaldivis.com
[Fri Nov 21 15:48:37.858901 2025] [:error] [pid 25521:tid 25539] [client 101.126.146.193:54204] [client 101.126.146.193] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 101.126.146.193, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSAZVfhXnBMilDddn3XWJgAAANA"], referer: http://paramountbaldivis.com
[Fri Nov 21 15:51:40.261839 2025] [:error] [pid 25431:tid 25491] [client 103.147.122.46:42112] [client 103.147.122.46] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.147.122.46, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSAaDMklhXxmoIExII0ipQAAAIQ"], referer: http://paramountbaldivis.com
[Fri Nov 21 15:57:46.507733 2025] [:error] [pid 25429:tid 25441] [client 116.204.78.140:53418] [client 116.204.78.140] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 116.204.78.140, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSAbej4rZbRSr7vu-NOiiQAAAAg"], referer: http://paramountbaldivis.com
[Fri Nov 21 15:59:21.315371 2025] [:error] [pid 25554:tid 25563] [client 31.47.46.37:37640] [client 31.47.46.37] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 31.47.46.37, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSAb2R-NtB-9AzFZrk5ROwAAAQU"]
[Fri Nov 21 16:07:09.171614 2025] [:error] [pid 25430:tid 25478] [client 67.205.42.10:54180] [client 67.205.42.10] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 67.205.42.10, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSAdrapnWJcWt_4foXlJ0QAAAFI"], referer: http://paramountbaldivis.com
[Fri Nov 21 17:02:09.453379 2025] [:error] [pid 46939:tid 46958] [client 51.79.250.168:59922] [client 51.79.250.168] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 51.79.250.168, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSAqke0OmVoxD4VZ_ZmUrAAAAVA"], referer: http://paramountbaldivis.com
[Fri Nov 21 17:18:57.721379 2025] [:error] [pid 46939:tid 46954] [client 173.249.147.100:28601] [client 173.249.147.100] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.249.147.100, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSAuge0OmVoxD4VZ_ZmadgAAAUw"], referer: http://paramountbaldivis.com
[Fri Nov 21 18:18:01.050335 2025] [:error] [pid 25429:tid 25452] [client 103.197.58.201:57696] [client 103.197.58.201] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.197.58.201, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSA8WT4rZbRSr7vu-NPUZQAAABM"]
[Fri Nov 21 18:24:58.924631 2025] [:error] [pid 25429:tid 25455] [client 160.22.122.134:60122] [client 160.22.122.134] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 160.22.122.134, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSA9-j4rZbRSr7vu-NPWRgAAABY"], referer: http://paramountbaldivis.com
[Fri Nov 21 18:34:58.273208 2025] [:error] [pid 46939:tid 46961] [client 101.126.146.193:47484] [client 101.126.146.193] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 101.126.146.193, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSBAUu0OmVoxD4VZ_ZnAUgAAAVM"], referer: http://paramountbaldivis.com
[Fri Nov 21 18:48:27.437318 2025] [:error] [pid 25431:tid 25508] [client 139.99.171.55:53654] [client 139.99.171.55] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 139.99.171.55, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSBDe8klhXxmoIExII10EAAAAJU"], referer: http://paramountbaldivis.com
[Fri Nov 21 19:20:16.748375 2025] [:error] [pid 25430:tid 25481] [client 20.151.88.86:44514] [client 20.151.88.86] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.151.88.86, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSBK8KpnWJcWt_4foXl7wwAAAFU"], referer: http://paramountbaldivis.com
[Fri Nov 21 19:27:15.225446 2025] [:error] [pid 25521:tid 25547] [client 182.44.9.147:50268] [client 182.44.9.147] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||paramountbaldivis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aSBMk_hXnBMilDddn3UuygAAANg"]
[Fri Nov 21 19:27:29.605458 2025] [:error] [pid 25554:tid 25562] [client 51.222.106.76:48054] [client 51.222.106.76] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 51.222.106.76, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSBMoR-NtB-9AzFZrk6WKgAAAQQ"], referer: http://paramountbaldivis.com
[Fri Nov 21 19:31:02.582977 2025] [:error] [pid 25521:tid 25542] [client 206.189.80.76:54760] [client 206.189.80.76] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 206.189.80.76, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSBNdvhXnBMilDddn3UwxgAAANM"], referer: http://paramountbaldivis.com
[Fri Nov 21 19:44:54.594821 2025] [:error] [pid 25431:tid 25507] [client 45.157.54.76:51872] [client 45.157.54.76] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.157.54.76, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSBQtsklhXxmoIExII2C-gAAAJQ"]
[Fri Nov 21 19:44:57.673781 2025] [:error] [pid 46939:tid 46949] [client 45.157.54.76:52704] [client 45.157.54.76] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.157.54.76, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSBQue0OmVoxD4VZ_ZnYwAAAAUc"]
[Fri Nov 21 20:38:56.323737 2025] [:error] [pid 46939:tid 46952] [client 89.235.79.29:51046] [client 89.235.79.29] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 89.235.79.29, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSBdYO0OmVoxD4VZ_ZnpNQAAAUo"], referer: http://paramountbaldivis.com
[Fri Nov 21 20:56:44.641833 2025] [:error] [pid 25521:tid 25546] [client 61.95.223.221:34504] [client 61.95.223.221] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 61.95.223.221, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSBhjPhXnBMilDddn3VS4QAAANc"], referer: http://paramountbaldivis.com
[Fri Nov 21 21:03:40.307148 2025] [:error] [pid 25431:tid 25490] [client 68.72.143.114:37148] [client 68.72.143.114] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 68.72.143.114, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSBjLMklhXxmoIExII2X0QAAAIM"], referer: http://paramountbaldivis.com
[Fri Nov 21 21:14:18.711528 2025] [:error] [pid 25554:tid 25560] [client 125.253.121.223:47476] [client 125.253.121.223] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 125.253.121.223, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSBlqh-NtB-9AzFZrk6wyQAAAQI"], referer: http://paramountbaldivis.com
[Fri Nov 21 21:17:57.117723 2025] [:error] [pid 46939:tid 46962] [client 103.192.173.163:43054] [client 103.192.173.163] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.192.173.163, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSBmhe0OmVoxD4VZ_Zn0NwAAAVQ"], referer: http://paramountbaldivis.com
[Fri Nov 21 21:32:37.775626 2025] [:error] [pid 25431:tid 25511] [client 51.222.106.76:40240] [client 51.222.106.76] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 51.222.106.76, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSBp9cklhXxmoIExII2eewAAAJg"], referer: http://paramountbaldivis.com
[Fri Nov 21 21:43:15.038815 2025] [:error] [pid 25430:tid 25466] [client 165.22.240.243:46702] [client 165.22.240.243] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 165.22.240.243, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSBsc6pnWJcWt_4foXmdswAAAEY"], referer: http://paramountbaldivis.com
[Fri Nov 21 21:43:15.040734 2025] [:error] [pid 25430:tid 25466] [client 165.22.240.243:46702] [client 165.22.240.243] ModSecurity: XML parser error: XML: Failed parsing document. [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSBsc6pnWJcWt_4foXmdswAAAEY"], referer: http://paramountbaldivis.com
[Fri Nov 21 21:43:15.041898 2025] [:error] [pid 25430:tid 25466] [client 165.22.240.243:46702] [client 165.22.240.243] ModSecurity: Warning. Match of "eq 0" against "REQBODY_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "27"] [id "210230"] [rev "2"] [msg "COMODO WAF: The request body could not be parsed. Possibility of an impedance mismatch attack. This is not a false positive.||paramountbaldivis.com|F|2"] [data "XML parser error: XML: Failed parsing document."] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSBsc6pnWJcWt_4foXmdswAAAEY"], referer: http://paramountbaldivis.com
[Fri Nov 21 22:11:50.123006 2025] [:error] [pid 25429:tid 25447] [client 157.230.58.84:39904] [client 157.230.58.84] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 157.230.58.84, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSBzJj4rZbRSr7vu-NMLAQAAAA4"], referer: http://paramountbaldivis.com
[Fri Nov 21 22:29:12.852968 2025] [:error] [pid 25430:tid 25473] [client 162.241.225.237:12546] [client 162.241.225.237] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 162.241.225.237, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSB3OKpnWJcWt_4foXmppgAAAE0"], referer: http://paramountbaldivis.com
[Fri Nov 21 22:48:41.784914 2025] [:error] [pid 25554:tid 25577] [client 138.68.187.114:34864] [client 138.68.187.114] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 138.68.187.114, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSB7yR-NtB-9AzFZrk7K-AAAARM"], referer: http://paramountbaldivis.com
[Fri Nov 21 22:59:26.605363 2025] [:error] [pid 25521:tid 25530] [client 74.113.250.38:59514] [client 74.113.250.38] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 74.113.250.38, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSB-TvhXnBMilDddn3WEDgAAAMc"]
[Fri Nov 21 23:07:51.766673 2025] [:error] [pid 25554:tid 25569] [client 125.253.121.223:36302] [client 125.253.121.223] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 125.253.121.223, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSCARx-NtB-9AzFZrk7QIQAAAQs"], referer: http://paramountbaldivis.com
[Fri Nov 21 23:31:46.236593 2025] [:error] [pid 25431:tid 25489] [client 103.147.122.46:42568] [client 103.147.122.46] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.147.122.46, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSCF4sklhXxmoIExII2-EgAAAII"], referer: http://paramountbaldivis.com
[Fri Nov 21 23:35:02.189331 2025] [:error] [pid 39979:tid 39998] [client 203.217.101.237:43460] [client 203.217.101.237] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 203.217.101.237, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSCGpsBTn4w4bKlE6arGmgAAAZA"], referer: http://paramountbaldivis.com
[Fri Nov 21 23:46:51.976385 2025] [:error] [pid 25521:tid 25526] [client 35.225.238.220:34680] [client 35.225.238.220] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.225.238.220, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSCJa_hXnBMilDddn3WTugAAAMM"]
[Sat Nov 22 00:40:47.107756 2025] [:error] [pid 50057:tid 50071] [client 103.147.122.46:47454] [client 103.147.122.46] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.147.122.46, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSCWD1b9j9fTBoI0sRU3kAAAAQw"], referer: http://paramountbaldivis.com
[Sat Nov 22 00:43:39.070508 2025] [:error] [pid 50057:tid 50062] [client 125.253.121.223:32790] [client 125.253.121.223] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 125.253.121.223, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSCWu1b9j9fTBoI0sRU4ugAAAQM"], referer: http://paramountbaldivis.com
[Sat Nov 22 01:03:22.682748 2025] [:error] [pid 50057:tid 50073] [client 162.0.232.11:49716] [client 162.0.232.11] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 162.0.232.11, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSCbWlb9j9fTBoI0sRVALAAAAQ4"], referer: http://paramountbaldivis.com
[Sat Nov 22 01:17:15.847248 2025] [:error] [pid 49642:tid 49897] [client 3.222.221.187:60856] [client 3.222.221.187] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 3.222.221.187, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSCem4OXTPSuQfgUUtWNYgAAAIY"]
[Sat Nov 22 01:46:09.013744 2025] [:error] [pid 49641:tid 49823] [client 62.214.228.180:62415] [client 62.214.228.180] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 62.214.228.180, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSClYVnhuiDak938N_bAZQAAAAA"], referer: http://paramountbaldivis.com
[Sat Nov 22 01:59:13.655290 2025] [:error] [pid 50057:tid 50071] [client 23.95.221.130:45834] [client 23.95.221.130] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 23.95.221.130, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSCocVb9j9fTBoI0sRVXxwAAAQw"]
[Sat Nov 22 02:03:35.063724 2025] [:error] [pid 49642:tid 49896] [client 138.68.187.114:46902] [client 138.68.187.114] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 138.68.187.114, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSCpd4OXTPSuQfgUUtWcpgAAAIU"], referer: http://paramountbaldivis.com
[Sat Nov 22 02:11:19.691060 2025] [:error] [pid 49643:tid 49942] [client 4.224.244.18:52026] [client 4.224.244.18] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 4.224.244.18, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSCrR5wUojIRHhF_fj-dkAAAANY"], referer: http://paramountbaldivis.com
[Sat Nov 22 02:12:41.096097 2025] [:error] [pid 49641:tid 49824] [client 182.44.9.147:46199] [client 182.44.9.147] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.paramountbaldivis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.paramountbaldivis.com"] [uri "/"] [unique_id "aSCrmVnhuiDak938N_bJcQAAAAE"]
[Sat Nov 22 02:47:32.576103 2025] [:error] [pid 49641:tid 49834] [client 142.93.110.8:52410] [client 142.93.110.8] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 142.93.110.8, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSCzxFnhuiDak938N_bSJAAAAAs"], referer: http://paramountbaldivis.com
[Sat Nov 22 02:48:03.125771 2025] [:error] [pid 49643:tid 49934] [client 173.212.197.119:35900] [client 173.212.197.119] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.212.197.119, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSCz45wUojIRHhF_fj-lrwAAAM4"]
[Sat Nov 22 03:00:41.414751 2025] [:error] [pid 9180:tid 9190] [client 162.241.216.101:51576] [client 162.241.216.101] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 162.241.216.101, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSC22brk9msixUFV2i-8zAAAAEg"], referer: http://paramountbaldivis.com
[Sat Nov 22 03:13:51.844876 2025] [:error] [pid 33947:tid 33983] [client 115.190.32.154:49048] [client 115.190.32.154] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 115.190.32.154, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSC577bLpKwCU1eDiJrB1gAAABA"], referer: http://paramountbaldivis.com
[Sat Nov 22 03:23:19.017702 2025] [:error] [pid 6075:tid 6125] [client 20.151.88.86:44298] [client 20.151.88.86] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.151.88.86, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSC8J8i9VZsCrAy80H4iYAAAAE4"], referer: http://paramountbaldivis.com
[Sat Nov 22 03:25:14.705069 2025] [:error] [pid 36794:tid 36849] [client 35.225.238.220:40352] [client 35.225.238.220] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.225.238.220, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSC8mg-ml21Xojf-P4RflwAAAFE"]
[Sat Nov 22 03:34:57.595102 2025] [:error] [pid 8969:tid 9002] [client 185.75.71.209:34508] [client 185.75.71.209] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.75.71.209, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSC-4XZEkpElZmH2DXwphgAAABM"], referer: http://paramountbaldivis.com
[Sat Nov 22 03:37:56.140733 2025] [:error] [pid 8970:tid 9032] [client 4.224.244.18:47102] [client 4.224.244.18] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 4.224.244.18, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSC_lJuSBcofSIY3VZB-WQAAAFQ"], referer: http://paramountbaldivis.com
[Sat Nov 22 03:49:35.304969 2025] [:error] [pid 53479:tid 53538] [client 67.205.42.10:47536] [client 67.205.42.10] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 67.205.42.10, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSDCT26cicFF3Aas-oQ6pAAAAII"], referer: http://paramountbaldivis.com
[Sat Nov 22 03:53:09.816767 2025] [:error] [pid 53479:tid 53555] [client 103.167.150.158:60013] [client 103.167.150.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/media/system/js/core.js"] [unique_id "aSDDJW6cicFF3Aas-oQ8EgAAAJM"]
[Sat Nov 22 04:01:14.306096 2025] [:error] [pid 53566:tid 53574] [client 51.79.250.168:38334] [client 51.79.250.168] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 51.79.250.168, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSDFCsbSHDBkRbwMbd70zQAAAMY"], referer: http://paramountbaldivis.com
[Sat Nov 22 04:13:15.987940 2025] [:error] [pid 53477:tid 53501] [client 103.153.42.102:52104] [client 103.153.42.102] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.153.42.102, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSDH237Lu30Ku9O40aKpLAAAABQ"], referer: http://paramountbaldivis.com
[Sat Nov 22 04:28:45.935645 2025] [:error] [pid 53479:tid 53560] [client 192.178.4.101:51326] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aSDLfW6cicFF3Aas-oRKGQAAAJg"]
[Sat Nov 22 04:28:54.660920 2025] [:error] [pid 53478:tid 53520] [client 192.178.4.101:50291] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aSDLhghUYdXBbQswAdThowAAAEs"]
[Sat Nov 22 04:29:02.552078 2025] [:error] [pid 53479:tid 53536] [client 192.178.4.101:49183] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aSDLjm6cicFF3Aas-oRKMwAAAIA"]
[Sat Nov 22 04:29:09.999820 2025] [:error] [pid 53566:tid 53575] [client 192.178.4.101:41565] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aSDLlcbSHDBkRbwMbd4ChAAAAMc"]
[Sat Nov 22 04:29:19.389009 2025] [:error] [pid 53478:tid 53520] [client 192.178.4.101:60133] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aSDLnwhUYdXBbQswAdThwAAAAEs"]
[Sat Nov 22 04:29:28.777787 2025] [:error] [pid 25856:tid 25870] [client 192.178.4.101:48259] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aSDLqBsTP0wy94zKUvFyKwAAAQw"]
[Sat Nov 22 04:34:37.633030 2025] [:error] [pid 53477:tid 53494] [client 167.172.41.47:55495] [client 167.172.41.47] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 167.172.41.47, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSDM3X7Lu30Ku9O40aKysAAAAA0"], referer: http://paramountbaldivis.com
[Sat Nov 22 04:37:40.149944 2025] [:error] [pid 53478:tid 53515] [client 165.84.218.233:60057] [client 165.84.218.233] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 165.84.218.233, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSDNlAhUYdXBbQswAdTnEAAAAEY"], referer: http://paramountbaldivis.com
[Sat Nov 22 04:40:43.049306 2025] [:error] [pid 53566:tid 53569] [client 142.93.110.8:33420] [client 142.93.110.8] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 142.93.110.8, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSDOS8bSHDBkRbwMbd4LJQAAAME"], referer: http://paramountbaldivis.com
[Sat Nov 22 04:52:51.626916 2025] [:error] [pid 53477:tid 53493] [client 139.59.253.161:52978] [client 139.59.253.161] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 139.59.253.161, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSDRI37Lu30Ku9O40aK8OgAAAAw"], referer: http://paramountbaldivis.com
[Sat Nov 22 05:05:09.593693 2025] [:error] [pid 25856:tid 25873] [client 165.84.218.233:50311] [client 165.84.218.233] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 165.84.218.233, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSDUBRsTP0wy94zKUvGOQQAAAQ8"], referer: http://paramountbaldivis.com
[Sat Nov 22 05:17:28.511498 2025] [:error] [pid 53479:tid 53548] [client 121.43.150.118:53960] [client 121.43.150.118] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 121.43.150.118, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSDW6G6cicFF3Aas-oRmFQAAAIw"], referer: http://paramountbaldivis.com
[Sat Nov 22 05:29:43.630893 2025] [:error] [pid 53478:tid 53525] [client 172.188.216.109:56794] [client 172.188.216.109] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.188.216.109, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSDZxwhUYdXBbQswAdQK1wAAAFA"], referer: http://paramountbaldivis.com
[Sat Nov 22 06:12:44.511715 2025] [:error] [pid 53477:tid 53497] [client 101.68.43.236:53598] [client 101.68.43.236] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 101.68.43.236, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSDj3H7Lu30Ku9O40aLuhgAAABA"], referer: http://paramountbaldivis.com
[Sat Nov 22 06:29:11.377477 2025] [:error] [pid 53478:tid 53510] [client 194.5.82.124:34073] [client 194.5.82.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aSDntwhUYdXBbQswAdQyRAAAAEE"]
[Sat Nov 22 06:29:18.072689 2025] [:error] [pid 25856:tid 25867] [client 194.5.82.135:65227] [client 194.5.82.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aSDnvhsTP0wy94zKUvHUFgAAAQk"]
[Sat Nov 22 06:29:37.296227 2025] [:error] [pid 25856:tid 25863] [client 194.5.82.138:25735] [client 194.5.82.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "paramountbaldivis.com"] [uri "/tinyfilemanager.php"] [unique_id "aSDn0RsTP0wy94zKUvHUbwAAAQU"]
[Sat Nov 22 06:29:46.741767 2025] [:error] [pid 53477:tid 53500] [client 194.5.82.160:21293] [client 194.5.82.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/js/index.php"] [unique_id "aSDn2n7Lu30Ku9O40aL6cgAAABM"]
[Sat Nov 22 06:30:02.927999 2025] [:error] [pid 53566:tid 53569] [client 194.5.82.140:44257] [client 194.5.82.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aSDn6sbSHDBkRbwMbd5aFQAAAME"]
[Sat Nov 22 06:30:05.598419 2025] [:error] [pid 53566:tid 53578] [client 194.5.82.157:22599] [client 194.5.82.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aSDn7cbSHDBkRbwMbd5aIAAAAMo"]
[Sat Nov 22 06:30:05.804412 2025] [:error] [pid 53479:tid 53543] [client 194.5.82.140:28861] [client 194.5.82.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aSDn7W6cicFF3Aas-oSU5AAAAIc"]
[Sat Nov 22 06:30:06.067114 2025] [:error] [pid 53479:tid 53549] [client 194.5.82.143:40197] [client 194.5.82.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aSDn7m6cicFF3Aas-oSU5gAAAI0"]
[Sat Nov 22 06:30:06.260115 2025] [:error] [pid 53477:tid 53494] [client 194.5.82.111:36107] [client 194.5.82.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aSDn7n7Lu30Ku9O40aL6lwAAAA0"]
[Sat Nov 22 06:30:06.454591 2025] [:error] [pid 53566:tid 53581] [client 194.5.82.111:58655] [client 194.5.82.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aSDn7sbSHDBkRbwMbd5aIwAAAM0"]
[Sat Nov 22 06:30:09.253701 2025] [:error] [pid 53566:tid 53584] [client 194.5.82.122:21095] [client 194.5.82.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aSDn8cbSHDBkRbwMbd5aKgAAANA"]
[Sat Nov 22 06:30:11.164638 2025] [:error] [pid 53479:tid 53542] [client 194.5.82.141:39737] [client 194.5.82.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "paramountbaldivis.com"] [uri "/filemanager.php"] [unique_id "aSDn826cicFF3Aas-oSU9gAAAIY"]
[Sat Nov 22 06:30:17.222952 2025] [:error] [pid 53566:tid 53590] [client 194.5.82.107:59557] [client 194.5.82.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aSDn-cbSHDBkRbwMbd5aPAAAANY"]
[Sat Nov 22 06:30:21.940660 2025] [:error] [pid 53478:tid 53511] [client 194.5.82.105:63503] [client 194.5.82.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aSDn_QhUYdXBbQswAdQzZQAAAEI"]
[Sat Nov 22 06:30:23.546972 2025] [:error] [pid 25856:tid 25875] [client 194.5.82.131:55445] [client 194.5.82.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aSDn_xsTP0wy94zKUvHVLAAAARE"]
[Sat Nov 22 06:30:36.276739 2025] [:error] [pid 53477:tid 53493] [client 194.5.82.160:41213] [client 194.5.82.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aSDoDH7Lu30Ku9O40aL7CgAAAAw"]
[Sat Nov 22 06:30:38.474775 2025] [:error] [pid 53479:tid 53551] [client 194.5.82.139:50073] [client 194.5.82.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aSDoDm6cicFF3Aas-oSVPgAAAI8"]
[Sat Nov 22 06:30:45.991163 2025] [:error] [pid 53478:tid 53531] [client 194.5.82.111:55743] [client 194.5.82.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/defaults.php"] [unique_id "aSDoFQhUYdXBbQswAdQzsQAAAFY"]
[Sat Nov 22 06:30:48.549115 2025] [:error] [pid 53477:tid 53481] [client 194.5.82.156:21959] [client 194.5.82.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/customize/index.php"] [unique_id "aSDoGH7Lu30Ku9O40aL7IQAAAAA"]
[Sat Nov 22 06:30:57.787391 2025] [:error] [pid 25856:tid 25861] [client 194.5.82.106:45737] [client 194.5.82.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aSDoIRsTP0wy94zKUvHVtgAAAQM"]
[Sat Nov 22 06:31:00.174794 2025] [:error] [pid 53566:tid 53588] [client 194.5.82.125:52663] [client 194.5.82.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aSDoJMbSHDBkRbwMbd5azgAAANQ"]
[Sat Nov 22 06:31:03.247879 2025] [:error] [pid 53478:tid 53511] [client 194.5.82.107:25685] [client 194.5.82.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/Requests/index.php"] [unique_id "aSDoJwhUYdXBbQswAdQ0AwAAAEI"]
[Sat Nov 22 06:31:03.430194 2025] [:error] [pid 53566:tid 53580] [client 194.5.82.131:58659] [client 194.5.82.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aSDoJ8bSHDBkRbwMbd5a3AAAAMw"]
[Sat Nov 22 06:31:03.609810 2025] [:error] [pid 25856:tid 25866] [client 194.5.82.117:29683] [client 194.5.82.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aSDoJxsTP0wy94zKUvHVxgAAAQg"]
[Sat Nov 22 06:31:12.672064 2025] [:error] [pid 53477:tid 53486] [client 194.5.82.154:63811] [client 194.5.82.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/assets/info.php"] [unique_id "aSDoMH7Lu30Ku9O40aL7egAAAAU"]
[Sat Nov 22 06:31:12.905186 2025] [:error] [pid 53566:tid 53583] [client 194.5.82.170:24565] [client 194.5.82.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/class.api.php"] [unique_id "aSDoMMbSHDBkRbwMbd5bAAAAAM8"]
[Sat Nov 22 06:31:13.094563 2025] [:error] [pid 53566:tid 53573] [client 194.5.82.147:24117] [client 194.5.82.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "aSDoMcbSHDBkRbwMbd5bAgAAAMU"]
[Sat Nov 22 06:31:39.179839 2025] [:error] [pid 25856:tid 25879] [client 194.5.82.109:50559] [client 194.5.82.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/admin.php"] [unique_id "aSDoSxsTP0wy94zKUvHWdgAAARU"]
[Sat Nov 22 06:31:47.992005 2025] [:error] [pid 53479:tid 53556] [client 194.5.82.123:65509] [client 194.5.82.123] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.5.82.123, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aSDoU26cicFF3Aas-oSWGgAAAJQ"]
[Sat Nov 22 06:32:26.442699 2025] [:error] [pid 53479:tid 53548] [client 194.5.82.123:65509] [client 194.5.82.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aSDoem6cicFF3Aas-oSWVQAAAIw"]
[Sat Nov 22 06:32:29.206455 2025] [:error] [pid 53478:tid 53513] [client 194.5.82.150:46389] [client 194.5.82.150] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.5.82.150, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aSDofQhUYdXBbQswAdQ0yAAAAEQ"]
[Sat Nov 22 06:32:32.660391 2025] [:error] [pid 53478:tid 53525] [client 194.5.82.150:46389] [client 194.5.82.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/item.php"] [unique_id "aSDogAhUYdXBbQswAdQ0zgAAAFA"]
[Sat Nov 22 06:32:52.233480 2025] [:error] [pid 25856:tid 25876] [client 194.5.82.128:22785] [client 194.5.82.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aSDolBsTP0wy94zKUvHXLgAAARI"]
[Sat Nov 22 06:33:23.141735 2025] [:error] [pid 53566:tid 53586] [client 194.5.82.128:21331] [client 194.5.82.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aSDos8bSHDBkRbwMbd5cCwAAANI"]
[Sat Nov 22 06:33:31.575052 2025] [:error] [pid 53478:tid 53511] [client 194.5.82.157:65011] [client 194.5.82.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aSDouwhUYdXBbQswAdQ1QAAAAEI"]
[Sat Nov 22 06:56:42.296809 2025] [:error] [pid 53566:tid 53575] [client 212.116.231.26:47444] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/bless.php"] [unique_id "aSDuKsbSHDBkRbwMbd5nYAAAAMc"]
[Sat Nov 22 06:56:43.132147 2025] [:error] [pid 25856:tid 25870] [client 212.116.231.26:49346] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/bless.php"] [unique_id "aSDuKxsTP0wy94zKUvHnQgAAAQw"]
[Sat Nov 22 06:56:43.956123 2025] [:error] [pid 53478:tid 53528] [client 212.116.231.26:49778] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/bless.php"] [unique_id "aSDuKwhUYdXBbQswAdRACwAAAFM"]
[Sat Nov 22 06:56:44.806894 2025] [:error] [pid 53479:tid 53536] [client 212.116.231.26:50210] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/bless.php"] [unique_id "aSDuLG6cicFF3Aas-oShhwAAAIA"]
[Sat Nov 22 06:56:45.646386 2025] [:error] [pid 53479:tid 53547] [client 212.116.231.26:50664] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/bless.php"] [unique_id "aSDuLW6cicFF3Aas-oShkwAAAIs"]
[Sat Nov 22 06:56:46.478954 2025] [:error] [pid 25856:tid 25879] [client 212.116.231.26:51088] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/css/dist/"] [unique_id "aSDuLhsTP0wy94zKUvHndAAAARU"]
[Sat Nov 22 06:56:47.312120 2025] [:error] [pid 53479:tid 53546] [client 212.116.231.26:51478] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/css/dist/"] [unique_id "aSDuL26cicFF3Aas-oShmAAAAIo"]
[Sat Nov 22 06:56:48.133902 2025] [:error] [pid 25856:tid 25882] [client 212.116.231.26:51894] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/css/dist/"] [unique_id "aSDuMBsTP0wy94zKUvHnpQAAARg"]
[Sat Nov 22 06:56:48.966786 2025] [:error] [pid 25856:tid 25862] [client 212.116.231.26:52370] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/css/dist/"] [unique_id "aSDuMBsTP0wy94zKUvHnuwAAAQQ"]
[Sat Nov 22 06:56:49.803142 2025] [:error] [pid 53566:tid 53589] [client 212.116.231.26:45708] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/css/dist/"] [unique_id "aSDuMcbSHDBkRbwMbd5nwAAAANU"]
[Sat Nov 22 09:20:16.929726 2025] [:error] [pid 53479:tid 53560] [client 185.48.182.96:35910] [client 185.48.182.96] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.48.182.96, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSEP0G6cicFF3Aas-oTNDwAAAJg"]
[Sat Nov 22 09:57:06.267832 2025] [autoindex:error] [pid 9547:tid 9554] [client 139.59.37.180:53028] AH01276: Cannot serve directory /home/baldivis/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sat Nov 22 12:20:28.862488 2025] [:error] [pid 53479:tid 53541] [client 50.116.65.110:14002] [client 50.116.65.110] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 50.116.65.110, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSE6DG6cicFF3Aas-oT_JAAAAIU"], referer: http://paramountbaldivis.com
[Sat Nov 22 12:24:18.723602 2025] [:error] [pid 25856:tid 25865] [client 43.166.246.180:51392] [client 43.166.246.180] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||paramountbaldivis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aSE68hsTP0wy94zKUvFUfwAAAQc"]
[Sat Nov 22 13:44:00.442904 2025] [:error] [pid 9547:tid 9570] [client 50.6.155.16:41342] [client 50.6.155.16] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 50.6.155.16, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSFNoNClOR5qk7DoMeFQCgAAAVE"], referer: http://paramountbaldivis.com
[Sat Nov 22 13:58:31.195052 2025] [:error] [pid 53479:tid 53555] [client 185.48.182.96:57758] [client 185.48.182.96] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.48.182.96, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSFRB26cicFF3Aas-oQmcwAAAJM"]
[Sat Nov 22 13:58:56.431670 2025] [:error] [pid 9547:tid 9571] [client 183.90.183.11:50108] [client 183.90.183.11] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 183.90.183.11, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aSFRINClOR5qk7DoMeFUUwAAAVI"]
[Sat Nov 22 14:11:03.861070 2025] [:error] [pid 53566:tid 53578] [client 20.123.252.35:18192] [client 20.123.252.35] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.123.252.35, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSFT98bSHDBkRbwMbd7oSwAAAMo"], referer: http://paramountbaldivis.com
[Sat Nov 22 14:37:15.938933 2025] [:error] [pid 53479:tid 53559] [client 182.44.67.97:44182] [client 182.44.67.97] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.paramountbaldivis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.paramountbaldivis.com"] [uri "/"] [unique_id "aSFaG26cicFF3Aas-oQ4BwAAAJc"]
[Sat Nov 22 14:50:27.838828 2025] [:error] [pid 53566:tid 53571] [client 162.241.60.43:47230] [client 162.241.60.43] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 162.241.60.43, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSFdM8bSHDBkRbwMbd7zQgAAAMM"], referer: http://paramountbaldivis.com
[Sat Nov 22 14:52:29.788221 2025] [:error] [pid 53477:tid 53499] [client 64.227.76.238:18666] [client 64.227.76.238] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 64.227.76.238, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSFdrX7Lu30Ku9O40aKAZwAAABI"]
[Sat Nov 22 16:13:36.496981 2025] [:error] [pid 53566:tid 53574] [client 158.170.66.237:56390] [client 158.170.66.237] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.170.66.237, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSFwsMbSHDBkRbwMbd4E2AAAAMY"], referer: http://paramountbaldivis.com
[Sat Nov 22 16:29:09.633231 2025] [:error] [pid 25856:tid 25873] [client 182.253.58.139:13196] [client 182.253.58.139] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 182.253.58.139, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSF0VRsTP0wy94zKUvGSZQAAAQ8"], referer: http://paramountbaldivis.com
[Sat Nov 22 16:53:07.483430 2025] [:error] [pid 25856:tid 25878] [client 50.116.95.1:22616] [client 50.116.95.1] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 50.116.95.1, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSF58xsTP0wy94zKUvGaSAAAARQ"], referer: http://paramountbaldivis.com
[Sat Nov 22 17:57:51.379940 2025] [:error] [pid 44259:tid 44266] [client 103.154.37.227:46774] [client 103.154.37.227] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.154.37.227, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSGJH3Xe1xL-_YOdRmRa4wAAAYQ"]
[Sat Nov 22 18:13:01.296490 2025] [:error] [pid 53477:tid 53505] [client 192.185.81.218:37078] [client 192.185.81.218] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 192.185.81.218, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSGMrX7Lu30Ku9O40aKwPAAAABg"]
[Sat Nov 22 18:56:45.673595 2025] [:error] [pid 44259:tid 44285] [client 14.225.205.165:53722] [client 14.225.205.165] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 14.225.205.165, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSGW7XXe1xL-_YOdRmR4PwAAAZc"]
[Sat Nov 22 20:21:04.863111 2025] [:error] [pid 25856:tid 25874] [client 94.247.172.129:7436] [client 94.247.172.129] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.paramountbaldivis.com|F|4"] [data "close, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.paramountbaldivis.com"] [uri "/"] [unique_id "aSGqsBsTP0wy94zKUvHbUAAAARA"]
[Sat Nov 22 20:47:05.387336 2025] [autoindex:error] [pid 25856:tid 25880] [client 20.234.11.210:63719] AH01276: Cannot serve directory /home/baldivis/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 20:47:09.482963 2025] [proxy_fcgi:error] [pid 53566:tid 53580] [client 20.234.11.210:20495] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:47:12.240301 2025] [:error] [pid 53566:tid 53588] [client 20.234.11.210:20495] [client 20.234.11.210] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/0.php"] [unique_id "aSGw0MbSHDBkRbwMbd5VDgAAANQ"]
[Sat Nov 22 20:47:24.849138 2025] [:error] [pid 44259:tid 44281] [client 20.234.11.210:20502] [client 20.234.11.210] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/cs.php"] [unique_id "aSGw3HXe1xL-_YOdRmS1WAAAAZM"]
[Sat Nov 22 20:47:29.313054 2025] [:error] [pid 44259:tid 44280] [client 20.234.11.210:20519] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/images/m.php"] [unique_id "aSGw4XXe1xL-_YOdRmS1XQAAAZI"]
[Sat Nov 22 20:47:30.490281 2025] [:error] [pid 44259:tid 44267] [client 20.234.11.210:63711] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/images/m.php"] [unique_id "aSGw4nXe1xL-_YOdRmS1XgAAAYU"]
[Sat Nov 22 20:47:32.018419 2025] [:error] [pid 53566:tid 53572] [client 20.234.11.210:63741] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/images/m.php"] [unique_id "aSGw5MbSHDBkRbwMbd5VGQAAAMQ"]
[Sat Nov 22 20:47:33.138232 2025] [:error] [pid 25856:tid 25879] [client 20.234.11.210:20508] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/images/m.php"] [unique_id "aSGw5RsTP0wy94zKUvHk-gAAARU"]
[Sat Nov 22 20:47:34.518187 2025] [:error] [pid 53477:tid 53490] [client 20.234.11.210:63695] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/sko.php"] [unique_id "aSGw5n7Lu30Ku9O40aLj9wAAAAk"]
[Sat Nov 22 20:47:35.956198 2025] [:error] [pid 53566:tid 53586] [client 20.234.11.210:63718] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/sko.php"] [unique_id "aSGw58bSHDBkRbwMbd5VGwAAANI"]
[Sat Nov 22 20:47:37.171479 2025] [:error] [pid 53478:tid 53512] [client 20.234.11.210:63680] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/sko.php"] [unique_id "aSGw6QhUYdXBbQswAdQebwAAAEM"]
[Sat Nov 22 20:47:37.897180 2025] [:error] [pid 53478:tid 53522] [client 20.234.11.210:63681] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/sko.php"] [unique_id "aSGw6QhUYdXBbQswAdQecQAAAE0"]
[Sat Nov 22 20:47:39.965749 2025] [:error] [pid 53478:tid 53518] [client 20.234.11.210:20529] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/tx1.php"] [unique_id "aSGw6whUYdXBbQswAdQecwAAAEk"]
[Sat Nov 22 20:47:41.102662 2025] [:error] [pid 53478:tid 53514] [client 20.234.11.210:20535] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/tx1.php"] [unique_id "aSGw7QhUYdXBbQswAdQedQAAAEU"]
[Sat Nov 22 20:47:41.783186 2025] [:error] [pid 9547:tid 9553] [client 20.234.11.210:63683] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/tx1.php"] [unique_id "aSGw7dClOR5qk7DoMeHpsgAAAUA"]
[Sat Nov 22 20:47:42.915852 2025] [:error] [pid 53566:tid 53577] [client 20.234.11.210:20483] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/tx1.php"] [unique_id "aSGw7sbSHDBkRbwMbd5VHQAAAMk"]
[Sat Nov 22 20:47:43.727090 2025] [:error] [pid 53478:tid 53525] [client 20.234.11.210:21130] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/xv.php"] [unique_id "aSGw7whUYdXBbQswAdQedgAAAFA"]
[Sat Nov 22 20:47:45.088456 2025] [:error] [pid 44259:tid 44272] [client 20.234.11.210:20510] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/xv.php"] [unique_id "aSGw8XXe1xL-_YOdRmS1dgAAAYo"]
[Sat Nov 22 20:47:46.074946 2025] [:error] [pid 44259:tid 44262] [client 20.234.11.210:63691] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/xv.php"] [unique_id "aSGw8nXe1xL-_YOdRmS1ewAAAYA"]
[Sat Nov 22 20:47:47.447664 2025] [:error] [pid 44259:tid 44278] [client 20.234.11.210:63716] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/xv.php"] [unique_id "aSGw83Xe1xL-_YOdRmS1fgAAAZA"]
[Sat Nov 22 20:47:49.029681 2025] [:error] [pid 53479:tid 53554] [client 20.234.11.210:20528] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/x56.php"] [unique_id "aSGw9W6cicFF3Aas-oS-AgAAAJI"]
[Sat Nov 22 20:47:50.098193 2025] [:error] [pid 9547:tid 9560] [client 20.234.11.210:63706] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/x56.php"] [unique_id "aSGw9tClOR5qk7DoMeHpuQAAAUc"]
[Sat Nov 22 20:47:51.416183 2025] [:error] [pid 9547:tid 9558] [client 20.234.11.210:20521] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/x56.php"] [unique_id "aSGw99ClOR5qk7DoMeHpuwAAAUU"]
[Sat Nov 22 20:47:53.074870 2025] [:error] [pid 53479:tid 53545] [client 20.234.11.210:21126] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/x56.php"] [unique_id "aSGw-W6cicFF3Aas-oS-BQAAAIk"]
[Sat Nov 22 20:47:54.482503 2025] [:error] [pid 53477:tid 53500] [client 20.234.11.210:20492] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/htaccess.php"] [unique_id "aSGw-n7Lu30Ku9O40aLkCgAAABM"]
[Sat Nov 22 20:47:56.062907 2025] [:error] [pid 53478:tid 53533] [client 20.234.11.210:20520] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/htaccess.php"] [unique_id "aSGw_AhUYdXBbQswAdQehgAAAFg"]
[Sat Nov 22 20:47:57.134245 2025] [:error] [pid 9547:tid 9564] [client 20.234.11.210:63688] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/htaccess.php"] [unique_id "aSGw_dClOR5qk7DoMeHpxAAAAUs"]
[Sat Nov 22 20:47:58.227871 2025] [:error] [pid 44259:tid 44271] [client 20.234.11.210:63702] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/htaccess.php"] [unique_id "aSGw_nXe1xL-_YOdRmS1mgAAAYk"]
[Sat Nov 22 20:47:59.573109 2025] [:error] [pid 53566:tid 53586] [client 20.234.11.210:63685] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/readme.php"] [unique_id "aSGw_8bSHDBkRbwMbd5VPQAAANI"]
[Sat Nov 22 20:48:01.802158 2025] [:error] [pid 9547:tid 9573] [client 20.234.11.210:21151] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/readme.php"] [unique_id "aSGxAdClOR5qk7DoMeHp4QAAAVQ"]
[Sat Nov 22 20:48:02.902744 2025] [:error] [pid 53479:tid 53552] [client 20.234.11.210:63737] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/readme.php"] [unique_id "aSGxAm6cicFF3Aas-oS-GAAAAJA"]
[Sat Nov 22 20:48:04.154757 2025] [:error] [pid 25856:tid 25863] [client 20.234.11.210:63717] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/readme.php"] [unique_id "aSGxBBsTP0wy94zKUvHlHgAAAQU"]
[Sat Nov 22 20:48:05.506454 2025] [:error] [pid 53479:tid 53543] [client 20.234.11.210:21136] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/Cok.php"] [unique_id "aSGxBW6cicFF3Aas-oS-JAAAAIc"]
[Sat Nov 22 20:48:06.610931 2025] [:error] [pid 25856:tid 25868] [client 20.234.11.210:63701] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/Cok.php"] [unique_id "aSGxBhsTP0wy94zKUvHlNAAAAQo"]
[Sat Nov 22 20:48:07.972910 2025] [:error] [pid 9547:tid 9555] [client 20.234.11.210:63684] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/Cok.php"] [unique_id "aSGxB9ClOR5qk7DoMeHp5gAAAUI"]
[Sat Nov 22 20:48:09.284051 2025] [:error] [pid 9547:tid 9567] [client 20.234.11.210:20543] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/Cok.php"] [unique_id "aSGxCdClOR5qk7DoMeHp5wAAAU4"]
[Sat Nov 22 20:48:10.289039 2025] [:error] [pid 53479:tid 53558] [client 20.234.11.210:63724] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/hob.php"] [unique_id "aSGxCm6cicFF3Aas-oS-SQAAAJY"]
[Sat Nov 22 20:48:11.545346 2025] [:error] [pid 53566:tid 53571] [client 20.234.11.210:20505] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/hob.php"] [unique_id "aSGxC8bSHDBkRbwMbd5VQgAAAMM"]
[Sat Nov 22 20:48:12.627879 2025] [:error] [pid 44259:tid 44284] [client 20.234.11.210:20493] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/hob.php"] [unique_id "aSGxDHXe1xL-_YOdRmS16QAAAZY"]
[Sat Nov 22 20:48:14.546090 2025] [:error] [pid 25856:tid 25881] [client 20.234.11.210:20540] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/hob.php"] [unique_id "aSGxDhsTP0wy94zKUvHlOAAAARc"]
[Sat Nov 22 20:48:16.210139 2025] [:error] [pid 53566:tid 53569] [client 20.234.11.210:63700] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/x50.php"] [unique_id "aSGxEMbSHDBkRbwMbd5VRQAAAME"]
[Sat Nov 22 20:48:17.895495 2025] [:error] [pid 44259:tid 44269] [client 20.234.11.210:20480] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/x50.php"] [unique_id "aSGxEXXe1xL-_YOdRmS17gAAAYc"]
[Sat Nov 22 20:48:19.140287 2025] [:error] [pid 25856:tid 25865] [client 20.234.11.210:20542] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/x50.php"] [unique_id "aSGxExsTP0wy94zKUvHlOQAAAQc"]
[Sat Nov 22 20:48:20.443822 2025] [:error] [pid 44259:tid 44285] [client 20.234.11.210:21312] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/x50.php"] [unique_id "aSGxFHXe1xL-_YOdRmS2CQAAAZc"]
[Sat Nov 22 20:48:21.331173 2025] [:error] [pid 53479:tid 53543] [client 20.234.11.210:20498] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/fh26.php"] [unique_id "aSGxFW6cicFF3Aas-oS-YQAAAIc"]
[Sat Nov 22 20:48:22.869488 2025] [:error] [pid 25856:tid 25878] [client 20.234.11.210:20522] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/fh26.php"] [unique_id "aSGxFhsTP0wy94zKUvHlOwAAARQ"]
[Sat Nov 22 20:48:24.563341 2025] [:error] [pid 9547:tid 9567] [client 20.234.11.210:20494] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/fh26.php"] [unique_id "aSGxGNClOR5qk7DoMeHqJQAAAU4"]
[Sat Nov 22 20:48:26.343734 2025] [:error] [pid 53566:tid 53581] [client 20.234.11.210:63696] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/fh26.php"] [unique_id "aSGxGsbSHDBkRbwMbd5VSwAAAM0"]
[Sat Nov 22 20:48:59.133259 2025] [:error] [pid 53478:tid 53513] [client 20.234.11.210:20537] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/403.php"] [unique_id "aSGxOwhUYdXBbQswAdQfBQAAAEQ"]
[Sat Nov 22 20:49:01.098174 2025] [:error] [pid 9547:tid 9557] [client 20.234.11.210:63708] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/403.php"] [unique_id "aSGxPdClOR5qk7DoMeHqXwAAAUQ"]
[Sat Nov 22 20:49:02.140886 2025] [:error] [pid 9547:tid 9555] [client 20.234.11.210:21122] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/403.php"] [unique_id "aSGxPtClOR5qk7DoMeHqYQAAAUI"]
[Sat Nov 22 20:49:03.250696 2025] [:error] [pid 53477:tid 53483] [client 20.234.11.210:63729] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/403.php"] [unique_id "aSGxP37Lu30Ku9O40aLkYAAAAAI"]
[Sat Nov 22 20:49:04.293812 2025] [:error] [pid 53479:tid 53540] [client 20.234.11.210:63694] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/max.php"] [unique_id "aSGxQG6cicFF3Aas-oS-kAAAAIQ"]
[Sat Nov 22 20:49:06.291939 2025] [:error] [pid 53478:tid 53522] [client 20.234.11.210:20506] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/max.php"] [unique_id "aSGxQghUYdXBbQswAdQfCAAAAE0"]
[Sat Nov 22 20:49:07.216371 2025] [:error] [pid 9547:tid 9575] [client 20.234.11.210:63732] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/max.php"] [unique_id "aSGxQ9ClOR5qk7DoMeHqZwAAAVY"]
[Sat Nov 22 20:49:08.272739 2025] [:error] [pid 9547:tid 9556] [client 20.234.11.210:20491] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/max.php"] [unique_id "aSGxRNClOR5qk7DoMeHqaQAAAUM"]
[Sat Nov 22 20:49:09.729946 2025] [:error] [pid 53566:tid 53579] [client 20.234.11.210:63682] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/m.php"] [unique_id "aSGxRcbSHDBkRbwMbd5VZwAAAMs"]
[Sat Nov 22 20:49:10.442821 2025] [:error] [pid 53478:tid 53518] [client 20.234.11.210:20500] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/m.php"] [unique_id "aSGxRghUYdXBbQswAdQfCQAAAEk"]
[Sat Nov 22 20:49:12.087616 2025] [:error] [pid 44259:tid 44283] [client 20.234.11.210:21120] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/m.php"] [unique_id "aSGxSHXe1xL-_YOdRmS2vgAAAZU"]
[Sat Nov 22 20:49:13.209949 2025] [:error] [pid 53566:tid 53573] [client 20.234.11.210:63699] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/m.php"] [unique_id "aSGxScbSHDBkRbwMbd5VaQAAAMU"]
[Sat Nov 22 20:49:14.433016 2025] [:error] [pid 53566:tid 53569] [client 20.234.11.210:20525] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/post.php"] [unique_id "aSGxSsbSHDBkRbwMbd5VagAAAME"]
[Sat Nov 22 20:49:15.666902 2025] [:error] [pid 25856:tid 25878] [client 20.234.11.210:63734] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/post.php"] [unique_id "aSGxSxsTP0wy94zKUvHlaQAAARQ"]
[Sat Nov 22 20:49:16.781242 2025] [:error] [pid 44259:tid 44269] [client 20.234.11.210:63703] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/post.php"] [unique_id "aSGxTHXe1xL-_YOdRmS2ywAAAYc"]
[Sat Nov 22 20:49:18.238812 2025] [:error] [pid 53478:tid 53521] [client 20.234.11.210:63739] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/post.php"] [unique_id "aSGxTghUYdXBbQswAdQfCgAAAEw"]
[Sat Nov 22 20:49:19.799418 2025] [:error] [pid 53477:tid 53505] [client 20.234.11.210:63743] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/themes.php"] [unique_id "aSGxT37Lu30Ku9O40aLkbAAAABg"]
[Sat Nov 22 20:49:23.253042 2025] [:error] [pid 9547:tid 9571] [client 20.234.11.210:63728] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/themes.php"] [unique_id "aSGxU9ClOR5qk7DoMeHqbwAAAVI"]
[Sat Nov 22 20:49:26.019835 2025] [:error] [pid 53479:tid 53554] [client 20.234.11.210:63686] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/themes.php"] [unique_id "aSGxVm6cicFF3Aas-oS-nAAAAJI"]
[Sat Nov 22 20:49:27.475761 2025] [:error] [pid 53478:tid 53527] [client 20.234.11.210:20497] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/themes.php"] [unique_id "aSGxVwhUYdXBbQswAdQfEAAAAFI"]
[Sat Nov 22 20:49:30.391534 2025] [:error] [pid 44259:tid 44280] [client 20.234.11.210:21137] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ALFA_DATA/index.php"] [unique_id "aSGxWnXe1xL-_YOdRmS26AAAAZI"]
[Sat Nov 22 20:49:31.448684 2025] [:error] [pid 9547:tid 9569] [client 20.234.11.210:20532] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ALFA_DATA/index.php"] [unique_id "aSGxW9ClOR5qk7DoMeHqdQAAAVA"]
[Sat Nov 22 20:49:32.517398 2025] [:error] [pid 53479:tid 53546] [client 20.234.11.210:63686] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ALFA_DATA/index.php"] [unique_id "aSGxXG6cicFF3Aas-oS-qQAAAIo"]
[Sat Nov 22 20:49:33.387809 2025] [:error] [pid 44259:tid 44279] [client 20.234.11.210:21146] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ALFA_DATA/index.php"] [unique_id "aSGxXXXe1xL-_YOdRmS2-gAAAZE"]
[Sat Nov 22 20:49:36.024681 2025] [:error] [pid 44259:tid 44284] [client 20.234.11.210:20507] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/maint/about.php"] [unique_id "aSGxYHXe1xL-_YOdRmS3BQAAAZY"]
[Sat Nov 22 20:49:37.057209 2025] [:error] [pid 9547:tid 9554] [client 20.234.11.210:20485] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/maint/about.php"] [unique_id "aSGxYdClOR5qk7DoMeHqfwAAAUE"]
[Sat Nov 22 20:49:38.025168 2025] [:error] [pid 53479:tid 53539] [client 20.234.11.210:21166] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/maint/about.php"] [unique_id "aSGxYm6cicFF3Aas-oS-swAAAIM"]
[Sat Nov 22 20:49:40.391714 2025] [:error] [pid 9547:tid 9556] [client 20.234.11.210:20541] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/maint/about.php"] [unique_id "aSGxZNClOR5qk7DoMeHqgAAAAUM"]
[Sat Nov 22 20:49:42.303813 2025] [:error] [pid 44259:tid 44263] [client 20.234.11.210:21139] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aSGxZnXe1xL-_YOdRmS3GQAAAYE"]
[Sat Nov 22 20:49:43.196232 2025] [:error] [pid 53566:tid 53582] [client 20.234.11.210:20481] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aSGxZ8bSHDBkRbwMbd5VfgAAAM4"]
[Sat Nov 22 20:49:44.266596 2025] [:error] [pid 53479:tid 53546] [client 20.234.11.210:63693] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aSGxaG6cicFF3Aas-oS-uAAAAIo"]
[Sat Nov 22 20:49:45.054526 2025] [:error] [pid 53479:tid 53548] [client 20.234.11.210:21144] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aSGxaW6cicFF3Aas-oS-uQAAAIw"]
[Sat Nov 22 20:49:46.057123 2025] [:error] [pid 53479:tid 53540] [client 20.234.11.210:63730] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/click.php"] [unique_id "aSGxam6cicFF3Aas-oS-vAAAAIQ"]
[Sat Nov 22 20:49:47.487238 2025] [:error] [pid 53478:tid 53512] [client 20.234.11.210:63705] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/click.php"] [unique_id "aSGxawhUYdXBbQswAdQfGgAAAEM"]
[Sat Nov 22 20:49:49.013633 2025] [:error] [pid 53477:tid 53481] [client 20.234.11.210:63719] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/click.php"] [unique_id "aSGxbX7Lu30Ku9O40aLkhQAAAAA"]
[Sat Nov 22 20:49:50.373639 2025] [:error] [pid 9547:tid 9556] [client 20.234.11.210:21150] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/click.php"] [unique_id "aSGxbtClOR5qk7DoMeHqkAAAAUM"]
[Sat Nov 22 20:49:51.271560 2025] [:error] [pid 53479:tid 53545] [client 20.234.11.210:63721] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/install.php"] [unique_id "aSGxb26cicFF3Aas-oS-xAAAAIk"]
[Sat Nov 22 20:49:52.333203 2025] [:error] [pid 44259:tid 44286] [client 20.234.11.210:63713] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/install.php"] [unique_id "aSGxcHXe1xL-_YOdRmS3JgAAAZg"]
[Sat Nov 22 20:49:54.468852 2025] [:error] [pid 44259:tid 44262] [client 20.234.11.210:63710] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/install.php"] [unique_id "aSGxcnXe1xL-_YOdRmS3KQAAAYA"]
[Sat Nov 22 20:50:23.504412 2025] [:error] [pid 53479:tid 53559] [client 20.234.11.210:20499] [client 20.234.11.210] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aSGxj26cicFF3Aas-oS_AgAAAJc"]
[Sat Nov 22 20:50:30.669228 2025] [:error] [pid 44259:tid 44281] [client 20.234.11.210:20484] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/cong.php"] [unique_id "aSGxlnXe1xL-_YOdRmS3jwAAAZM"]
[Sat Nov 22 20:50:32.031989 2025] [:error] [pid 53566:tid 53575] [client 20.234.11.210:21133] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/cong.php"] [unique_id "aSGxmMbSHDBkRbwMbd5VxgAAAMc"]
[Sat Nov 22 20:50:32.767714 2025] [:error] [pid 44259:tid 44273] [client 20.234.11.210:20490] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/cong.php"] [unique_id "aSGxmHXe1xL-_YOdRmS3kwAAAYs"]
[Sat Nov 22 20:50:35.235927 2025] [:error] [pid 9547:tid 9559] [client 20.234.11.210:20488] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/cong.php"] [unique_id "aSGxm9ClOR5qk7DoMeHqzQAAAUY"]
[Sat Nov 22 20:50:36.712507 2025] [:error] [pid 53479:tid 53549] [client 20.234.11.210:63735] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/atomlib.php"] [unique_id "aSGxnG6cicFF3Aas-oS_EgAAAI0"]
[Sat Nov 22 20:50:40.097123 2025] [:error] [pid 9547:tid 9559] [client 20.234.11.210:21157] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/atomlib.php"] [unique_id "aSGxoNClOR5qk7DoMeHq2wAAAUY"]
[Sat Nov 22 20:50:41.418222 2025] [:error] [pid 53477:tid 53491] [client 20.234.11.210:20517] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/atomlib.php"] [unique_id "aSGxoX7Lu30Ku9O40aLk5AAAAAo"]
[Sat Nov 22 20:50:42.690340 2025] [:error] [pid 9547:tid 9553] [client 20.234.11.210:63712] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/atomlib.php"] [unique_id "aSGxotClOR5qk7DoMeHq5gAAAUA"]
[Sat Nov 22 20:50:44.390312 2025] [:error] [pid 44259:tid 44285] [client 20.234.11.210:20526] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/w.php"] [unique_id "aSGxpHXe1xL-_YOdRmS3rQAAAZc"]
[Sat Nov 22 20:50:46.278275 2025] [:error] [pid 53478:tid 53530] [client 20.234.11.210:21162] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/w.php"] [unique_id "aSGxpghUYdXBbQswAdQfWwAAAFU"]
[Sat Nov 22 20:50:47.423902 2025] [:error] [pid 44259:tid 44264] [client 20.234.11.210:21315] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/w.php"] [unique_id "aSGxp3Xe1xL-_YOdRmS3sgAAAYI"]
[Sat Nov 22 20:50:48.954743 2025] [:error] [pid 44259:tid 44276] [client 20.234.11.210:21152] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/w.php"] [unique_id "aSGxqHXe1xL-_YOdRmS3tgAAAY4"]
[Sat Nov 22 20:50:51.835395 2025] [:error] [pid 53566:tid 53584] [client 20.234.11.210:20518] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/404.php"] [unique_id "aSGxq8bSHDBkRbwMbd5V3AAAANA"]
[Sat Nov 22 20:50:53.279516 2025] [:error] [pid 9547:tid 9573] [client 20.234.11.210:20501] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/404.php"] [unique_id "aSGxrdClOR5qk7DoMeHrBwAAAVQ"]
[Sat Nov 22 20:50:56.057929 2025] [:error] [pid 53566:tid 53570] [client 20.234.11.210:63709] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/404.php"] [unique_id "aSGxsMbSHDBkRbwMbd5V3wAAAMI"]
[Sat Nov 22 20:50:57.014613 2025] [:error] [pid 53566:tid 53579] [client 20.234.11.210:20513] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/404.php"] [unique_id "aSGxscbSHDBkRbwMbd5V4QAAAMs"]
[Sat Nov 22 20:50:59.238596 2025] [:error] [pid 44259:tid 44265] [client 20.234.11.210:63733] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ioxi-o.php"] [unique_id "aSGxs3Xe1xL-_YOdRmS3wQAAAYM"]
[Sat Nov 22 20:51:00.618696 2025] [:error] [pid 44259:tid 44282] [client 20.234.11.210:20516] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ioxi-o.php"] [unique_id "aSGxtHXe1xL-_YOdRmS3wgAAAZQ"]
[Sat Nov 22 20:51:02.169707 2025] [:error] [pid 53479:tid 53537] [client 20.234.11.210:21127] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ioxi-o.php"] [unique_id "aSGxtm6cicFF3Aas-oS_NAAAAIE"]
[Sat Nov 22 20:51:04.788842 2025] [:error] [pid 25856:tid 25882] [client 20.234.11.210:20533] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ioxi-o.php"] [unique_id "aSGxuBsTP0wy94zKUvHl_gAAARg"]
[Sat Nov 22 20:51:08.204207 2025] [:error] [pid 25856:tid 25858] [client 20.234.11.210:21142] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/product.php"] [unique_id "aSGxvBsTP0wy94zKUvHmBQAAAQA"]
[Sat Nov 22 20:51:10.562936 2025] [:error] [pid 44259:tid 44265] [client 20.234.11.210:21154] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/product.php"] [unique_id "aSGxvnXe1xL-_YOdRmS3zgAAAYM"]
[Sat Nov 22 20:51:12.882461 2025] [:error] [pid 53477:tid 53481] [client 20.234.11.210:20512] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/product.php"] [unique_id "aSGxwH7Lu30Ku9O40aLlAQAAAAA"]
[Sat Nov 22 20:51:14.155832 2025] [:error] [pid 44259:tid 44272] [client 20.234.11.210:21340] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/product.php"] [unique_id "aSGxwnXe1xL-_YOdRmS32QAAAYo"]
[Sat Nov 22 20:51:15.832800 2025] [:error] [pid 44259:tid 44267] [client 20.234.11.210:20482] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/function.php"] [unique_id "aSGxw3Xe1xL-_YOdRmS34gAAAYU"]
[Sat Nov 22 20:51:18.067945 2025] [:error] [pid 53478:tid 53514] [client 20.234.11.210:21159] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/function.php"] [unique_id "aSGxxghUYdXBbQswAdQffgAAAEU"]
[Sat Nov 22 20:51:19.190674 2025] [:error] [pid 53478:tid 53528] [client 20.234.11.210:20496] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/function.php"] [unique_id "aSGxxwhUYdXBbQswAdQffwAAAFM"]
[Sat Nov 22 20:51:20.156706 2025] [:error] [pid 53477:tid 53487] [client 20.234.11.210:21145] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/function.php"] [unique_id "aSGxyH7Lu30Ku9O40aLlBQAAAAY"]
[Sat Nov 22 20:51:21.817431 2025] [:error] [pid 44259:tid 44265] [client 20.234.11.210:21167] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/0x.php"] [unique_id "aSGxyXXe1xL-_YOdRmS36wAAAYM"]
[Sat Nov 22 20:51:24.055837 2025] [:error] [pid 44259:tid 44274] [client 20.234.11.210:21129] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/0x.php"] [unique_id "aSGxzHXe1xL-_YOdRmS37AAAAYw"]
[Sat Nov 22 20:51:25.679757 2025] [:error] [pid 53479:tid 53546] [client 20.234.11.210:63727] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/0x.php"] [unique_id "aSGxzW6cicFF3Aas-oS_iwAAAIo"]
[Sat Nov 22 20:51:28.370196 2025] [:error] [pid 53479:tid 53556] [client 20.234.11.210:21317] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/0x.php"] [unique_id "aSGx0G6cicFF3Aas-oS_kQAAAJQ"]
[Sat Nov 22 20:52:04.036122 2025] [:error] [pid 53479:tid 53559] [client 20.234.11.210:63738] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/autoload_classmap.php"] [unique_id "aSGx9G6cicFF3Aas-oS_wgAAAJc"]
[Sat Nov 22 20:52:05.321398 2025] [:error] [pid 44259:tid 44277] [client 20.234.11.210:21319] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/autoload_classmap.php"] [unique_id "aSGx9XXe1xL-_YOdRmS4KgAAAY8"]
[Sat Nov 22 20:52:06.592298 2025] [:error] [pid 53479:tid 53558] [client 20.234.11.210:20524] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/autoload_classmap.php"] [unique_id "aSGx9m6cicFF3Aas-oS_xAAAAJY"]
[Sat Nov 22 20:52:07.966851 2025] [:error] [pid 25856:tid 25876] [client 20.234.11.210:63716] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/autoload_classmap.php"] [unique_id "aSGx9xsTP0wy94zKUvHmRwAAARI"]
[Sat Nov 22 20:52:11.121433 2025] [:error] [pid 25856:tid 25859] [client 20.234.11.210:63718] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/inputs.php"] [unique_id "aSGx-xsTP0wy94zKUvHmSQAAAQE"]
[Sat Nov 22 20:52:13.515022 2025] [:error] [pid 44259:tid 44277] [client 20.234.11.210:63722] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/inputs.php"] [unique_id "aSGx_XXe1xL-_YOdRmS4NgAAAY8"]
[Sat Nov 22 20:52:15.591885 2025] [:error] [pid 53479:tid 53537] [client 20.234.11.210:63707] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/inputs.php"] [unique_id "aSGx_26cicFF3Aas-oS_zAAAAIE"]
[Sat Nov 22 20:52:17.619348 2025] [:error] [pid 44259:tid 44276] [client 20.234.11.210:63685] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/inputs.php"] [unique_id "aSGyAXXe1xL-_YOdRmS4OgAAAY4"]
[Sat Nov 22 20:52:20.960917 2025] [:error] [pid 53477:tid 53500] [client 20.234.11.210:63691] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/default.php"] [unique_id "aSGyBH7Lu30Ku9O40aLlNAAAABM"]
[Sat Nov 22 20:52:23.033614 2025] [:error] [pid 53479:tid 53545] [client 20.234.11.210:20543] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/default.php"] [unique_id "aSGyB26cicFF3Aas-oS_2wAAAIk"]
[Sat Nov 22 20:52:23.931697 2025] [:error] [pid 9547:tid 9561] [client 20.234.11.210:20495] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/default.php"] [unique_id "aSGyB9ClOR5qk7DoMeHrggAAAUg"]
[Sat Nov 22 20:52:25.344890 2025] [:error] [pid 44259:tid 44265] [client 20.234.11.210:63681] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/default.php"] [unique_id "aSGyCXXe1xL-_YOdRmS4QgAAAYM"]
[Sat Nov 22 20:52:26.407712 2025] [:error] [pid 44259:tid 44279] [client 20.234.11.210:63706] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/fm.php"] [unique_id "aSGyCnXe1xL-_YOdRmS4QwAAAZE"]
[Sat Nov 22 20:52:29.728137 2025] [:error] [pid 9547:tid 9564] [client 20.234.11.210:63737] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/fm.php"] [unique_id "aSGyDdClOR5qk7DoMeHriAAAAUs"]
[Sat Nov 22 20:52:30.969894 2025] [:error] [pid 44259:tid 44266] [client 20.234.11.210:63731] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/fm.php"] [unique_id "aSGyDnXe1xL-_YOdRmS4TwAAAYQ"]
[Sat Nov 22 20:52:32.850844 2025] [:error] [pid 53478:tid 53519] [client 20.234.11.210:63688] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/fm.php"] [unique_id "aSGyEAhUYdXBbQswAdQf5wAAAEo"]
[Sat Nov 22 20:52:35.340392 2025] [:error] [pid 53566:tid 53592] [client 20.234.11.210:20519] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/about.php"] [unique_id "aSGyE8bSHDBkRbwMbd5WVgAAANg"]
[Sat Nov 22 20:52:36.390564 2025] [:error] [pid 9547:tid 9561] [client 20.234.11.210:63717] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/about.php"] [unique_id "aSGyFNClOR5qk7DoMeHrkgAAAUg"]
[Sat Nov 22 20:52:38.714792 2025] [:error] [pid 53477:tid 53500] [client 20.234.11.210:63736] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/about.php"] [unique_id "aSGyFn7Lu30Ku9O40aLlQQAAABM"]
[Sat Nov 22 20:52:39.563976 2025] [:error] [pid 44259:tid 44265] [client 20.234.11.210:63724] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/about.php"] [unique_id "aSGyF3Xe1xL-_YOdRmS4WgAAAYM"]
[Sat Nov 22 20:52:43.298242 2025] [:error] [pid 44259:tid 44267] [client 20.234.11.210:63714] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/alfa.php"] [unique_id "aSGyG3Xe1xL-_YOdRmS4XwAAAYU"]
[Sat Nov 22 20:52:44.902826 2025] [:error] [pid 44259:tid 44269] [client 20.234.11.210:21324] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/alfa.php"] [unique_id "aSGyHHXe1xL-_YOdRmS4YwAAAYc"]
[Sat Nov 22 20:52:46.338077 2025] [:error] [pid 25856:tid 25871] [client 20.234.11.210:20489] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/alfa.php"] [unique_id "aSGyHhsTP0wy94zKUvHmjAAAAQ0"]
[Sat Nov 22 20:52:49.205585 2025] [:error] [pid 9547:tid 9565] [client 20.234.11.210:21126] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/alfa.php"] [unique_id "aSGyIdClOR5qk7DoMeHroQAAAUw"]
[Sat Nov 22 20:52:51.353997 2025] [:error] [pid 44259:tid 44280] [client 20.234.11.210:21321] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/buy.php"] [unique_id "aSGyI3Xe1xL-_YOdRmS4eQAAAZI"]
[Sat Nov 22 20:52:53.164319 2025] [:error] [pid 53477:tid 53489] [client 20.234.11.210:20508] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/buy.php"] [unique_id "aSGyJX7Lu30Ku9O40aLlSwAAAAg"]
[Sat Nov 22 20:52:54.963663 2025] [:error] [pid 53479:tid 53547] [client 20.234.11.210:63680] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/buy.php"] [unique_id "aSGyJm6cicFF3Aas-oTACgAAAIs"]
[Sat Nov 22 20:52:56.248982 2025] [:error] [pid 53477:tid 53498] [client 20.234.11.210:63698] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/buy.php"] [unique_id "aSGyKH7Lu30Ku9O40aLlTQAAABE"]
[Sat Nov 22 20:52:57.623177 2025] [:error] [pid 44259:tid 44264] [client 20.234.11.210:63704] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aSGyKXXe1xL-_YOdRmS4iwAAAYI"]
[Sat Nov 22 20:53:00.883941 2025] [:error] [pid 25856:tid 25868] [client 20.234.11.210:63700] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aSGyLBsTP0wy94zKUvHmngAAAQo"]
[Sat Nov 22 20:53:44.453662 2025] [:error] [pid 9547:tid 9559] [client 20.234.11.210:20492] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/maint/admin.php"] [unique_id "aSGyWNClOR5qk7DoMeHr4QAAAUY"]
[Sat Nov 22 20:53:45.773543 2025] [:error] [pid 53479:tid 53544] [client 20.234.11.210:63682] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/maint/admin.php"] [unique_id "aSGyWW6cicFF3Aas-oTAMwAAAIg"]
[Sat Nov 22 20:53:47.218205 2025] [:error] [pid 44259:tid 44275] [client 20.234.11.210:20535] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/maint/admin.php"] [unique_id "aSGyW3Xe1xL-_YOdRmS45AAAAY0"]
[Sat Nov 22 20:53:48.150057 2025] [:error] [pid 53566:tid 53584] [client 20.234.11.210:21173] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/maint/admin.php"] [unique_id "aSGyXMbSHDBkRbwMbd5WuQAAANA"]
[Sat Nov 22 20:53:49.344402 2025] [:error] [pid 9547:tid 9556] [client 20.234.11.210:63715] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/article.php"] [unique_id "aSGyXdClOR5qk7DoMeHr5QAAAUM"]
[Sat Nov 22 20:53:50.687632 2025] [:error] [pid 53566:tid 53570] [client 20.234.11.210:20523] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/article.php"] [unique_id "aSGyXsbSHDBkRbwMbd5WvgAAAMI"]
[Sat Nov 22 20:53:52.969345 2025] [:error] [pid 25856:tid 25879] [client 20.234.11.210:20527] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/article.php"] [unique_id "aSGyYBsTP0wy94zKUvHm0QAAARU"]
[Sat Nov 22 20:53:57.477446 2025] [:error] [pid 9547:tid 9575] [client 20.234.11.210:63732] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/article.php"] [unique_id "aSGyZdClOR5qk7DoMeHr8wAAAVY"]
[Sat Nov 22 20:53:58.411186 2025] [:error] [pid 25856:tid 25865] [client 20.234.11.210:63683] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/alfa.php"] [unique_id "aSGyZhsTP0wy94zKUvHm1AAAAQc"]
[Sat Nov 22 20:54:01.170992 2025] [:error] [pid 53566:tid 53578] [client 20.234.11.210:63719] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/alfa.php"] [unique_id "aSGyacbSHDBkRbwMbd5WxwAAAMo"]
[Sat Nov 22 20:54:03.792111 2025] [:error] [pid 44259:tid 44266] [client 20.234.11.210:21179] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/alfa.php"] [unique_id "aSGya3Xe1xL-_YOdRmS49wAAAYQ"]
[Sat Nov 22 20:54:05.247340 2025] [:error] [pid 25856:tid 25864] [client 20.234.11.210:63721] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/alfa.php"] [unique_id "aSGybRsTP0wy94zKUvHm3wAAAQY"]
[Sat Nov 22 20:54:09.252510 2025] [:error] [pid 25856:tid 25880] [client 20.234.11.210:20487] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/1.php"] [unique_id "aSGycRsTP0wy94zKUvHm5wAAARY"]
[Sat Nov 22 20:54:10.694664 2025] [:error] [pid 53478:tid 53532] [client 20.234.11.210:20530] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/1.php"] [unique_id "aSGycghUYdXBbQswAdQgMgAAAFc"]
[Sat Nov 22 20:54:11.862948 2025] [:error] [pid 44259:tid 44262] [client 20.234.11.210:21128] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/1.php"] [unique_id "aSGyc3Xe1xL-_YOdRmS5BwAAAYA"]
[Sat Nov 22 20:54:12.917244 2025] [:error] [pid 44259:tid 44280] [client 20.234.11.210:20511] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/1.php"] [unique_id "aSGydHXe1xL-_YOdRmS5CwAAAZI"]
[Sat Nov 22 20:54:14.428692 2025] [:error] [pid 25856:tid 25858] [client 20.234.11.210:20504] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/403.php"] [unique_id "aSGydhsTP0wy94zKUvHm6gAAAQA"]
[Sat Nov 22 20:54:16.960021 2025] [:error] [pid 53479:tid 53557] [client 20.234.11.210:63694] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/403.php"] [unique_id "aSGyeG6cicFF3Aas-oTAQQAAAJU"]
[Sat Nov 22 20:54:18.084956 2025] [:error] [pid 53478:tid 53517] [client 20.234.11.210:20483] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/403.php"] [unique_id "aSGyeghUYdXBbQswAdQgNQAAAEg"]
[Sat Nov 22 20:54:19.969115 2025] [:error] [pid 53477:tid 53493] [client 20.234.11.210:20502] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/403.php"] [unique_id "aSGye37Lu30Ku9O40aLl0wAAAAw"]
[Sat Nov 22 20:54:20.709898 2025] [:error] [pid 25856:tid 25877] [client 20.234.11.210:63720] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/link.php"] [unique_id "aSGyfBsTP0wy94zKUvHm7gAAARM"]
[Sat Nov 22 20:54:22.528170 2025] [:error] [pid 53566:tid 53572] [client 20.234.11.210:21353] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/link.php"] [unique_id "aSGyfsbSHDBkRbwMbd5W5AAAAMQ"]
[Sat Nov 22 20:54:23.365591 2025] [:error] [pid 53479:tid 53538] [client 20.234.11.210:63705] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/link.php"] [unique_id "aSGyf26cicFF3Aas-oTASAAAAII"]
[Sat Nov 22 20:54:24.925895 2025] [:error] [pid 53477:tid 53490] [client 20.234.11.210:63701] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/link.php"] [unique_id "aSGygH7Lu30Ku9O40aLl3QAAAAk"]
[Sat Nov 22 20:54:27.975100 2025] [:error] [pid 53566:tid 53570] [client 20.234.11.210:21172] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/byp.php"] [unique_id "aSGyg8bSHDBkRbwMbd5W6gAAAMI"]
[Sat Nov 22 20:54:34.405640 2025] [:error] [pid 9547:tid 9567] [client 20.234.11.210:20536] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/byp.php"] [unique_id "aSGyitClOR5qk7DoMeHsRAAAAU4"]
[Sat Nov 22 20:54:35.555790 2025] [:error] [pid 53479:tid 53541] [client 20.234.11.210:63686] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/byp.php"] [unique_id "aSGyi26cicFF3Aas-oTAVgAAAIU"]
[Sat Nov 22 20:54:36.362594 2025] [:error] [pid 44259:tid 44268] [client 20.234.11.210:20866] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/byp.php"] [unique_id "aSGyjHXe1xL-_YOdRmS5LQAAAYY"]
[Sat Nov 22 20:54:38.763301 2025] [:error] [pid 53479:tid 53554] [client 20.234.11.210:20806] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ws.php"] [unique_id "aSGyjm6cicFF3Aas-oTAWAAAAJI"]
[Sat Nov 22 20:54:41.299936 2025] [:error] [pid 53478:tid 53509] [client 20.234.11.210:20883] [client 20.234.11.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ws.php"] [unique_id "aSGykQhUYdXBbQswAdQgQQAAAEA"]
[Sat Nov 22 20:54:54.466856 2025] [autoindex:error] [pid 53566:tid 53577] [client 20.234.11.210:20878] AH01276: Cannot serve directory /home/baldivis/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 20:54:54.718922 2025] [:error] [pid 53566:tid 53585] [client 20.234.11.210:20905] [client 20.234.11.210] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/certificates/plugins.php"] [unique_id "aSGynsbSHDBkRbwMbd5XBQAAANE"]
[Sat Nov 22 21:06:15.482902 2025] [:error] [pid 53566:tid 53584] [client 50.62.183.56:43022] [client 50.62.183.56] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 50.62.183.56, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSG1R8bSHDBkRbwMbd5ZTQAAANA"]
[Sun Nov 23 05:16:39.291224 2025] [:error] [pid 38824:tid 38829] [client 216.126.225.91:37302] [client 216.126.225.91] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paramountbaldivis.com"] [uri "/.git/config"] [unique_id "aSIoN08WZjXLvbHTHPfB4gAAAMI"]
[Sun Nov 23 09:51:50.263229 2025] [:error] [pid 38740:tid 38816] [client 182.44.10.67:59375] [client 182.44.10.67] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||paramountbaldivis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aSJotg13QPZSi6O8umXt9AAAAJQ"]
[Sun Nov 23 11:05:05.239092 2025] [:error] [pid 38738:tid 38762] [client 192.178.4.101:52534] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aSJ54Qytc6TL9XavPmNFSgAAABQ"]
[Sun Nov 23 11:05:29.969412 2025] [:error] [pid 38824:tid 38846] [client 192.178.4.101:42827] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aSJ5-U8WZjXLvbHTHPcyKgAAANM"]
[Sun Nov 23 11:05:37.746649 2025] [:error] [pid 38739:tid 38771] [client 192.178.4.101:34931] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aSJ6AQdvEgJm2n2cDmqcXgAAAEI"]
[Sun Nov 23 11:05:45.654445 2025] [:error] [pid 38738:tid 38757] [client 192.178.4.101:40069] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aSJ6CQytc6TL9XavPmNFagAAAA8"]
[Sun Nov 23 11:16:17.493514 2025] [:error] [pid 38740:tid 38809] [client 192.178.4.101:59292] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aSJ8gQ13QPZSi6O8umUDiwAAAI0"]
[Sun Nov 23 11:16:34.035300 2025] [:error] [pid 38824:tid 38851] [client 192.178.4.101:61745] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aSJ8kk8WZjXLvbHTHPc0ogAAANg"]
[Sun Nov 23 11:16:47.846997 2025] [:error] [pid 38738:tid 38755] [client 192.178.4.101:55951] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aSJ8nwytc6TL9XavPmNJyAAAAA0"]
[Sun Nov 23 11:43:46.612253 2025] [:error] [pid 38824:tid 38829] [client 43.167.239.66:57810] [client 43.167.239.66] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||paramountbaldivis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aSKC8k8WZjXLvbHTHPc9kQAAAMI"]
[Sun Nov 23 11:44:30.250846 2025] [:error] [pid 38740:tid 38820] [client 192.178.4.101:55109] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aSKDHg13QPZSi6O8umUL_QAAAJg"]
[Sun Nov 23 11:44:39.493970 2025] [:error] [pid 38740:tid 38814] [client 192.178.4.101:63823] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aSKDJw13QPZSi6O8umUMCgAAAJI"]
[Sun Nov 23 13:30:04.973078 2025] [:error] [pid 38739:tid 38772] [client 62.214.228.136:62770] [client 62.214.228.136] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 62.214.228.136, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSKb3AdvEgJm2n2cDmrJMgAAAEM"], referer: http://paramountbaldivis.com
[Sun Nov 23 13:36:17.189481 2025] [:error] [pid 38740:tid 38820] [client 162.250.101.17:42276] [client 162.250.101.17] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 162.250.101.17, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSKdUQ13QPZSi6O8umUvowAAAJg"], referer: http://paramountbaldivis.com
[Sun Nov 23 13:51:51.587212 2025] [:error] [pid 38739:tid 38774] [client 107.170.0.7:40664] [client 107.170.0.7] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 107.170.0.7, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSKg9wdvEgJm2n2cDmrO8gAAAEU"], referer: http://paramountbaldivis.com
[Sun Nov 23 13:58:09.031982 2025] [:error] [pid 38738:tid 38750] [client 103.163.214.43:51974] [client 103.163.214.43] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.163.214.43, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSKicQytc6TL9XavPmOJPgAAAAg"], referer: http://paramountbaldivis.com
[Sun Nov 23 14:07:40.157790 2025] [:error] [pid 38824:tid 38828] [client 192.241.128.246:43654] [client 192.241.128.246] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 192.241.128.246, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSKkrE8WZjXLvbHTHPdiTAAAAME"], referer: http://paramountbaldivis.com
[Sun Nov 23 15:28:10.170877 2025] [:error] [pid 38738:tid 38754] [client 158.170.66.237:42738] [client 158.170.66.237] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.170.66.237, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSK3igytc6TL9XavPmOtigAAAAw"], referer: http://paramountbaldivis.com
[Sun Nov 23 16:19:54.687118 2025] [:error] [pid 38739:tid 38785] [client 14.215.163.132:36531] [client 14.215.163.132] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.paramountbaldivis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.paramountbaldivis.com"] [uri "/"] [unique_id "aSLDqgdvEgJm2n2cDmr3sAAAAFA"]
[Sun Nov 23 16:46:28.832309 2025] [autoindex:error] [pid 16066:tid 16075] [client 140.99.1.73:29803] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 23 16:46:28.944685 2025] [autoindex:error] [pid 16066:tid 16091] [client 140.99.1.73:29803] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 23 16:46:29.086128 2025] [autoindex:error] [pid 16066:tid 16082] [client 140.99.1.73:29803] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 23 16:46:29.213927 2025] [autoindex:error] [pid 16066:tid 16093] [client 140.99.1.73:29803] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 23 16:46:43.527155 2025] [autoindex:error] [pid 16066:tid 16093] [client 140.99.1.73:29803] AH01276: Cannot serve directory /home/baldivis/public_html/wp-content/uploads/2023/11/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 23 16:46:43.640427 2025] [autoindex:error] [pid 16066:tid 16091] [client 140.99.1.73:29803] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/sodium_compat/lib/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 23 16:46:43.861876 2025] [autoindex:error] [pid 16066:tid 16079] [client 140.99.1.73:29803] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/blocks/file/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 23 16:46:44.035822 2025] [autoindex:error] [pid 16066:tid 16086] [client 140.99.1.73:29803] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 23 16:56:36.523043 2025] [:error] [pid 38738:tid 38744] [client 68.72.143.114:36702] [client 68.72.143.114] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 68.72.143.114, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSLMRAytc6TL9XavPmMguAAAAAI"], referer: http://paramountbaldivis.com
[Sun Nov 23 17:07:57.238939 2025] [:error] [pid 14602:tid 14630] [client 101.0.38.60:2383] [client 101.0.38.60] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 101.0.38.60, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSLO7R-I77jdD81pU-nEDwAAAUk"]
[Sun Nov 23 17:36:17.982348 2025] [:error] [pid 38740:tid 38813] [client 176.65.132.18:36498] [client 176.65.132.18] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paramountbaldivis.com"] [uri "/.git/config"] [unique_id "aSLVkQ13QPZSi6O8umXKhQAAAJE"]
[Sun Nov 23 17:41:30.470032 2025] [:error] [pid 38740:tid 38800] [client 43.130.228.73:39124] [client 43.130.228.73] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.paramountbaldivis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.paramountbaldivis.com"] [uri "/"] [unique_id "aSLWyg13QPZSi6O8umXLtAAAAIQ"]
[Sun Nov 23 18:15:40.348703 2025] [:error] [pid 17534:tid 17543] [client 115.190.136.123:41364] [client 115.190.136.123] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 115.190.136.123, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSLezHPX9nXBrhgM8sxpxQAAAcc"], referer: http://paramountbaldivis.com
[Sun Nov 23 18:35:37.414320 2025] [:error] [pid 38738:tid 38742] [client 107.170.0.7:43590] [client 107.170.0.7] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 107.170.0.7, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSLjeQytc6TL9XavPmM4gQAAAAA"], referer: http://paramountbaldivis.com
[Sun Nov 23 20:16:22.492695 2025] [:error] [pid 38738:tid 38743] [client 34.76.142.88:59612] [client 34.76.142.88] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.76.142.88, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSL7Fgytc6TL9XavPmNJaAAAAAE"], referer: http://paramountbaldivis.com
[Sun Nov 23 20:36:10.611159 2025] [:error] [pid 38738:tid 38758] [client 175.207.214.142:49582] [client 175.207.214.142] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 175.207.214.142, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSL_ugytc6TL9XavPmNLnwAAABA"], referer: http://paramountbaldivis.com
[Sun Nov 23 21:19:24.578209 2025] [:error] [pid 38739:tid 38778] [client 120.25.168.36:44484] [client 120.25.168.36] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 120.25.168.36, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSMJ3AdvEgJm2n2cDmp6tQAAAEk"], referer: http://paramountbaldivis.com
[Sun Nov 23 21:39:16.961463 2025] [:error] [pid 38739:tid 38789] [client 64.227.8.16:60506] [client 64.227.8.16] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 64.227.8.16, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSMOhAdvEgJm2n2cDmp9AgAAAFQ"], referer: http://paramountbaldivis.com
[Sun Nov 23 22:32:51.651740 2025] [:error] [pid 38738:tid 38757] [client 115.190.32.154:35056] [client 115.190.32.154] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 115.190.32.154, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSMbEwytc6TL9XavPmNbkwAAAA8"], referer: http://paramountbaldivis.com
[Sun Nov 23 22:36:18.685565 2025] [:error] [pid 16066:tid 16084] [client 201.249.66.174:54915] [client 201.249.66.174] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 201.249.66.174, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSMb4vq-c47Q5mW5E9HYLAAAAY8"], referer: http://paramountbaldivis.com
[Sun Nov 23 22:43:18.372083 2025] [:error] [pid 44652:tid 44709] [client 64.227.8.16:40212] [client 64.227.8.16] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 64.227.8.16, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSMdhtiQFwsyXQDhwyA38wAAAQM"], referer: http://paramountbaldivis.com
[Sun Nov 23 22:44:18.437227 2025] [proxy_fcgi:error] [pid 44652:tid 44709] (70007)The timeout specified has expired: [client 64.227.8.16:40212] AH01075: Error dispatching request to : (polling), referer: http://paramountbaldivis.com
[Sun Nov 23 22:58:08.570994 2025] [:error] [pid 17534:tid 17556] [client 106.119.167.146:55833] [client 106.119.167.146] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||paramountbaldivis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aSMhAHPX9nXBrhgM8sympAAAAdQ"]
[Sun Nov 23 23:04:49.400804 2025] [:error] [pid 14602:tid 14645] [client 69.163.199.171:42820] [client 69.163.199.171] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||paramountbaldivis.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "paramountbaldivis.com"] [uri "/wp-json/wp/v2/users.json"] [unique_id "aSMikR-I77jdD81pU-n9JAAAAVg"]
[Sun Nov 23 23:16:51.383443 2025] [:error] [pid 38740:tid 38798] [client 192.248.56.1:43352] [client 192.248.56.1] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 192.248.56.1, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSMlYw13QPZSi6O8umUGZgAAAII"], referer: http://paramountbaldivis.com
[Sun Nov 23 23:26:57.337738 2025] [:error] [pid 38738:tid 38766] [client 20.151.88.86:39504] [client 20.151.88.86] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.151.88.86, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSMnwQytc6TL9XavPmNhXAAAABg"], referer: http://paramountbaldivis.com
[Sun Nov 23 23:51:50.743674 2025] [:error] [pid 8036:tid 8058] [client 165.22.240.243:55132] [client 165.22.240.243] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 165.22.240.243, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSMtltBT69EcgFwgTmqSNwAAAgs"], referer: http://paramountbaldivis.com
[Sun Nov 23 23:57:57.532565 2025] [:error] [pid 8036:tid 8047] [client 82.156.9.158:55518] [client 82.156.9.158] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 82.156.9.158, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSMvBdBT69EcgFwgTmqTPwAAAgA"], referer: http://paramountbaldivis.com
[Mon Nov 24 00:30:03.736722 2025] [:error] [pid 1589:tid 1593] [client 70.40.255.4:54970] [client 70.40.255.4] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 70.40.255.4, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSM2i4I2fvripjU0EatiwQAAAUI"], referer: http://paramountbaldivis.com
[Mon Nov 24 01:16:40.254206 2025] [:error] [pid 1452:tid 1463] [client 49.51.243.95:49906] [client 49.51.243.95] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||paramountbaldivis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aSNBeBKZkEEyVNVXr_nD2AAAAEY"]
[Mon Nov 24 01:17:00.633657 2025] [:error] [pid 8337:tid 8360] [client 49.51.243.95:35126] [client 49.51.243.95] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||paramountbaldivis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aSNBjOSmps4S2j95D5h2wgAAABU"]
[Mon Nov 24 01:26:15.978253 2025] [:error] [pid 1589:tid 1614] [client 162.241.226.70:28688] [client 162.241.226.70] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 162.241.226.70, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSNDt4I2fvripjU0Eat8YgAAAVc"], referer: http://paramountbaldivis.com
[Mon Nov 24 01:32:23.065636 2025] [:error] [pid 1454:tid 1531] [client 201.249.66.174:58837] [client 201.249.66.174] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 201.249.66.174, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSNFJ7eh4NH3skJ5n4R2lgAAANM"], referer: http://paramountbaldivis.com
[Mon Nov 24 01:52:27.759349 2025] [:error] [pid 1454:tid 1518] [client 176.65.132.18:56148] [client 176.65.132.18] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paramountbaldivis.com"] [uri "/.git/config"] [unique_id "aSNJ27eh4NH3skJ5n4R9nQAAAMY"]
[Mon Nov 24 01:56:04.556295 2025] [:error] [pid 1589:tid 1607] [client 193.37.33.101:42573] [client 193.37.33.101] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.101, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aSNKtII2fvripjU0EauHtgAAAVA"]
[Mon Nov 24 03:40:28.517840 2025] [:error] [pid 1452:tid 1459] [client 162.241.224.194:44204] [client 162.241.224.194] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.241.224.194, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aSNjLBKZkEEyVNVXr_nnJAAAAEI"]
[Mon Nov 24 03:40:34.782742 2025] [:error] [pid 1452:tid 1474] [client 162.241.224.194:50970] [client 162.241.224.194] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.241.224.194, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aSNjMhKZkEEyVNVXr_nnLgAAAFE"]
[Mon Nov 24 03:40:36.721052 2025] [:error] [pid 1454:tid 1512] [client 162.241.224.194:50982] [client 162.241.224.194] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.241.224.194, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aSNjNLeh4NH3skJ5n4SbcwAAAMA"]
[Mon Nov 24 04:42:34.981100 2025] [:error] [pid 12910:tid 12936] [client 52.236.123.156:40071] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aSNxumkWgvzAF2Nei2VhDwAAABU"]
[Mon Nov 24 04:42:38.400938 2025] [:error] [pid 12910:tid 12924] [client 52.236.123.156:39952] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aSNxvmkWgvzAF2Nei2VhFwAAAAk"]
[Mon Nov 24 04:43:49.700424 2025] [:error] [pid 12999:tid 13010] [client 162.241.224.119:43696] [client 162.241.224.119] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.241.224.119, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aSNyBVtj_teEYJ8vu7H9DwAAAMc"]
[Mon Nov 24 04:43:55.946331 2025] [:error] [pid 12999:tid 13008] [client 162.241.224.119:59024] [client 162.241.224.119] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.241.224.119, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aSNyC1tj_teEYJ8vu7H9FwAAAMU"]
[Mon Nov 24 04:43:57.743948 2025] [:error] [pid 12999:tid 13006] [client 162.241.224.119:59032] [client 162.241.224.119] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.241.224.119, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aSNyDVtj_teEYJ8vu7H9HAAAAMM"]
[Mon Nov 24 05:46:30.030184 2025] [:error] [pid 12999:tid 13005] [client 193.37.33.80:53959] [client 193.37.33.80] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.80, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aSOAtltj_teEYJ8vu7EScAAAAMI"]
[Mon Nov 24 05:51:25.358410 2025] [:error] [pid 53508:tid 53513] [client 34.80.26.96:32934] [client 34.80.26.96] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 34.80.26.96, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aSOB3W639qxbKCcL09y-4gAAAQM"]
[Mon Nov 24 05:51:31.149479 2025] [:error] [pid 12910:tid 12933] [client 34.80.26.96:46752] [client 34.80.26.96] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 34.80.26.96, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aSOB42kWgvzAF2Nei2V0YwAAABI"]
[Mon Nov 24 05:51:32.731487 2025] [:error] [pid 12912:tid 12988] [client 34.80.26.96:47244] [client 34.80.26.96] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 34.80.26.96, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aSOB5JMj_Lgt36UonYLApgAAAJM"]
[Mon Nov 24 05:52:41.808193 2025] [:error] [pid 53508:tid 53528] [client 193.37.33.96:60367] [client 193.37.33.96] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.96, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aSOCKW639qxbKCcL09y_bgAAARI"]
[Mon Nov 24 06:04:09.009776 2025] [:error] [pid 12999:tid 13016] [client 52.236.123.156:63273] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ww1.php"] [unique_id "aSOE2Vtj_teEYJ8vu7EX0AAAAM0"]
[Mon Nov 24 06:04:12.009779 2025] [:error] [pid 53508:tid 53519] [client 52.236.123.156:63278] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ww1.php"] [unique_id "aSOE3G639qxbKCcL09zCrQAAAQk"]
[Mon Nov 24 06:04:19.432773 2025] [:error] [pid 12912:tid 12985] [client 52.236.123.156:63287] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ww1.php"] [unique_id "aSOE45Mj_Lgt36UonYLDvwAAAJA"]
[Mon Nov 24 06:04:22.071108 2025] [:error] [pid 12910:tid 12931] [client 52.236.123.156:63264] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ww1.php"] [unique_id "aSOE5mkWgvzAF2Nei2V2oAAAABA"]
[Mon Nov 24 06:04:29.559305 2025] [:error] [pid 12999:tid 13005] [client 52.236.123.156:35926] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/c4.php"] [unique_id "aSOE7Vtj_teEYJ8vu7EX_wAAAMI"]
[Mon Nov 24 06:04:32.465896 2025] [:error] [pid 12911:tid 12945] [client 52.236.123.156:35920] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/c4.php"] [unique_id "aSOE8EDMbk9464jnIl7uxwAAAEM"]
[Mon Nov 24 06:04:36.137452 2025] [:error] [pid 53508:tid 53529] [client 52.236.123.156:35922] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/c4.php"] [unique_id "aSOE9G639qxbKCcL09zC4wAAARM"]
[Mon Nov 24 06:04:38.403877 2025] [:error] [pid 12999:tid 13020] [client 52.236.123.156:63270] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/dev1s.php"] [unique_id "aSOE9ltj_teEYJ8vu7EYCQAAANE"]
[Mon Nov 24 06:04:41.289146 2025] [:error] [pid 53508:tid 53511] [client 52.236.123.156:35904] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/dev1s.php"] [unique_id "aSOE-W639qxbKCcL09zC7wAAAQE"]
[Mon Nov 24 06:04:47.589375 2025] [:error] [pid 12999:tid 13004] [client 52.236.123.156:63290] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/dev1s.php"] [unique_id "aSOE_1tj_teEYJ8vu7EYFQAAAME"]
[Mon Nov 24 06:04:50.371244 2025] [:error] [pid 53508:tid 53528] [client 52.236.123.156:36711] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/dev1s.php"] [unique_id "aSOFAm639qxbKCcL09zDAwAAARI"]
[Mon Nov 24 06:04:53.310190 2025] [:error] [pid 12910:tid 12930] [client 52.236.123.156:35918] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wsx.php"] [unique_id "aSOFBWkWgvzAF2Nei2V2vgAAAA8"]
[Mon Nov 24 06:04:58.082180 2025] [:error] [pid 12910:tid 12916] [client 52.236.123.156:35951] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wsx.php"] [unique_id "aSOFCmkWgvzAF2Nei2V2xQAAAAE"]
[Mon Nov 24 06:05:00.538342 2025] [:error] [pid 53508:tid 53527] [client 52.236.123.156:63244] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wsx.php"] [unique_id "aSOFDG639qxbKCcL09zDEgAAARE"]
[Mon Nov 24 06:05:23.913219 2025] [:error] [pid 12910:tid 12935] [client 52.236.123.156:63232] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ww3.php"] [unique_id "aSOFI2kWgvzAF2Nei2V28AAAABQ"]
[Mon Nov 24 06:05:31.930999 2025] [:error] [pid 12999:tid 13016] [client 52.236.123.156:63238] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ww3.php"] [unique_id "aSOFK1tj_teEYJ8vu7EYVQAAAM0"]
[Mon Nov 24 06:05:46.190305 2025] [:error] [pid 53508:tid 53518] [client 52.236.123.156:63235] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/v.php"] [unique_id "aSOFOm639qxbKCcL09zDaQAAAQg"]
[Mon Nov 24 06:05:50.029378 2025] [:error] [pid 12911:tid 12945] [client 52.236.123.156:63272] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/v.php"] [unique_id "aSOFPkDMbk9464jnIl7vMgAAAEM"]
[Mon Nov 24 06:05:52.597652 2025] [:error] [pid 12999:tid 13012] [client 52.236.123.156:36677] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/v.php"] [unique_id "aSOFQFtj_teEYJ8vu7EYcgAAAMk"]
[Mon Nov 24 06:05:57.055067 2025] [:error] [pid 12912:tid 12990] [client 52.236.123.156:63273] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/d2.php"] [unique_id "aSOFRZMj_Lgt36UonYLEYwAAAJU"]
[Mon Nov 24 06:06:01.699391 2025] [:error] [pid 12911:tid 12964] [client 52.236.123.156:63243] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/d2.php"] [unique_id "aSOFSUDMbk9464jnIl7vQwAAAFY"]
[Mon Nov 24 06:06:04.710235 2025] [:error] [pid 12999:tid 13025] [client 52.236.123.156:35915] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/d2.php"] [unique_id "aSOFTFtj_teEYJ8vu7EYgAAAANY"]
[Mon Nov 24 06:06:08.042727 2025] [:error] [pid 12911:tid 12962] [client 52.236.123.156:63283] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/d2.php"] [unique_id "aSOFUEDMbk9464jnIl7vUAAAAFQ"]
[Mon Nov 24 06:06:11.324421 2025] [:error] [pid 12999:tid 13017] [client 52.236.123.156:63255] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/snus.php"] [unique_id "aSOFU1tj_teEYJ8vu7EYmQAAAM4"]
[Mon Nov 24 06:06:15.730613 2025] [:error] [pid 12999:tid 13003] [client 52.236.123.156:63259] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/snus.php"] [unique_id "aSOFV1tj_teEYJ8vu7EYoQAAAMA"]
[Mon Nov 24 06:06:18.348637 2025] [:error] [pid 12912:tid 12986] [client 52.236.123.156:36691] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/snus.php"] [unique_id "aSOFWpMj_Lgt36UonYLEfwAAAJE"]
[Mon Nov 24 06:06:39.271359 2025] [:error] [pid 12911:tid 12948] [client 52.236.123.156:63241] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/xc.php"] [unique_id "aSOFb0DMbk9464jnIl7vfAAAAEY"]
[Mon Nov 24 06:06:40.906350 2025] [:error] [pid 12912:tid 12976] [client 52.236.123.156:35967] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/xc.php"] [unique_id "aSOFcJMj_Lgt36UonYLElwAAAIc"]
[Mon Nov 24 06:06:41.741193 2025] [:error] [pid 12912:tid 12985] [client 52.236.123.156:35951] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/xc.php"] [unique_id "aSOFcZMj_Lgt36UonYLEmAAAAJA"]
[Mon Nov 24 06:06:45.126172 2025] [:error] [pid 12911:tid 12956] [client 52.236.123.156:35945] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/xc.php"] [unique_id "aSOFdUDMbk9464jnIl7vhQAAAE4"]
[Mon Nov 24 06:06:54.749315 2025] [:error] [pid 12912:tid 12990] [client 52.236.123.156:36721] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/g.php"] [unique_id "aSOFfpMj_Lgt36UonYLEpwAAAJU"]
[Mon Nov 24 06:07:19.260341 2025] [:error] [pid 12911:tid 12955] [client 52.236.123.156:35960] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/nx1.php"] [unique_id "aSOFl0DMbk9464jnIl7vuAAAAE0"]
[Mon Nov 24 06:07:23.342474 2025] [:error] [pid 12911:tid 12943] [client 52.236.123.156:63276] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/nx1.php"] [unique_id "aSOFm0DMbk9464jnIl7vvgAAAEE"]
[Mon Nov 24 06:07:25.597085 2025] [:error] [pid 12999:tid 13007] [client 52.236.123.156:35958] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/nx1.php"] [unique_id "aSOFnVtj_teEYJ8vu7EY4wAAAMQ"]
[Mon Nov 24 06:07:28.804519 2025] [:error] [pid 53508:tid 53531] [client 52.236.123.156:63271] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/nx1.php"] [unique_id "aSOFoG639qxbKCcL09zEEAAAARU"]
[Mon Nov 24 06:07:31.045780 2025] [:error] [pid 12999:tid 13022] [client 52.236.123.156:35948] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ii.php"] [unique_id "aSOFo1tj_teEYJ8vu7EY6AAAANM"]
[Mon Nov 24 06:07:33.398192 2025] [:error] [pid 53508:tid 53511] [client 52.236.123.156:63295] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ii.php"] [unique_id "aSOFpW639qxbKCcL09zEGwAAAQE"]
[Mon Nov 24 06:07:35.174663 2025] [:error] [pid 12912:tid 12983] [client 52.236.123.156:35961] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ii.php"] [unique_id "aSOFp5Mj_Lgt36UonYLEzgAAAI4"]
[Mon Nov 24 06:07:36.641187 2025] [:error] [pid 53508:tid 53534] [client 52.236.123.156:63247] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ii.php"] [unique_id "aSOFqG639qxbKCcL09zEIgAAARg"]
[Mon Nov 24 06:08:02.445431 2025] [:error] [pid 12999:tid 13025] [client 52.236.123.156:63269] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/chati.php"] [unique_id "aSOFwltj_teEYJ8vu7EZDgAAANY"]
[Mon Nov 24 06:08:21.625931 2025] [:error] [pid 12999:tid 13008] [client 52.236.123.156:35932] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/content-over.php"] [unique_id "aSOF1Vtj_teEYJ8vu7EZJAAAAMU"]
[Mon Nov 24 06:08:25.544801 2025] [:error] [pid 53508:tid 53522] [client 52.236.123.156:35908] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/content-over.php"] [unique_id "aSOF2W639qxbKCcL09zEYQAAAQw"]
[Mon Nov 24 06:08:31.206061 2025] [:error] [pid 53508:tid 53521] [client 52.236.123.156:35909] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/content-over.php"] [unique_id "aSOF32639qxbKCcL09zEawAAAQs"]
[Mon Nov 24 06:08:33.752040 2025] [:error] [pid 12912:tid 12988] [client 52.236.123.156:35905] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/content-over.php"] [unique_id "aSOF4ZMj_Lgt36UonYLFBQAAAJM"]
[Mon Nov 24 06:08:38.600844 2025] [:error] [pid 12999:tid 13015] [client 52.236.123.156:36811] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/gm.php"] [unique_id "aSOF5ltj_teEYJ8vu7EZNgAAAMw"]
[Mon Nov 24 06:08:40.117272 2025] [:error] [pid 12912:tid 12971] [client 52.236.123.156:63294] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/gm.php"] [unique_id "aSOF6JMj_Lgt36UonYLFEAAAAII"]
[Mon Nov 24 06:08:41.241340 2025] [:error] [pid 53508:tid 53527] [client 52.236.123.156:35965] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/gm.php"] [unique_id "aSOF6W639qxbKCcL09zEdgAAARE"]
[Mon Nov 24 06:08:43.210850 2025] [:error] [pid 12999:tid 13005] [client 52.236.123.156:36680] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/gm.php"] [unique_id "aSOF61tj_teEYJ8vu7EZQAAAAMI"]
[Mon Nov 24 06:08:47.791363 2025] [:error] [pid 53508:tid 53531] [client 52.236.123.156:36701] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/naxc.php"] [unique_id "aSOF72639qxbKCcL09zEeAAAARU"]
[Mon Nov 24 06:08:49.625327 2025] [:error] [pid 53508:tid 53522] [client 52.236.123.156:63289] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/naxc.php"] [unique_id "aSOF8W639qxbKCcL09zEewAAAQw"]
[Mon Nov 24 06:09:16.032685 2025] [:error] [pid 12911:tid 12960] [client 52.236.123.156:63257] [client 52.236.123.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/customize/about.php"] [unique_id "aSOGDEDMbk9464jnIl7wbAAAAFI"]
[Mon Nov 24 06:09:23.444728 2025] [:error] [pid 12912:tid 12977] [client 52.236.123.156:35928] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/gec.php"] [unique_id "aSOGE5Mj_Lgt36UonYLFXAAAAIg"]
[Mon Nov 24 06:09:26.113933 2025] [:error] [pid 53508:tid 53533] [client 52.236.123.156:36810] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/gec.php"] [unique_id "aSOGFm639qxbKCcL09zErgAAARc"]
[Mon Nov 24 06:09:26.932821 2025] [:error] [pid 53508:tid 53516] [client 52.236.123.156:35960] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/gec.php"] [unique_id "aSOGFm639qxbKCcL09zEsQAAAQY"]
[Mon Nov 24 06:09:28.008680 2025] [:error] [pid 12910:tid 12932] [client 52.236.123.156:36679] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/gec.php"] [unique_id "aSOGGGkWgvzAF2Nei2V4IgAAABE"]
[Mon Nov 24 06:09:30.060859 2025] [:error] [pid 12999:tid 13014] [client 52.236.123.156:35929] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/update/gec.php"] [unique_id "aSOGGltj_teEYJ8vu7EZeAAAAMs"]
[Mon Nov 24 06:09:31.938396 2025] [:error] [pid 12911:tid 12947] [client 52.236.123.156:63260] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/update/gec.php"] [unique_id "aSOGG0DMbk9464jnIl7whwAAAEU"]
[Mon Nov 24 06:09:34.052976 2025] [:error] [pid 12910:tid 12938] [client 52.236.123.156:63264] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/update/gec.php"] [unique_id "aSOGHmkWgvzAF2Nei2V4JQAAABc"]
[Mon Nov 24 06:09:37.538194 2025] [:error] [pid 12999:tid 13006] [client 52.236.123.156:63292] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/update/gec.php"] [unique_id "aSOGIVtj_teEYJ8vu7EZfwAAAMM"]
[Mon Nov 24 06:10:06.456738 2025] [:error] [pid 12911:tid 12959] [client 52.236.123.156:35927] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/update/nfu.php"] [unique_id "aSOGPkDMbk9464jnIl7wowAAAFE"]
[Mon Nov 24 06:10:08.837594 2025] [:error] [pid 53508:tid 53523] [client 52.236.123.156:35931] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/xl8.php"] [unique_id "aSOGQG639qxbKCcL09zFEQAAAQ0"]
[Mon Nov 24 06:10:10.905064 2025] [:error] [pid 12999:tid 13005] [client 52.236.123.156:36673] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/xl8.php"] [unique_id "aSOGQltj_teEYJ8vu7EZmwAAAMI"]
[Mon Nov 24 06:10:12.997765 2025] [:error] [pid 12911:tid 12952] [client 52.236.123.156:63273] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/xl8.php"] [unique_id "aSOGREDMbk9464jnIl7wpgAAAEo"]
[Mon Nov 24 06:10:14.785894 2025] [:error] [pid 12999:tid 13026] [client 52.236.123.156:63238] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/xl8.php"] [unique_id "aSOGRltj_teEYJ8vu7EZngAAANc"]
[Mon Nov 24 06:10:32.437152 2025] [:error] [pid 12912:tid 12983] [client 52.236.123.156:63242] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/gifclass.php"] [unique_id "aSOGWJMj_Lgt36UonYLFyQAAAI4"]
[Mon Nov 24 06:10:35.189290 2025] [:error] [pid 12912:tid 12993] [client 52.236.123.156:63255] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/gifclass.php"] [unique_id "aSOGW5Mj_Lgt36UonYLFzQAAAJg"]
[Mon Nov 24 06:10:37.484731 2025] [:error] [pid 12911:tid 12957] [client 52.236.123.156:35910] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/gifclass.php"] [unique_id "aSOGXUDMbk9464jnIl7wvgAAAE8"]
[Mon Nov 24 06:10:41.201476 2025] [:error] [pid 12910:tid 12931] [client 52.236.123.156:35962] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/gifclass.php"] [unique_id "aSOGYWkWgvzAF2Nei2V4fgAAABA"]
[Mon Nov 24 06:10:43.535720 2025] [:error] [pid 12911:tid 12942] [client 52.236.123.156:63288] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/manager.php"] [unique_id "aSOGY0DMbk9464jnIl7wxgAAAEA"]
[Mon Nov 24 06:10:52.641527 2025] [:error] [pid 12912:tid 12993] [client 52.236.123.156:63241] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/manager.php"] [unique_id "aSOGbJMj_Lgt36UonYLF2gAAAJg"]
[Mon Nov 24 06:10:55.527205 2025] [:error] [pid 53508:tid 53512] [client 52.236.123.156:35930] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/manager.php"] [unique_id "aSOGb2639qxbKCcL09zFXQAAAQI"]
[Mon Nov 24 06:10:59.373043 2025] [:error] [pid 12999:tid 13025] [client 52.236.123.156:35924] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/.well-known/as.php"] [unique_id "aSOGc1tj_teEYJ8vu7EZ3QAAANY"]
[Mon Nov 24 06:11:02.502649 2025] [:error] [pid 12911:tid 12956] [client 52.236.123.156:36672] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/.well-known/as.php"] [unique_id "aSOGdkDMbk9464jnIl7w6wAAAE4"]
[Mon Nov 24 06:11:05.867547 2025] [:error] [pid 12912:tid 12993] [client 52.236.123.156:35944] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/.well-known/as.php"] [unique_id "aSOGeZMj_Lgt36UonYLF7QAAAJg"]
[Mon Nov 24 06:11:11.981782 2025] [:error] [pid 12910:tid 12922] [client 52.236.123.156:63244] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/.well-known/as.php"] [unique_id "aSOGf2kWgvzAF2Nei2V40QAAAAc"]
[Mon Nov 24 06:11:15.596001 2025] [:error] [pid 12912:tid 12992] [client 52.236.123.156:35956] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/product.php"] [unique_id "aSOGg5Mj_Lgt36UonYLF-wAAAJc"]
[Mon Nov 24 06:11:18.914290 2025] [:error] [pid 12912:tid 12991] [client 52.236.123.156:36800] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/product.php"] [unique_id "aSOGhpMj_Lgt36UonYLGAwAAAJY"]
[Mon Nov 24 06:11:23.180206 2025] [:error] [pid 12910:tid 12915] [client 52.236.123.156:63253] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/product.php"] [unique_id "aSOGi2kWgvzAF2Nei2V44AAAAAA"]
[Mon Nov 24 06:11:24.521440 2025] [:error] [pid 12911:tid 12966] [client 52.236.123.156:63262] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/product.php"] [unique_id "aSOGjEDMbk9464jnIl7xEAAAAFg"]
[Mon Nov 24 06:11:27.079944 2025] [:error] [pid 12912:tid 12984] [client 52.236.123.156:63286] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/e56.php"] [unique_id "aSOGj5Mj_Lgt36UonYLGEgAAAI8"]
[Mon Nov 24 06:11:28.628874 2025] [:error] [pid 12912:tid 12977] [client 52.236.123.156:36677] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/e56.php"] [unique_id "aSOGkJMj_Lgt36UonYLGFgAAAIg"]
[Mon Nov 24 06:11:30.693022 2025] [:error] [pid 12910:tid 12924] [client 52.236.123.156:35952] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/e56.php"] [unique_id "aSOGkmkWgvzAF2Nei2V46wAAAAk"]
[Mon Nov 24 06:11:46.887057 2025] [:error] [pid 12999:tid 13013] [client 52.236.123.156:36835] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/20.php"] [unique_id "aSOGoltj_teEYJ8vu7EaWwAAAMo"]
[Mon Nov 24 06:11:48.636257 2025] [:error] [pid 12912:tid 12970] [client 52.236.123.156:63271] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/20.php"] [unique_id "aSOGpJMj_Lgt36UonYLGPgAAAIE"]
[Mon Nov 24 06:11:52.297873 2025] [:error] [pid 12911:tid 12949] [client 52.236.123.156:63267] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/20.php"] [unique_id "aSOGqEDMbk9464jnIl7xMwAAAEc"]
[Mon Nov 24 06:11:55.500596 2025] [:error] [pid 12910:tid 12936] [client 52.236.123.156:36695] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/20.php"] [unique_id "aSOGq2kWgvzAF2Nei2V5JgAAABU"]
[Mon Nov 24 06:12:19.420418 2025] [:error] [pid 12911:tid 12944] [client 52.236.123.156:36689] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/c.php"] [unique_id "aSOGw0DMbk9464jnIl7xTAAAAEI"]
[Mon Nov 24 06:12:22.758894 2025] [:error] [pid 12999:tid 13018] [client 52.236.123.156:63274] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/c.php"] [unique_id "aSOGxltj_teEYJ8vu7EahAAAAM8"]
[Mon Nov 24 06:12:25.805190 2025] [:error] [pid 12911:tid 12943] [client 52.236.123.156:35938] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/c.php"] [unique_id "aSOGyUDMbk9464jnIl7xWQAAAEE"]
[Mon Nov 24 06:12:27.171835 2025] [:error] [pid 12912:tid 12988] [client 52.236.123.156:63232] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/build.php"] [unique_id "aSOGy5Mj_Lgt36UonYLGegAAAJM"]
[Mon Nov 24 06:12:29.366963 2025] [:error] [pid 12999:tid 13006] [client 52.236.123.156:63282] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/build.php"] [unique_id "aSOGzVtj_teEYJ8vu7EakgAAAMM"]
[Mon Nov 24 06:12:30.851427 2025] [:error] [pid 53508:tid 53515] [client 52.236.123.156:35943] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/build.php"] [unique_id "aSOGzm639qxbKCcL09zGKQAAAQU"]
[Mon Nov 24 06:12:34.605103 2025] [:error] [pid 12910:tid 12922] [client 52.236.123.156:36718] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/build.php"] [unique_id "aSOG0mkWgvzAF2Nei2V5XQAAAAc"]
[Mon Nov 24 06:12:35.670883 2025] [:error] [pid 12999:tid 13022] [client 52.236.123.156:63261] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/admin/upload/css.php"] [unique_id "aSOG01tj_teEYJ8vu7EanQAAANM"]
[Mon Nov 24 06:12:37.156298 2025] [:error] [pid 53508:tid 53523] [client 52.236.123.156:63280] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/admin/upload/css.php"] [unique_id "aSOG1W639qxbKCcL09zGOAAAAQ0"]
[Mon Nov 24 06:12:45.360214 2025] [:error] [pid 12999:tid 13006] [client 52.236.123.156:63265] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/admin/upload/css.php"] [unique_id "aSOG3Vtj_teEYJ8vu7EarAAAAMM"]
[Mon Nov 24 06:13:38.237670 2025] [:error] [pid 12912:tid 12986] [client 52.236.123.156:63279] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/4.php"] [unique_id "aSOHEpMj_Lgt36UonYLG1QAAAJE"]
[Mon Nov 24 06:13:46.634298 2025] [:error] [pid 12911:tid 12948] [client 52.236.123.156:63278] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/4.php"] [unique_id "aSOHGkDMbk9464jnIl7yJgAAAEY"]
[Mon Nov 24 06:13:50.965893 2025] [:error] [pid 12912:tid 12969] [client 52.236.123.156:35949] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/4.php"] [unique_id "aSOHHpMj_Lgt36UonYLG6gAAAIA"]
[Mon Nov 24 06:13:56.930360 2025] [:error] [pid 12912:tid 12985] [client 52.236.123.156:36679] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/X7x.php"] [unique_id "aSOHJJMj_Lgt36UonYLHEAAAAJA"]
[Mon Nov 24 06:14:03.831219 2025] [:error] [pid 12999:tid 13022] [client 52.236.123.156:63235] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/X7x.php"] [unique_id "aSOHK1tj_teEYJ8vu7EbkAAAANM"]
[Mon Nov 24 06:14:06.008494 2025] [:error] [pid 12910:tid 12933] [client 52.236.123.156:63277] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/X7x.php"] [unique_id "aSOHLmkWgvzAF2Nei2V6KAAAABI"]
[Mon Nov 24 06:14:07.122196 2025] [:error] [pid 53508:tid 53511] [client 52.236.123.156:35916] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/X7x.php"] [unique_id "aSOHL2639qxbKCcL09zHDgAAAQE"]
[Mon Nov 24 06:14:08.718277 2025] [:error] [pid 12910:tid 12929] [client 52.236.123.156:63283] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/about.php"] [unique_id "aSOHMGkWgvzAF2Nei2V6LAAAAA4"]
[Mon Nov 24 06:14:09.867233 2025] [:error] [pid 12912:tid 12976] [client 52.236.123.156:35918] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/about.php"] [unique_id "aSOHMZMj_Lgt36UonYLHNQAAAIc"]
[Mon Nov 24 06:14:11.540234 2025] [:error] [pid 53508:tid 53517] [client 52.236.123.156:36837] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/about.php"] [unique_id "aSOHM2639qxbKCcL09zHIAAAAQc"]
[Mon Nov 24 06:14:15.697656 2025] [:error] [pid 12910:tid 12918] [client 52.236.123.156:36678] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/about.php"] [unique_id "aSOHN2kWgvzAF2Nei2V6MgAAAAM"]
[Mon Nov 24 06:14:20.287221 2025] [:error] [pid 12999:tid 13023] [client 52.236.123.156:63285] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/r.php"] [unique_id "aSOHPFtj_teEYJ8vu7Eb1QAAANQ"]
[Mon Nov 24 06:14:25.335930 2025] [:error] [pid 12912:tid 12974] [client 52.236.123.156:35913] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/r.php"] [unique_id "aSOHQZMj_Lgt36UonYLHbQAAAIU"]
[Mon Nov 24 06:14:28.932390 2025] [:error] [pid 12912:tid 12972] [client 52.236.123.156:36685] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/r.php"] [unique_id "aSOHRJMj_Lgt36UonYLHcwAAAIM"]
[Mon Nov 24 06:14:32.692061 2025] [:error] [pid 12912:tid 12974] [client 52.236.123.156:36684] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/v4.php"] [unique_id "aSOHSJMj_Lgt36UonYLHegAAAIU"]
[Mon Nov 24 06:15:24.686914 2025] [:error] [pid 12999:tid 13014] [client 52.236.123.156:63279] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/6.php"] [unique_id "aSOHfFtj_teEYJ8vu7EcoAAAAMs"]
[Mon Nov 24 06:15:27.592434 2025] [:error] [pid 12999:tid 13020] [client 52.236.123.156:63271] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/6.php"] [unique_id "aSOHf1tj_teEYJ8vu7EcqAAAANE"]
[Mon Nov 24 06:15:32.384765 2025] [:error] [pid 53508:tid 53518] [client 52.236.123.156:63239] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/6.php"] [unique_id "aSOHhG639qxbKCcL09zHyQAAAQg"]
[Mon Nov 24 06:15:34.375665 2025] [:error] [pid 12912:tid 12976] [client 52.236.123.156:63251] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/6.php"] [unique_id "aSOHhpMj_Lgt36UonYLH7QAAAIc"]
[Mon Nov 24 06:15:36.691606 2025] [:error] [pid 12910:tid 12926] [client 52.236.123.156:35952] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/12.php"] [unique_id "aSOHiGkWgvzAF2Nei2V6pgAAAAs"]
[Mon Nov 24 06:15:39.026332 2025] [:error] [pid 12999:tid 13004] [client 52.236.123.156:63246] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/12.php"] [unique_id "aSOHi1tj_teEYJ8vu7EcugAAAME"]
[Mon Nov 24 06:15:44.674078 2025] [:error] [pid 12910:tid 12933] [client 52.236.123.156:36703] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/12.php"] [unique_id "aSOHkGkWgvzAF2Nei2V6rgAAABI"]
[Mon Nov 24 06:15:47.609994 2025] [:error] [pid 12911:tid 12946] [client 52.236.123.156:36852] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/12.php"] [unique_id "aSOHk0DMbk9464jnIl7zNAAAAEQ"]
[Mon Nov 24 06:15:48.798272 2025] [:error] [pid 12999:tid 13015] [client 52.236.123.156:35904] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/0.php"] [unique_id "aSOHlFtj_teEYJ8vu7EczgAAAMw"]
[Mon Nov 24 06:15:50.084569 2025] [:error] [pid 53508:tid 53520] [client 52.236.123.156:35905] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/0.php"] [unique_id "aSOHlm639qxbKCcL09zH7AAAAQo"]
[Mon Nov 24 06:15:52.060662 2025] [:error] [pid 12910:tid 12930] [client 52.236.123.156:63287] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/0.php"] [unique_id "aSOHmGkWgvzAF2Nei2V6tAAAAA8"]
[Mon Nov 24 06:15:54.265666 2025] [:error] [pid 53508:tid 53529] [client 52.236.123.156:35945] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/0.php"] [unique_id "aSOHmm639qxbKCcL09zH-AAAARM"]
[Mon Nov 24 06:15:57.911401 2025] [:error] [pid 12999:tid 13018] [client 52.236.123.156:35950] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aSOHnVtj_teEYJ8vu7Ec1AAAAM8"]
[Mon Nov 24 06:16:01.475164 2025] [:error] [pid 12911:tid 12947] [client 52.236.123.156:36705] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aSOHoUDMbk9464jnIl7zTAAAAEU"]
[Mon Nov 24 06:16:05.086804 2025] [:error] [pid 12910:tid 12927] [client 52.236.123.156:36728] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aSOHpWkWgvzAF2Nei2V6ywAAAAw"]
[Mon Nov 24 06:16:08.828529 2025] [:error] [pid 12912:tid 12989] [client 52.236.123.156:36700] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aSOHqJMj_Lgt36UonYLIJwAAAJQ"]
[Mon Nov 24 06:16:12.490251 2025] [:error] [pid 12999:tid 13007] [client 52.236.123.156:63258] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/02.php"] [unique_id "aSOHrFtj_teEYJ8vu7Ec9wAAAMQ"]
[Mon Nov 24 06:16:14.780746 2025] [:error] [pid 12910:tid 12918] [client 52.236.123.156:36730] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/02.php"] [unique_id "aSOHrmkWgvzAF2Nei2V62wAAAAM"]
[Mon Nov 24 06:16:16.822258 2025] [:error] [pid 12912:tid 12980] [client 52.236.123.156:63251] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/02.php"] [unique_id "aSOHsJMj_Lgt36UonYLIOQAAAIs"]
[Mon Nov 24 06:16:19.276367 2025] [:error] [pid 12912:tid 12978] [client 52.236.123.156:36682] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/02.php"] [unique_id "aSOHs5Mj_Lgt36UonYLIQQAAAIk"]
[Mon Nov 24 06:16:20.697853 2025] [:error] [pid 12910:tid 12927] [client 52.236.123.156:35940] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/w.php"] [unique_id "aSOHtGkWgvzAF2Nei2V65QAAAAw"]
[Mon Nov 24 06:16:48.561258 2025] [:error] [pid 12910:tid 12926] [client 52.236.123.156:63241] [client 52.236.123.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aSOH0GkWgvzAF2Nei2V7IAAAAAs"]
[Mon Nov 24 06:16:55.827899 2025] [:error] [pid 53508:tid 53517] [client 52.236.123.156:35946] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/index/function.php"] [unique_id "aSOH12639qxbKCcL09zI_gAAAQc"]
[Mon Nov 24 06:16:58.645867 2025] [:error] [pid 12999:tid 13017] [client 52.236.123.156:35908] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/index/function.php"] [unique_id "aSOH2ltj_teEYJ8vu7EdaAAAAM4"]
[Mon Nov 24 06:17:00.011912 2025] [:error] [pid 12999:tid 13008] [client 52.236.123.156:63261] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/index/function.php"] [unique_id "aSOH3Ftj_teEYJ8vu7EdbAAAAMU"]
[Mon Nov 24 06:17:01.675809 2025] [:error] [pid 12912:tid 12974] [client 52.236.123.156:63248] [client 52.236.123.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/ID3/rk2.php"] [unique_id "aSOH3ZMj_Lgt36UonYLIkQAAAIU"]
[Mon Nov 24 06:17:03.753941 2025] [:error] [pid 53508:tid 53527] [client 52.236.123.156:63274] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/license.php"] [unique_id "aSOH32639qxbKCcL09zJFwAAARE"]
[Mon Nov 24 06:17:12.608673 2025] [:error] [pid 12911:tid 12945] [client 52.236.123.156:36681] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/license.php"] [unique_id "aSOH6EDMbk9464jnIl7zxAAAAEM"]
[Mon Nov 24 06:17:24.579013 2025] [:error] [pid 12912:tid 12974] [client 52.236.123.156:35915] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/radio.php"] [unique_id "aSOH9JMj_Lgt36UonYLIrQAAAIU"]
[Mon Nov 24 06:17:27.177822 2025] [:error] [pid 12912:tid 12972] [client 52.236.123.156:63250] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/radio.php"] [unique_id "aSOH95Mj_Lgt36UonYLIsgAAAIM"]
[Mon Nov 24 06:17:29.288059 2025] [:error] [pid 12912:tid 12982] [client 52.236.123.156:35906] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/radio.php"] [unique_id "aSOH-ZMj_Lgt36UonYLItgAAAI0"]
[Mon Nov 24 06:17:31.118242 2025] [:error] [pid 12910:tid 12920] [client 52.236.123.156:36727] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/radio.php"] [unique_id "aSOH-2kWgvzAF2Nei2V7UAAAAAU"]
[Mon Nov 24 06:17:32.901013 2025] [:error] [pid 12910:tid 12924] [client 52.236.123.156:36823] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/info.php"] [unique_id "aSOH_GkWgvzAF2Nei2V7VQAAAAk"]
[Mon Nov 24 06:17:34.965812 2025] [:error] [pid 12910:tid 12934] [client 52.236.123.156:63263] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/info.php"] [unique_id "aSOH_mkWgvzAF2Nei2V7WwAAABM"]
[Mon Nov 24 06:17:41.389446 2025] [:error] [pid 12912:tid 12979] [client 52.236.123.156:63266] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/info.php"] [unique_id "aSOIBZMj_Lgt36UonYLIxgAAAIo"]
[Mon Nov 24 06:17:45.478745 2025] [:error] [pid 12999:tid 13018] [client 52.236.123.156:35955] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/info.php"] [unique_id "aSOICVtj_teEYJ8vu7Ed3gAAAM8"]
[Mon Nov 24 06:18:12.025829 2025] [:error] [pid 12911:tid 12955] [client 52.236.123.156:35960] [client 52.236.123.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/assets/index.php"] [unique_id "aSOIJEDMbk9464jnIl70hAAAAE0"]
[Mon Nov 24 06:18:16.255705 2025] [autoindex:error] [pid 12999:tid 13004] [client 52.236.123.156:35906] AH01276: Cannot serve directory /home/baldivis/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 06:18:25.281987 2025] [:error] [pid 53508:tid 53534] [client 52.236.123.156:63286] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/marijuana.php"] [unique_id "aSOIMW639qxbKCcL09zKMAAAARg"]
[Mon Nov 24 06:18:32.461774 2025] [:error] [pid 12999:tid 13024] [client 52.236.123.156:63232] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/marijuana.php"] [unique_id "aSOIOFtj_teEYJ8vu7EeZAAAANU"]
[Mon Nov 24 06:18:39.073595 2025] [:error] [pid 12999:tid 13019] [client 52.236.123.156:36711] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/marijuana.php"] [unique_id "aSOIP1tj_teEYJ8vu7EeeAAAANA"]
[Mon Nov 24 06:18:40.938379 2025] [:error] [pid 12911:tid 12956] [client 52.236.123.156:35951] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/marijuana.php"] [unique_id "aSOIQEDMbk9464jnIl700gAAAE4"]
[Mon Nov 24 06:18:42.029722 2025] [:error] [pid 12999:tid 13003] [client 52.236.123.156:63285] [client 52.236.123.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aSOIQltj_teEYJ8vu7EefwAAAMA"]
[Mon Nov 24 06:18:43.916516 2025] [:error] [pid 53508:tid 53514] [client 52.236.123.156:63264] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/403.php"] [unique_id "aSOIQ2639qxbKCcL09zKsQAAAQQ"]
[Mon Nov 24 06:18:53.200362 2025] [:error] [pid 12910:tid 12934] [client 52.236.123.156:36692] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/403.php"] [unique_id "aSOITWkWgvzAF2Nei2V8OgAAABM"]
[Mon Nov 24 06:18:56.719186 2025] [:error] [pid 12910:tid 12918] [client 52.236.123.156:63271] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/403.php"] [unique_id "aSOIUGkWgvzAF2Nei2V8PwAAAAM"]
[Mon Nov 24 06:18:58.511219 2025] [:error] [pid 12912:tid 12974] [client 52.236.123.156:35953] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/user/about.php"] [unique_id "aSOIUpMj_Lgt36UonYLJlAAAAIU"]
[Mon Nov 24 06:19:00.097161 2025] [:error] [pid 12999:tid 13025] [client 52.236.123.156:36678] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/user/about.php"] [unique_id "aSOIVFtj_teEYJ8vu7EetAAAANY"]
[Mon Nov 24 06:19:02.316770 2025] [:error] [pid 12912:tid 12980] [client 52.236.123.156:35928] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/user/about.php"] [unique_id "aSOIVpMj_Lgt36UonYLJnwAAAIs"]
[Mon Nov 24 06:19:10.319607 2025] [:error] [pid 53508:tid 53531] [client 52.236.123.156:35938] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/user/about.php"] [unique_id "aSOIXm639qxbKCcL09zK6gAAARU"]
[Mon Nov 24 06:19:13.726721 2025] [:error] [pid 12911:tid 12948] [client 52.236.123.156:35931] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/1.php"] [unique_id "aSOIYUDMbk9464jnIl70-AAAAEY"]
[Mon Nov 24 06:19:15.937686 2025] [:error] [pid 12912:tid 12978] [client 52.236.123.156:63279] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/1.php"] [unique_id "aSOIY5Mj_Lgt36UonYLJrgAAAIk"]
[Mon Nov 24 06:19:18.097543 2025] [:error] [pid 12999:tid 13014] [client 52.236.123.156:35920] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/1.php"] [unique_id "aSOIZltj_teEYJ8vu7Ee1AAAAMs"]
[Mon Nov 24 06:20:26.484683 2025] [:error] [pid 12999:tid 13027] [client 52.236.123.156:35912] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/simple.php"] [unique_id "aSOIqltj_teEYJ8vu7EfcwAAANg"]
[Mon Nov 24 06:20:31.052383 2025] [:error] [pid 12912:tid 12974] [client 52.236.123.156:63252] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/goat1.php"] [unique_id "aSOIr5Mj_Lgt36UonYLKRwAAAIU"]
[Mon Nov 24 06:20:34.581677 2025] [:error] [pid 12999:tid 13008] [client 52.236.123.156:35922] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/goat1.php"] [unique_id "aSOIsltj_teEYJ8vu7EfjgAAAMU"]
[Mon Nov 24 06:20:36.811378 2025] [:error] [pid 12912:tid 12989] [client 52.236.123.156:35952] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/goat1.php"] [unique_id "aSOItJMj_Lgt36UonYLKTAAAAJQ"]
[Mon Nov 24 06:20:42.020963 2025] [:error] [pid 12911:tid 12956] [client 52.236.123.156:63251] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/goat1.php"] [unique_id "aSOIukDMbk9464jnIl71bgAAAE4"]
[Mon Nov 24 06:20:46.884899 2025] [:error] [pid 53508:tid 53527] [client 52.236.123.156:63273] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/chosen.php"] [unique_id "aSOIvm639qxbKCcL09zMYwAAARE"]
[Mon Nov 24 06:20:55.821802 2025] [:error] [pid 12910:tid 12926] [client 52.236.123.156:36816] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/chosen.php"] [unique_id "aSOIx2kWgvzAF2Nei2V9QQAAAAs"]
[Mon Nov 24 06:20:59.131722 2025] [:error] [pid 12999:tid 13010] [client 52.236.123.156:35929] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-cron.php"] [unique_id "aSOIy1tj_teEYJ8vu7Ef3QAAAMc"]
[Mon Nov 24 06:21:04.836966 2025] [:error] [pid 12910:tid 12925] [client 52.236.123.156:63260] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-cron.php"] [unique_id "aSOI0GkWgvzAF2Nei2V9VAAAAAo"]
[Mon Nov 24 06:21:06.665496 2025] [:error] [pid 53508:tid 53530] [client 52.236.123.156:36707] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-cron.php"] [unique_id "aSOI0m639qxbKCcL09zMgwAAARQ"]
[Mon Nov 24 06:21:13.997820 2025] [:error] [pid 12911:tid 12951] [client 52.236.123.156:63280] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-cron.php"] [unique_id "aSOI2UDMbk9464jnIl71qAAAAEk"]
[Mon Nov 24 06:21:40.306266 2025] [:error] [pid 12912:tid 12976] [client 52.236.123.156:36694] [client 52.236.123.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aSOI9JMj_Lgt36UonYLKwAAAAIc"]
[Mon Nov 24 06:21:41.402678 2025] [:error] [pid 12911:tid 12964] [client 52.236.123.156:36697] [client 52.236.123.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "aSOI9UDMbk9464jnIl71xgAAAFY"]
[Mon Nov 24 06:21:43.310920 2025] [:error] [pid 12912:tid 12990] [client 52.236.123.156:63234] [client 52.236.123.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "paramountbaldivis.com"] [uri "/tiny.php"] [unique_id "aSOI95Mj_Lgt36UonYLKxwAAAJU"]
[Mon Nov 24 06:21:57.109064 2025] [:error] [pid 12911:tid 12952] [client 52.236.123.156:36720] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/mail.php"] [unique_id "aSOJBUDMbk9464jnIl712QAAAEo"]
[Mon Nov 24 06:22:03.894934 2025] [:error] [pid 12910:tid 12932] [client 52.236.123.156:63258] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/mail.php"] [unique_id "aSOJC2kWgvzAF2Nei2V-FAAAABE"]
[Mon Nov 24 06:22:27.147652 2025] [:error] [pid 12910:tid 12930] [client 52.236.123.156:36719] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/file.php"] [unique_id "aSOJI2kWgvzAF2Nei2V-SwAAAA8"]
[Mon Nov 24 06:22:28.752490 2025] [:error] [pid 53508:tid 53511] [client 52.236.123.156:63243] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/file.php"] [unique_id "aSOJJG639qxbKCcL09zNsAAAAQE"]
[Mon Nov 24 06:22:33.710087 2025] [:error] [pid 12999:tid 13014] [client 52.236.123.156:36672] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/file.php"] [unique_id "aSOJKVtj_teEYJ8vu7EhSwAAAMs"]
[Mon Nov 24 06:22:35.154197 2025] [:error] [pid 12912:tid 12993] [client 52.236.123.156:35956] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/file.php"] [unique_id "aSOJK5Mj_Lgt36UonYLLUQAAAJg"]
[Mon Nov 24 06:22:36.924216 2025] [:error] [pid 12912:tid 12986] [client 52.236.123.156:36725] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/as.php"] [unique_id "aSOJLJMj_Lgt36UonYLLVQAAAJE"]
[Mon Nov 24 06:22:38.930826 2025] [:error] [pid 12912:tid 12984] [client 52.236.123.156:35907] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/as.php"] [unique_id "aSOJLpMj_Lgt36UonYLLWAAAAI8"]
[Mon Nov 24 06:22:41.687380 2025] [:error] [pid 12912:tid 12978] [client 52.236.123.156:63277] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/as.php"] [unique_id "aSOJMZMj_Lgt36UonYLLXAAAAIk"]
[Mon Nov 24 06:22:43.986255 2025] [:error] [pid 12999:tid 13019] [client 52.236.123.156:35910] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/as.php"] [unique_id "aSOJM1tj_teEYJ8vu7EhUwAAANA"]
[Mon Nov 24 06:22:45.490296 2025] [:error] [pid 53508:tid 53520] [client 52.236.123.156:36743] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aSOJNW639qxbKCcL09zN7QAAAQo"]
[Mon Nov 24 06:22:47.849668 2025] [:error] [pid 53508:tid 53529] [client 52.236.123.156:35961] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aSOJN2639qxbKCcL09zN-AAAARM"]
[Mon Nov 24 06:22:51.624829 2025] [:error] [pid 12911:tid 12946] [client 52.236.123.156:36691] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aSOJO0DMbk9464jnIl72SwAAAEQ"]
[Mon Nov 24 06:22:55.752141 2025] [proxy_fcgi:error] [pid 12910:tid 12936] [client 52.236.123.156:36708] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 06:23:15.397738 2025] [:error] [pid 12910:tid 12927] [client 52.236.123.156:35941] [client 52.236.123.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/html-api/wp-conflg.php"] [unique_id "aSOJU2kWgvzAF2Nei2V-wgAAAAw"]
[Mon Nov 24 06:23:15.663280 2025] [:error] [pid 12910:tid 12935] [client 52.236.123.156:36708] [client 52.236.123.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/js/crop/zmFM.php"] [unique_id "aSOJU2kWgvzAF2Nei2V-wwAAABQ"]
[Mon Nov 24 06:23:23.333643 2025] [autoindex:error] [pid 12910:tid 12938] [client 52.236.123.156:63262] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/rest-api/fields/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 06:23:33.221590 2025] [:error] [pid 12910:tid 12937] [client 52.236.123.156:36805] [client 52.236.123.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "aSOJZWkWgvzAF2Nei2V-7QAAABY"]
[Mon Nov 24 06:35:14.987110 2025] [:error] [pid 12999:tid 13009] [client 20.238.52.119:42071] [client 20.238.52.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/bk"] [unique_id "aSOMIltj_teEYJ8vu7EpMwAAAMY"], referer: http://paramountbaldivis.com/bk
[Mon Nov 24 06:41:20.082210 2025] [:error] [pid 53508:tid 53515] [client 31.171.130.76:30851] [client 31.171.130.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "aSONkG639qxbKCcL09zYyAAAAQU"]
[Mon Nov 24 06:41:23.953816 2025] [:error] [pid 12999:tid 13019] [client 31.171.130.72:42821] [client 31.171.130.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/bk/index.php"] [unique_id "aSONk1tj_teEYJ8vu7EsmQAAANA"]
[Mon Nov 24 06:41:40.959371 2025] [:error] [pid 53508:tid 53530] [client 31.171.130.85:48347] [client 31.171.130.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/theme-compat/chosen.php"] [unique_id "aSONpG639qxbKCcL09zZGwAAARQ"]
[Mon Nov 24 06:41:46.282348 2025] [:error] [pid 53508:tid 53513] [client 31.171.130.74:54359] [client 31.171.130.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/IXR/chosen.php"] [unique_id "aSONqm639qxbKCcL09zZJgAAAQM"]
[Mon Nov 24 06:41:48.196212 2025] [:error] [pid 12911:tid 12965] [client 31.171.130.82:51297] [client 31.171.130.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/js/chosen.php"] [unique_id "aSONrEDMbk9464jnIl7_zQAAAFc"]
[Mon Nov 24 06:41:49.101021 2025] [:error] [pid 53508:tid 53514] [client 31.171.130.88:28219] [client 31.171.130.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/pomo/wp-conflg.php"] [unique_id "aSONrW639qxbKCcL09zZLgAAAQQ"]
[Mon Nov 24 06:41:52.090378 2025] [:error] [pid 12999:tid 13016] [client 31.171.130.56:49313] [client 31.171.130.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aSONsFtj_teEYJ8vu7EszAAAAM0"]
[Mon Nov 24 06:41:55.254808 2025] [:error] [pid 53508:tid 53525] [client 31.171.130.58:45593] [client 31.171.130.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "aSONs2639qxbKCcL09zZWwAAAQ8"]
[Mon Nov 24 06:42:07.808958 2025] [:error] [pid 53508:tid 53518] [client 31.171.130.99:51483] [client 31.171.130.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aSONv2639qxbKCcL09zZrwAAAQg"]
[Mon Nov 24 06:42:08.648182 2025] [:error] [pid 12912:tid 12992] [client 31.171.130.74:38573] [client 31.171.130.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aSONwJMj_Lgt36UonYLVdAAAAJc"]
[Mon Nov 24 06:43:20.556898 2025] [:error] [pid 12910:tid 12929] [client 31.171.130.67:35007] [client 31.171.130.67] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.67, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aSOOCGkWgvzAF2Nei2WHEAAAAA4"]
[Mon Nov 24 06:43:29.269847 2025] [:error] [pid 12910:tid 12939] [client 31.171.130.67:35007] [client 31.171.130.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/css/modules.php"] [unique_id "aSOOEWkWgvzAF2Nei2WHGwAAABg"]
[Mon Nov 24 06:43:53.620361 2025] [:error] [pid 53508:tid 53534] [client 31.171.130.80:21743] [client 31.171.130.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/codeboy1877_up.php"] [unique_id "aSOOKW639qxbKCcL09zabQAAARg"]
[Mon Nov 24 06:44:48.631960 2025] [:error] [pid 12910:tid 12921] [client 31.171.130.87:57231] [client 31.171.130.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/lx.php"] [unique_id "aSOOYGkWgvzAF2Nei2WHowAAAAY"]
[Mon Nov 24 06:46:18.775631 2025] [:error] [pid 12910:tid 12920] [client 31.171.130.93:30797] [client 31.171.130.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/css/F0x.php"] [unique_id "aSOOumkWgvzAF2Nei2WIJAAAAAU"]
[Mon Nov 24 06:47:08.303434 2025] [:error] [pid 12911:tid 12951] [client 31.171.130.70:53513] [client 31.171.130.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/IXR/index.php"] [unique_id "aSOO7EDMbk9464jnIl4BvAAAAEk"]
[Mon Nov 24 06:47:09.204600 2025] [:error] [pid 12912:tid 12972] [client 31.171.130.60:35703] [client 31.171.130.60] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 31.171.130.60, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSOO7ZMj_Lgt36UonYLXJwAAAIM"]
[Mon Nov 24 06:47:16.228275 2025] [:error] [pid 12912:tid 12984] [client 31.171.130.60:35703] [client 31.171.130.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aSOO9JMj_Lgt36UonYLXOwAAAI8"]
[Mon Nov 24 06:47:40.715037 2025] [:error] [pid 12911:tid 12961] [client 31.171.130.81:48053] [client 31.171.130.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "aSOPDEDMbk9464jnIl4B6QAAAFM"]
[Mon Nov 24 06:48:09.153251 2025] [:error] [pid 53508:tid 53521] [client 31.171.130.100:61863] [client 31.171.130.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/css/index.php"] [unique_id "aSOPKW639qxbKCcL09zcFgAAAQs"]
[Mon Nov 24 06:48:10.058840 2025] [:error] [pid 12910:tid 12915] [client 31.171.130.73:23915] [client 31.171.130.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "aSOPKmkWgvzAF2Nei2WIkgAAAAA"]
[Mon Nov 24 06:48:10.963145 2025] [:error] [pid 53508:tid 53522] [client 31.171.130.65:45805] [client 31.171.130.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/Text/about.php"] [unique_id "aSOPKm639qxbKCcL09zcGAAAAQw"]
[Mon Nov 24 06:48:11.903801 2025] [:error] [pid 12911:tid 12951] [client 31.171.130.59:25803] [client 31.171.130.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/css/about.php"] [unique_id "aSOPK0DMbk9464jnIl4CGAAAAEk"]
[Mon Nov 24 06:48:18.566993 2025] [:error] [pid 12910:tid 12931] [client 31.171.130.71:64417] [client 31.171.130.71] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.71, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/images/wp-login.php"] [unique_id "aSOPMmkWgvzAF2Nei2WIpAAAABA"]
[Mon Nov 24 06:48:42.486047 2025] [:error] [pid 12910:tid 12931] [client 31.171.130.71:64417] [client 31.171.130.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/blocks/about.php"] [unique_id "aSOPSmkWgvzAF2Nei2WJAgAAABA"]
[Mon Nov 24 06:48:49.454810 2025] [:error] [pid 12911:tid 12943] [client 31.171.130.103:38633] [client 31.171.130.103] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.103, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aSOPUUDMbk9464jnIl4CTgAAAEE"]
[Mon Nov 24 06:49:02.819309 2025] [:error] [pid 12911:tid 12958] [client 31.171.130.103:38633] [client 31.171.130.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/makeasmtp.php"] [unique_id "aSOPXkDMbk9464jnIl4CZwAAAFA"]
[Mon Nov 24 06:49:03.747849 2025] [:error] [pid 12911:tid 12946] [client 31.171.130.62:45181] [client 31.171.130.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/about.php"] [unique_id "aSOPX0DMbk9464jnIl4CaAAAAEQ"]
[Mon Nov 24 06:49:07.905534 2025] [proxy_fcgi:error] [pid 12999:tid 13018] [client 31.171.130.70:63073] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 06:49:18.657463 2025] [proxy_fcgi:error] [pid 12999:tid 13027] [client 31.171.130.70:63073] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 06:49:40.523803 2025] [:error] [pid 12999:tid 13005] [client 31.171.130.70:63073] [client 31.171.130.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aSOPhFtj_teEYJ8vu7EvkAAAAMI"]
[Mon Nov 24 06:49:48.650134 2025] [:error] [pid 12911:tid 12947] [client 31.171.130.103:48293] [client 31.171.130.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/bak.php"] [unique_id "aSOPjEDMbk9464jnIl4CvAAAAEU"]
[Mon Nov 24 06:49:51.222949 2025] [:error] [pid 12999:tid 13012] [client 31.171.130.82:42323] [client 31.171.130.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aSOPj1tj_teEYJ8vu7EvqQAAAMk"]
[Mon Nov 24 06:50:01.554799 2025] [:error] [pid 12999:tid 13004] [client 31.171.130.85:37953] [client 31.171.130.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "paramountbaldivis.com"] [uri "/fm.php"] [unique_id "aSOPmVtj_teEYJ8vu7EvvQAAAME"]
[Mon Nov 24 06:50:02.592170 2025] [:error] [pid 12999:tid 13003] [client 31.171.130.68:54081] [client 31.171.130.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/customize/index.php"] [unique_id "aSOPmltj_teEYJ8vu7EvvwAAAMA"]
[Mon Nov 24 06:50:04.494262 2025] [:error] [pid 53508:tid 53518] [client 31.171.130.65:46449] [client 31.171.130.65] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.65, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-content/upgrade-temp-backup/wp-login.php"] [unique_id "aSOPnG639qxbKCcL09zcrgAAAQg"]
[Mon Nov 24 06:50:09.453910 2025] [:error] [pid 53508:tid 53523] [client 31.171.130.65:46449] [client 31.171.130.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/themes.php"] [unique_id "aSOPoW639qxbKCcL09zcvQAAAQ0"]
[Mon Nov 24 06:50:19.332605 2025] [autoindex:error] [pid 53508:tid 53529] [client 31.171.130.69:35621] AH01276: Cannot serve directory /home/baldivis/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 06:50:21.498056 2025] [:error] [pid 53508:tid 53515] [client 31.171.130.69:35621] [client 31.171.130.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/wp-includes_function.php"] [unique_id "aSOPrW639qxbKCcL09zdBgAAAQU"]
[Mon Nov 24 06:50:25.846254 2025] [:error] [pid 12912:tid 12982] [client 31.171.130.105:32773] [client 31.171.130.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/images/about.php"] [unique_id "aSOPsZMj_Lgt36UonYLY5AAAAI0"]
[Mon Nov 24 06:50:29.821794 2025] [:error] [pid 12912:tid 12990] [client 31.171.130.78:23237] [client 31.171.130.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/js/codemirror/about.php"] [unique_id "aSOPtZMj_Lgt36UonYLY6gAAAJU"]
[Mon Nov 24 06:50:37.121612 2025] [:error] [pid 53508:tid 53513] [client 31.171.130.60:61929] [client 31.171.130.60] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.60, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-content/languages/themes/wp-login.php"] [unique_id "aSOPvW639qxbKCcL09zdRQAAAQM"]
[Mon Nov 24 06:50:42.848101 2025] [:error] [pid 53508:tid 53518] [client 31.171.130.60:61929] [client 31.171.130.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/block-supports/index.php"] [unique_id "aSOPwm639qxbKCcL09zdWAAAAQg"]
[Mon Nov 24 06:50:43.839157 2025] [:error] [pid 12912:tid 12981] [client 31.171.130.80:21113] [client 31.171.130.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aSOPw5Mj_Lgt36UonYLY9wAAAIw"]
[Mon Nov 24 06:51:02.651063 2025] [:error] [pid 53508:tid 53528] [client 31.171.130.85:57307] [client 31.171.130.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "aSOP1m639qxbKCcL09zdfAAAARI"]
[Mon Nov 24 06:51:05.446194 2025] [autoindex:error] [pid 53508:tid 53519] [client 31.171.130.66:39579] AH01276: Cannot serve directory /home/baldivis/public_html/wp-content/uploads/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 06:51:05.902461 2025] [:error] [pid 53508:tid 53520] [client 31.171.130.66:39579] [client 31.171.130.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/assets/about.php"] [unique_id "aSOP2W639qxbKCcL09zdgwAAAQo"]
[Mon Nov 24 06:51:06.778837 2025] [:error] [pid 12999:tid 13008] [client 31.171.130.101:54661] [client 31.171.130.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/widgets/about.php"] [unique_id "aSOP2ltj_teEYJ8vu7EwMwAAAMU"]
[Mon Nov 24 06:51:22.720876 2025] [autoindex:error] [pid 12999:tid 13024] [client 31.171.130.91:23685] AH01276: Cannot serve directory /home/baldivis/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 06:51:23.149488 2025] [autoindex:error] [pid 12999:tid 13017] [client 31.171.130.91:23685] AH01276: Cannot serve directory /home/baldivis/public_html/.well-known/pki-validation/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 06:51:23.627145 2025] [autoindex:error] [pid 12999:tid 13010] [client 31.171.130.91:23685] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 06:51:25.868276 2025] [autoindex:error] [pid 12999:tid 13007] [client 31.171.130.91:23685] AH01276: Cannot serve directory /home/baldivis/public_html/wp-content/uploads/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 06:51:31.845747 2025] [autoindex:error] [pid 12999:tid 13020] [client 31.171.130.91:23685] AH01276: Cannot serve directory /home/baldivis/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 06:51:33.839823 2025] [autoindex:error] [pid 12999:tid 13018] [client 31.171.130.91:23685] AH01276: Cannot serve directory /home/baldivis/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 06:51:34.299120 2025] [autoindex:error] [pid 12999:tid 13021] [client 31.171.130.91:23685] AH01276: Cannot serve directory /home/baldivis/public_html/wp-admin/css/colors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 06:51:34.731870 2025] [autoindex:error] [pid 12999:tid 13025] [client 31.171.130.91:23685] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 06:51:35.658326 2025] [autoindex:error] [pid 12999:tid 13023] [client 31.171.130.91:23685] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 06:51:36.118347 2025] [autoindex:error] [pid 12999:tid 13017] [client 31.171.130.91:23685] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 06:51:36.565985 2025] [proxy_fcgi:error] [pid 12999:tid 13012] [client 31.171.130.91:23685] AH01071: Got error 'PHP message: PHP Warning: Use of undefined constant ABSPATH - assumed 'ABSPATH' (this will throw an Error in a future version of PHP) in /home/baldivis/public_html/wp-includes/blocks/index.php on line 9PHP message: PHP Warning: Use of undefined constant WPINC - assumed 'WPINC' (this will throw an Error in a future version of PHP) in /home/baldivis/public_html/wp-includes/blocks/index.php on line 9PHP message: PHP Warning: require(ABSPATHWPINC/blocks/archives.php): failed to open stream: No such file or directory in /home/baldivis/public_html/wp-includes/blocks/index.php on line 9PHP message: PHP Warning: require(ABSPATHWPINC/blocks/archives.php): failed to open stream: No such file or directory in /home/baldivis/public_html/wp-includes/blocks/index.php on line 9PHP message: PHP Fatal error: require(): Failed opening required 'ABSPATHWPINC/blocks/archives.php' (include_path='.:') in /home/baldivis/public_html/wp-includes/blocks/index.php on line 9'
[Mon Nov 24 06:51:37.457934 2025] [autoindex:error] [pid 53508:tid 53528] [client 31.171.130.70:37089] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 06:51:37.929417 2025] [autoindex:error] [pid 53508:tid 53523] [client 31.171.130.70:37089] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 06:51:38.386510 2025] [autoindex:error] [pid 53508:tid 53511] [client 31.171.130.70:37089] AH01276: Cannot serve directory /home/baldivis/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 06:51:39.389752 2025] [autoindex:error] [pid 53508:tid 53529] [client 31.171.130.70:37089] AH01276: Cannot serve directory /home/baldivis/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 06:51:46.760483 2025] [autoindex:error] [pid 53508:tid 53528] [client 31.171.130.70:37089] AH01276: Cannot serve directory /home/baldivis/public_html/wp-content/uploads/2021/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 06:51:48.686026 2025] [autoindex:error] [pid 53508:tid 53524] [client 31.171.130.70:37089] AH01276: Cannot serve directory /home/baldivis/public_html/wp-content/mu-plugins/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 06:52:28.611921 2025] [autoindex:error] [pid 53508:tid 53517] [client 31.171.130.70:37089] AH01276: Cannot serve directory /home/baldivis/public_html/wp-admin/css/colors/ectoplasm/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 06:52:29.037640 2025] [autoindex:error] [pid 53508:tid 53525] [client 31.171.130.70:37089] AH01276: Cannot serve directory /home/baldivis/public_html/wp-admin/css/colors/light/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 06:52:29.531745 2025] [autoindex:error] [pid 53508:tid 53513] [client 31.171.130.70:37089] AH01276: Cannot serve directory /home/baldivis/public_html/wp-admin/css/colors/midnight/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 06:52:30.006850 2025] [autoindex:error] [pid 53508:tid 53515] [client 31.171.130.70:37089] AH01276: Cannot serve directory /home/baldivis/public_html/wp-admin/css/colors/modern/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 06:52:30.421189 2025] [autoindex:error] [pid 53508:tid 53522] [client 31.171.130.70:37089] AH01276: Cannot serve directory /home/baldivis/public_html/wp-admin/css/colors/ocean/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 06:52:31.026158 2025] [autoindex:error] [pid 53508:tid 53523] [client 31.171.130.70:37089] AH01276: Cannot serve directory /home/baldivis/public_html/wp-admin/css/colors/sunrise/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 06:52:31.628339 2025] [autoindex:error] [pid 53508:tid 53516] [client 31.171.130.70:37089] AH01276: Cannot serve directory /home/baldivis/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 06:52:33.668672 2025] [autoindex:error] [pid 53508:tid 53516] [client 31.171.130.70:37089] AH01276: Cannot serve directory /home/baldivis/public_html/wp-content/uploads/2022/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 06:52:34.130266 2025] [autoindex:error] [pid 53508:tid 53522] [client 31.171.130.70:37089] AH01276: Cannot serve directory /home/baldivis/public_html/wp-content/uploads/2023/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 06:52:34.607834 2025] [autoindex:error] [pid 53508:tid 53512] [client 31.171.130.70:37089] AH01276: Cannot serve directory /home/baldivis/public_html/wp-content/uploads/2024/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 06:52:36.678967 2025] [autoindex:error] [pid 53508:tid 53522] [client 31.171.130.70:37089] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 06:52:39.151339 2025] [autoindex:error] [pid 53508:tid 53530] [client 31.171.130.70:37089] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/images/crystal/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 06:52:40.155521 2025] [autoindex:error] [pid 53508:tid 53514] [client 31.171.130.70:37089] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/images/media/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 06:52:40.625090 2025] [autoindex:error] [pid 53508:tid 53511] [client 31.171.130.70:37089] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/images/smilies/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 06:52:41.168385 2025] [autoindex:error] [pid 53508:tid 53529] [client 31.171.130.70:37089] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/images/wlw/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 06:52:41.648776 2025] [autoindex:error] [pid 53508:tid 53533] [client 31.171.130.70:37089] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/js/codemirror/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 06:52:42.114671 2025] [autoindex:error] [pid 53508:tid 53521] [client 31.171.130.70:37089] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/js/plupload/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 06:52:42.572848 2025] [autoindex:error] [pid 53508:tid 53526] [client 31.171.130.70:37089] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 06:52:42.980507 2025] [autoindex:error] [pid 53508:tid 53524] [client 31.171.130.70:37089] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 06:52:43.417188 2025] [autoindex:error] [pid 53508:tid 53518] [client 31.171.130.70:37089] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/sitemaps/providers/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 06:53:27.651030 2025] [autoindex:error] [pid 53508:tid 53534] [client 31.171.130.70:37089] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/js/tinymce/plugins/fullscreen/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 06:53:46.487831 2025] [autoindex:error] [pid 53508:tid 53525] [client 31.171.130.70:37089] AH01276: Cannot serve directory /home/baldivis/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 06:53:54.234545 2025] [autoindex:error] [pid 12999:tid 13024] [client 31.171.130.75:41951] AH01276: Cannot serve directory /home/baldivis/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 06:53:54.703799 2025] [autoindex:error] [pid 12999:tid 13021] [client 31.171.130.75:41951] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 06:53:55.150126 2025] [autoindex:error] [pid 12999:tid 13014] [client 31.171.130.75:41951] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/SimplePie/XML/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 06:53:59.131395 2025] [autoindex:error] [pid 12999:tid 13019] [client 31.171.130.75:41951] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 06:54:00.633997 2025] [autoindex:error] [pid 12999:tid 13004] [client 31.171.130.75:41951] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 06:54:01.101818 2025] [autoindex:error] [pid 12999:tid 13003] [client 31.171.130.75:41951] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 06:54:01.620584 2025] [autoindex:error] [pid 12999:tid 13027] [client 31.171.130.75:41951] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/Text/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 06:54:02.083469 2025] [autoindex:error] [pid 12999:tid 13009] [client 31.171.130.75:41951] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/Text/Diff/Renderer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 06:54:02.554994 2025] [autoindex:error] [pid 12999:tid 13018] [client 31.171.130.75:41951] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/customize/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 06:54:03.004567 2025] [autoindex:error] [pid 12999:tid 13008] [client 31.171.130.75:41951] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 06:54:03.489108 2025] [autoindex:error] [pid 12999:tid 13015] [client 31.171.130.75:41951] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/pomo/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 06:54:03.948671 2025] [autoindex:error] [pid 12999:tid 13005] [client 31.171.130.75:41951] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 06:54:04.411779 2025] [autoindex:error] [pid 12999:tid 13010] [client 31.171.130.75:41951] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 06:54:22.780176 2025] [autoindex:error] [pid 12999:tid 13024] [client 31.171.130.75:41951] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/theme-compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 06:54:42.023848 2025] [autoindex:error] [pid 12999:tid 13005] [client 31.171.130.75:41951] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 06:54:42.444962 2025] [autoindex:error] [pid 12999:tid 13006] [client 31.171.130.75:41951] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/js/jcrop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 06:54:46.083044 2025] [autoindex:error] [pid 12999:tid 13019] [client 31.171.130.75:41951] AH01276: Cannot serve directory /home/baldivis/public_html/wp-content/maintenance/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 06:54:58.964184 2025] [autoindex:error] [pid 12999:tid 13005] [client 31.171.130.75:41951] AH01276: Cannot serve directory /home/baldivis/public_html/.tmb/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 06:55:04.226666 2025] [autoindex:error] [pid 12999:tid 13027] [client 31.171.130.75:41951] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/js/tinymce/plugins/paste/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 06:55:08.145154 2025] [autoindex:error] [pid 12999:tid 13021] [client 31.171.130.75:41951] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/block-supports/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 06:55:15.150319 2025] [autoindex:error] [pid 12999:tid 13021] [client 31.171.130.75:41951] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/js/tinymce/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 06:55:17.309966 2025] [autoindex:error] [pid 12999:tid 13019] [client 31.171.130.75:41951] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/Text/Diff/Engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 06:55:21.441882 2025] [autoindex:error] [pid 12999:tid 13020] [client 31.171.130.75:41951] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/js/tinymce/plugins/directionality/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 06:55:23.665868 2025] [autoindex:error] [pid 12999:tid 13015] [client 31.171.130.75:41951] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/rest-api/search/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 06:55:24.105963 2025] [autoindex:error] [pid 12999:tid 13023] [client 31.171.130.75:41951] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/js/tinymce/plugins/compat3x/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 06:55:26.540529 2025] [autoindex:error] [pid 12999:tid 13006] [client 31.171.130.75:41951] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/block-patterns/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 06:55:33.814893 2025] [autoindex:error] [pid 12999:tid 13026] [client 31.171.130.75:41951] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/js/tinymce/plugins/compat3x/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 06:55:35.920620 2025] [proxy_fcgi:error] [pid 12999:tid 13003] [client 31.171.130.75:41951] AH01071: Got error 'PHP message: PHP Fatal error: Uncaught Error: Call to undefined function get_header() in /home/baldivis/public_html/wp-content/themes/twentytwentyone/index.php:17\nStack trace:\n#0 {main}\n thrown in /home/baldivis/public_html/wp-content/themes/twentytwentyone/index.php on line 17'
[Mon Nov 24 06:55:52.323938 2025] [autoindex:error] [pid 53508:tid 53512] [client 31.171.130.100:22587] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/blocks/paragraph/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 06:55:56.352370 2025] [autoindex:error] [pid 53508:tid 53530] [client 31.171.130.100:22587] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/SimplePie/HTTP/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 06:56:00.505069 2025] [autoindex:error] [pid 53508:tid 53534] [client 31.171.130.100:22587] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/css/dist/nux/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 06:56:02.645802 2025] [autoindex:error] [pid 53508:tid 53510] [client 31.171.130.100:22587] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/js/tinymce/plugins/lists/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 06:56:03.065532 2025] [autoindex:error] [pid 53508:tid 53532] [client 31.171.130.100:22587] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/js/tinymce/skins/lightgray/img/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 06:56:20.561949 2025] [autoindex:error] [pid 53508:tid 53525] [client 31.171.130.100:22587] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/SimplePie/Decode/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 06:56:52.829164 2025] [autoindex:error] [pid 53508:tid 53521] [client 31.171.130.100:22587] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/sodium_compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 06:56:56.378526 2025] [autoindex:error] [pid 53508:tid 53528] [client 31.171.130.100:22587] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/blocks/social-links/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 06:57:25.280928 2025] [autoindex:error] [pid 53508:tid 53522] [client 31.171.130.100:22587] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/sodium_compat/src/Core/Curve25519/Ge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Nov 24 08:20:45.496802 2025] [:error] [pid 48688:tid 48694] [client 103.65.237.124:57320] [client 103.65.237.124] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paramountbaldivis.com"] [uri "/sftp-config.json"] [unique_id "aSOk3Rm2q1FkzLam7A0VOAAAAkI"]
[Mon Nov 24 08:26:35.156329 2025] [:error] [pid 48688:tid 48711] [client 15.235.182.49:59616] [client 15.235.182.49] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paramountbaldivis.com"] [uri "/.env"] [unique_id "aSOmOxm2q1FkzLam7A0ZRgAAAlM"]
[Mon Nov 24 10:05:48.857825 2025] [:error] [pid 9630:tid 9641] [client 64.20.46.236:51216] [client 64.20.46.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/style.php"] [unique_id "aSO9fCrSgUgPGkizt2p5ogAAAEk"]
[Mon Nov 24 10:06:02.463140 2025] [:error] [pid 48599:tid 48612] [client 64.20.46.236:36254] [client 64.20.46.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/style.php"] [unique_id "aSO9ipzvu6PDJiRKE3LbSgAAAYk"]
[Mon Nov 24 15:09:47.193177 2025] [:error] [pid 9630:tid 9653] [client 43.159.152.184:49994] [client 43.159.152.184] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||paramountbaldivis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aSQEuyrSgUgPGkizt2rQOgAAAFU"]
[Mon Nov 24 17:23:12.839384 2025] [:error] [pid 9630:tid 9636] [client 4.233.64.129:33807] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aSQkACrSgUgPGkizt2rxvwAAAEQ"]
[Mon Nov 24 17:23:19.541061 2025] [:error] [pid 48688:tid 48705] [client 4.233.64.129:34090] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aSQkBxm2q1FkzLam7A2b3wAAAk0"]
[Mon Nov 24 18:18:52.846740 2025] [:error] [pid 48688:tid 48701] [client 208.109.235.107:46988] [client 208.109.235.107] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 208.109.235.107, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aSQxDBm2q1FkzLam7A2mWQAAAkk"]
[Mon Nov 24 18:19:22.840349 2025] [:error] [pid 16593:tid 16606] [client 208.109.235.107:38970] [client 208.109.235.107] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 208.109.235.107, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aSQxKhVGznHBJI2LKpRIFAAAAos"]
[Mon Nov 24 20:06:20.303817 2025] [:error] [pid 49900:tid 49905] [client 116.204.78.140:52708] [client 116.204.78.140] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 116.204.78.140, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSRKPDCyPLrvg06aork0ogAAAAM"], referer: http://paramountbaldivis.com
[Mon Nov 24 21:23:33.030824 2025] [:error] [pid 48600:tid 48638] [client 103.192.173.163:39631] [client 103.192.173.163] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.192.173.163, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSRcVftOzSUAQvWVjBeeiwAAAcg"], referer: http://paramountbaldivis.com
[Mon Nov 24 21:24:45.704480 2025] [:error] [pid 16593:tid 16615] [client 43.163.206.70:48874] [client 43.163.206.70] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||paramountbaldivis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aSRcnRVGznHBJI2LKpRo-gAAApQ"]
[Mon Nov 24 21:45:39.524243 2025] [:error] [pid 16441:tid 16446] [client 193.32.126.212:55758] [client 193.32.126.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aSRhg4q_bc5MOa9HflmTXAAAAII"]
[Mon Nov 24 21:45:40.019230 2025] [:error] [pid 48599:tid 48616] [client 193.32.126.212:56252] [client 193.32.126.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aSRhhJzvu6PDJiRKE3JQSAAAAY0"]
[Mon Nov 24 21:45:40.513334 2025] [:error] [pid 48599:tid 48609] [client 193.32.126.212:56681] [client 193.32.126.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aSRhhJzvu6PDJiRKE3JQTgAAAYY"]
[Mon Nov 24 22:08:24.381347 2025] [:error] [pid 48688:tid 48704] [client 103.38.161.197:41072] [client 103.38.161.197] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.38.161.197, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aSRm2Bm2q1FkzLam7A3UZwAAAkw"]
[Mon Nov 24 22:08:28.867128 2025] [:error] [pid 16516:tid 16533] [client 103.38.161.197:43726] [client 103.38.161.197] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.38.161.197, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aSRm3PqZbniwaNwL8XkQfQAAAQ4"]
[Mon Nov 24 22:08:31.157726 2025] [:error] [pid 16593:tid 16616] [client 103.38.161.197:44086] [client 103.38.161.197] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.38.161.197, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aSRm3xVGznHBJI2LKpRvegAAApU"]
[Mon Nov 24 22:21:14.511438 2025] [autoindex:error] [pid 49900:tid 49926] [client 104.46.104.8:10660] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Mon Nov 24 22:21:14.914418 2025] [autoindex:error] [pid 49900:tid 49911] [client 104.46.104.8:10660] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/pomo/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Mon Nov 24 22:21:15.131468 2025] [autoindex:error] [pid 49900:tid 49909] [client 104.46.104.8:10660] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Mon Nov 24 22:21:15.426168 2025] [autoindex:error] [pid 49900:tid 49914] [client 104.46.104.8:10660] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Mon Nov 24 22:21:15.641379 2025] [autoindex:error] [pid 49900:tid 49916] [client 104.46.104.8:10660] AH01276: Cannot serve directory /home/baldivis/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Mon Nov 24 22:21:16.256215 2025] [autoindex:error] [pid 49900:tid 49910] [client 104.46.104.8:10660] AH01276: Cannot serve directory /home/baldivis/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Mon Nov 24 22:21:16.473973 2025] [autoindex:error] [pid 49900:tid 49906] [client 104.46.104.8:10660] AH01276: Cannot serve directory /home/baldivis/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Mon Nov 24 22:31:58.590053 2025] [:error] [pid 9630:tid 9653] [client 117.52.74.20:29164] [client 117.52.74.20] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 117.52.74.20, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aSRsXirSgUgPGkizt2pFCQAAAFU"]
[Mon Nov 24 22:32:01.836265 2025] [:error] [pid 9630:tid 9648] [client 117.52.74.20:29164] [client 117.52.74.20] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 117.52.74.20, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aSRsYSrSgUgPGkizt2pFGAAAAFA"]
[Mon Nov 24 23:14:26.683305 2025] [:error] [pid 16549:tid 16557] [client 103.31.38.163:38938] [client 103.31.38.163] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.31.38.163, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSR2UqeWW19A99PUw_d0-wAAAUU"], referer: http://paramountbaldivis.com
[Mon Nov 24 23:43:32.790848 2025] [:error] [pid 9630:tid 9654] [client 103.92.85.202:34340] [client 103.92.85.202] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.92.85.202, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSR9JCrSgUgPGkizt2pWogAAAFY"], referer: http://paramountbaldivis.com
[Tue Nov 25 00:47:46.391359 2025] [:error] [pid 16593:tid 16602] [client 82.165.87.252:47934] [client 82.165.87.252] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 82.165.87.252, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aSSMMhVGznHBJI2LKpSGZwAAAoc"]
[Tue Nov 25 00:53:24.339708 2025] [:error] [pid 48688:tid 48701] [client 111.172.249.49:46788] [client 111.172.249.49] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||paramountbaldivis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aSSNhBm2q1FkzLam7A3wbAAAAkk"]
[Tue Nov 25 00:56:07.540353 2025] [:error] [pid 48601:tid 48674] [client 14.136.76.45:59134] [client 14.136.76.45] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 14.136.76.45, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSSOJ4MM4MaVTk74-AYMoAAAAhE"], referer: http://paramountbaldivis.com
[Tue Nov 25 01:38:09.650888 2025] [:error] [pid 16593:tid 16595] [client 81.88.53.143:48990] [client 81.88.53.143] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 81.88.53.143, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSSYARVGznHBJI2LKpSNtQAAAoA"], referer: http://paramountbaldivis.com
[Tue Nov 25 01:57:37.805522 2025] [:error] [pid 48601:tid 48662] [client 5.135.27.193:59996] [client 5.135.27.193] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.135.27.193, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aSSckYMM4MaVTk74-AYYJQAAAgU"]
[Tue Nov 25 01:57:57.484888 2025] [:error] [pid 48599:tid 48613] [client 5.135.27.193:52016] [client 5.135.27.193] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.135.27.193, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aSScpZzvu6PDJiRKE3J6_QAAAYo"]
[Tue Nov 25 02:07:38.077789 2025] [:error] [pid 48601:tid 48658] [client 114.215.206.33:46420] [client 114.215.206.33] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 114.215.206.33, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSSe6oMM4MaVTk74-AYZbwAAAgE"], referer: http://paramountbaldivis.com
[Tue Nov 25 02:44:19.139909 2025] [:error] [pid 16593:tid 16619] [client 171.244.34.211:36758] [client 171.244.34.211] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 171.244.34.211, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSSngxVGznHBJI2LKpSWyQAAApg"], referer: http://paramountbaldivis.com
[Tue Nov 25 02:54:20.138294 2025] [:error] [pid 16441:tid 16464] [client 159.223.46.114:60534] [client 159.223.46.114] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 159.223.46.114, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSSp3Iq_bc5MOa9Hfln5RQAAAJQ"], referer: http://paramountbaldivis.com
[Tue Nov 25 03:04:37.414731 2025] [:error] [pid 48600:tid 48631] [client 14.136.76.45:49250] [client 14.136.76.45] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 14.136.76.45, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSSsRftOzSUAQvWVjBfMiQAAAcE"], referer: http://paramountbaldivis.com
[Tue Nov 25 03:10:16.343467 2025] [:error] [pid 16441:tid 16452] [client 203.134.193.134:23337] [client 203.134.193.134] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 203.134.193.134, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aSStmIq_bc5MOa9Hfln98wAAAIg"]
[Tue Nov 25 03:10:37.322882 2025] [:error] [pid 48601:tid 48677] [client 203.134.193.134:28362] [client 203.134.193.134] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 203.134.193.134, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aSStrYMM4MaVTk74-AYl2wAAAhQ"]
[Tue Nov 25 03:10:44.609489 2025] [:error] [pid 16549:tid 16566] [client 203.134.193.134:12077] [client 203.134.193.134] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 203.134.193.134, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aSSttKeWW19A99PUw_eXUwAAAU4"]
[Tue Nov 25 03:34:29.547000 2025] [:error] [pid 30879:tid 30898] [client 62.60.201.30:45502] [client 62.60.201.30] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.201.30, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aSSzRbe3-juUJ90ov0hUkgAAANE"]
[Tue Nov 25 03:34:44.963083 2025] [:error] [pid 30783:tid 30850] [client 62.60.201.30:53110] [client 62.60.201.30] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.60.201.30, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aSSzVN3oFLZhRUZW1vzrPAAAAIQ"]
[Tue Nov 25 04:21:04.207724 2025] [:error] [pid 14076:tid 14092] [client 62.214.228.95:60461] [client 62.214.228.95] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 62.214.228.95, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSS-MHsB4Gz6Qw-pvBv79gAAAAs"], referer: http://paramountbaldivis.com
[Tue Nov 25 04:26:26.519055 2025] [:error] [pid 14168:tid 14189] [client 103.38.161.197:54156] [client 103.38.161.197] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.38.161.197, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aSS_cvR-ZDU0QEgAIItXXgAAANI"]
[Tue Nov 25 04:26:30.329460 2025] [:error] [pid 14076:tid 14086] [client 103.38.161.197:56878] [client 103.38.161.197] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.38.161.197, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aSS_dnsB4Gz6Qw-pvBv9GAAAAAU"]
[Tue Nov 25 04:26:31.599491 2025] [:error] [pid 14168:tid 14178] [client 103.38.161.197:57158] [client 103.38.161.197] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.38.161.197, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aSS_d_R-ZDU0QEgAIItXbQAAAMc"]
[Tue Nov 25 04:28:12.400434 2025] [:error] [pid 14078:tid 14153] [client 172.188.216.109:47646] [client 172.188.216.109] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.188.216.109, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSS_3NVXYbb0ii_rVoI50QAAAJA"], referer: http://paramountbaldivis.com
[Tue Nov 25 05:03:26.010714 2025] [:error] [pid 14688:tid 14706] [client 103.185.185.188:46402] [client 103.185.185.188] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.185.185.188, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSTIHm9vYrBoEsiDnizcTQAAARA"], referer: http://paramountbaldivis.com
[Tue Nov 25 05:19:15.215800 2025] [:error] [pid 14076:tid 14087] [client 221.224.30.114:36932] [client 221.224.30.114] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 221.224.30.114, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSTL03sB4Gz6Qw-pvBsK5gAAAAY"], referer: http://paramountbaldivis.com
[Tue Nov 25 05:24:49.607486 2025] [:error] [pid 14076:tid 14091] [client 45.157.54.77:57825] [client 45.157.54.77] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.157.54.77, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSTNIXsB4Gz6Qw-pvBsMJwAAAAo"]
[Tue Nov 25 05:24:49.769602 2025] [:error] [pid 14077:tid 14110] [client 45.157.54.77:54785] [client 45.157.54.77] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.157.54.77, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSTNIRG9n7UHEkwDTyhRggAAAEA"]
[Tue Nov 25 05:30:30.703880 2025] [:error] [pid 14078:tid 14149] [client 82.156.9.158:45350] [client 82.156.9.158] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 82.156.9.158, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSTOdtVXYbb0ii_rVoJNMQAAAIw"], referer: http://paramountbaldivis.com
[Tue Nov 25 05:52:50.530092 2025] [:error] [pid 14688:tid 14698] [client 42.118.16.244:55450] [client 42.118.16.244] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 42.118.16.244, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSTTsm9vYrBoEsiDnizqkAAAAQg"], referer: http://paramountbaldivis.com
[Tue Nov 25 05:56:33.846106 2025] [:error] [pid 14076:tid 14090] [client 192.241.128.246:41542] [client 192.241.128.246] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 192.241.128.246, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSTUkXsB4Gz6Qw-pvBsSPQAAAAk"], referer: http://paramountbaldivis.com
[Tue Nov 25 06:07:53.440019 2025] [:error] [pid 14168:tid 14190] [client 82.156.9.158:60202] [client 82.156.9.158] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 82.156.9.158, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSTXOfR-ZDU0QEgAIIt86gAAANM"], referer: http://paramountbaldivis.com
[Tue Nov 25 06:15:18.044200 2025] [:error] [pid 1103:tid 1111] [client 91.213.188.13:45070] [client 91.213.188.13] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 91.213.188.13, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSTY9o0LETdqOlq63sQIfgAAAUI"], referer: http://paramountbaldivis.com
[Tue Nov 25 06:26:31.399436 2025] [:error] [pid 14077:tid 14123] [client 157.230.58.84:51658] [client 157.230.58.84] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 157.230.58.84, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSTblxG9n7UHEkwDTyhfBwAAAE0"], referer: http://paramountbaldivis.com
[Tue Nov 25 07:53:38.432101 2025] [:error] [pid 14076:tid 14089] [client 1.53.185.93:41594] [client 1.53.185.93] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 1.53.185.93, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSTwAnsB4Gz6Qw-pvBss6AAAAAg"], referer: http://paramountbaldivis.com
[Tue Nov 25 08:46:05.966062 2025] [:error] [pid 14688:tid 14708] [client 153.19.38.189:54610] [client 153.19.38.189] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 153.19.38.189, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aST8TW9vYrBoEsiDniwYgQAAARI"], referer: http://paramountbaldivis.com
[Tue Nov 25 08:55:04.602724 2025] [:error] [pid 14078:tid 14151] [client 185.211.6.144:49948] [client 185.211.6.144] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.211.6.144, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aST-aNVXYbb0ii_rVoKB-QAAAI4"]
[Tue Nov 25 08:55:12.605441 2025] [:error] [pid 14078:tid 14156] [client 185.211.6.144:59072] [client 185.211.6.144] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.211.6.144, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aST-cNVXYbb0ii_rVoKCGgAAAJM"]
[Tue Nov 25 08:55:15.545535 2025] [:error] [pid 1103:tid 1127] [client 185.211.6.144:59080] [client 185.211.6.144] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.211.6.144, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aST-c40LETdqOlq63sRBOgAAAVI"]
[Tue Nov 25 11:24:43.590284 2025] [:error] [pid 28836:tid 29006] [client 103.149.169.122:49640] [client 103.149.169.122] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.149.169.122, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSUhe5wNRsoxcLQGkTdCsgAAAtA"], referer: http://paramountbaldivis.com
[Tue Nov 25 14:14:47.772372 2025] [:error] [pid 14076:tid 14087] [client 103.75.184.15:44740] [client 103.75.184.15] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.75.184.15, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSVJV3sB4Gz6Qw-pvBu9fgAAAAY"], referer: http://paramountbaldivis.com
[Tue Nov 25 14:41:59.203042 2025] [:error] [pid 14076:tid 14100] [client 108.167.158.91:19046] [client 108.167.158.91] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 108.167.158.91, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSVPt3sB4Gz6Qw-pvBvG3QAAABM"], referer: http://paramountbaldivis.com
[Tue Nov 25 16:11:19.208057 2025] [:error] [pid 14077:tid 14132] [client 62.214.228.249:60620] [client 62.214.228.249] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 62.214.228.249, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSVkpxG9n7UHEkwDTyg4bwAAAFY"], referer: http://paramountbaldivis.com
[Tue Nov 25 18:11:36.835328 2025] [:error] [pid 28740:tid 28800] [client 8.218.212.177:44450] [client 8.218.212.177] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 8.218.212.177, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aSWA2FppQCoYxWW6V0VlxQAAAkk"]
[Tue Nov 25 18:11:43.142327 2025] [:error] [pid 14077:tid 14122] [client 8.218.212.177:58272] [client 8.218.212.177] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 8.218.212.177, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aSWA3xG9n7UHEkwDTyhrugAAAEw"]
[Tue Nov 25 18:11:44.327306 2025] [:error] [pid 28739:tid 28784] [client 8.218.212.177:58538] [client 8.218.212.177] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 8.218.212.177, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aSWA4BxGpKmlkG4FexRnFwAAAhY"]
[Tue Nov 25 18:53:05.652890 2025] [:error] [pid 28842:tid 29026] [client 138.199.60.187:44020] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/manager.php"] [unique_id "aSWKkdNmoaPf6T4-6C2DfAAAA1g"]
[Tue Nov 25 18:53:05.933372 2025] [:error] [pid 14168:tid 14174] [client 138.199.60.187:44166] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/manager.php"] [unique_id "aSWKkfR-ZDU0QEgAIItcAAAAAMM"]
[Tue Nov 25 18:53:06.196331 2025] [:error] [pid 28740:tid 28799] [client 138.199.60.187:44364] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/manager.php"] [unique_id "aSWKklppQCoYxWW6V0VyZAAAAkg"]
[Tue Nov 25 18:53:06.444960 2025] [:error] [pid 14078:tid 14140] [client 138.199.60.187:44514] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/manager.php"] [unique_id "aSWKktVXYbb0ii_rVoI3ygAAAIM"]
[Tue Nov 25 18:53:06.678902 2025] [:error] [pid 14076:tid 14097] [client 138.199.60.187:44618] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/manager.php"] [unique_id "aSWKknsB4Gz6Qw-pvBsKEAAAABA"]
[Tue Nov 25 18:53:06.950969 2025] [:error] [pid 14077:tid 14112] [client 138.199.60.187:44784] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/css/dist/"] [unique_id "aSWKkhG9n7UHEkwDTyh9-wAAAEI"]
[Tue Nov 25 18:53:07.192868 2025] [:error] [pid 14077:tid 14121] [client 138.199.60.187:44940] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/css/dist/"] [unique_id "aSWKkxG9n7UHEkwDTyh-AwAAAEs"]
[Tue Nov 25 18:53:07.448528 2025] [:error] [pid 28842:tid 29023] [client 138.199.60.187:45110] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/css/dist/"] [unique_id "aSWKk9NmoaPf6T4-6C2DkAAAA1U"]
[Tue Nov 25 18:53:07.720064 2025] [:error] [pid 2987:tid 3004] [client 138.199.60.187:45260] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/css/dist/"] [unique_id "aSWKk8-djEt-pTzPxnyT4wAAAU8"]
[Tue Nov 25 18:53:07.974785 2025] [:error] [pid 14076:tid 14084] [client 138.199.60.187:51046] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/css/dist/"] [unique_id "aSWKk3sB4Gz6Qw-pvBsKIwAAAAM"]
[Tue Nov 25 19:10:15.357199 2025] [:error] [pid 2987:tid 3008] [client 139.59.30.253:65176] [client 139.59.30.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/css/"] [unique_id "aSWOl8-djEt-pTzPxnyZaAAAAVM"], referer: binance.com
[Tue Nov 25 19:51:38.442959 2025] [:error] [pid 28739:tid 28779] [client 118.17.233.205:51518] [client 118.17.233.205] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 118.17.233.205, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aSWYShxGpKmlkG4FexR-VgAAAhE"]
[Tue Nov 25 19:51:45.075881 2025] [:error] [pid 2987:tid 2998] [client 118.17.233.205:33402] [client 118.17.233.205] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 118.17.233.205, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aSWYUc-djEt-pTzPxnylRAAAAUk"]
[Tue Nov 25 19:51:46.394919 2025] [:error] [pid 28740:tid 28795] [client 118.17.233.205:33644] [client 118.17.233.205] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 118.17.233.205, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aSWYUlppQCoYxWW6V0WGlAAAAkQ"]
[Tue Nov 25 21:09:51.136933 2025] [:error] [pid 14078:tid 14151] [client 119.156.243.110:49536] [client 119.156.243.110] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 119.156.243.110, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSWqn9VXYbb0ii_rVoJqvAAAAI4"], referer: http://paramountbaldivis.com
[Tue Nov 25 22:48:33.345414 2025] [:error] [pid 28739:tid 28781] [client 162.241.216.158:36076] [client 162.241.216.158] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 162.241.216.158, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSXBwRxGpKmlkG4FexTFwwAAAhM"], referer: http://paramountbaldivis.com
[Tue Nov 25 23:02:43.851778 2025] [:error] [pid 14077:tid 14125] [client 98.142.97.74:43712] [client 98.142.97.74] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 98.142.97.74, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSXFExG9n7UHEkwDTyjltgAAAE8"], referer: http://paramountbaldivis.com
[Tue Nov 25 23:13:58.793861 2025] [:error] [pid 14168:tid 14174] [client 4.241.179.168:17369] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/cyanamids.php"] [unique_id "aSXHtvR-ZDU0QEgAIIumiQAAAMM"]
[Tue Nov 25 23:13:59.953761 2025] [:error] [pid 14076:tid 14089] [client 4.241.179.168:17367] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/cyanamids.php"] [unique_id "aSXHt3sB4Gz6Qw-pvBthHwAAAAg"]
[Tue Nov 25 23:14:00.798829 2025] [:error] [pid 14076:tid 14103] [client 4.241.179.168:17373] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/cyanamids.php"] [unique_id "aSXHuHsB4Gz6Qw-pvBthIQAAABY"]
[Tue Nov 25 23:14:04.178897 2025] [:error] [pid 14076:tid 14091] [client 4.241.179.168:17357] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/cyanamids.php"] [unique_id "aSXHvHsB4Gz6Qw-pvBthKAAAAAo"]
[Tue Nov 25 23:14:05.625374 2025] [:error] [pid 28739:tid 28762] [client 4.241.179.168:17400] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/disengaging.php"] [unique_id "aSXHvRxGpKmlkG4FexTOywAAAgA"]
[Tue Nov 25 23:14:07.035561 2025] [:error] [pid 28609:tid 28636] [client 4.241.179.168:17403] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/disengaging.php"] [unique_id "aSXHvyGGdT-nZJVs3x0LBAAAAZI"]
[Tue Nov 25 23:14:07.834287 2025] [:error] [pid 14168:tid 14193] [client 4.241.179.168:17291] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/disengaging.php"] [unique_id "aSXHv_R-ZDU0QEgAIIummgAAANY"]
[Tue Nov 25 23:14:09.270000 2025] [:error] [pid 28739:tid 28766] [client 4.241.179.168:17290] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/disengaging.php"] [unique_id "aSXHwRxGpKmlkG4FexTOzwAAAgQ"]
[Tue Nov 25 23:14:10.347034 2025] [:error] [pid 2987:tid 3000] [client 4.241.179.168:17362] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/disquiet.php"] [unique_id "aSXHws-djEt-pTzPxnzmSAAAAUs"]
[Tue Nov 25 23:14:11.925425 2025] [:error] [pid 14076:tid 14105] [client 4.241.179.168:17391] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/disquiet.php"] [unique_id "aSXHw3sB4Gz6Qw-pvBthLQAAABg"]
[Tue Nov 25 23:14:12.507026 2025] [:error] [pid 2987:tid 3001] [client 4.241.179.168:17374] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/disquiet.php"] [unique_id "aSXHxM-djEt-pTzPxnzmSQAAAUw"]
[Tue Nov 25 23:14:14.028841 2025] [:error] [pid 28739:tid 28774] [client 4.241.179.168:17365] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/disquiet.php"] [unique_id "aSXHxhxGpKmlkG4FexTO1QAAAgw"]
[Tue Nov 25 23:14:16.028853 2025] [:error] [pid 28739:tid 28768] [client 4.241.179.168:17220] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/duplicand.php"] [unique_id "aSXHyBxGpKmlkG4FexTO1gAAAgY"]
[Tue Nov 25 23:14:18.148243 2025] [:error] [pid 14076:tid 14093] [client 4.241.179.168:17281] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/duplicand.php"] [unique_id "aSXHynsB4Gz6Qw-pvBthMQAAAAw"]
[Tue Nov 25 23:14:21.114107 2025] [:error] [pid 28739:tid 28777] [client 4.241.179.168:17356] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/duplicand.php"] [unique_id "aSXHzRxGpKmlkG4FexTO4QAAAg8"]
[Tue Nov 25 23:14:23.534656 2025] [:error] [pid 43843:tid 43858] [client 4.241.179.168:17306] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/duplicand.php"] [unique_id "aSXHzxhx4v3NUNdMKDMMtAAAAc0"]
[Tue Nov 25 23:14:24.071420 2025] [:error] [pid 28739:tid 28766] [client 4.241.179.168:17280] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/parturiency.php"] [unique_id "aSXH0BxGpKmlkG4FexTO5gAAAgQ"]
[Tue Nov 25 23:14:25.496682 2025] [:error] [pid 2987:tid 3010] [client 4.241.179.168:17385] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/parturiency.php"] [unique_id "aSXH0c-djEt-pTzPxnzmUwAAAVU"]
[Tue Nov 25 23:14:26.422004 2025] [:error] [pid 14078:tid 14143] [client 4.241.179.168:17377] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/parturiency.php"] [unique_id "aSXH0tVXYbb0ii_rVoKsZgAAAIY"]
[Tue Nov 25 23:14:27.723412 2025] [:error] [pid 43843:tid 43866] [client 4.241.179.168:17363] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/parturiency.php"] [unique_id "aSXH0xhx4v3NUNdMKDMMtgAAAdU"]
[Tue Nov 25 23:14:30.090918 2025] [:error] [pid 43843:tid 43868] [client 4.241.179.168:17366] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/tithings.php"] [unique_id "aSXH1hhx4v3NUNdMKDMMuQAAAdc"]
[Tue Nov 25 23:14:31.026992 2025] [:error] [pid 28739:tid 28779] [client 4.241.179.168:17388] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/tithings.php"] [unique_id "aSXH1xxGpKmlkG4FexTO7QAAAhE"]
[Tue Nov 25 23:14:33.258451 2025] [:error] [pid 14077:tid 14128] [client 4.241.179.168:17338] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/tithings.php"] [unique_id "aSXH2RG9n7UHEkwDTyjoTgAAAFI"]
[Tue Nov 25 23:14:36.038706 2025] [:error] [pid 14168:tid 14189] [client 4.241.179.168:17300] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/tithings.php"] [unique_id "aSXH3PR-ZDU0QEgAIIumtAAAANI"]
[Tue Nov 25 23:14:38.127370 2025] [:error] [pid 2987:tid 3003] [client 4.241.179.168:17390] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ww5.php"] [unique_id "aSXH3s-djEt-pTzPxnzmXQAAAU4"]
[Tue Nov 25 23:14:40.669838 2025] [:error] [pid 14077:tid 14118] [client 4.241.179.168:17307] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ww5.php"] [unique_id "aSXH4BG9n7UHEkwDTyjoVAAAAEg"]
[Tue Nov 25 23:14:42.089436 2025] [:error] [pid 14078:tid 14139] [client 4.241.179.168:17407] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ww5.php"] [unique_id "aSXH4tVXYbb0ii_rVoKsmwAAAII"]
[Tue Nov 25 23:14:43.925598 2025] [:error] [pid 28609:tid 28618] [client 4.241.179.168:17358] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ww5.php"] [unique_id "aSXH4yGGdT-nZJVs3x0LEwAAAYA"]
[Tue Nov 25 23:14:45.120777 2025] [:error] [pid 28836:tid 29008] [client 4.241.179.168:17293] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/z60.php"] [unique_id "aSXH5ZwNRsoxcLQGkTcDhQAAAtI"]
[Tue Nov 25 23:14:46.418704 2025] [:error] [pid 2987:tid 3002] [client 4.241.179.168:17286] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/z60.php"] [unique_id "aSXH5s-djEt-pTzPxnzmZAAAAU0"]
[Tue Nov 25 23:14:47.900425 2025] [:error] [pid 14076:tid 14100] [client 4.241.179.168:17297] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/z60.php"] [unique_id "aSXH53sB4Gz6Qw-pvBthZgAAABM"]
[Tue Nov 25 23:14:48.606463 2025] [:error] [pid 28836:tid 28986] [client 4.241.179.168:17304] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/z60.php"] [unique_id "aSXH6JwNRsoxcLQGkTcDiQAAAs8"]
[Tue Nov 25 23:14:50.301130 2025] [:error] [pid 2987:tid 3001] [client 4.241.179.168:17394] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-themes.php"] [unique_id "aSXH6s-djEt-pTzPxnzmaQAAAUw"]
[Tue Nov 25 23:15:29.892045 2025] [:error] [pid 2987:tid 3013] [client 4.241.179.168:17383] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-home.php"] [unique_id "aSXIEc-djEt-pTzPxnzmkQAAAVg"]
[Tue Nov 25 23:15:31.060411 2025] [:error] [pid 14168:tid 14188] [client 4.241.179.168:17309] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-home.php"] [unique_id "aSXIE_R-ZDU0QEgAIIum0wAAANE"]
[Tue Nov 25 23:15:32.998927 2025] [:error] [pid 28739:tid 28783] [client 4.241.179.168:17346] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-home.php"] [unique_id "aSXIFBxGpKmlkG4FexTPOwAAAhU"]
[Tue Nov 25 23:15:35.138025 2025] [:error] [pid 14078:tid 14151] [client 4.241.179.168:17235] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-home.php"] [unique_id "aSXIF9VXYbb0ii_rVoKtSQAAAI4"]
[Tue Nov 25 23:15:36.939388 2025] [:error] [pid 28739:tid 28775] [client 4.241.179.168:17384] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-securitiy.php"] [unique_id "aSXIGBxGpKmlkG4FexTPSAAAAg0"]
[Tue Nov 25 23:15:38.929012 2025] [:error] [pid 14077:tid 14130] [client 4.241.179.168:17327] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-securitiy.php"] [unique_id "aSXIGhG9n7UHEkwDTyjoeQAAAFQ"]
[Tue Nov 25 23:15:39.435775 2025] [:error] [pid 2987:tid 2999] [client 4.241.179.168:17298] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-securitiy.php"] [unique_id "aSXIG8-djEt-pTzPxnzmlQAAAUo"]
[Tue Nov 25 23:15:40.079321 2025] [:error] [pid 14168:tid 14171] [client 4.241.179.168:17375] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-securitiy.php"] [unique_id "aSXIHPR-ZDU0QEgAIIum2QAAAMA"]
[Tue Nov 25 23:15:41.069204 2025] [:error] [pid 43981:tid 43994] [client 4.241.179.168:17313] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-ac.php"] [unique_id "aSXIHQgZn97m_qh_RaGCfgAAAws"]
[Tue Nov 25 23:15:41.930643 2025] [:error] [pid 14077:tid 14117] [client 4.241.179.168:17395] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-ac.php"] [unique_id "aSXIHRG9n7UHEkwDTyjofgAAAEc"]
[Tue Nov 25 23:15:42.988069 2025] [:error] [pid 28609:tid 28627] [client 4.241.179.168:17398] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-ac.php"] [unique_id "aSXIHiGGdT-nZJVs3x0LeAAAAYk"]
[Tue Nov 25 23:15:44.290516 2025] [:error] [pid 14078:tid 14157] [client 4.241.179.168:17378] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-ac.php"] [unique_id "aSXIINVXYbb0ii_rVoKtVgAAAJQ"]
[Tue Nov 25 23:15:45.322956 2025] [:error] [pid 14078:tid 14150] [client 4.241.179.168:17332] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/nof.php"] [unique_id "aSXIIdVXYbb0ii_rVoKtWgAAAI0"]
[Tue Nov 25 23:15:45.966178 2025] [:error] [pid 14076:tid 14094] [client 4.241.179.168:17331] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/nof.php"] [unique_id "aSXIIXsB4Gz6Qw-pvBthvQAAAA0"]
[Tue Nov 25 23:15:47.248930 2025] [:error] [pid 2987:tid 3008] [client 4.241.179.168:17406] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/nof.php"] [unique_id "aSXII8-djEt-pTzPxnzmmAAAAVM"]
[Tue Nov 25 23:15:49.868893 2025] [:error] [pid 14078:tid 14145] [client 4.241.179.168:17360] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/nof.php"] [unique_id "aSXIJdVXYbb0ii_rVoKtYQAAAIg"]
[Tue Nov 25 23:15:51.296121 2025] [:error] [pid 28836:tid 28957] [client 4.241.179.168:17284] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/test1.php"] [unique_id "aSXIJ5wNRsoxcLQGkTcDzQAAAsI"]
[Tue Nov 25 23:15:53.133422 2025] [:error] [pid 43843:tid 43848] [client 4.241.179.168:17389] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/test1.php"] [unique_id "aSXIKRhx4v3NUNdMKDMM9AAAAcM"]
[Tue Nov 25 23:15:54.239797 2025] [:error] [pid 28739:tid 28780] [client 4.241.179.168:17381] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/test1.php"] [unique_id "aSXIKhxGpKmlkG4FexTPUgAAAhI"]
[Tue Nov 25 23:15:55.170688 2025] [:error] [pid 14168:tid 14190] [client 4.241.179.168:17399] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/test1.php"] [unique_id "aSXIK_R-ZDU0QEgAIIum3wAAANM"]
[Tue Nov 25 23:15:56.795243 2025] [:error] [pid 28739:tid 28786] [client 4.241.179.168:17386] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/unbalanceable.php"] [unique_id "aSXILBxGpKmlkG4FexTPVAAAAhg"]
[Tue Nov 25 23:15:57.669482 2025] [:error] [pid 28609:tid 28629] [client 4.241.179.168:17321] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/unbalanceable.php"] [unique_id "aSXILSGGdT-nZJVs3x0LigAAAYs"]
[Tue Nov 25 23:15:58.859145 2025] [:error] [pid 14078:tid 14150] [client 4.241.179.168:17217] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/unbalanceable.php"] [unique_id "aSXILtVXYbb0ii_rVoKtegAAAI0"]
[Tue Nov 25 23:15:59.736781 2025] [:error] [pid 43843:tid 43869] [client 4.241.179.168:17324] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/unbalanceable.php"] [unique_id "aSXILxhx4v3NUNdMKDMM-AAAAdg"]
[Tue Nov 25 23:16:01.083457 2025] [:error] [pid 28836:tid 28986] [client 4.241.179.168:17289] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-blog-front.php"] [unique_id "aSXIMZwNRsoxcLQGkTcD5gAAAs8"]
[Tue Nov 25 23:16:02.283070 2025] [:error] [pid 14168:tid 14185] [client 4.241.179.168:17295] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-blog-front.php"] [unique_id "aSXIMvR-ZDU0QEgAIIum4wAAAM4"]
[Tue Nov 25 23:16:03.729840 2025] [:error] [pid 14076:tid 14095] [client 4.241.179.168:17404] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-blog-front.php"] [unique_id "aSXIM3sB4Gz6Qw-pvBthxQAAAA4"]
[Tue Nov 25 23:16:04.934248 2025] [:error] [pid 28836:tid 28961] [client 4.241.179.168:17392] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-blog-front.php"] [unique_id "aSXINJwNRsoxcLQGkTcD6gAAAsY"]
[Tue Nov 25 23:16:06.043287 2025] [:error] [pid 2987:tid 3006] [client 4.241.179.168:17351] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-advaced.php"] [unique_id "aSXINs-djEt-pTzPxnzmoAAAAVE"]
[Tue Nov 25 23:16:08.730220 2025] [:error] [pid 43981:tid 43985] [client 4.241.179.168:17359] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-advaced.php"] [unique_id "aSXIOAgZn97m_qh_RaGClgAAAwI"]
[Tue Nov 25 23:16:13.774474 2025] [:error] [pid 28739:tid 28768] [client 4.241.179.168:17387] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-advaced.php"] [unique_id "aSXIPRxGpKmlkG4FexTPXgAAAgY"]
[Tue Nov 25 23:16:16.430644 2025] [:error] [pid 14078:tid 14142] [client 4.241.179.168:17343] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-advaced.php"] [unique_id "aSXIQNVXYbb0ii_rVoKtiwAAAIU"]
[Tue Nov 25 23:16:18.039266 2025] [:error] [pid 28609:tid 28639] [client 4.241.179.168:17361] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/poliomyelopathy.php"] [unique_id "aSXIQiGGdT-nZJVs3x0LsgAAAZU"]
[Tue Nov 25 23:16:18.917698 2025] [:error] [pid 14168:tid 14181] [client 4.241.179.168:17382] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/poliomyelopathy.php"] [unique_id "aSXIQvR-ZDU0QEgAIIum7QAAAMo"]
[Tue Nov 25 23:16:20.380372 2025] [:error] [pid 14168:tid 14185] [client 4.241.179.168:17344] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/poliomyelopathy.php"] [unique_id "aSXIRPR-ZDU0QEgAIIum7wAAAM4"]
[Tue Nov 25 23:16:22.118045 2025] [:error] [pid 14077:tid 14120] [client 4.241.179.168:17350] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/poliomyelopathy.php"] [unique_id "aSXIRhG9n7UHEkwDTyjokQAAAEo"]
[Tue Nov 25 23:16:24.225066 2025] [:error] [pid 28836:tid 28959] [client 4.241.179.168:17376] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/abc.php"] [unique_id "aSXISJwNRsoxcLQGkTcD8wAAAsQ"]
[Tue Nov 25 23:22:39.076457 2025] [:error] [pid 28739:tid 28769] [client 98.89.29.83:41730] [client 98.89.29.83] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paramountbaldivis.com"] [uri "/.env"] [unique_id "aSXJvxxGpKmlkG4FexTSswAAAgc"]
[Tue Nov 25 23:28:10.358958 2025] [:error] [pid 14168:tid 14178] [client 91.203.110.227:3176] [client 91.203.110.227] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 91.203.110.227, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSXLCvR-ZDU0QEgAIIup9wAAAMc"], referer: http://paramountbaldivis.com
[Tue Nov 25 23:34:08.903684 2025] [:error] [pid 43981:tid 44007] [client 185.48.182.96:49780] [client 185.48.182.96] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.48.182.96, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aSXMcAgZn97m_qh_RaGGpwAAAxg"]
[Tue Nov 25 23:34:17.865284 2025] [:error] [pid 28836:tid 29007] [client 185.48.182.96:59506] [client 185.48.182.96] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.48.182.96, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aSXMeZwNRsoxcLQGkTcIUAAAAtE"]
[Tue Nov 25 23:34:21.133257 2025] [:error] [pid 14168:tid 14186] [client 185.48.182.96:59512] [client 185.48.182.96] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.48.182.96, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aSXMffR-ZDU0QEgAIIurYQAAAM8"]
[Wed Nov 26 00:08:24.603786 2025] [:error] [pid 14078:tid 14145] [client 43.155.27.244:53922] [client 43.155.27.244] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.paramountbaldivis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.paramountbaldivis.com"] [uri "/"] [unique_id "aSXUeNVXYbb0ii_rVoLDrAAAAIg"]
[Wed Nov 26 00:35:16.949055 2025] [:error] [pid 14078:tid 14153] [client 185.104.44.114:47652] [client 185.104.44.114] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.104.44.114, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSXaxNVXYbb0ii_rVoLSAQAAAJA"], referer: http://paramountbaldivis.com
[Wed Nov 26 00:38:23.762886 2025] [:error] [pid 28609:tid 28620] [client 54.190.10.234:33418] [client 54.190.10.234] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 54.190.10.234, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSXbfyGGdT-nZJVs3x0jpAAAAYI"], referer: http://paramountbaldivis.com
[Wed Nov 26 00:44:59.530934 2025] [:error] [pid 14078:tid 14142] [client 162.144.182.123:16650] [client 162.144.182.123] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.144.182.123, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aSXdC9VXYbb0ii_rVoLYEQAAAIU"]
[Wed Nov 26 00:45:05.197206 2025] [:error] [pid 14077:tid 14115] [client 162.144.182.123:26520] [client 162.144.182.123] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.144.182.123, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aSXdERG9n7UHEkwDTygBJwAAAEU"]
[Wed Nov 26 00:45:06.679814 2025] [:error] [pid 28836:tid 29006] [client 162.144.182.123:26536] [client 162.144.182.123] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.144.182.123, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aSXdEpwNRsoxcLQGkTcZmAAAAtA"]
[Wed Nov 26 00:50:21.674965 2025] [:error] [pid 28739:tid 28773] [client 162.241.217.24:40324] [client 162.241.217.24] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 162.241.217.24, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSXeTRxGpKmlkG4FexTzWAAAAgs"], referer: http://paramountbaldivis.com
[Wed Nov 26 00:56:08.360222 2025] [:error] [pid 14076:tid 14088] [client 78.46.40.28:57918] [client 78.46.40.28] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 78.46.40.28, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSXfqHsB4Gz6Qw-pvBt_vgAAAAc"], referer: http://paramountbaldivis.com
[Wed Nov 26 00:58:58.344031 2025] [:error] [pid 43843:tid 43861] [client 165.22.103.115:52232] [client 165.22.103.115] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 165.22.103.115, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSXgUhhx4v3NUNdMKDMiMwAAAdA"], referer: http://paramountbaldivis.com
[Wed Nov 26 01:05:01.984516 2025] [:error] [pid 14078:tid 14159] [client 66.7.214.192:51612] [client 66.7.214.192] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 66.7.214.192, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSXhvdVXYbb0ii_rVoLjWgAAAJY"], referer: http://paramountbaldivis.com
[Wed Nov 26 01:11:26.083421 2025] [:error] [pid 14076:tid 14096] [client 103.21.220.244:52534] [client 103.21.220.244] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.21.220.244, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSXjPnsB4Gz6Qw-pvBuEKAAAAA8"], referer: http://paramountbaldivis.com
[Wed Nov 26 01:17:42.916095 2025] [:error] [pid 28836:tid 29008] [client 176.88.180.248:41004] [client 176.88.180.248] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 176.88.180.248, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSXktpwNRsoxcLQGkTchpQAAAtI"], referer: http://paramountbaldivis.com
[Wed Nov 26 01:39:45.403815 2025] [:error] [pid 43843:tid 43855] [client 3.106.246.25:59054] [client 3.106.246.25] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paramountbaldivis.com"] [uri "/.git/config"] [unique_id "aSXp4Rhx4v3NUNdMKDMnkQAAAco"]
[Wed Nov 26 01:42:59.394811 2025] [:error] [pid 14078:tid 14160] [client 57.180.39.206:52946] [client 57.180.39.206] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.paramountbaldivis.com"] [uri "/.git/config"] [unique_id "aSXqo9VXYbb0ii_rVoLwEwAAAJc"]
[Wed Nov 26 01:51:35.471463 2025] [:error] [pid 2987:tid 3008] [client 162.241.217.57:36100] [client 162.241.217.57] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.241.217.57, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aSXsp8-djEt-pTzPxnwKhAAAAVM"]
[Wed Nov 26 01:51:40.218203 2025] [:error] [pid 28739:tid 28785] [client 162.241.217.57:10870] [client 162.241.217.57] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.241.217.57, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aSXsrBxGpKmlkG4FexQEMQAAAhc"]
[Wed Nov 26 01:51:41.589731 2025] [:error] [pid 28739:tid 28778] [client 162.241.217.57:10882] [client 162.241.217.57] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.241.217.57, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aSXsrRxGpKmlkG4FexQEMwAAAhA"]
[Wed Nov 26 01:55:25.113487 2025] [:error] [pid 14076:tid 14093] [client 103.75.185.111:38676] [client 103.75.185.111] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.75.185.111, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSXtjXsB4Gz6Qw-pvBuNEwAAAAw"], referer: http://paramountbaldivis.com
[Wed Nov 26 01:58:01.795344 2025] [:error] [pid 14078:tid 14137] [client 3.94.27.7:42584] [client 3.94.27.7] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 3.94.27.7, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSXuKdVXYbb0ii_rVoL0fwAAAIA"], referer: http://paramountbaldivis.com
[Wed Nov 26 02:03:17.506804 2025] [:error] [pid 14076:tid 14094] [client 170.39.213.43:39280] [client 170.39.213.43] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 170.39.213.43, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSXvZXsB4Gz6Qw-pvBuOtwAAAA0"], referer: http://paramountbaldivis.com
[Wed Nov 26 02:05:59.540080 2025] [:error] [pid 28739:tid 28767] [client 54.64.46.88:51100] [client 54.64.46.88] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 54.64.46.88, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSXwBxxGpKmlkG4FexQH4gAAAgU"], referer: http://paramountbaldivis.com
[Wed Nov 26 02:14:24.099923 2025] [:error] [pid 14078:tid 14139] [client 65.21.224.37:24358] [client 65.21.224.37] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 65.21.224.37, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSXyANVXYbb0ii_rVoL54wAAAII"], referer: http://paramountbaldivis.com
[Wed Nov 26 02:17:07.282561 2025] [:error] [pid 14168:tid 14183] [client 69.16.238.180:50122] [client 69.16.238.180] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 69.16.238.180, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSXyo_R-ZDU0QEgAIIvLMAAAAMw"], referer: http://paramountbaldivis.com
[Wed Nov 26 02:18:12.184442 2025] [:error] [pid 43843:tid 43854] [client 35.87.26.106:40442] [client 35.87.26.106] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paramountbaldivis.com"] [uri "/.git/config"] [unique_id "aSXy5Bhx4v3NUNdMKDMtCAAAAck"]
[Wed Nov 26 02:25:11.069258 2025] [:error] [pid 43981:tid 43989] [client 78.46.40.28:60916] [client 78.46.40.28] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 78.46.40.28, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSX0hwgZn97m_qh_RaGltgAAAwY"], referer: http://paramountbaldivis.com
[Wed Nov 26 02:27:46.356768 2025] [:error] [pid 14077:tid 14131] [client 3.1.191.207:51394] [client 3.1.191.207] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 3.1.191.207, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSX1IhG9n7UHEkwDTygVqQAAAFU"], referer: http://paramountbaldivis.com
[Wed Nov 26 02:28:24.627911 2025] [:error] [pid 28609:tid 28639] [client 54.238.130.204:48614] [client 54.238.130.204] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.paramountbaldivis.com"] [uri "/.git/config"] [unique_id "aSX1SCGGdT-nZJVs3x07AwAAAZU"]
[Wed Nov 26 02:48:00.123851 2025] [:error] [pid 28609:tid 28624] [client 5.182.33.212:33878] [client 5.182.33.212] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 5.182.33.212, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSX54CGGdT-nZJVs3x09-QAAAYY"], referer: http://paramountbaldivis.com
[Wed Nov 26 03:01:00.764676 2025] [:error] [pid 43843:tid 43861] [client 147.93.12.217:40076] [client 147.93.12.217] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 147.93.12.217, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aSX87Bhx4v3NUNdMKDMzUwAAAdA"]
[Wed Nov 26 03:01:09.786611 2025] [:error] [pid 28739:tid 28776] [client 147.93.12.217:46384] [client 147.93.12.217] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 147.93.12.217, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aSX89RxGpKmlkG4FexQV1QAAAg4"]
[Wed Nov 26 03:01:14.793434 2025] [:error] [pid 14168:tid 14174] [client 147.93.12.217:46388] [client 147.93.12.217] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 147.93.12.217, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aSX8-vR-ZDU0QEgAIIvSLwAAAMM"]
[Wed Nov 26 03:04:42.362885 2025] [:error] [pid 14168:tid 14187] [client 136.243.160.8:54858] [client 136.243.160.8] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.243.160.8, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSX9yvR-ZDU0QEgAIIvS0QAAANA"], referer: http://paramountbaldivis.com
[Wed Nov 26 03:07:24.697130 2025] [:error] [pid 28609:tid 28628] [client 139.180.189.32:45600] [client 139.180.189.32] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 139.180.189.32, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSX-bCGGdT-nZJVs3x1CoQAAAYo"], referer: http://paramountbaldivis.com
[Wed Nov 26 03:12:43.833841 2025] [:error] [pid 47044:tid 47062] [client 3.94.27.7:47702] [client 3.94.27.7] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 3.94.27.7, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSX_q5sj4UkzsEyBt5R2KAAAAAI"], referer: http://paramountbaldivis.com
[Wed Nov 26 03:14:52.566037 2025] [:error] [pid 47045:tid 47103] [client 54.173.250.15:58564] [client 54.173.250.15] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.paramountbaldivis.com"] [uri "/.git/config"] [unique_id "aSYALBsL_waSUMFH0J71sAAAAE8"]
[Wed Nov 26 03:17:51.485254 2025] [:error] [pid 47045:tid 47109] [client 159.65.238.68:39954] [client 159.65.238.68] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 159.65.238.68, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSYA3xsL_waSUMFH0J723AAAAFU"], referer: http://paramountbaldivis.com
[Wed Nov 26 03:32:50.587761 2025] [:error] [pid 50570:tid 50585] [client 162.241.216.224:15962] [client 162.241.216.224] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 162.241.216.224, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSYEYhPvlpMXl6UAqyu_BgAAAAY"], referer: http://paramountbaldivis.com
[Wed Nov 26 03:35:11.874182 2025] [:error] [pid 50570:tid 50591] [client 90.156.143.135:12924] [client 90.156.143.135] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 90.156.143.135, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSYE7xPvlpMXl6UAqyu_rwAAAAw"], referer: http://paramountbaldivis.com
[Wed Nov 26 03:37:35.877889 2025] [:error] [pid 24079:tid 24088] [client 213.142.131.109:58344] [client 213.142.131.109] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 213.142.131.109, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSYFf8Or0TKldmVoOyuM2AAAAMY"], referer: http://paramountbaldivis.com
[Wed Nov 26 03:42:14.547237 2025] [:error] [pid 24079:tid 24091] [client 54.190.10.234:36338] [client 54.190.10.234] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 54.190.10.234, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSYGlsOr0TKldmVoOyuPYQAAAMk"], referer: http://paramountbaldivis.com
[Wed Nov 26 03:51:51.856306 2025] [:error] [pid 3493:tid 3499] [client 186.250.243.195:58172] [client 186.250.243.195] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 186.250.243.195, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSYI12BUa93ugXko11NLnAAAAQQ"], referer: http://paramountbaldivis.com
[Wed Nov 26 03:59:00.888434 2025] [:error] [pid 3097:tid 3116] [client 45.48.131.81:37606] [client 45.48.131.81] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.48.131.81, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSYKhOVgdOH9N9jhT55uPAAAAM8"], referer: http://paramountbaldivis.com
[Wed Nov 26 04:03:54.671947 2025] [:error] [pid 3010:tid 3032] [client 165.22.103.115:60566] [client 165.22.103.115] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 165.22.103.115, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSYLqkWl16-roARWvItK-QAAABI"], referer: http://paramountbaldivis.com
[Wed Nov 26 04:17:03.628063 2025] [:error] [pid 3493:tid 3500] [client 84.247.178.159:39022] [client 84.247.178.159] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 84.247.178.159, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSYOv2BUa93ugXko11NYNwAAAQU"], referer: http://paramountbaldivis.com
[Wed Nov 26 04:22:10.313168 2025] [:error] [pid 3010:tid 3035] [client 95.168.175.211:32838] [client 95.168.175.211] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 95.168.175.211, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSYP8kWl16-roARWvItPzwAAABU"], referer: http://paramountbaldivis.com
[Wed Nov 26 04:24:42.352048 2025] [:error] [pid 3012:tid 3081] [client 119.156.243.110:38382] [client 119.156.243.110] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 119.156.243.110, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSYQikfo8Sm1Un9NK6gfYQAAAIw"], referer: http://paramountbaldivis.com
[Wed Nov 26 04:29:47.150007 2025] [:error] [pid 3011:tid 3060] [client 167.235.142.204:37524] [client 167.235.142.204] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 167.235.142.204, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSYRu0b0BA3GljiGlI6wcQAAAFI"], referer: http://paramountbaldivis.com
[Wed Nov 26 04:32:20.480066 2025] [:error] [pid 3097:tid 3104] [client 78.46.40.28:50448] [client 78.46.40.28] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 78.46.40.28, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSYSVOVgdOH9N9jhT5553AAAAMM"], referer: http://paramountbaldivis.com
[Wed Nov 26 04:34:53.880952 2025] [:error] [pid 3012:tid 3071] [client 174.136.57.123:41456] [client 174.136.57.123] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 174.136.57.123, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSYS7Ufo8Sm1Un9NK6giuQAAAII"], referer: http://paramountbaldivis.com
[Wed Nov 26 05:01:26.192044 2025] [:error] [pid 3493:tid 3503] [client 65.111.15.220:21783] [client 65.111.15.220] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paramountbaldivis.com"] [uri "/.git/HEAD"] [unique_id "aSYZJmBUa93ugXko11Nm5AAAAQg"]
[Wed Nov 26 05:01:28.996853 2025] [:error] [pid 3010:tid 3036] [client 104.207.39.54:25147] [client 104.207.39.54] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paramountbaldivis.com"] [uri "/.env"] [unique_id "aSYZKEWl16-roARWvItZaAAAABY"]
[Wed Nov 26 05:01:30.896142 2025] [:error] [pid 3493:tid 3519] [client 65.111.25.186:15281] [client 65.111.25.186] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paramountbaldivis.com"] [uri "/.svn/wc.db"] [unique_id "aSYZKmBUa93ugXko11Nm6wAAARg"]
[Wed Nov 26 05:05:40.894255 2025] [:error] [pid 3012:tid 3073] [client 5.9.178.165:53306] [client 5.9.178.165] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 5.9.178.165, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSYaJEfo8Sm1Un9NK6gqxgAAAIQ"], referer: http://paramountbaldivis.com
[Wed Nov 26 05:10:45.978843 2025] [:error] [pid 3097:tid 3122] [client 213.199.56.222:36532] [client 213.199.56.222] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 213.199.56.222, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSYbVeVgdOH9N9jhT56LjgAAANU"], referer: http://paramountbaldivis.com
[Wed Nov 26 05:13:17.479328 2025] [:error] [pid 3011:tid 3050] [client 50.6.206.129:47984] [client 50.6.206.129] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 50.6.206.129, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSYb7Ub0BA3GljiGlI68YwAAAEg"], referer: http://paramountbaldivis.com
[Wed Nov 26 05:15:51.930162 2025] [:error] [pid 3011:tid 3049] [client 86.38.205.13:58090] [client 86.38.205.13] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 86.38.205.13, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSYch0b0BA3GljiGlI69JQAAAEc"], referer: http://paramountbaldivis.com
[Wed Nov 26 06:00:20.467852 2025] [autoindex:error] [pid 717:tid 761] [client 4.189.168.3:23425] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Wed Nov 26 06:00:20.603958 2025] [autoindex:error] [pid 717:tid 767] [client 4.189.168.3:23425] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/pomo/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Wed Nov 26 06:00:21.228348 2025] [autoindex:error] [pid 717:tid 769] [client 4.189.168.3:23425] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Wed Nov 26 06:00:21.347876 2025] [autoindex:error] [pid 717:tid 755] [client 4.189.168.3:23425] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Wed Nov 26 06:00:21.496632 2025] [autoindex:error] [pid 717:tid 751] [client 4.189.168.3:23425] AH01276: Cannot serve directory /home/baldivis/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Wed Nov 26 06:00:21.657824 2025] [autoindex:error] [pid 717:tid 754] [client 4.189.168.3:23425] AH01276: Cannot serve directory /home/baldivis/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Wed Nov 26 06:00:21.802733 2025] [autoindex:error] [pid 717:tid 760] [client 4.189.168.3:23425] AH01276: Cannot serve directory /home/baldivis/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Wed Nov 26 06:00:29.169176 2025] [autoindex:error] [pid 717:tid 752] [client 4.189.168.3:23425] AH01276: Cannot serve directory /home/baldivis/public_html/wp-admin/includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Wed Nov 26 06:00:32.566104 2025] [autoindex:error] [pid 717:tid 765] [client 4.189.168.3:23425] AH01276: Cannot serve directory /home/baldivis/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Wed Nov 26 06:00:32.871677 2025] [autoindex:error] [pid 717:tid 770] [client 4.189.168.3:23425] AH01276: Cannot serve directory /home/baldivis/public_html/wp-content/uploads/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Wed Nov 26 06:00:32.990246 2025] [autoindex:error] [pid 717:tid 758] [client 4.189.168.3:23425] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Wed Nov 26 06:00:33.166240 2025] [autoindex:error] [pid 717:tid 753] [client 4.189.168.3:23425] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Wed Nov 26 06:00:33.421642 2025] [autoindex:error] [pid 717:tid 764] [client 4.189.168.3:23425] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Wed Nov 26 06:00:33.541709 2025] [autoindex:error] [pid 717:tid 749] [client 4.189.168.3:23425] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Wed Nov 26 06:00:33.967523 2025] [autoindex:error] [pid 717:tid 747] [client 4.189.168.3:23425] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Wed Nov 26 06:00:34.147724 2025] [autoindex:error] [pid 717:tid 771] [client 4.189.168.3:23425] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Wed Nov 26 06:00:34.272167 2025] [autoindex:error] [pid 717:tid 772] [client 4.189.168.3:23425] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/Text/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Wed Nov 26 06:00:38.477828 2025] [autoindex:error] [pid 717:tid 769] [client 4.189.168.3:23425] AH01276: Cannot serve directory /home/baldivis/public_html/wp-content/mu-plugins/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Wed Nov 26 06:00:38.666591 2025] [autoindex:error] [pid 717:tid 755] [client 4.189.168.3:23425] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/Text/Diff/Renderer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Wed Nov 26 06:00:38.893353 2025] [proxy_fcgi:error] [pid 717:tid 751] [client 4.189.168.3:23425] AH01071: Got error 'PHP message: PHP Warning: Use of undefined constant ABSPATH - assumed 'ABSPATH' (this will throw an Error in a future version of PHP) in /home/baldivis/public_html/wp-includes/blocks/index.php on line 9PHP message: PHP Warning: Use of undefined constant WPINC - assumed 'WPINC' (this will throw an Error in a future version of PHP) in /home/baldivis/public_html/wp-includes/blocks/index.php on line 9PHP message: PHP Warning: require(ABSPATHWPINC/blocks/archives.php): failed to open stream: No such file or directory in /home/baldivis/public_html/wp-includes/blocks/index.php on line 9PHP message: PHP Warning: require(ABSPATHWPINC/blocks/archives.php): failed to open stream: No such file or directory in /home/baldivis/public_html/wp-includes/blocks/index.php on line 9PHP message: PHP Fatal error: require(): Failed opening required 'ABSPATHWPINC/blocks/archives.php' (include_path='.:') in /home/baldivis/public_html/wp-includes/blocks/index.php on line 9', referer: https://www.google.co.uk/
[Wed Nov 26 06:00:39.828059 2025] [autoindex:error] [pid 3012:tid 3081] [client 4.189.168.3:23549] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Wed Nov 26 06:00:39.953358 2025] [autoindex:error] [pid 3012:tid 3083] [client 4.189.168.3:23549] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/customize/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Wed Nov 26 06:00:40.085153 2025] [autoindex:error] [pid 3012:tid 3072] [client 4.189.168.3:23549] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Wed Nov 26 06:00:40.253993 2025] [autoindex:error] [pid 3012:tid 3087] [client 4.189.168.3:23549] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Wed Nov 26 06:00:40.372453 2025] [autoindex:error] [pid 3012:tid 3070] [client 4.189.168.3:23549] AH01276: Cannot serve directory /home/baldivis/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Wed Nov 26 06:00:43.513853 2025] [autoindex:error] [pid 3012:tid 3086] [client 4.189.168.3:23549] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Wed Nov 26 06:01:21.369699 2025] [autoindex:error] [pid 3012:tid 3077] [client 4.189.168.3:23549] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Wed Nov 26 06:01:22.474535 2025] [autoindex:error] [pid 3012:tid 3075] [client 4.189.168.3:23549] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/Text/Diff/Engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Wed Nov 26 06:01:22.629383 2025] [autoindex:error] [pid 3012:tid 3081] [client 4.189.168.3:23549] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/block-patterns/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Wed Nov 26 06:01:23.788352 2025] [autoindex:error] [pid 3012:tid 3070] [client 4.189.168.3:23549] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/Text/Diff/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Wed Nov 26 06:01:23.909874 2025] [autoindex:error] [pid 3012:tid 3076] [client 4.189.168.3:23549] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/block-supports/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Wed Nov 26 06:01:24.059815 2025] [autoindex:error] [pid 3012:tid 3079] [client 4.189.168.3:23549] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/SimplePie/Cache/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Wed Nov 26 06:01:24.212322 2025] [autoindex:error] [pid 3012:tid 3083] [client 4.189.168.3:23549] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/SimplePie/Content/Type/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Wed Nov 26 06:01:24.363655 2025] [autoindex:error] [pid 3012:tid 3091] [client 4.189.168.3:23549] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/SimplePie/Content/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Wed Nov 26 06:01:24.543057 2025] [autoindex:error] [pid 3012:tid 3086] [client 4.189.168.3:23549] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/rest-api/endpoints/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Wed Nov 26 06:01:24.663726 2025] [autoindex:error] [pid 3012:tid 3088] [client 4.189.168.3:23549] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/rest-api/fields/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Wed Nov 26 06:01:24.782235 2025] [autoindex:error] [pid 3012:tid 3085] [client 4.189.168.3:23549] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/Requests/Cookie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Wed Nov 26 06:01:35.511087 2025] [autoindex:error] [pid 3493:tid 3515] [client 4.189.168.3:23522] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/Requests/Proxy/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Wed Nov 26 06:01:35.629365 2025] [autoindex:error] [pid 3493:tid 3505] [client 4.189.168.3:23522] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/Requests/Response/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Wed Nov 26 06:01:35.961056 2025] [autoindex:error] [pid 3493:tid 3506] [client 4.189.168.3:23522] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/Requests/Transport/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Wed Nov 26 06:01:36.084773 2025] [autoindex:error] [pid 3493:tid 3507] [client 4.189.168.3:23522] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/Requests/Utility/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Wed Nov 26 06:01:36.203809 2025] [autoindex:error] [pid 3493:tid 3519] [client 4.189.168.3:23522] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/js/codemirror/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Wed Nov 26 06:01:36.374965 2025] [autoindex:error] [pid 3493:tid 3495] [client 4.189.168.3:23522] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/Requests/Exception/HTTP/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Wed Nov 26 06:01:36.496942 2025] [autoindex:error] [pid 3493:tid 3510] [client 4.189.168.3:23522] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/js/crop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Wed Nov 26 06:01:37.016810 2025] [autoindex:error] [pid 3493:tid 3499] [client 4.189.168.3:23522] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/images/crystal/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Wed Nov 26 06:01:37.137441 2025] [autoindex:error] [pid 3493:tid 3508] [client 4.189.168.3:23522] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/images/media/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Wed Nov 26 06:01:37.280210 2025] [autoindex:error] [pid 3493:tid 3496] [client 4.189.168.3:23522] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/images/smilies/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Wed Nov 26 06:01:37.614457 2025] [autoindex:error] [pid 3493:tid 3500] [client 4.189.168.3:23522] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/images/wlw/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Wed Nov 26 06:01:37.964845 2025] [autoindex:error] [pid 3493:tid 3514] [client 4.189.168.3:23522] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/rest-api/search/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Wed Nov 26 06:01:38.179251 2025] [autoindex:error] [pid 3493:tid 3501] [client 4.189.168.3:23522] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/Requests/Exception/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Wed Nov 26 06:01:38.303407 2025] [autoindex:error] [pid 3493:tid 3515] [client 4.189.168.3:23522] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/Requests/Auth/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Wed Nov 26 06:01:38.451113 2025] [autoindex:error] [pid 3493:tid 3506] [client 4.189.168.3:23522] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/sodium_compat/src/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Wed Nov 26 06:01:38.589260 2025] [autoindex:error] [pid 3493:tid 3503] [client 4.189.168.3:23522] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/sitemaps/providers/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Wed Nov 26 06:01:44.625582 2025] [autoindex:error] [pid 3493:tid 3506] [client 4.189.168.3:23522] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Wed Nov 26 06:01:44.759885 2025] [autoindex:error] [pid 3493:tid 3507] [client 4.189.168.3:23522] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/random_compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Wed Nov 26 06:01:44.946910 2025] [autoindex:error] [pid 3493:tid 3512] [client 4.189.168.3:23522] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Wed Nov 26 06:01:45.065882 2025] [autoindex:error] [pid 3493:tid 3503] [client 4.189.168.3:23522] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/sodium_compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Wed Nov 26 06:01:47.460953 2025] [autoindex:error] [pid 3493:tid 3510] [client 4.189.168.3:23522] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/theme-compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Wed Nov 26 06:01:47.591705 2025] [autoindex:error] [pid 3493:tid 3499] [client 4.189.168.3:23522] AH01276: Cannot serve directory /home/baldivis/public_html/wp-admin/css/colors/ectoplasm/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Wed Nov 26 06:01:47.781580 2025] [autoindex:error] [pid 3493:tid 3508] [client 4.189.168.3:23522] AH01276: Cannot serve directory /home/baldivis/public_html/wp-admin/css/colors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Wed Nov 26 06:29:08.520809 2025] [:error] [pid 38796:tid 38802] [client 45.157.54.74:55937] [client 45.157.54.74] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.157.54.74, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSYttAGcUUzaXxvjCXPFEgAAAUM"]
[Wed Nov 26 06:29:10.450668 2025] [:error] [pid 683:tid 689] [client 45.157.54.74:58855] [client 45.157.54.74] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.157.54.74, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSYtts4Hks4Npntw8NlbVgAAAcI"]
[Wed Nov 26 12:39:07.342158 2025] [:error] [pid 10383:tid 10405] [client 162.144.182.123:18150] [client 162.144.182.123] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.144.182.123, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aSaEa60RJ-zjhOVjD8--VwAAAdM"]
[Wed Nov 26 12:39:14.806652 2025] [:error] [pid 34830:tid 34847] [client 162.144.182.123:56726] [client 162.144.182.123] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.144.182.123, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aSaEckukvkWgWN6jCR2dMQAAAA8"]
[Wed Nov 26 12:39:16.807776 2025] [:error] [pid 34743:tid 34781] [client 162.144.182.123:56732] [client 162.144.182.123] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.144.182.123, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aSaEdAvyX7Q5oU7_mByRLQAAAUU"]
[Wed Nov 26 14:11:20.570743 2025] [:error] [pid 45836:tid 45847] [client 139.59.30.253:51298] [client 139.59.30.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/css/"] [unique_id "aSaaCJfrnOGqL-seZAxE0AAAAME"], referer: binance.com
[Wed Nov 26 14:49:30.262240 2025] [:error] [pid 45836:tid 45869] [client 14.232.208.25:42518] [client 14.232.208.25] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 14.232.208.25, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aSai-pfrnOGqL-seZAxMfwAAANc"]
[Wed Nov 26 14:49:35.154886 2025] [:error] [pid 35540:tid 35567] [client 14.232.208.25:35880] [client 14.232.208.25] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 14.232.208.25, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aSai_8GrIq2A6SZSnkKNBwAAAJU"]
[Wed Nov 26 14:49:36.651649 2025] [:error] [pid 34830:tid 34848] [client 14.232.208.25:35882] [client 14.232.208.25] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 14.232.208.25, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aSajAEukvkWgWN6jCR20EAAAABA"]
[Wed Nov 26 16:15:10.921509 2025] [:error] [pid 45769:tid 45790] [client 91.218.64.199:33454] [client 91.218.64.199] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.218.64.199, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aSa3DldG5Eht9c3yy4PwqwAAAdI"]
[Wed Nov 26 16:15:23.534911 2025] [:error] [pid 45685:tid 45764] [client 91.218.64.199:50638] [client 91.218.64.199] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.218.64.199, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aSa3G1j3f_NRdgU0DQ6o_wAAARY"]
[Wed Nov 26 16:15:25.456149 2025] [:error] [pid 45683:tid 45708] [client 91.218.64.199:50646] [client 91.218.64.199] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.218.64.199, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aSa3HRX1gQgNFW_222p7uAAAAVQ"]
[Wed Nov 26 17:56:01.685364 2025] [:error] [pid 6471:tid 6480] [client 8.210.47.14:38170] [client 8.210.47.14] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 8.210.47.14, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aSbOseh3Z9TZLlRuTiN2ogAAAIY"]
[Wed Nov 26 17:56:08.148658 2025] [:error] [pid 45769:tid 45791] [client 8.210.47.14:59848] [client 8.210.47.14] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 8.210.47.14, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aSbOuFdG5Eht9c3yy4MPTAAAAdM"]
[Wed Nov 26 17:56:09.900998 2025] [:error] [pid 45684:tid 45726] [client 8.210.47.14:60202] [client 8.210.47.14] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 8.210.47.14, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aSbOufg5LMxwI4-PD1ckVwAAAAs"]
[Wed Nov 26 20:16:22.263762 2025] [:error] [pid 6471:tid 6483] [client 43.159.135.203:56674] [client 43.159.135.203] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||paramountbaldivis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aSbvluh3Z9TZLlRuTiOc9AAAAIk"]
[Wed Nov 26 21:53:44.628075 2025] [:error] [pid 46443:tid 46447] [client 182.44.8.254:34722] [client 182.44.8.254] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.paramountbaldivis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.paramountbaldivis.com"] [uri "/"] [unique_id "aScGaMLmDsnHrj-QFB8TaAAAAEI"]
[Wed Nov 26 23:08:13.688534 2025] [:error] [pid 45684:tid 45739] [client 216.126.239.203:35546] [client 216.126.239.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paramountbaldivis.com"] [uri "/.git/config"] [unique_id "aScX3fg5LMxwI4-PD1epjgAAABg"]
[Thu Nov 27 00:37:43.941256 2025] [:error] [pid 24814:tid 25087] [client 162.241.217.111:39056] [client 162.241.217.111] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.241.217.111, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aScs1wPn1NMGCdo6Rsic3QAAAUw"]
[Thu Nov 27 00:37:53.208792 2025] [:error] [pid 25180:tid 25194] [client 162.241.217.111:23192] [client 162.241.217.111] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.241.217.111, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aScs4b-owhtiwMHXYlzMeAAAAYw"]
[Thu Nov 27 00:37:55.136101 2025] [:error] [pid 54723:tid 54742] [client 162.241.217.111:23206] [client 162.241.217.111] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.241.217.111, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aScs4w2CEg7QoyDosdLtigAAAAw"]
[Thu Nov 27 00:54:36.749659 2025] [:error] [pid 25180:tid 25193] [client 103.77.107.57:59311] [client 103.77.107.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paramountbaldivis.com"] [uri "/sftp-config.json"] [unique_id "aScwzL-owhtiwMHXYlzQNQAAAYs"]
[Thu Nov 27 00:54:36.981367 2025] [:error] [pid 54723:tid 54738] [client 103.77.107.57:62238] [client 103.77.107.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/.vscode/sftp.json"] [unique_id "aScwzA2CEg7QoyDosdLzAwAAAAg"]
[Thu Nov 27 01:42:18.793006 2025] [:error] [pid 24826:tid 25119] [client 67.23.254.96:42690] [client 67.23.254.96] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 67.23.254.96, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aSc7-lEvPXLVl-nh-yLmhQAAAQQ"]
[Thu Nov 27 01:42:28.454769 2025] [:error] [pid 24814:tid 25087] [client 67.23.254.96:44470] [client 67.23.254.96] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 67.23.254.96, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aSc8BAPn1NMGCdo6RsiqYAAAAUw"]
[Thu Nov 27 01:42:29.336779 2025] [:error] [pid 24814:tid 25095] [client 67.23.254.96:44474] [client 67.23.254.96] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 67.23.254.96, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aSc8BQPn1NMGCdo6RsiqYQAAAVQ"]
[Thu Nov 27 03:10:20.946028 2025] [:error] [pid 24826:tid 25138] [client 197.146.99.224:65174] [client 197.146.99.224] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 197.146.99.224, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSdQnFEvPXLVl-nh-yL5ngAAARY"]
[Thu Nov 27 03:30:56.448863 2025] [:error] [pid 22765:tid 22790] [client 181.66.158.203:58368] [client 181.66.158.203] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 181.66.158.203, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSdVcPDnYoIqCLGR6UpwAwAAANU"]
[Thu Nov 27 04:32:52.006448 2025] [:error] [pid 21017:tid 21067] [client 58.49.233.126:53783] [client 58.49.233.126] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||paramountbaldivis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aSdj9KZA663ub03MMQt7zwAAAQg"]
[Thu Nov 27 05:26:01.742859 2025] [:error] [pid 21017:tid 21082] [client 89.233.105.203:55248] [client 89.233.105.203] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.233.105.203, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aSdwaaZA663ub03MMQuTPQAAARc"]
[Thu Nov 27 05:26:06.573510 2025] [:error] [pid 6202:tid 6235] [client 89.233.105.203:48232] [client 89.233.105.203] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.233.105.203, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aSdwbtJa7NTP0XPyZ6lvCgAAAEI"]
[Thu Nov 27 05:26:07.961791 2025] [:error] [pid 6203:tid 6282] [client 89.233.105.203:48244] [client 89.233.105.203] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.233.105.203, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aSdwb8bdRL7aKyrgqyzPvQAAAJY"]
[Thu Nov 27 07:02:50.428818 2025] [:error] [pid 48929:tid 48986] [client 92.205.231.61:45742] [client 92.205.231.61] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 92.205.231.61, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aSeHGhsXTHq9V_4xD5ThxwAAAJM"]
[Thu Nov 27 07:02:58.098981 2025] [:error] [pid 48930:tid 49016] [client 92.205.231.61:45274] [client 92.205.231.61] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 92.205.231.61, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aSeHIhmk-RHlIhli7t-TQAAAARM"]
[Thu Nov 27 07:03:00.158144 2025] [:error] [pid 48928:tid 48949] [client 92.205.231.61:45278] [client 92.205.231.61] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 92.205.231.61, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aSeHJHzpQoF8PVTquqYtiAAAAEo"]
[Thu Nov 27 21:28:21.264237 2025] [:error] [pid 56907:tid 56921] [client 174.138.20.230:63470] [client 174.138.20.230] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paramountbaldivis.com"] [uri "/sftp-config.json"] [unique_id "aShR9YJoWQCzDlhad-d-6wAAAAw"]
[Fri Nov 28 00:17:23.400984 2025] [:error] [pid 3881:tid 3935] [client 136.158.32.136:6460] [client 136.158.32.136] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.158.32.136, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSh5kxcpoSIeot8NFmRKxQAAABg"]
[Fri Nov 28 01:31:23.242563 2025] [:error] [pid 3880:tid 3884] [client 43.166.226.186:59508] [client 43.166.226.186] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.paramountbaldivis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.paramountbaldivis.com"] [uri "/"] [unique_id "aSiK6xLsHNAClWGu1G6KLAAAAUA"]
[Fri Nov 28 10:53:20.416716 2025] [:error] [pid 54900:tid 54979] [client 192.178.4.101:55609] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aSkOoAFQiryv2n0dZ2JZOAAAAdY"]
[Fri Nov 28 10:53:29.685749 2025] [:error] [pid 54898:tid 54913] [client 192.178.4.101:64595] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aSkOqSmSGSvN-RicxNTMswAAAUs"]
[Fri Nov 28 10:53:41.204652 2025] [:error] [pid 54985:tid 54998] [client 192.178.4.101:43606] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aSkOtSBBgIIc3KO1HAUF_AAAAAs"]
[Fri Nov 28 10:53:50.375168 2025] [:error] [pid 54985:tid 54992] [client 192.178.4.101:45847] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aSkOviBBgIIc3KO1HAUGCAAAAAU"]
[Fri Nov 28 18:57:32.457312 2025] [:error] [pid 59836:tid 59847] [client 222.79.104.23:57690] [client 222.79.104.23] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||paramountbaldivis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aSmAHOdZMCOz1m2UNtGhbgAAAAg"]
[Fri Nov 28 21:52:47.859779 2025] [:error] [pid 47395:tid 47414] [client 147.185.40.210:59078] [client 147.185.40.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paramountbaldivis.com"] [uri "/.git/config"] [unique_id "aSmpLwL-OiEmV804OC3E_QAAARA"]
[Fri Nov 28 22:18:13.919649 2025] [:error] [pid 38346:tid 38353] [client 177.84.110.100:56607] [client 177.84.110.100] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.84.110.100, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSmvJTVLXLVaGOn9rSkH3QAAAYM"]
[Fri Nov 28 22:20:07.799958 2025] [:error] [pid 38347:tid 38385] [client 177.63.25.179:57342] [client 177.63.25.179] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.63.25.179, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSmvl14FzQmoUx27MAmUvAAAAEg"]
[Sat Nov 29 01:41:25.284631 2025] [:error] [pid 9751:tid 9754] [client 18.135.101.220:63999] [client 18.135.101.220] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||paramountbaldivis.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "paramountbaldivis.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aSnexaqNNTs_lWy2XeHuFwAAAcE"]
[Sat Nov 29 01:47:39.457563 2025] [:error] [pid 9656:tid 9720] [client 34.61.178.118:58450] [client 34.61.178.118] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paramountbaldivis.com"] [uri "/.git/config"] [unique_id "aSngO4_4AfnhtHpInunVlwAAAIg"]
[Sat Nov 29 01:53:49.439951 2025] [:error] [pid 9655:tid 9691] [client 182.42.111.156:51228] [client 182.42.111.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.paramountbaldivis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.paramountbaldivis.com"] [uri "/"] [unique_id "aSnhrU06gYqtNcz_Y88rewAAAAY"]
[Sat Nov 29 02:30:21.562112 2025] [:error] [pid 9907:tid 9929] [client 134.209.33.248:36972] [client 134.209.33.248] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paramountbaldivis.com"] [uri "/.git/config"] [unique_id "aSnqPeFoCqXx6ihYWZwUVAAAARQ"]
[Sat Nov 29 02:30:22.397200 2025] [:error] [pid 9654:tid 9672] [client 134.209.33.248:50616] [client 134.209.33.248] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paramountbaldivis.com"] [uri "/.git/config"] [unique_id "aSnqPnwlAlfevRIdjr-7PQAAAE4"]
[Sat Nov 29 06:03:43.975454 2025] [:error] [pid 53817:tid 53842] [client 217.146.83.115:60998] [client 217.146.83.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/O-Simple.php"] [unique_id "aSocPxUtaHwNb4_nTTSxnAAAABU"]
[Sat Nov 29 06:03:44.492458 2025] [:error] [pid 19562:tid 19577] [client 217.146.83.115:34630] [client 217.146.83.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/O-Simple.php"] [unique_id "aSocQF4oDK0S9prYl7lppgAAAQ0"]
[Sat Nov 29 06:03:45.008123 2025] [:error] [pid 22939:tid 22956] [client 217.146.83.115:35040] [client 217.146.83.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/O-Simple.php"] [unique_id "aSocQdRbdh0p_UmbHuCIogAAAY8"]
[Sat Nov 29 06:03:45.522067 2025] [:error] [pid 22939:tid 22962] [client 217.146.83.115:35338] [client 217.146.83.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/O-Simple.php"] [unique_id "aSocQdRbdh0p_UmbHuCIrwAAAZU"]
[Sat Nov 29 06:03:46.038356 2025] [:error] [pid 19562:tid 19566] [client 217.146.83.115:35688] [client 217.146.83.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/O-Simple.php"] [unique_id "aSocQl4oDK0S9prYl7lp4QAAAQI"]
[Sat Nov 29 06:03:46.554494 2025] [:error] [pid 19562:tid 19585] [client 217.146.83.115:36072] [client 217.146.83.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/css/dist/"] [unique_id "aSocQl4oDK0S9prYl7lqAAAAARU"]
[Sat Nov 29 06:03:47.071752 2025] [:error] [pid 53818:tid 53849] [client 217.146.83.115:47744] [client 217.146.83.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/css/dist/"] [unique_id "aSocQ5Y2lVKaQoKCJULKpQAAAEA"]
[Sat Nov 29 06:03:47.587207 2025] [:error] [pid 53818:tid 53851] [client 217.146.83.115:48018] [client 217.146.83.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/css/dist/"] [unique_id "aSocQ5Y2lVKaQoKCJULKrQAAAEI"]
[Sat Nov 29 06:03:48.100432 2025] [:error] [pid 53819:tid 53885] [client 217.146.83.115:48280] [client 217.146.83.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/css/dist/"] [unique_id "aSocRLrEG0migocqTWfBAwAAAIk"]
[Sat Nov 29 06:03:48.611248 2025] [:error] [pid 22939:tid 22951] [client 217.146.83.115:48522] [client 217.146.83.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/css/dist/"] [unique_id "aSocRNRbdh0p_UmbHuCIzAAAAYo"]
[Sat Nov 29 07:58:05.988870 2025] [:error] [pid 51093:tid 51138] [client 114.96.103.33:43649] [client 114.96.103.33] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||paramountbaldivis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aSo3DUW-0l846Mbj8Fpu4wAAAlA"]
[Sat Nov 29 10:45:44.566320 2025] [:error] [pid 20915:tid 20919] [client 45.153.34.41:54114] [client 45.153.34.41] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paramountbaldivis.com"] [uri "/.git/config"] [unique_id "aSpeWFOOtKw1QZ3TPER_HwAAAMI"]
[Sat Nov 29 11:45:04.535274 2025] [:error] [pid 32136:tid 32140] [client 124.248.183.5:60567] [client 124.248.183.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/uploads/apartment_assets/1764387691-pimg-in.php"] [unique_id "aSpsQMSj_WSVQM1psKo36gAAAQI"]
[Sat Nov 29 11:45:07.117227 2025] [:error] [pid 62619:tid 62641] [client 124.248.183.5:60646] [client 124.248.183.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/uploads/apartment_assets/1764387692-pimg-in.php"] [unique_id "aSpsQ9k7ZYKT63FfVSUHsAAAAVQ"]
[Sat Nov 29 11:45:07.860378 2025] [:error] [pid 20915:tid 20924] [client 124.248.183.5:60743] [client 124.248.183.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/uploads/apartment_assets/1764387693-pimg-in.php"] [unique_id "aSpsQ1OOtKw1QZ3TPESR6gAAAMc"]
[Sat Nov 29 11:45:08.477789 2025] [:error] [pid 20826:tid 20841] [client 124.248.183.5:60792] [client 124.248.183.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/uploads/apartment_assets/1764387694-pimg-in.php"] [unique_id "aSpsRPABfBqk70vKX9RjqgAAAAs"]
[Sat Nov 29 11:45:09.320627 2025] [:error] [pid 20915:tid 20925] [client 124.248.183.5:60834] [client 124.248.183.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/uploads/apartment_assets/1764387695-pimg-in.php"] [unique_id "aSpsRVOOtKw1QZ3TPESR7AAAAMg"]
[Sat Nov 29 11:45:10.485702 2025] [:error] [pid 20915:tid 20939] [client 124.248.183.5:60863] [client 124.248.183.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/uploads/apartment_assets/1764387696-pimg-in.php"] [unique_id "aSpsRlOOtKw1QZ3TPESR7QAAANY"]
[Sat Nov 29 11:45:11.337994 2025] [:error] [pid 62619:tid 62643] [client 124.248.183.5:60905] [client 124.248.183.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/uploads/apartment_assets/1764387697-pimg-in.php"] [unique_id "aSpsR9k7ZYKT63FfVSUHswAAAVY"]
[Sat Nov 29 11:45:11.940350 2025] [:error] [pid 62619:tid 62642] [client 124.248.183.5:60934] [client 124.248.183.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/uploads/apartment_assets/1764387698-pimg-in.php"] [unique_id "aSpsR9k7ZYKT63FfVSUHtAAAAVU"]
[Sat Nov 29 11:45:12.692531 2025] [:error] [pid 20826:tid 20848] [client 124.248.183.5:60964] [client 124.248.183.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/uploads/apartment_assets/1764387699-pimg-in.php"] [unique_id "aSpsSPABfBqk70vKX9RjrQAAABI"]
[Sat Nov 29 11:45:13.616589 2025] [:error] [pid 62619:tid 62624] [client 124.248.183.5:61003] [client 124.248.183.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/uploads/apartment_assets/1764387700-pimg-in.php"] [unique_id "aSpsSdk7ZYKT63FfVSUHuAAAAUM"]
[Sat Nov 29 11:45:14.747002 2025] [:error] [pid 62619:tid 62629] [client 124.248.183.5:61030] [client 124.248.183.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/uploads/apartment_assets/1764387701-pimg-in.php"] [unique_id "aSpsStk7ZYKT63FfVSUHugAAAUg"]
[Sat Nov 29 11:45:20.139035 2025] [:error] [pid 62619:tid 62637] [client 124.248.183.5:61265] [client 124.248.183.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/uploads/apartment_assets/1764387692-pimg-in.php"] [unique_id "aSpsUNk7ZYKT63FfVSUHwAAAAVA"]
[Sat Nov 29 11:45:20.827075 2025] [:error] [pid 62619:tid 62626] [client 124.248.183.5:61329] [client 124.248.183.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/uploads/apartment_assets/1764387693-pimg-in.php"] [unique_id "aSpsUNk7ZYKT63FfVSUHwgAAAUU"]
[Sat Nov 29 11:45:22.440953 2025] [:error] [pid 20828:tid 20889] [client 124.248.183.5:61367] [client 124.248.183.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/uploads/apartment_assets/1764387694-pimg-in.php"] [unique_id "aSpsUuqW2f0jLRABAORCfQAAAIQ"]
[Sat Nov 29 11:45:23.891277 2025] [:error] [pid 20828:tid 20910] [client 124.248.183.5:61472] [client 124.248.183.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/uploads/apartment_assets/1764387695-pimg-in.php"] [unique_id "aSpsU-qW2f0jLRABAORCgQAAAJg"]
[Sat Nov 29 11:45:25.501896 2025] [:error] [pid 20826:tid 20854] [client 124.248.183.5:61511] [client 124.248.183.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/uploads/apartment_assets/1764387696-pimg-in.php"] [unique_id "aSpsVfABfBqk70vKX9RjrwAAABg"]
[Sat Nov 29 11:45:26.357898 2025] [:error] [pid 20826:tid 20838] [client 124.248.183.5:61588] [client 124.248.183.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/uploads/apartment_assets/1764387697-pimg-in.php"] [unique_id "aSpsVvABfBqk70vKX9RjsgAAAAg"]
[Sat Nov 29 11:45:27.630836 2025] [:error] [pid 32136:tid 32143] [client 124.248.183.5:61624] [client 124.248.183.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/uploads/apartment_assets/1764387698-pimg-in.php"] [unique_id "aSpsV8Sj_WSVQM1psKo3-AAAAQU"]
[Sat Nov 29 11:45:28.452379 2025] [:error] [pid 20828:tid 20906] [client 124.248.183.5:61689] [client 124.248.183.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/uploads/apartment_assets/1764387699-pimg-in.php"] [unique_id "aSpsWOqW2f0jLRABAORCgwAAAJQ"]
[Sat Nov 29 11:45:30.037797 2025] [:error] [pid 20828:tid 20907] [client 124.248.183.5:61732] [client 124.248.183.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/uploads/apartment_assets/1764387700-pimg-in.php"] [unique_id "aSpsWuqW2f0jLRABAORChQAAAJU"]
[Sat Nov 29 11:45:31.053061 2025] [:error] [pid 20826:tid 20844] [client 124.248.183.5:61794] [client 124.248.183.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/uploads/apartment_assets/1764387701-pimg-in.php"] [unique_id "aSpsW_ABfBqk70vKX9RjuAAAAA4"]
[Sat Nov 29 11:45:31.723373 2025] [:error] [pid 20915:tid 20935] [client 124.248.183.5:61831] [client 124.248.183.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/uploads/apartment_assets/1764387702-pimg-in.php"] [unique_id "aSpsW1OOtKw1QZ3TPESR-QAAANI"]
[Sat Nov 29 11:45:36.580895 2025] [:error] [pid 20827:tid 20871] [client 124.248.183.5:62067] [client 124.248.183.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/uploads/apartment_assets/1764387693-pimg-in.php"] [unique_id "aSpsYIR9B7FcLfh1rSE33AAAAE0"]
[Sat Nov 29 11:45:37.214164 2025] [:error] [pid 20828:tid 20894] [client 124.248.183.5:62099] [client 124.248.183.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/uploads/apartment_assets/1764387694-pimg-in.php"] [unique_id "aSpsYeqW2f0jLRABAORCjQAAAIk"]
[Sat Nov 29 11:45:38.112690 2025] [:error] [pid 20828:tid 20890] [client 124.248.183.5:62135] [client 124.248.183.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/uploads/apartment_assets/1764387695-pimg-in.php"] [unique_id "aSpsYuqW2f0jLRABAORCjwAAAIU"]
[Sat Nov 29 11:45:38.945000 2025] [:error] [pid 20827:tid 20877] [client 124.248.183.5:62167] [client 124.248.183.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/uploads/apartment_assets/1764387696-pimg-in.php"] [unique_id "aSpsYoR9B7FcLfh1rSE33wAAAFM"]
[Sat Nov 29 11:45:39.654964 2025] [:error] [pid 20915:tid 20937] [client 124.248.183.5:62201] [client 124.248.183.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/uploads/apartment_assets/1764387697-pimg-in.php"] [unique_id "aSpsY1OOtKw1QZ3TPESR_AAAANQ"]
[Sat Nov 29 11:45:40.424127 2025] [:error] [pid 62619:tid 62628] [client 124.248.183.5:62228] [client 124.248.183.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/uploads/apartment_assets/1764387698-pimg-in.php"] [unique_id "aSpsZNk7ZYKT63FfVSUH1QAAAUc"]
[Sat Nov 29 11:45:41.133931 2025] [:error] [pid 20826:tid 20831] [client 124.248.183.5:62270] [client 124.248.183.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/uploads/apartment_assets/1764387699-pimg-in.php"] [unique_id "aSpsZfABfBqk70vKX9RjvQAAAAE"]
[Sat Nov 29 11:45:41.867974 2025] [:error] [pid 32136:tid 32154] [client 124.248.183.5:62304] [client 124.248.183.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/uploads/apartment_assets/1764387700-pimg-in.php"] [unique_id "aSpsZcSj_WSVQM1psKo4BgAAARA"]
[Sat Nov 29 11:48:30.551121 2025] [:error] [pid 20828:tid 20909] [client 124.248.183.5:54760] [client 124.248.183.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/uploads/apartment_assets/1764387702-pimg-in.php"] [unique_id "aSptDuqW2f0jLRABAORDHwAAAJc"]
[Sat Nov 29 11:48:31.302626 2025] [:error] [pid 32136:tid 32149] [client 124.248.183.5:54805] [client 124.248.183.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/uploads/apartment_assets/1764387703-pimg-in.php"] [unique_id "aSptD8Sj_WSVQM1psKo4dgAAAQs"]
[Sat Nov 29 11:48:32.021911 2025] [:error] [pid 20826:tid 20831] [client 124.248.183.5:54839] [client 124.248.183.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/uploads/apartment_assets/1764387704-pimg-in.php"] [unique_id "aSptEPABfBqk70vKX9RkQQAAAAE"]
[Sat Nov 29 11:48:36.904490 2025] [:error] [pid 32136:tid 32157] [client 124.248.183.5:55086] [client 124.248.183.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/uploads/apartment_assets/1764387695-pimg-in.php"] [unique_id "aSptFMSj_WSVQM1psKo4fQAAARM"]
[Sat Nov 29 11:48:37.538770 2025] [:error] [pid 20826:tid 20852] [client 124.248.183.5:55129] [client 124.248.183.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/uploads/apartment_assets/1764387696-pimg-in.php"] [unique_id "aSptFfABfBqk70vKX9RkQgAAABY"]
[Sat Nov 29 11:48:38.256492 2025] [:error] [pid 20827:tid 20866] [client 124.248.183.5:55167] [client 124.248.183.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/uploads/apartment_assets/1764387697-pimg-in.php"] [unique_id "aSptFoR9B7FcLfh1rSE41wAAAEg"]
[Sat Nov 29 11:48:38.824343 2025] [:error] [pid 20828:tid 20893] [client 124.248.183.5:55202] [client 124.248.183.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/uploads/apartment_assets/1764387698-pimg-in.php"] [unique_id "aSptFuqW2f0jLRABAORDKgAAAIg"]
[Sat Nov 29 11:48:39.429742 2025] [:error] [pid 16610:tid 16628] [client 124.248.183.5:55239] [client 124.248.183.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/uploads/apartment_assets/1764387699-pimg-in.php"] [unique_id "aSptFwTu2dLzNk_QISq3WgAAAZA"]
[Sat Nov 29 11:48:40.066502 2025] [:error] [pid 20915:tid 20938] [client 124.248.183.5:55269] [client 124.248.183.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/uploads/apartment_assets/1764387700-pimg-in.php"] [unique_id "aSptGFOOtKw1QZ3TPESThAAAANU"]
[Sat Nov 29 11:48:40.722670 2025] [:error] [pid 32136:tid 32160] [client 124.248.183.5:55303] [client 124.248.183.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/uploads/apartment_assets/1764387701-pimg-in.php"] [unique_id "aSptGMSj_WSVQM1psKo4hAAAARY"]
[Sat Nov 29 11:48:41.634158 2025] [:error] [pid 32136:tid 32150] [client 124.248.183.5:55334] [client 124.248.183.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/uploads/apartment_assets/1764387702-pimg-in.php"] [unique_id "aSptGcSj_WSVQM1psKo4hgAAAQw"]
[Sat Nov 29 11:48:42.286867 2025] [:error] [pid 16610:tid 16632] [client 124.248.183.5:55391] [client 124.248.183.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/uploads/apartment_assets/1764387703-pimg-in.php"] [unique_id "aSptGgTu2dLzNk_QISq3XwAAAZQ"]
[Sat Nov 29 11:48:43.201143 2025] [:error] [pid 20915:tid 20920] [client 124.248.183.5:55437] [client 124.248.183.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/uploads/apartment_assets/1764387704-pimg-in.php"] [unique_id "aSptG1OOtKw1QZ3TPESTiAAAAMM"]
[Sat Nov 29 11:48:44.098290 2025] [:error] [pid 16610:tid 16635] [client 124.248.183.5:55483] [client 124.248.183.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/uploads/apartment_assets/1764387705-pimg-in.php"] [unique_id "aSptHATu2dLzNk_QISq3YAAAAZc"]
[Sat Nov 29 11:48:49.223693 2025] [:error] [pid 62619:tid 62628] [client 124.248.183.5:55742] [client 124.248.183.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/uploads/apartment_assets/1764387696-pimg-in.php"] [unique_id "aSptIdk7ZYKT63FfVSUKFwAAAUc"]
[Sat Nov 29 11:48:49.869710 2025] [:error] [pid 16610:tid 16628] [client 124.248.183.5:55778] [client 124.248.183.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/uploads/apartment_assets/1764387697-pimg-in.php"] [unique_id "aSptIQTu2dLzNk_QISq3awAAAZA"]
[Sat Nov 29 11:48:52.198078 2025] [:error] [pid 20915:tid 20922] [client 124.248.183.5:55807] [client 124.248.183.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/uploads/apartment_assets/1764387698-pimg-in.php"] [unique_id "aSptJFOOtKw1QZ3TPESTjwAAAMU"]
[Sat Nov 29 11:48:52.754591 2025] [:error] [pid 20826:tid 20831] [client 124.248.183.5:55912] [client 124.248.183.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/uploads/apartment_assets/1764387699-pimg-in.php"] [unique_id "aSptJPABfBqk70vKX9RkUQAAAAE"]
[Sat Nov 29 11:48:53.388178 2025] [:error] [pid 62619:tid 62634] [client 124.248.183.5:55940] [client 124.248.183.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/uploads/apartment_assets/1764387700-pimg-in.php"] [unique_id "aSptJdk7ZYKT63FfVSUKIAAAAU0"]
[Sat Nov 29 11:48:54.264308 2025] [:error] [pid 20826:tid 20832] [client 124.248.183.5:55977] [client 124.248.183.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/uploads/apartment_assets/1764387701-pimg-in.php"] [unique_id "aSptJvABfBqk70vKX9RkUwAAAAI"]
[Sat Nov 29 11:48:54.956342 2025] [:error] [pid 32136:tid 32149] [client 124.248.183.5:56030] [client 124.248.183.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/uploads/apartment_assets/1764387702-pimg-in.php"] [unique_id "aSptJsSj_WSVQM1psKo4kQAAAQs"]
[Sat Nov 29 11:48:55.897984 2025] [:error] [pid 20828:tid 20901] [client 124.248.183.5:56078] [client 124.248.183.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/uploads/apartment_assets/1764387703-pimg-in.php"] [unique_id "aSptJ-qW2f0jLRABAORDOAAAAJA"]
[Sat Nov 29 11:48:56.520011 2025] [:error] [pid 20828:tid 20888] [client 124.248.183.5:56117] [client 124.248.183.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/uploads/apartment_assets/1764387704-pimg-in.php"] [unique_id "aSptKOqW2f0jLRABAORDOwAAAIM"]
[Sat Nov 29 11:48:57.382686 2025] [:error] [pid 20826:tid 20839] [client 124.248.183.5:56151] [client 124.248.183.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/uploads/apartment_assets/1764387705-pimg-in.php"] [unique_id "aSptKfABfBqk70vKX9RkVwAAAAk"]
[Sat Nov 29 11:48:58.152579 2025] [:error] [pid 20828:tid 20908] [client 124.248.183.5:56193] [client 124.248.183.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/uploads/apartment_assets/1764387706-pimg-in.php"] [unique_id "aSptKuqW2f0jLRABAORDPgAAAJY"]
[Sat Nov 29 11:49:03.022757 2025] [:error] [pid 16610:tid 16613] [client 124.248.183.5:56440] [client 124.248.183.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/uploads/apartment_assets/1764387697-pimg-in.php"] [unique_id "aSptLwTu2dLzNk_QISq3fgAAAYE"]
[Sat Nov 29 11:49:03.768274 2025] [:error] [pid 16610:tid 16628] [client 124.248.183.5:56483] [client 124.248.183.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/uploads/apartment_assets/1764387698-pimg-in.php"] [unique_id "aSptLwTu2dLzNk_QISq3gAAAAZA"]
[Sat Nov 29 11:49:04.594258 2025] [:error] [pid 20827:tid 20868] [client 124.248.183.5:56524] [client 124.248.183.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/uploads/apartment_assets/1764387699-pimg-in.php"] [unique_id "aSptMIR9B7FcLfh1rSE49wAAAEo"]
[Sat Nov 29 11:49:05.223260 2025] [:error] [pid 32136:tid 32157] [client 124.248.183.5:56574] [client 124.248.183.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/uploads/apartment_assets/1764387700-pimg-in.php"] [unique_id "aSptMcSj_WSVQM1psKo4oQAAARM"]
[Sat Nov 29 11:49:06.132169 2025] [:error] [pid 16610:tid 16618] [client 124.248.183.5:56611] [client 124.248.183.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/uploads/apartment_assets/1764387701-pimg-in.php"] [unique_id "aSptMgTu2dLzNk_QISq3hQAAAYY"]
[Sat Nov 29 11:49:06.915926 2025] [:error] [pid 16610:tid 16632] [client 124.248.183.5:56660] [client 124.248.183.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/uploads/apartment_assets/1764387702-pimg-in.php"] [unique_id "aSptMgTu2dLzNk_QISq3iAAAAZQ"]
[Sat Nov 29 11:49:07.675205 2025] [:error] [pid 62619:tid 62622] [client 124.248.183.5:56706] [client 124.248.183.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/uploads/apartment_assets/1764387703-pimg-in.php"] [unique_id "aSptM9k7ZYKT63FfVSUKUwAAAUE"]
[Sat Nov 29 11:49:08.646315 2025] [:error] [pid 16610:tid 16622] [client 124.248.183.5:56761] [client 124.248.183.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/uploads/apartment_assets/1764387704-pimg-in.php"] [unique_id "aSptNATu2dLzNk_QISq3jQAAAYo"]
[Sat Nov 29 11:49:09.252497 2025] [:error] [pid 20915:tid 20925] [client 124.248.183.5:56812] [client 124.248.183.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/uploads/apartment_assets/1764387705-pimg-in.php"] [unique_id "aSptNVOOtKw1QZ3TPESTtwAAAMg"]
[Sat Nov 29 11:49:09.966833 2025] [:error] [pid 20826:tid 20850] [client 124.248.183.5:56854] [client 124.248.183.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/uploads/apartment_assets/1764387706-pimg-in.php"] [unique_id "aSptNfABfBqk70vKX9RkYwAAABQ"]
[Sat Nov 29 11:49:10.564298 2025] [:error] [pid 20826:tid 20836] [client 124.248.183.5:56888] [client 124.248.183.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/uploads/apartment_assets/1764387707-pimg-in.php"] [unique_id "aSptNvABfBqk70vKX9RkZQAAAAY"]
[Sat Nov 29 12:02:41.815908 2025] [:error] [pid 20827:tid 20864] [client 134.209.33.248:47756] [client 134.209.33.248] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paramountbaldivis.com"] [uri "/.git/config"] [unique_id "aSpwYYR9B7FcLfh1rSE9vQAAAEY"]
[Sat Nov 29 12:02:44.583916 2025] [:error] [pid 32136:tid 32156] [client 134.209.33.248:36526] [client 134.209.33.248] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paramountbaldivis.com"] [uri "/.git/config"] [unique_id "aSpwZMSj_WSVQM1psKo9PQAAARI"]
[Sat Nov 29 14:16:35.571504 2025] [:error] [pid 16610:tid 16612] [client 134.209.33.248:56768] [client 134.209.33.248] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paramountbaldivis.com"] [uri "/.git/config"] [unique_id "aSqPwwTu2dLzNk_QISrYdAAAAYA"]
[Sat Nov 29 14:16:38.231525 2025] [:error] [pid 20827:tid 20859] [client 134.209.33.248:57662] [client 134.209.33.248] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paramountbaldivis.com"] [uri "/.git/config"] [unique_id "aSqPxoR9B7FcLfh1rSFgBQAAAEE"]
[Sat Nov 29 14:28:59.496865 2025] [:error] [pid 62619:tid 62637] [client 101.91.148.219:43157] [client 101.91.148.219] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.paramountbaldivis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.paramountbaldivis.com"] [uri "/"] [unique_id "aSqSq9k7ZYKT63FfVSUr1QAAAVA"]
[Sat Nov 29 15:00:50.673086 2025] [:error] [pid 16610:tid 16622] [client 207.154.216.0:65160] [client 207.154.216.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aSqaIgTu2dLzNk_QISrepQAAAYo"]
[Sat Nov 29 15:00:51.227887 2025] [:error] [pid 62619:tid 62627] [client 207.154.216.0:58240] [client 207.154.216.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aSqaI9k7ZYKT63FfVSUywAAAAUY"]
[Sat Nov 29 15:00:52.080622 2025] [:error] [pid 16610:tid 16626] [client 207.154.216.0:64958] [client 207.154.216.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aSqaJATu2dLzNk_QISrewAAAAY4"]
[Sat Nov 29 15:00:53.108751 2025] [:error] [pid 20826:tid 20839] [client 207.154.216.0:62959] [client 207.154.216.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aSqaJfABfBqk70vKX9SDswAAAAk"]
[Sat Nov 29 15:00:53.976691 2025] [:error] [pid 20915:tid 20922] [client 207.154.216.0:55274] [client 207.154.216.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aSqaJVOOtKw1QZ3TPESzdgAAAMU"]
[Sat Nov 29 15:14:23.084092 2025] [:error] [pid 20827:tid 20880] [client 207.154.216.0:60213] [client 207.154.216.0] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-json/"] [unique_id "aSqdT4R9B7FcLfh1rSFuJQAAAFY"]
[Sat Nov 29 17:06:49.207217 2025] [:error] [pid 32136:tid 32143] [client 134.209.33.248:52562] [client 134.209.33.248] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paramountbaldivis.com"] [uri "/.git/config"] [unique_id "aSq3qcSj_WSVQM1psKp3FgAAAQU"]
[Sat Nov 29 17:06:51.659212 2025] [:error] [pid 25341:tid 25364] [client 134.209.33.248:47494] [client 134.209.33.248] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paramountbaldivis.com"] [uri "/.git/config"] [unique_id "aSq3q_WK8JdN03Mg7dwJ6wAAAdM"]
[Sat Nov 29 18:23:04.591344 2025] [:error] [pid 25341:tid 25364] [client 43.166.224.244:39206] [client 43.166.224.244] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.paramountbaldivis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.paramountbaldivis.com"] [uri "/"] [unique_id "aSrJiPWK8JdN03Mg7dwjkQAAAdM"]
[Sat Nov 29 18:46:11.195842 2025] [:error] [pid 62619:tid 62645] [client 74.81.43.18:51667] [client 74.81.43.18] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||paramountbaldivis.com|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "paramountbaldivis.com"] [uri "/system/logs/error.log"] [unique_id "aSrO89k7ZYKT63FfVSVnRwAAAVg"]
[Sat Nov 29 18:46:11.195845 2025] [:error] [pid 32136:tid 32162] [client 74.81.43.18:51668] [client 74.81.43.18] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||paramountbaldivis.com|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "paramountbaldivis.com"] [uri "/system/storage/logs/error.log"] [unique_id "aSrO88Sj_WSVQM1psKqcNAAAARg"]
[Sat Nov 29 18:46:11.198134 2025] [:error] [pid 62619:tid 62632] [client 74.81.43.18:51669] [client 74.81.43.18] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||paramountbaldivis.com|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "paramountbaldivis.com"] [uri "/storage/logs/error.log"] [unique_id "aSrO89k7ZYKT63FfVSVnSAAAAUs"]
[Sat Nov 29 19:20:22.309162 2025] [:error] [pid 32136:tid 32139] [client 134.209.33.248:48100] [client 134.209.33.248] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paramountbaldivis.com"] [uri "/.git/config"] [unique_id "aSrW9sSj_WSVQM1psKqhdwAAAQE"]
[Sat Nov 29 19:20:25.959428 2025] [:error] [pid 62619:tid 62645] [client 134.209.33.248:43364] [client 134.209.33.248] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paramountbaldivis.com"] [uri "/.git/config"] [unique_id "aSrW-dk7ZYKT63FfVSVrxAAAAVg"]
[Sat Nov 29 20:27:28.541179 2025] [:error] [pid 37490:tid 37515] [client 45.153.34.41:44460] [client 45.153.34.41] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paramountbaldivis.com"] [uri "/.git/config"] [unique_id "aSrmsJjG6OUSCUo6XZ1CNQAAAhc"]
[Sat Nov 29 21:07:58.507347 2025] [:error] [pid 20915:tid 20935] [client 3.39.191.131:33418] [client 3.39.191.131] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.paramountbaldivis.com"] [uri "/.git/config"] [unique_id "aSrwLlOOtKw1QZ3TPEQB1QAAANI"]
[Sat Nov 29 21:07:59.116816 2025] [:error] [pid 16610:tid 16634] [client 3.39.191.131:33430] [client 3.39.191.131] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.paramountbaldivis.com"] [uri "/.env"] [unique_id "aSrwLwTu2dLzNk_QISodwwAAAZY"]
[Sat Nov 29 21:07:59.727858 2025] [:error] [pid 20915:tid 20941] [client 3.39.191.131:33436] [client 3.39.191.131] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.paramountbaldivis.com"] [uri "/.env.local"] [unique_id "aSrwL1OOtKw1QZ3TPEQB2QAAANg"]
[Sat Nov 29 21:08:00.365768 2025] [:error] [pid 62619:tid 62644] [client 3.39.191.131:33444] [client 3.39.191.131] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.paramountbaldivis.com"] [uri "/.env.production"] [unique_id "aSrwMNk7ZYKT63FfVSV-LgAAAVc"]
[Sat Nov 29 21:08:00.974311 2025] [:error] [pid 20915:tid 20929] [client 3.39.191.131:33448] [client 3.39.191.131] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.paramountbaldivis.com"] [uri "/.env.development"] [unique_id "aSrwMFOOtKw1QZ3TPEQB3QAAAMw"]
[Sat Nov 29 21:08:01.590230 2025] [:error] [pid 20827:tid 20868] [client 3.39.191.131:33460] [client 3.39.191.131] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.paramountbaldivis.com"] [uri "/.env.bak"] [unique_id "aSrwMYR9B7FcLfh1rSGmdAAAAEo"]
[Sat Nov 29 21:08:02.203196 2025] [:error] [pid 16610:tid 16628] [client 3.39.191.131:33474] [client 3.39.191.131] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.paramountbaldivis.com"] [uri "/.env.example"] [unique_id "aSrwMgTu2dLzNk_QISodxgAAAZA"]
[Sat Nov 29 21:08:20.987900 2025] [:error] [pid 16610:tid 16633] [client 3.39.191.131:34516] [client 3.39.191.131] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.paramountbaldivis.com|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.paramountbaldivis.com"] [uri "/config.ini"] [unique_id "aSrwRATu2dLzNk_QISod0wAAAZU"]
[Sat Nov 29 21:08:24.924860 2025] [:error] [pid 20827:tid 20868] [client 3.39.191.131:57722] [client 3.39.191.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.paramountbaldivis.com"] [uri "/settings"] [unique_id "aSrwSIR9B7FcLfh1rSGmpwAAAEo"]
[Sat Nov 29 21:08:25.533594 2025] [:error] [pid 25341:tid 25355] [client 3.39.191.131:57730] [client 3.39.191.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.paramountbaldivis.com"] [uri "/settings.json"] [unique_id "aSrwSfWK8JdN03Mg7dxdJAAAAco"]
[Sat Nov 29 21:08:26.145320 2025] [:error] [pid 20826:tid 20849] [client 3.39.191.131:57738] [client 3.39.191.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.paramountbaldivis.com"] [uri "/app.config.js"] [unique_id "aSrwSvABfBqk70vKX9TWlgAAABM"]
[Sat Nov 29 21:08:26.758388 2025] [:error] [pid 16610:tid 16626] [client 3.39.191.131:57742] [client 3.39.191.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.paramountbaldivis.com"] [uri "/phpinfo.php"] [unique_id "aSrwSgTu2dLzNk_QISod3QAAAY4"]
[Sat Nov 29 21:08:27.362271 2025] [:error] [pid 62619:tid 62624] [client 3.39.191.131:57752] [client 3.39.191.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.paramountbaldivis.com"] [uri "/info.php"] [unique_id "aSrwS9k7ZYKT63FfVSV-UAAAAUM"]
[Sat Nov 29 21:08:27.964468 2025] [:error] [pid 20915:tid 20917] [client 3.39.191.131:57762] [client 3.39.191.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.paramountbaldivis.com"] [uri "/phpversion.php"] [unique_id "aSrwS1OOtKw1QZ3TPEQB9gAAAMA"]
[Sat Nov 29 21:08:28.574223 2025] [:error] [pid 20828:tid 20888] [client 3.39.191.131:57774] [client 3.39.191.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.paramountbaldivis.com"] [uri "/test.php"] [unique_id "aSrwTOqW2f0jLRABAOSguwAAAIM"]
[Sat Nov 29 21:08:29.176675 2025] [:error] [pid 37490:tid 37514] [client 3.39.191.131:57782] [client 3.39.191.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.paramountbaldivis.com"] [uri "/admin"] [unique_id "aSrwTZjG6OUSCUo6XZ1PGQAAAhY"]
[Sat Nov 29 21:08:29.769495 2025] [:error] [pid 20826:tid 20838] [client 3.39.191.131:57784] [client 3.39.191.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.paramountbaldivis.com"] [uri "/admin.php"] [unique_id "aSrwTfABfBqk70vKX9TWmQAAAAg"]
[Sat Nov 29 21:08:30.374784 2025] [:error] [pid 16610:tid 16612] [client 3.39.191.131:57794] [client 3.39.191.131] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.paramountbaldivis.com"] [uri "/wp-config.php"] [unique_id "aSrwTgTu2dLzNk_QISod3gAAAYA"]
[Sat Nov 29 21:08:30.990344 2025] [:error] [pid 20826:tid 20836] [client 3.39.191.131:57800] [client 3.39.191.131] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/composer.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.paramountbaldivis.com"] [uri "/composer.json"] [unique_id "aSrwTvABfBqk70vKX9TWmwAAAAY"]
[Sat Nov 29 21:08:31.603447 2025] [:error] [pid 32136:tid 32144] [client 3.39.191.131:57802] [client 3.39.191.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.paramountbaldivis.com"] [uri "/.aws/config"] [unique_id "aSrwT8Sj_WSVQM1psKq1YAAAAQY"]
[Sat Nov 29 21:08:32.205317 2025] [:error] [pid 20828:tid 20893] [client 3.39.191.131:57812] [client 3.39.191.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.paramountbaldivis.com"] [uri "/.aws/credentials"] [unique_id "aSrwUOqW2f0jLRABAOSgwAAAAIg"]
[Sat Nov 29 21:08:32.813265 2025] [:error] [pid 62619:tid 62623] [client 3.39.191.131:52446] [client 3.39.191.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.paramountbaldivis.com"] [uri "/aws/config"] [unique_id "aSrwUNk7ZYKT63FfVSV-WAAAAUI"]
[Sat Nov 29 21:08:33.426932 2025] [:error] [pid 25341:tid 25358] [client 3.39.191.131:52460] [client 3.39.191.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.paramountbaldivis.com"] [uri "/aws/credentials"] [unique_id "aSrwUfWK8JdN03Mg7dxdJwAAAc0"]
[Sat Nov 29 21:08:34.033201 2025] [:error] [pid 62619:tid 62644] [client 3.39.191.131:52476] [client 3.39.191.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.paramountbaldivis.com"] [uri "/aws.json"] [unique_id "aSrwUtk7ZYKT63FfVSV-WgAAAVc"]
[Sat Nov 29 21:08:34.638290 2025] [:error] [pid 25341:tid 25365] [client 3.39.191.131:52486] [client 3.39.191.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.paramountbaldivis.com"] [uri "/credentials"] [unique_id "aSrwUvWK8JdN03Mg7dxdKQAAAdQ"]
[Sat Nov 29 21:08:35.243056 2025] [:error] [pid 25341:tid 25363] [client 3.39.191.131:52488] [client 3.39.191.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.paramountbaldivis.com"] [uri "/secrets.json"] [unique_id "aSrwU_WK8JdN03Mg7dxdKgAAAdI"]
[Sat Nov 29 21:08:35.850187 2025] [:error] [pid 25341:tid 25364] [client 3.39.191.131:52504] [client 3.39.191.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.paramountbaldivis.com"] [uri "/keys.js"] [unique_id "aSrwU_WK8JdN03Mg7dxdLAAAAdM"]
[Sat Nov 29 21:08:36.458404 2025] [:error] [pid 25341:tid 25353] [client 3.39.191.131:52514] [client 3.39.191.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.paramountbaldivis.com"] [uri "/aws-keys.js"] [unique_id "aSrwVPWK8JdN03Mg7dxdLgAAAcg"]
[Sat Nov 29 21:08:37.062409 2025] [:error] [pid 20915:tid 20917] [client 3.39.191.131:52520] [client 3.39.191.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.paramountbaldivis.com"] [uri "/mailgun"] [unique_id "aSrwVVOOtKw1QZ3TPEQB-gAAAMA"]
[Sat Nov 29 21:08:37.665308 2025] [:error] [pid 25341:tid 25347] [client 3.39.191.131:52524] [client 3.39.191.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.paramountbaldivis.com"] [uri "/mailgun.json"] [unique_id "aSrwVfWK8JdN03Mg7dxdMgAAAcI"]
[Sat Nov 29 21:08:38.288685 2025] [:error] [pid 37490:tid 37500] [client 3.39.191.131:52532] [client 3.39.191.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.paramountbaldivis.com"] [uri "/mailgun/config"] [unique_id "aSrwVpjG6OUSCUo6XZ1PHAAAAgg"]
[Sat Nov 29 21:08:38.917813 2025] [:error] [pid 62619:tid 62642] [client 3.39.191.131:52544] [client 3.39.191.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.paramountbaldivis.com"] [uri "/mailgun.php"] [unique_id "aSrwVtk7ZYKT63FfVSV-YAAAAVU"]
[Sat Nov 29 21:08:39.529508 2025] [:error] [pid 37490:tid 37495] [client 3.39.191.131:52554] [client 3.39.191.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.paramountbaldivis.com"] [uri "/sendgrid"] [unique_id "aSrwV5jG6OUSCUo6XZ1PHgAAAgM"]
[Sat Nov 29 21:08:40.140065 2025] [:error] [pid 37490:tid 37492] [client 3.39.191.131:52556] [client 3.39.191.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.paramountbaldivis.com"] [uri "/sendgrid.json"] [unique_id "aSrwWJjG6OUSCUo6XZ1PHwAAAgA"]
[Sat Nov 29 21:08:40.751121 2025] [:error] [pid 20915:tid 20941] [client 3.39.191.131:52572] [client 3.39.191.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.paramountbaldivis.com"] [uri "/sendgrid/config"] [unique_id "aSrwWFOOtKw1QZ3TPEQCCgAAANg"]
[Sat Nov 29 21:08:41.381861 2025] [:error] [pid 20915:tid 20934] [client 3.39.191.131:52584] [client 3.39.191.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.paramountbaldivis.com"] [uri "/sendgrid.php"] [unique_id "aSrwWVOOtKw1QZ3TPEQCCwAAANE"]
[Sat Nov 29 21:08:41.976765 2025] [:error] [pid 20826:tid 20851] [client 3.39.191.131:52592] [client 3.39.191.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.paramountbaldivis.com"] [uri "/sendgrid.env"] [unique_id "aSrwWfABfBqk70vKX9TWngAAABU"]
[Sat Nov 29 21:08:42.584643 2025] [:error] [pid 20826:tid 20849] [client 3.39.191.131:44436] [client 3.39.191.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.paramountbaldivis.com"] [uri "/brevo"] [unique_id "aSrwWvABfBqk70vKX9TWnwAAABM"]
[Sat Nov 29 21:08:43.208082 2025] [:error] [pid 25341:tid 25363] [client 3.39.191.131:44442] [client 3.39.191.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.paramountbaldivis.com"] [uri "/brevo.json"] [unique_id "aSrwW_WK8JdN03Mg7dxdOAAAAdI"]
[Sat Nov 29 21:08:43.816839 2025] [:error] [pid 20826:tid 20848] [client 3.39.191.131:44448] [client 3.39.191.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.paramountbaldivis.com"] [uri "/brevo/config"] [unique_id "aSrwW_ABfBqk70vKX9TWoQAAABI"]
[Sat Nov 29 21:08:44.429909 2025] [:error] [pid 20828:tid 20894] [client 3.39.191.131:44464] [client 3.39.191.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.paramountbaldivis.com"] [uri "/brevo.php"] [unique_id "aSrwXOqW2f0jLRABAOSgywAAAIk"]
[Sat Nov 29 21:08:45.031019 2025] [:error] [pid 20915:tid 20941] [client 3.39.191.131:44480] [client 3.39.191.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.paramountbaldivis.com"] [uri "/php"] [unique_id "aSrwXVOOtKw1QZ3TPEQCEQAAANg"]
[Sat Nov 29 21:08:45.668955 2025] [:error] [pid 37490:tid 37494] [client 3.39.191.131:44486] [client 3.39.191.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.paramountbaldivis.com"] [uri "/info"] [unique_id "aSrwXZjG6OUSCUo6XZ1PKAAAAgI"]
[Sat Nov 29 21:08:46.275285 2025] [:error] [pid 62619:tid 62645] [client 3.39.191.131:44496] [client 3.39.191.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.paramountbaldivis.com"] [uri "/phpinfo"] [unique_id "aSrwXtk7ZYKT63FfVSV-ZAAAAVg"]
[Sat Nov 29 21:08:46.878079 2025] [:error] [pid 62619:tid 62641] [client 3.39.191.131:44506] [client 3.39.191.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.paramountbaldivis.com"] [uri "/"] [unique_id "aSrwXtk7ZYKT63FfVSV-ZQAAAVQ"]
[Sat Nov 29 21:08:53.550227 2025] [:error] [pid 20827:tid 20871] [client 3.39.191.131:37294] [client 3.39.191.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.paramountbaldivis.com"] [uri "/js"] [unique_id "aSrwZYR9B7FcLfh1rSGmswAAAE0"]
[Sat Nov 29 22:15:24.349719 2025] [:error] [pid 62619:tid 62635] [client 134.209.33.248:47640] [client 134.209.33.248] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paramountbaldivis.com"] [uri "/.git/config"] [unique_id "aSr__Nk7ZYKT63FfVSWRJQAAAU4"]
[Sat Nov 29 22:15:30.224908 2025] [:error] [pid 37490:tid 37494] [client 134.209.33.248:53030] [client 134.209.33.248] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paramountbaldivis.com"] [uri "/.git/config"] [unique_id "aSsAApjG6OUSCUo6XZ1edQAAAgI"]
[Sun Nov 30 00:48:31.088413 2025] [:error] [pid 58730:tid 58778] [client 3.112.226.29:57430] [client 3.112.226.29] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paramountbaldivis.com"] [uri "/.git/config"] [unique_id "aSsj36DQq6rwusUXQKjN2AAAAA0"]
[Sun Nov 30 00:48:31.631444 2025] [:error] [pid 58730:tid 58781] [client 3.112.226.29:57442] [client 3.112.226.29] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paramountbaldivis.com"] [uri "/.env"] [unique_id "aSsj36DQq6rwusUXQKjN3QAAABA"]
[Sun Nov 30 00:48:32.172340 2025] [:error] [pid 42252:tid 42260] [client 3.112.226.29:57446] [client 3.112.226.29] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paramountbaldivis.com"] [uri "/.env.local"] [unique_id "aSsj4LweMxCk051n8_-oXgAAAUY"]
[Sun Nov 30 00:48:32.709822 2025] [:error] [pid 42164:tid 42245] [client 3.112.226.29:57448] [client 3.112.226.29] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paramountbaldivis.com"] [uri "/.env.production"] [unique_id "aSsj4Nip8Nhatsq7KxzOGAAAARc"]
[Sun Nov 30 00:48:33.252331 2025] [:error] [pid 42252:tid 42261] [client 3.112.226.29:57454] [client 3.112.226.29] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paramountbaldivis.com"] [uri "/.env.development"] [unique_id "aSsj4bweMxCk051n8_-oYgAAAUc"]
[Sun Nov 30 00:48:33.792881 2025] [:error] [pid 58730:tid 58766] [client 3.112.226.29:57466] [client 3.112.226.29] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paramountbaldivis.com"] [uri "/.env.bak"] [unique_id "aSsj4aDQq6rwusUXQKjN6gAAAAE"]
[Sun Nov 30 00:48:34.332401 2025] [:error] [pid 58730:tid 58767] [client 3.112.226.29:57472] [client 3.112.226.29] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paramountbaldivis.com"] [uri "/.env.example"] [unique_id "aSsj4qDQq6rwusUXQKjN8QAAAAI"]
[Sun Nov 30 00:48:48.413658 2025] [:error] [pid 42252:tid 42264] [client 3.112.226.29:55048] [client 3.112.226.29] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||paramountbaldivis.com|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "paramountbaldivis.com"] [uri "/config.ini"] [unique_id "aSsj8LweMxCk051n8_-oqAAAAUo"]
[Sun Nov 30 00:48:51.730029 2025] [:error] [pid 42163:tid 42213] [client 3.112.226.29:55080] [client 3.112.226.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/settings"] [unique_id "aSsj85naEs-eGc51wg2FQQAAANI"]
[Sun Nov 30 00:48:52.273294 2025] [:error] [pid 58730:tid 58780] [client 3.112.226.29:55092] [client 3.112.226.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/settings.json"] [unique_id "aSsj9KDQq6rwusUXQKjORgAAAA8"]
[Sun Nov 30 00:48:52.809376 2025] [:error] [pid 58730:tid 58771] [client 3.112.226.29:55096] [client 3.112.226.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/app.config.js"] [unique_id "aSsj9KDQq6rwusUXQKjOSAAAAAY"]
[Sun Nov 30 00:48:53.346271 2025] [:error] [pid 42164:tid 42236] [client 3.112.226.29:55106] [client 3.112.226.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/phpinfo.php"] [unique_id "aSsj9dip8Nhatsq7KxzOQAAAAQ4"]
[Sun Nov 30 00:48:53.890603 2025] [:error] [pid 58730:tid 58777] [client 3.112.226.29:55110] [client 3.112.226.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/info.php"] [unique_id "aSsj9aDQq6rwusUXQKjOSwAAAAw"]
[Sun Nov 30 00:48:54.432784 2025] [:error] [pid 58730:tid 58767] [client 3.112.226.29:52086] [client 3.112.226.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/phpversion.php"] [unique_id "aSsj9qDQq6rwusUXQKjOUAAAAAI"]
[Sun Nov 30 00:48:54.971165 2025] [:error] [pid 42162:tid 42188] [client 3.112.226.29:52096] [client 3.112.226.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/test.php"] [unique_id "aSsj9tePpz4Ije-_EjrkRgAAAJU"]
[Sun Nov 30 00:48:55.515271 2025] [:error] [pid 58730:tid 58769] [client 3.112.226.29:52100] [client 3.112.226.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/admin"] [unique_id "aSsj96DQq6rwusUXQKjOWQAAAAQ"]
[Sun Nov 30 00:48:56.058014 2025] [:error] [pid 42163:tid 42210] [client 3.112.226.29:52106] [client 3.112.226.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/admin.php"] [unique_id "aSsj-JnaEs-eGc51wg2FRwAAAM8"]
[Sun Nov 30 00:48:56.602952 2025] [:error] [pid 42163:tid 42195] [client 3.112.226.29:52118] [client 3.112.226.29] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paramountbaldivis.com"] [uri "/wp-config.php"] [unique_id "aSsj-JnaEs-eGc51wg2FSQAAAMA"]
[Sun Nov 30 00:48:57.144260 2025] [:error] [pid 42163:tid 42201] [client 3.112.226.29:52128] [client 3.112.226.29] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/composer.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paramountbaldivis.com"] [uri "/composer.json"] [unique_id "aSsj-ZnaEs-eGc51wg2FSwAAAMY"]
[Sun Nov 30 00:48:57.732186 2025] [:error] [pid 42162:tid 42186] [client 3.112.226.29:52142] [client 3.112.226.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/.aws/config"] [unique_id "aSsj-dePpz4Ije-_EjrkUAAAAJM"]
[Sun Nov 30 00:48:58.274095 2025] [:error] [pid 58730:tid 58776] [client 3.112.226.29:52156] [client 3.112.226.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/.aws/credentials"] [unique_id "aSsj-qDQq6rwusUXQKjOXAAAAAs"]
[Sun Nov 30 00:48:58.817659 2025] [:error] [pid 42163:tid 42204] [client 3.112.226.29:52172] [client 3.112.226.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/aws/config"] [unique_id "aSsj-pnaEs-eGc51wg2FTwAAAMk"]
[Sun Nov 30 00:48:59.354421 2025] [:error] [pid 42162:tid 42182] [client 3.112.226.29:52182] [client 3.112.226.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/aws/credentials"] [unique_id "aSsj-9ePpz4Ije-_EjrkVAAAAI8"]
[Sun Nov 30 00:48:59.893382 2025] [:error] [pid 42163:tid 42210] [client 3.112.226.29:52188] [client 3.112.226.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/aws.json"] [unique_id "aSsj-5naEs-eGc51wg2FUwAAAM8"]
[Sun Nov 30 00:49:00.431973 2025] [:error] [pid 42162:tid 42176] [client 3.112.226.29:52194] [client 3.112.226.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/credentials"] [unique_id "aSsj_NePpz4Ije-_EjrkWAAAAIk"]
[Sun Nov 30 00:49:00.973587 2025] [:error] [pid 42163:tid 42205] [client 3.112.226.29:52200] [client 3.112.226.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/secrets.json"] [unique_id "aSsj_JnaEs-eGc51wg2FWgAAAMo"]
[Sun Nov 30 00:49:01.509959 2025] [:error] [pid 42162:tid 42171] [client 3.112.226.29:52206] [client 3.112.226.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/keys.js"] [unique_id "aSsj_dePpz4Ije-_EjrkWwAAAIQ"]
[Sun Nov 30 00:49:02.047508 2025] [:error] [pid 42162:tid 42186] [client 3.112.226.29:52214] [client 3.112.226.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/aws-keys.js"] [unique_id "aSsj_tePpz4Ije-_EjrkXAAAAJM"]
[Sun Nov 30 00:49:02.589609 2025] [:error] [pid 58730:tid 58765] [client 3.112.226.29:52222] [client 3.112.226.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/mailgun"] [unique_id "aSsj_qDQq6rwusUXQKjOZQAAAAA"]
[Sun Nov 30 00:49:03.132313 2025] [:error] [pid 58730:tid 58768] [client 3.112.226.29:52232] [client 3.112.226.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/mailgun.json"] [unique_id "aSsj_6DQq6rwusUXQKjOaQAAAAM"]
[Sun Nov 30 00:49:03.674147 2025] [:error] [pid 58730:tid 58769] [client 3.112.226.29:52234] [client 3.112.226.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/mailgun/config"] [unique_id "aSsj_6DQq6rwusUXQKjObAAAAAQ"]
[Sun Nov 30 00:49:04.215721 2025] [:error] [pid 42252:tid 42265] [client 3.112.226.29:52238] [client 3.112.226.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/mailgun.php"] [unique_id "aSskALweMxCk051n8_-ouAAAAUs"]
[Sun Nov 30 00:49:04.760344 2025] [:error] [pid 42162:tid 42185] [client 3.112.226.29:49260] [client 3.112.226.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/sendgrid"] [unique_id "aSskANePpz4Ije-_EjrkYQAAAJI"]
[Sun Nov 30 00:49:05.301463 2025] [:error] [pid 42162:tid 42175] [client 3.112.226.29:49268] [client 3.112.226.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/sendgrid.json"] [unique_id "aSskAdePpz4Ije-_EjrkYwAAAIg"]
[Sun Nov 30 00:49:05.839658 2025] [:error] [pid 42164:tid 42236] [client 3.112.226.29:49284] [client 3.112.226.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/sendgrid/config"] [unique_id "aSskAdip8Nhatsq7KxzOSgAAAQ4"]
[Sun Nov 30 00:49:06.384145 2025] [:error] [pid 42252:tid 42257] [client 3.112.226.29:49298] [client 3.112.226.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/sendgrid.php"] [unique_id "aSskArweMxCk051n8_-ougAAAUM"]
[Sun Nov 30 00:49:06.927648 2025] [:error] [pid 42252:tid 42256] [client 3.112.226.29:49308] [client 3.112.226.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/sendgrid.env"] [unique_id "aSskArweMxCk051n8_-ovgAAAUI"]
[Sun Nov 30 00:49:07.474397 2025] [:error] [pid 42163:tid 42208] [client 3.112.226.29:49316] [client 3.112.226.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/brevo"] [unique_id "aSskA5naEs-eGc51wg2FZgAAAM0"]
[Sun Nov 30 00:49:08.012827 2025] [:error] [pid 42163:tid 42205] [client 3.112.226.29:49324] [client 3.112.226.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/brevo.json"] [unique_id "aSskBJnaEs-eGc51wg2FZwAAAMo"]
[Sun Nov 30 00:49:08.553541 2025] [:error] [pid 58730:tid 58790] [client 3.112.226.29:49336] [client 3.112.226.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/brevo/config"] [unique_id "aSskBKDQq6rwusUXQKjOcAAAABg"]
[Sun Nov 30 00:49:09.095699 2025] [:error] [pid 58730:tid 58775] [client 3.112.226.29:49350] [client 3.112.226.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/brevo.php"] [unique_id "aSskBaDQq6rwusUXQKjOcQAAAAo"]
[Sun Nov 30 00:49:09.637107 2025] [:error] [pid 42163:tid 42211] [client 3.112.226.29:49356] [client 3.112.226.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/php"] [unique_id "aSskBZnaEs-eGc51wg2FagAAANA"]
[Sun Nov 30 00:49:10.184726 2025] [:error] [pid 42162:tid 42173] [client 3.112.226.29:49364] [client 3.112.226.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/info"] [unique_id "aSskBtePpz4Ije-_EjrkaQAAAIY"]
[Sun Nov 30 00:49:10.726202 2025] [:error] [pid 42252:tid 42275] [client 3.112.226.29:49376] [client 3.112.226.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/phpinfo"] [unique_id "aSskBrweMxCk051n8_-oxwAAAVU"]
[Sun Nov 30 00:49:11.268885 2025] [:error] [pid 42164:tid 42245] [client 3.112.226.29:49382] [client 3.112.226.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aSskB9ip8Nhatsq7KxzOVAAAARc"]
[Sun Nov 30 00:49:15.383895 2025] [:error] [pid 42164:tid 42231] [client 3.112.226.29:55830] [client 3.112.226.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/js"] [unique_id "aSskC9ip8Nhatsq7KxzOYQAAAQk"]
[Sun Nov 30 03:31:04.500830 2025] [:error] [pid 53977:tid 54001] [client 134.209.33.248:36936] [client 134.209.33.248] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paramountbaldivis.com"] [uri "/.git/config"] [unique_id "aStJ-KCMKg3RMo8GfKImJQAAAlY"]
[Sun Nov 30 03:31:06.949705 2025] [:error] [pid 42252:tid 42270] [client 134.209.33.248:34460] [client 134.209.33.248] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paramountbaldivis.com"] [uri "/.git/config"] [unique_id "aStJ-rweMxCk051n8__P-QAAAVA"]
[Sun Nov 30 03:39:00.908796 2025] [:error] [pid 42252:tid 42256] [client 134.209.33.248:50706] [client 134.209.33.248] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paramountbaldivis.com"] [uri "/.git/config"] [unique_id "aStL1LweMxCk051n8__RrwAAAUI"]
[Sun Nov 30 03:39:06.404331 2025] [:error] [pid 29714:tid 29735] [client 134.209.33.248:55302] [client 134.209.33.248] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paramountbaldivis.com"] [uri "/.git/config"] [unique_id "aStL2r76_KNwefuiUY-NNAAAAFM"]
[Sun Nov 30 03:56:05.804821 2025] [:error] [pid 41483:tid 41569] [client 101.91.148.219:39880] [client 101.91.148.219] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.paramountbaldivis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.paramountbaldivis.com"] [uri "/"] [unique_id "aStP1Sj87qRaKF3EkqPk6wAAAJc"]
[Sun Nov 30 11:29:16.588561 2025] [:error] [pid 10608:tid 10649] [client 13.74.149.244:15442] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/Text/network.php"] [unique_id "aSu6DOG4qpknNxmxP5c0IAAAA8w"]
[Sun Nov 30 11:29:21.650384 2025] [:error] [pid 58704:tid 58710] [client 13.74.149.244:8956] [client 13.74.149.244] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 13.74.149.244, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-content/upgrade-temp-backup/wp-login.php"] [unique_id "aSu6EVgCdnbXMzbONnOsvAAAA4M"]
[Sun Nov 30 11:29:22.609496 2025] [:error] [pid 12793:tid 12807] [client 13.74.149.244:2416] [client 13.74.149.244] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 13.74.149.244, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-content/upgrade-temp-backup/wp-login.php"] [unique_id "aSu6EssEgQeCVydJZ0jrjAAAAEw"]
[Sun Nov 30 11:29:29.644914 2025] [:error] [pid 58704:tid 58724] [client 13.74.149.244:8956] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/WordPress/wp-admin/includes/zmFM.php"] [unique_id "aSu6GVgCdnbXMzbONnOszwAAA5E"]
[Sun Nov 30 11:29:30.615934 2025] [:error] [pid 9375:tid 9427] [client 13.74.149.244:8851] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/WordPress/wp-admin/includes/zmFM.php"] [unique_id "aSu6Gt-EkWIUe87KIjOp9gAAA1c"]
[Sun Nov 30 11:29:31.480693 2025] [:error] [pid 9694:tid 9709] [client 13.74.149.244:8050] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/WordPress/wp-admin/includes/zmFM.php"] [unique_id "aSu6G8NOaRChkzIC_nUztAAAAM0"]
[Sun Nov 30 11:29:32.413409 2025] [:error] [pid 12554:tid 12563] [client 13.74.149.244:7441] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/WordPress/wp-admin/includes/zmFM.php"] [unique_id "aSu6HD7q_kXd01TaAD8mcgAAAAc"]
[Sun Nov 30 11:29:33.371036 2025] [:error] [pid 10550:tid 10597] [client 13.74.149.244:14452] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/default.php"] [unique_id "aSu6Hel_8Vq2nipf7mH3jQAAApI"]
[Sun Nov 30 11:29:34.173998 2025] [:error] [pid 10607:tid 10621] [client 13.74.149.244:9722] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/default.php"] [unique_id "aSu6HnMxNFmf1l9xA_FabgAAAss"]
[Sun Nov 30 11:29:35.075637 2025] [:error] [pid 10550:tid 10602] [client 13.74.149.244:14984] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/default.php"] [unique_id "aSu6H-l_8Vq2nipf7mH3kwAAApc"]
[Sun Nov 30 11:29:36.215371 2025] [:error] [pid 9694:tid 9710] [client 13.74.149.244:17142] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/default.php"] [unique_id "aSu6IMNOaRChkzIC_nUzvgAAAM4"]
[Sun Nov 30 11:29:36.964807 2025] [:error] [pid 9375:tid 9408] [client 13.74.149.244:1237] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ty.php"] [unique_id "aSu6IN-EkWIUe87KIjOp-AAAA0Q"]
[Sun Nov 30 11:29:37.828239 2025] [:error] [pid 12793:tid 12811] [client 13.74.149.244:14996] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ty.php"] [unique_id "aSu6IcsEgQeCVydJZ0jrmgAAAFA"]
[Sun Nov 30 11:29:38.598700 2025] [:error] [pid 12554:tid 12570] [client 13.74.149.244:6944] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ty.php"] [unique_id "aSu6Ij7q_kXd01TaAD8meAAAAA4"]
[Sun Nov 30 11:29:39.366004 2025] [:error] [pid 9374:tid 9389] [client 13.74.149.244:6921] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ty.php"] [unique_id "aSu6I4Ewr5jt_cokVdwa_QAAAww"]
[Sun Nov 30 11:29:40.313718 2025] [:error] [pid 9694:tid 9703] [client 13.74.149.244:14406] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/themes/cay-van-phong/filemanager.php"] [unique_id "aSu6JMNOaRChkzIC_nUzwQAAAMc"]
[Sun Nov 30 11:29:40.951701 2025] [:error] [pid 10518:tid 10544] [client 13.74.149.244:5066] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/themes/cay-van-phong/filemanager.php"] [unique_id "aSu6JA8XjrhaEDJ0Rd9wJgAAAVc"]
[Sun Nov 30 11:29:41.791168 2025] [:error] [pid 10550:tid 10593] [client 13.74.149.244:15631] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/themes/cay-van-phong/filemanager.php"] [unique_id "aSu6Jel_8Vq2nipf7mH3mAAAAo4"]
[Sun Nov 30 11:29:42.692107 2025] [:error] [pid 12554:tid 12565] [client 13.74.149.244:9567] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/themes/cay-van-phong/filemanager.php"] [unique_id "aSu6Jj7q_kXd01TaAD8mfgAAAAk"]
[Sun Nov 30 11:29:43.675996 2025] [:error] [pid 9694:tid 9702] [client 13.74.149.244:11794] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "paramountbaldivis.com"] [uri "/fm.php"] [unique_id "aSu6J8NOaRChkzIC_nUzxwAAAMY"]
[Sun Nov 30 11:29:44.934572 2025] [:error] [pid 10550:tid 10603] [client 13.74.149.244:2070] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/seoplugins/index.php"] [unique_id "aSu6KOl_8Vq2nipf7mH3mwAAApg"]
[Sun Nov 30 11:29:45.957595 2025] [:error] [pid 9374:tid 9397] [client 13.74.149.244:5483] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/seoplugins/index.php"] [unique_id "aSu6KYEwr5jt_cokVdwbAwAAAxQ"]
[Sun Nov 30 11:29:46.867418 2025] [:error] [pid 10607:tid 10613] [client 13.74.149.244:9588] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/seoplugins/index.php"] [unique_id "aSu6KnMxNFmf1l9xA_FaeQAAAsM"]
[Sun Nov 30 11:29:47.829113 2025] [:error] [pid 10608:tid 10644] [client 13.74.149.244:10466] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/seoplugins/index.php"] [unique_id "aSu6K-G4qpknNxmxP5c0OQAAA8c"]
[Sun Nov 30 11:29:48.772246 2025] [:error] [pid 10608:tid 10639] [client 13.74.149.244:2064] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ini.php"] [unique_id "aSu6LOG4qpknNxmxP5c0OgAAA8I"]
[Sun Nov 30 11:29:49.554287 2025] [:error] [pid 10608:tid 10646] [client 13.74.149.244:18608] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ini.php"] [unique_id "aSu6LeG4qpknNxmxP5c0PAAAA8k"]
[Sun Nov 30 11:29:50.498623 2025] [:error] [pid 9374:tid 9384] [client 13.74.149.244:10719] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ini.php"] [unique_id "aSu6LoEwr5jt_cokVdwbCQAAAwc"]
[Sun Nov 30 11:29:51.204601 2025] [:error] [pid 58704:tid 58709] [client 13.74.149.244:10385] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ini.php"] [unique_id "aSu6L1gCdnbXMzbONnOs3AAAA4I"]
[Sun Nov 30 11:29:51.917263 2025] [:error] [pid 10550:tid 10600] [client 13.74.149.244:13469] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/libraries/legacy/info.php"] [unique_id "aSu6L-l_8Vq2nipf7mH3oQAAApU"]
[Sun Nov 30 11:29:52.626378 2025] [:error] [pid 58704:tid 58714] [client 13.74.149.244:2110] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/libraries/legacy/info.php"] [unique_id "aSu6MFgCdnbXMzbONnOs3wAAA4c"]
[Sun Nov 30 11:29:53.499720 2025] [:error] [pid 58704:tid 58731] [client 13.74.149.244:10211] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/libraries/legacy/info.php"] [unique_id "aSu6MVgCdnbXMzbONnOs4QAAA5g"]
[Sun Nov 30 11:29:54.149244 2025] [:error] [pid 10607:tid 10610] [client 13.74.149.244:3034] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/libraries/legacy/info.php"] [unique_id "aSu6MnMxNFmf1l9xA_FafAAAAsA"]
[Sun Nov 30 11:29:55.452865 2025] [:error] [pid 10518:tid 10535] [client 13.74.149.244:5701] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/themes/include.php"] [unique_id "aSu6Mw8XjrhaEDJ0Rd9wLgAAAU4"]
[Sun Nov 30 11:29:56.210959 2025] [:error] [pid 10518:tid 10526] [client 13.74.149.244:2098] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/themes/include.php"] [unique_id "aSu6NA8XjrhaEDJ0Rd9wMQAAAUU"]
[Sun Nov 30 11:29:56.905994 2025] [:error] [pid 10608:tid 10640] [client 13.74.149.244:1821] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/themes/include.php"] [unique_id "aSu6NOG4qpknNxmxP5c0QAAAA8M"]
[Sun Nov 30 11:29:57.959420 2025] [:error] [pid 58704:tid 58713] [client 13.74.149.244:13858] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/themes/include.php"] [unique_id "aSu6NVgCdnbXMzbONnOs5wAAA4Y"]
[Sun Nov 30 11:29:58.641963 2025] [:error] [pid 58704:tid 58727] [client 13.74.149.244:13177] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/network/about.php"] [unique_id "aSu6NlgCdnbXMzbONnOs6gAAA5Q"]
[Sun Nov 30 11:29:59.322985 2025] [:error] [pid 9694:tid 9716] [client 13.74.149.244:10694] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/network/about.php"] [unique_id "aSu6N8NOaRChkzIC_nUz2wAAANQ"]
[Sun Nov 30 11:30:00.040133 2025] [:error] [pid 10550:tid 10581] [client 13.74.149.244:7345] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/network/about.php"] [unique_id "aSu6OOl_8Vq2nipf7mH3qAAAAoI"]
[Sun Nov 30 11:30:00.857281 2025] [:error] [pid 9374:tid 9384] [client 13.74.149.244:10726] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/network/about.php"] [unique_id "aSu6OIEwr5jt_cokVdwbDwAAAwc"]
[Sun Nov 30 11:30:01.675761 2025] [:error] [pid 58704:tid 58730] [client 13.74.149.244:10422] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/alfa.php"] [unique_id "aSu6OVgCdnbXMzbONnOs7gAAA5c"]
[Sun Nov 30 11:30:02.369180 2025] [:error] [pid 9375:tid 9406] [client 13.74.149.244:2133] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/alfa.php"] [unique_id "aSu6Ot-EkWIUe87KIjOqCAAAA0I"]
[Sun Nov 30 11:30:03.195278 2025] [:error] [pid 9694:tid 9720] [client 13.74.149.244:3432] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/alfa.php"] [unique_id "aSu6O8NOaRChkzIC_nUz4AAAANg"]
[Sun Nov 30 11:30:04.045219 2025] [:error] [pid 9694:tid 9696] [client 13.74.149.244:11291] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/alfa.php"] [unique_id "aSu6PMNOaRChkzIC_nUz4wAAAMA"]
[Sun Nov 30 11:30:04.630254 2025] [:error] [pid 10608:tid 10652] [client 13.74.149.244:2150] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-mail.php/wp-includes/ID3/rk2.php"] [unique_id "aSu6POG4qpknNxmxP5c0RQAAA88"]
[Sun Nov 30 11:30:05.457048 2025] [:error] [pid 9374:tid 9395] [client 13.74.149.244:10745] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-mail.php/wp-includes/ID3/rk2.php"] [unique_id "aSu6PYEwr5jt_cokVdwbEgAAAxI"]
[Sun Nov 30 11:30:06.309463 2025] [:error] [pid 9375:tid 9428] [client 13.74.149.244:3377] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-mail.php/wp-includes/ID3/rk2.php"] [unique_id "aSu6Pt-EkWIUe87KIjOqCwAAA1g"]
[Sun Nov 30 11:30:07.026870 2025] [:error] [pid 9375:tid 9422] [client 13.74.149.244:1818] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-mail.php/wp-includes/ID3/rk2.php"] [unique_id "aSu6P9-EkWIUe87KIjOqDAAAA1I"]
[Sun Nov 30 11:30:07.894399 2025] [:error] [pid 12554:tid 12556] [client 13.74.149.244:4225] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/assets/images/28c5400b0b.php"] [unique_id "aSu6Pz7q_kXd01TaAD8mlwAAAAA"]
[Sun Nov 30 11:30:08.699315 2025] [:error] [pid 9375:tid 9404] [client 13.74.149.244:8334] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/assets/images/28c5400b0b.php"] [unique_id "aSu6QN-EkWIUe87KIjOqDgAAA0A"]
[Sun Nov 30 11:30:09.554383 2025] [:error] [pid 10607:tid 10626] [client 13.74.149.244:6513] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/assets/images/28c5400b0b.php"] [unique_id "aSu6QXMxNFmf1l9xA_FahwAAAtA"]
[Sun Nov 30 11:30:10.324846 2025] [:error] [pid 12554:tid 12557] [client 13.74.149.244:5403] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/assets/images/28c5400b0b.php"] [unique_id "aSu6Qj7q_kXd01TaAD8mnQAAAAE"]
[Sun Nov 30 11:30:11.100527 2025] [:error] [pid 10518:tid 10522] [client 13.74.149.244:8377] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wordpress/wp-includes/wp-config-sample.php"] [unique_id "aSu6Qw8XjrhaEDJ0Rd9wOAAAAUE"]
[Sun Nov 30 11:30:11.898222 2025] [:error] [pid 10608:tid 10640] [client 13.74.149.244:1042] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wordpress/wp-includes/wp-config-sample.php"] [unique_id "aSu6Q-G4qpknNxmxP5c0TQAAA8M"]
[Sun Nov 30 11:30:12.607052 2025] [:error] [pid 9694:tid 9701] [client 13.74.149.244:4269] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wordpress/wp-includes/wp-config-sample.php"] [unique_id "aSu6RMNOaRChkzIC_nUz6wAAAMU"]
[Sun Nov 30 11:30:13.260928 2025] [:error] [pid 10608:tid 10650] [client 13.74.149.244:10966] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wordpress/wp-includes/wp-config-sample.php"] [unique_id "aSu6ReG4qpknNxmxP5c0TgAAA80"]
[Sun Nov 30 11:30:14.278748 2025] [:error] [pid 9694:tid 9714] [client 13.74.149.244:8623] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-mail.php/wp-includes/ID3/.info.php"] [unique_id "aSu6RsNOaRChkzIC_nUz8QAAANI"]
[Sun Nov 30 11:30:15.300081 2025] [:error] [pid 9375:tid 9416] [client 13.74.149.244:2163] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-mail.php/wp-includes/ID3/.info.php"] [unique_id "aSu6R9-EkWIUe87KIjOqEgAAA0w"]
[Sun Nov 30 11:30:16.288969 2025] [:error] [pid 9374:tid 9388] [client 13.74.149.244:1075] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-mail.php/wp-includes/ID3/.info.php"] [unique_id "aSu6SIEwr5jt_cokVdwbGAAAAws"]
[Sun Nov 30 11:30:17.097616 2025] [:error] [pid 58704:tid 58716] [client 13.74.149.244:11988] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-mail.php/wp-includes/ID3/.info.php"] [unique_id "aSu6SVgCdnbXMzbONnOs-wAAA4k"]
[Sun Nov 30 11:30:17.744982 2025] [:error] [pid 9374:tid 9396] [client 13.74.149.244:1103] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aSu6SYEwr5jt_cokVdwbGgAAAxM"]
[Sun Nov 30 11:30:18.822062 2025] [:error] [pid 9374:tid 9383] [client 13.74.149.244:5378] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aSu6SoEwr5jt_cokVdwbHgAAAwY"]
[Sun Nov 30 11:30:19.535598 2025] [:error] [pid 12793:tid 12814] [client 13.74.149.244:3218] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aSu6S8sEgQeCVydJZ0jrtgAAAFM"]
[Sun Nov 30 11:30:20.413533 2025] [:error] [pid 9374:tid 9397] [client 13.74.149.244:8245] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/uploads/classwithtostring.php"] [unique_id "aSu6TIEwr5jt_cokVdwbIQAAAxQ"]
[Sun Nov 30 11:30:21.340476 2025] [:error] [pid 9694:tid 9717] [client 13.74.149.244:8347] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/uploads/classwithtostring.php"] [unique_id "aSu6TcNOaRChkzIC_nUz-wAAANU"]
[Sun Nov 30 11:30:22.226531 2025] [:error] [pid 9694:tid 9715] [client 13.74.149.244:6498] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/uploads/classwithtostring.php"] [unique_id "aSu6TsNOaRChkzIC_nUz_gAAANM"]
[Sun Nov 30 11:30:23.128567 2025] [:error] [pid 9374:tid 9391] [client 13.74.149.244:14568] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/uploads/classwithtostring.php"] [unique_id "aSu6T4Ewr5jt_cokVdwbIgAAAw4"]
[Sun Nov 30 11:30:24.139713 2025] [:error] [pid 9694:tid 9720] [client 13.74.149.244:10982] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/images/install.php"] [unique_id "aSu6UMNOaRChkzIC_nU0AAAAANg"]
[Sun Nov 30 11:30:24.845971 2025] [:error] [pid 12793:tid 12812] [client 13.74.149.244:3795] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/images/install.php"] [unique_id "aSu6UMsEgQeCVydJZ0jrvQAAAFE"]
[Sun Nov 30 11:30:25.721794 2025] [:error] [pid 9694:tid 9696] [client 13.74.149.244:8581] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/images/install.php"] [unique_id "aSu6UcNOaRChkzIC_nU0AgAAAMA"]
[Sun Nov 30 11:30:26.434986 2025] [:error] [pid 10608:tid 10653] [client 13.74.149.244:1026] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/images/install.php"] [unique_id "aSu6UuG4qpknNxmxP5c0WQAAA9A"]
[Sun Nov 30 11:30:27.396768 2025] [:error] [pid 9694:tid 9711] [client 13.74.149.244:6135] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/.well-known/link.php"] [unique_id "aSu6U8NOaRChkzIC_nU0BQAAAM8"]
[Sun Nov 30 11:30:35.476318 2025] [:error] [pid 9374:tid 9381] [client 13.74.149.244:6143] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/assets/about.php"] [unique_id "aSu6W4Ewr5jt_cokVdwbLAAAAwQ"]
[Sun Nov 30 11:30:38.273435 2025] [:error] [pid 9375:tid 9425] [client 13.74.149.244:12892] [client 13.74.149.244] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 13.74.149.244, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/css/colors/ectoplasm/wp-login.php"] [unique_id "aSu6Xt-EkWIUe87KIjOqIgAAA1U"]
[Sun Nov 30 11:30:39.271603 2025] [:error] [pid 9374:tid 9387] [client 13.74.149.244:3814] [client 13.74.149.244] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 13.74.149.244, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/css/colors/ectoplasm/wp-login.php"] [unique_id "aSu6X4Ewr5jt_cokVdwbLwAAAwo"]
[Sun Nov 30 11:30:42.184565 2025] [:error] [pid 9375:tid 9424] [client 13.74.149.244:12892] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/shop/lock.php"] [unique_id "aSu6Yt-EkWIUe87KIjOqJwAAA1Q"]
[Sun Nov 30 11:30:43.087562 2025] [:error] [pid 9375:tid 9428] [client 13.74.149.244:9605] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/shop/lock.php"] [unique_id "aSu6Y9-EkWIUe87KIjOqKAAAA1g"]
[Sun Nov 30 11:30:43.800513 2025] [:error] [pid 12793:tid 12797] [client 13.74.149.244:9977] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/shop/lock.php"] [unique_id "aSu6Y8sEgQeCVydJZ0jrygAAAEI"]
[Sun Nov 30 11:30:44.668462 2025] [:error] [pid 10518:tid 10538] [client 13.74.149.244:3413] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/shop/lock.php"] [unique_id "aSu6ZA8XjrhaEDJ0Rd9wUwAAAVE"]
[Sun Nov 30 11:30:45.552997 2025] [:error] [pid 10550:tid 10599] [client 13.74.149.244:12907] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/th/plugins/phpThumb/404.php"] [unique_id "aSu6Zel_8Vq2nipf7mH3ygAAApQ"]
[Sun Nov 30 11:30:46.256174 2025] [:error] [pid 9374:tid 9388] [client 13.74.149.244:15441] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/th/plugins/phpThumb/404.php"] [unique_id "aSu6ZoEwr5jt_cokVdwbMgAAAws"]
[Sun Nov 30 11:30:46.957253 2025] [:error] [pid 12793:tid 12795] [client 13.74.149.244:14380] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/th/plugins/phpThumb/404.php"] [unique_id "aSu6ZssEgQeCVydJZ0jrywAAAEA"]
[Sun Nov 30 11:30:47.668137 2025] [:error] [pid 9694:tid 9708] [client 13.74.149.244:5186] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/th/plugins/phpThumb/404.php"] [unique_id "aSu6Z8NOaRChkzIC_nU0KwAAAMw"]
[Sun Nov 30 11:30:48.313047 2025] [:error] [pid 10518:tid 10542] [client 13.74.149.244:12869] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/css/dist/preferences/index.php"] [unique_id "aSu6aA8XjrhaEDJ0Rd9wWAAAAVU"]
[Sun Nov 30 11:30:49.086391 2025] [:error] [pid 10518:tid 10526] [client 13.74.149.244:5924] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/files/log.php"] [unique_id "aSu6aQ8XjrhaEDJ0Rd9wWQAAAUU"]
[Sun Nov 30 11:30:50.066807 2025] [:error] [pid 10550:tid 10593] [client 13.74.149.244:7090] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/files/log.php"] [unique_id "aSu6aul_8Vq2nipf7mH3zwAAAo4"]
[Sun Nov 30 11:30:50.707472 2025] [:error] [pid 9694:tid 9696] [client 13.74.149.244:11142] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/files/log.php"] [unique_id "aSu6asNOaRChkzIC_nU0MwAAAMA"]
[Sun Nov 30 11:30:51.609240 2025] [:error] [pid 58704:tid 58726] [client 13.74.149.244:9932] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/files/log.php"] [unique_id "aSu6a1gCdnbXMzbONnOtKgAAA5M"]
[Sun Nov 30 11:30:52.573443 2025] [:error] [pid 10518:tid 10527] [client 13.74.149.244:13592] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/html-api/index.php"] [unique_id "aSu6bA8XjrhaEDJ0Rd9wXAAAAUY"]
[Sun Nov 30 11:30:53.357652 2025] [:error] [pid 58704:tid 58715] [client 13.74.149.244:8098] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/x.php"] [unique_id "aSu6bVgCdnbXMzbONnOtMAAAA4g"]
[Sun Nov 30 11:30:54.167538 2025] [:error] [pid 9375:tid 9414] [client 13.74.149.244:5187] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/x.php"] [unique_id "aSu6bt-EkWIUe87KIjOqaQAAA0o"]
[Sun Nov 30 11:30:55.790108 2025] [:error] [pid 9694:tid 9696] [client 13.74.149.244:3393] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/x.php"] [unique_id "aSu6b8NOaRChkzIC_nU0QQAAAMA"]
[Sun Nov 30 11:30:56.567348 2025] [:error] [pid 58704:tid 58721] [client 13.74.149.244:14342] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/x.php"] [unique_id "aSu6cFgCdnbXMzbONnOtOwAAA44"]
[Sun Nov 30 11:30:57.329972 2025] [:error] [pid 9694:tid 9708] [client 13.74.149.244:1290] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/assets/index.php"] [unique_id "aSu6ccNOaRChkzIC_nU0RgAAAMw"]
[Sun Nov 30 11:30:58.070308 2025] [:error] [pid 10607:tid 10628] [client 13.74.149.244:1941] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/block-patterns/vuln.php"] [unique_id "aSu6cnMxNFmf1l9xA_FaqwAAAtI"]
[Sun Nov 30 11:30:58.755776 2025] [:error] [pid 9375:tid 9420] [client 13.74.149.244:15458] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/rest-api/fields/index.php"] [unique_id "aSu6ct-EkWIUe87KIjOqbgAAA1A"]
[Sun Nov 30 11:30:59.619441 2025] [:error] [pid 12554:tid 12562] [client 13.74.149.244:7689] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aSu6cz7q_kXd01TaAD8mvgAAAAY"]
[Sun Nov 30 11:31:00.349317 2025] [:error] [pid 9694:tid 9706] [client 13.74.149.244:11421] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/uploads/autoload_classmap.php"] [unique_id "aSu6dMNOaRChkzIC_nU0SQAAAMo"]
[Sun Nov 30 11:31:01.298819 2025] [:error] [pid 12793:tid 12807] [client 13.74.149.244:5227] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/uploads/autoload_classmap.php"] [unique_id "aSu6dcsEgQeCVydJZ0jrzAAAAEw"]
[Sun Nov 30 11:31:02.148623 2025] [:error] [pid 9374:tid 9378] [client 13.74.149.244:1963] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/uploads/autoload_classmap.php"] [unique_id "aSu6doEwr5jt_cokVdwbPAAAAwE"]
[Sun Nov 30 11:31:03.095098 2025] [:error] [pid 58704:tid 58719] [client 13.74.149.244:7076] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/images/404.php"] [unique_id "aSu6d1gCdnbXMzbONnOtRQAAA4w"]
[Sun Nov 30 11:31:03.912186 2025] [:error] [pid 58704:tid 58726] [client 13.74.149.244:5290] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/images/404.php"] [unique_id "aSu6d1gCdnbXMzbONnOtRwAAA5M"]
[Sun Nov 30 11:31:04.754556 2025] [:error] [pid 10607:tid 10615] [client 13.74.149.244:14151] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/images/404.php"] [unique_id "aSu6eHMxNFmf1l9xA_FarQAAAsU"]
[Sun Nov 30 11:31:05.417954 2025] [:error] [pid 10607:tid 10626] [client 13.74.149.244:5220] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/images/404.php"] [unique_id "aSu6eXMxNFmf1l9xA_FargAAAtA"]
[Sun Nov 30 11:31:06.162713 2025] [:error] [pid 10607:tid 10624] [client 13.74.149.244:12176] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/languages/asus.php"] [unique_id "aSu6enMxNFmf1l9xA_FasgAAAs4"]
[Sun Nov 30 11:31:06.908459 2025] [:error] [pid 9694:tid 9710] [client 13.74.149.244:5253] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/languages/asus.php"] [unique_id "aSu6esNOaRChkzIC_nU0TQAAAM4"]
[Sun Nov 30 11:31:07.935229 2025] [:error] [pid 12793:tid 12800] [client 13.74.149.244:7715] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/languages/asus.php"] [unique_id "aSu6e8sEgQeCVydJZ0jrzwAAAEU"]
[Sun Nov 30 11:31:08.942516 2025] [:error] [pid 9374:tid 9395] [client 13.74.149.244:12160] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/languages/asus.php"] [unique_id "aSu6fIEwr5jt_cokVdwbQgAAAxI"]
[Sun Nov 30 11:31:09.739751 2025] [:error] [pid 9694:tid 9707] [client 13.74.149.244:9882] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/admin.php"] [unique_id "aSu6fcNOaRChkzIC_nU0UgAAAMs"]
[Sun Nov 30 11:31:10.877945 2025] [:error] [pid 12554:tid 12569] [client 13.74.149.244:14218] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/admin.php"] [unique_id "aSu6fj7q_kXd01TaAD8mxAAAAA0"]
[Sun Nov 30 11:31:11.702699 2025] [:error] [pid 12793:tid 12799] [client 13.74.149.244:15058] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/admin.php"] [unique_id "aSu6f8sEgQeCVydJZ0jr1AAAAEQ"]
[Sun Nov 30 11:31:12.436774 2025] [:error] [pid 12793:tid 12798] [client 13.74.149.244:11081] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/admin.php"] [unique_id "aSu6gMsEgQeCVydJZ0jr1gAAAEM"]
[Sun Nov 30 11:31:13.195053 2025] [:error] [pid 10518:tid 10532] [client 13.74.149.244:8138] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/.well-known/pki-validation/parx.php"] [unique_id "aSu6gQ8XjrhaEDJ0Rd9wYwAAAUs"]
[Sun Nov 30 11:31:13.908828 2025] [:error] [pid 12554:tid 12568] [client 13.74.149.244:3045] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/.well-known/pki-validation/parx.php"] [unique_id "aSu6gT7q_kXd01TaAD8mzQAAAAw"]
[Sun Nov 30 11:31:14.625556 2025] [:error] [pid 10550:tid 10589] [client 13.74.149.244:9611] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/.well-known/pki-validation/parx.php"] [unique_id "aSu6gul_8Vq2nipf7mH33AAAAoo"]
[Sun Nov 30 11:31:15.597196 2025] [:error] [pid 10550:tid 10591] [client 13.74.149.244:11400] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/.well-known/pki-validation/parx.php"] [unique_id "aSu6g-l_8Vq2nipf7mH33wAAAow"]
[Sun Nov 30 11:31:16.365347 2025] [:error] [pid 12554:tid 12579] [client 13.74.149.244:14259] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aSu6hD7q_kXd01TaAD8mzwAAABc"]
[Sun Nov 30 11:31:17.217335 2025] [:error] [pid 10608:tid 10650] [client 13.74.149.244:6562] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aSu6heG4qpknNxmxP5c0fAAAA80"]
[Sun Nov 30 11:31:17.919773 2025] [:error] [pid 9374:tid 9393] [client 13.74.149.244:8260] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aSu6hYEwr5jt_cokVdwbRgAAAxA"]
[Sun Nov 30 11:31:18.710464 2025] [:error] [pid 9374:tid 9381] [client 13.74.149.244:14002] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aSu6hoEwr5jt_cokVdwbRwAAAwQ"]
[Sun Nov 30 11:31:19.492863 2025] [:error] [pid 58704:tid 58716] [client 13.74.149.244:1865] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/12wudscz.php"] [unique_id "aSu6h1gCdnbXMzbONnOtTwAAA4k"]
[Sun Nov 30 11:31:20.376527 2025] [:error] [pid 9375:tid 9410] [client 13.74.149.244:7961] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/12wudscz.php"] [unique_id "aSu6iN-EkWIUe87KIjOqeQAAA0Y"]
[Sun Nov 30 11:31:21.119477 2025] [:error] [pid 9375:tid 9428] [client 13.74.149.244:11880] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/12wudscz.php"] [unique_id "aSu6id-EkWIUe87KIjOqfAAAA1g"]
[Sun Nov 30 11:31:21.899883 2025] [:error] [pid 10518:tid 10545] [client 13.74.149.244:7675] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/12wudscz.php"] [unique_id "aSu6iQ8XjrhaEDJ0Rd9wcgAAAVg"]
[Sun Nov 30 11:31:22.698171 2025] [:error] [pid 10518:tid 10538] [client 13.74.149.244:10585] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/themes/wp-pridmag/admin.php"] [unique_id "aSu6ig8XjrhaEDJ0Rd9wcwAAAVE"]
[Sun Nov 30 11:31:23.281320 2025] [:error] [pid 9375:tid 9411] [client 13.74.149.244:7709] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/themes/wp-pridmag/admin.php"] [unique_id "aSu6i9-EkWIUe87KIjOqgwAAA0c"]
[Sun Nov 30 11:31:23.946073 2025] [:error] [pid 9694:tid 9709] [client 13.74.149.244:7708] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/themes/wp-pridmag/admin.php"] [unique_id "aSu6i8NOaRChkzIC_nU0XAAAAM0"]
[Sun Nov 30 11:31:24.761315 2025] [:error] [pid 10607:tid 10634] [client 13.74.149.244:4541] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/themes/wp-pridmag/admin.php"] [unique_id "aSu6jHMxNFmf1l9xA_FaugAAAtg"]
[Sun Nov 30 11:31:25.802156 2025] [:error] [pid 9374:tid 9400] [client 13.74.149.244:7670] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aSu6jYEwr5jt_cokVdwbVgAAAxc"]
[Sun Nov 30 11:31:26.580288 2025] [:error] [pid 12554:tid 12568] [client 13.74.149.244:10611] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/background-image-cropper/plugins.php"] [unique_id "aSu6jj7q_kXd01TaAD8m1gAAAAw"]
[Sun Nov 30 11:31:27.464482 2025] [:error] [pid 12554:tid 12578] [client 13.74.149.244:8294] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/background-image-cropper/plugins.php"] [unique_id "aSu6jz7q_kXd01TaAD8m2QAAABY"]
[Sun Nov 30 11:31:28.299526 2025] [:error] [pid 9375:tid 9408] [client 13.74.149.244:7683] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/background-image-cropper/plugins.php"] [unique_id "aSu6kN-EkWIUe87KIjOqiAAAA0Q"]
[Sun Nov 30 11:31:29.069182 2025] [:error] [pid 9694:tid 9719] [client 13.74.149.244:9631] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/classwithtostring.php"] [unique_id "aSu6kcNOaRChkzIC_nU0YQAAANc"]
[Sun Nov 30 11:31:29.866838 2025] [:error] [pid 9375:tid 9424] [client 13.74.149.244:2987] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/classwithtostring.php"] [unique_id "aSu6kd-EkWIUe87KIjOqiwAAA1Q"]
[Sun Nov 30 11:31:30.618567 2025] [:error] [pid 10607:tid 10610] [client 13.74.149.244:2995] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/classwithtostring.php"] [unique_id "aSu6knMxNFmf1l9xA_FayQAAAsA"]
[Sun Nov 30 11:31:31.229836 2025] [:error] [pid 10607:tid 10614] [client 13.74.149.244:12580] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/classwithtostring.php"] [unique_id "aSu6k3MxNFmf1l9xA_FaygAAAsQ"]
[Sun Nov 30 11:31:31.925568 2025] [:error] [pid 10608:tid 10638] [client 13.74.149.244:12569] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/Text/Diff/Renderer/wp-login.php"] [unique_id "aSu6k-G4qpknNxmxP5c0kgAAA8E"]
[Sun Nov 30 11:31:32.622383 2025] [:error] [pid 12793:tid 12812] [client 13.74.149.244:7653] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/images/users.php"] [unique_id "aSu6lMsEgQeCVydJZ0jr3gAAAFE"]
[Sun Nov 30 11:31:33.516061 2025] [:error] [pid 9694:tid 9706] [client 13.74.149.244:6675] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/images/users.php"] [unique_id "aSu6lcNOaRChkzIC_nU0ZAAAAMo"]
[Sun Nov 30 11:31:34.240965 2025] [:error] [pid 10607:tid 10633] [client 13.74.149.244:2208] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/images/users.php"] [unique_id "aSu6lnMxNFmf1l9xA_FazwAAAtc"]
[Sun Nov 30 11:31:34.979939 2025] [:error] [pid 10607:tid 10619] [client 13.74.149.244:5956] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aSu6lnMxNFmf1l9xA_Fa0gAAAsk"]
[Sun Nov 30 11:31:35.680664 2025] [:error] [pid 10608:tid 10645] [client 13.74.149.244:2204] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/random_compat/about.php"] [unique_id "aSu6l-G4qpknNxmxP5c0nAAAA8g"]
[Sun Nov 30 11:31:36.484879 2025] [:error] [pid 58704:tid 58717] [client 13.74.149.244:13918] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/index/about.php"] [unique_id "aSu6mFgCdnbXMzbONnOtWwAAA4o"]
[Sun Nov 30 11:31:37.327734 2025] [:error] [pid 10607:tid 10614] [client 13.74.149.244:12664] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/index/about.php"] [unique_id "aSu6mXMxNFmf1l9xA_Fa1gAAAsQ"]
[Sun Nov 30 11:31:38.063964 2025] [:error] [pid 9374:tid 9379] [client 13.74.149.244:3266] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/index/about.php"] [unique_id "aSu6moEwr5jt_cokVdwbWAAAAwI"]
[Sun Nov 30 11:31:38.725351 2025] [:error] [pid 9374:tid 9391] [client 13.74.149.244:2177] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/index/about.php"] [unique_id "aSu6moEwr5jt_cokVdwbWgAAAw4"]
[Sun Nov 30 11:31:39.581584 2025] [:error] [pid 58704:tid 58720] [client 13.74.149.244:10102] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/manager.php"] [unique_id "aSu6m1gCdnbXMzbONnOtYQAAA40"]
[Sun Nov 30 11:31:40.374663 2025] [:error] [pid 58704:tid 58716] [client 13.74.149.244:1190] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/manager.php"] [unique_id "aSu6nFgCdnbXMzbONnOtYgAAA4k"]
[Sun Nov 30 11:31:55.127995 2025] [:error] [pid 10518:tid 10542] [client 13.74.149.244:4677] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/includes/index.php"] [unique_id "aSu6qw8XjrhaEDJ0Rd9wpAAAAVU"]
[Sun Nov 30 11:31:56.241305 2025] [:error] [pid 9374:tid 9393] [client 13.74.149.244:10312] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/includes/index.php"] [unique_id "aSu6rIEwr5jt_cokVdwbcQAAAxA"]
[Sun Nov 30 11:31:56.877122 2025] [:error] [pid 58704:tid 58731] [client 13.74.149.244:12237] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/includes/index.php"] [unique_id "aSu6rFgCdnbXMzbONnOtggAAA5g"]
[Sun Nov 30 11:31:57.669019 2025] [:error] [pid 9694:tid 9699] [client 13.74.149.244:7288] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/includes/index.php"] [unique_id "aSu6rcNOaRChkzIC_nU0fQAAAMM"]
[Sun Nov 30 11:31:58.527051 2025] [:error] [pid 58704:tid 58717] [client 13.74.149.244:13491] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/SimplePie/Cache/content.php"] [unique_id "aSu6rlgCdnbXMzbONnOthQAAA4o"]
[Sun Nov 30 11:31:59.820837 2025] [:error] [pid 58704:tid 58710] [client 13.74.149.244:2677] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/themes/xmrlpc.php"] [unique_id "aSu6r1gCdnbXMzbONnOtiQAAA4M"]
[Sun Nov 30 11:32:00.977505 2025] [:error] [pid 9694:tid 9697] [client 13.74.149.244:10344] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/themes/xmrlpc.php"] [unique_id "aSu6sMNOaRChkzIC_nU0gwAAAME"]
[Sun Nov 30 11:32:02.272704 2025] [:error] [pid 10607:tid 10610] [client 13.74.149.244:4609] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/themes/xmrlpc.php"] [unique_id "aSu6snMxNFmf1l9xA_Fa_AAAAsA"]
[Sun Nov 30 11:32:03.383751 2025] [:error] [pid 10550:tid 10594] [client 13.74.149.244:13307] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/themes/xmrlpc.php"] [unique_id "aSu6s-l_8Vq2nipf7mH4BAAAAo8"]
[Sun Nov 30 11:32:05.158818 2025] [:error] [pid 9374:tid 9387] [client 13.74.149.244:9619] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/js/wp-login.php"] [unique_id "aSu6tYEwr5jt_cokVdwbdQAAAwo"]
[Sun Nov 30 11:32:06.124729 2025] [:error] [pid 9374:tid 9396] [client 13.74.149.244:6647] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-mail.php/wp-includes/ID3/taptap-null.php"] [unique_id "aSu6toEwr5jt_cokVdwbdgAAAxM"]
[Sun Nov 30 11:32:06.737599 2025] [:error] [pid 10608:tid 10652] [client 13.74.149.244:9131] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-mail.php/wp-includes/ID3/taptap-null.php"] [unique_id "aSu6tuG4qpknNxmxP5c0wAAAA88"]
[Sun Nov 30 11:32:07.704903 2025] [:error] [pid 10607:tid 10610] [client 13.74.149.244:13200] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-mail.php/wp-includes/ID3/taptap-null.php"] [unique_id "aSu6t3MxNFmf1l9xA_FbAgAAAsA"]
[Sun Nov 30 11:32:08.445054 2025] [:error] [pid 10608:tid 10648] [client 13.74.149.244:2773] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-mail.php/wp-includes/ID3/taptap-null.php"] [unique_id "aSu6uOG4qpknNxmxP5c0wwAAA8s"]
[Sun Nov 30 11:32:09.635857 2025] [:error] [pid 58704:tid 58708] [client 13.74.149.244:10254] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/.well-known/as.php"] [unique_id "aSu6uVgCdnbXMzbONnOtjwAAA4E"]
[Sun Nov 30 11:32:10.762618 2025] [:error] [pid 58704:tid 58731] [client 13.74.149.244:11721] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/.well-known/as.php"] [unique_id "aSu6ulgCdnbXMzbONnOtkAAAA5g"]
[Sun Nov 30 11:32:11.797041 2025] [:error] [pid 10607:tid 10619] [client 13.74.149.244:2625] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/.well-known/as.php"] [unique_id "aSu6u3MxNFmf1l9xA_FbBwAAAsk"]
[Sun Nov 30 11:32:12.745889 2025] [:error] [pid 10550:tid 10599] [client 13.74.149.244:2753] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/.well-known/as.php"] [unique_id "aSu6vOl_8Vq2nipf7mH4CQAAApQ"]
[Sun Nov 30 11:32:13.761635 2025] [:error] [pid 58704:tid 58707] [client 13.74.149.244:9105] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/customize/wp-login.php"] [unique_id "aSu6vVgCdnbXMzbONnOtkwAAA4A"]
[Sun Nov 30 11:32:14.562274 2025] [:error] [pid 9374:tid 9400] [client 13.74.149.244:4144] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/.well-known/lv.php"] [unique_id "aSu6voEwr5jt_cokVdwbeAAAAxc"]
[Sun Nov 30 11:32:15.523108 2025] [:error] [pid 58704:tid 58724] [client 13.74.149.244:7197] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/.well-known/lv.php"] [unique_id "aSu6v1gCdnbXMzbONnOtlgAAA5E"]
[Sun Nov 30 11:32:16.582416 2025] [:error] [pid 10518:tid 10528] [client 13.74.149.244:9091] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/.well-known/lv.php"] [unique_id "aSu6wA8XjrhaEDJ0Rd9wsQAAAUc"]
[Sun Nov 30 11:32:17.718125 2025] [:error] [pid 9694:tid 9702] [client 13.74.149.244:4101] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/.well-known/lv.php"] [unique_id "aSu6wcNOaRChkzIC_nU0jwAAAMY"]
[Sun Nov 30 11:32:18.531233 2025] [:error] [pid 9374:tid 9401] [client 13.74.149.244:4097] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/themes.php"] [unique_id "aSu6woEwr5jt_cokVdwbeQAAAxg"]
[Sun Nov 30 11:32:19.186679 2025] [:error] [pid 12793:tid 12795] [client 13.74.149.244:13260] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/themes.php"] [unique_id "aSu6w8sEgQeCVydJZ0jr_gAAAEA"]
[Sun Nov 30 11:32:19.981245 2025] [:error] [pid 10518:tid 10544] [client 13.74.149.244:12400] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/themes.php"] [unique_id "aSu6ww8XjrhaEDJ0Rd9wswAAAVc"]
[Sun Nov 30 11:32:21.108511 2025] [:error] [pid 9694:tid 9717] [client 13.74.149.244:1543] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/themes.php"] [unique_id "aSu6xcNOaRChkzIC_nU0lAAAANU"]
[Sun Nov 30 11:32:22.315467 2025] [:error] [pid 12793:tid 12807] [client 13.74.149.244:13272] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/duplicator/assets/about.php"] [unique_id "aSu6xssEgQeCVydJZ0jr_wAAAEw"]
[Sun Nov 30 11:32:23.187814 2025] [:error] [pid 10518:tid 10531] [client 13.74.149.244:6351] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/duplicator/assets/about.php"] [unique_id "aSu6xw8XjrhaEDJ0Rd9wtwAAAUo"]
[Sun Nov 30 11:32:24.083749 2025] [:error] [pid 9374:tid 9378] [client 13.74.149.244:12380] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/duplicator/assets/about.php"] [unique_id "aSu6yIEwr5jt_cokVdwbgAAAAwE"]
[Sun Nov 30 11:32:24.935047 2025] [:error] [pid 12793:tid 12804] [client 13.74.149.244:13185] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/duplicator/assets/about.php"] [unique_id "aSu6yMsEgQeCVydJZ0jsAQAAAEk"]
[Sun Nov 30 11:32:25.835131 2025] [:error] [pid 10608:tid 10651] [client 13.74.149.244:15798] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/network/upfile.php"] [unique_id "aSu6yeG4qpknNxmxP5c00QAAA84"]
[Sun Nov 30 11:32:26.458660 2025] [:error] [pid 10608:tid 10649] [client 13.74.149.244:5362] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/network/upfile.php"] [unique_id "aSu6yuG4qpknNxmxP5c00gAAA8w"]
[Sun Nov 30 11:32:27.214924 2025] [:error] [pid 58704:tid 58717] [client 13.74.149.244:3893] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/network/upfile.php"] [unique_id "aSu6y1gCdnbXMzbONnOtpQAAA4o"]
[Sun Nov 30 11:32:27.964344 2025] [:error] [pid 58704:tid 58713] [client 13.74.149.244:10247] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/network/upfile.php"] [unique_id "aSu6y1gCdnbXMzbONnOtqAAAA4Y"]
[Sun Nov 30 11:32:29.094614 2025] [:error] [pid 10550:tid 10594] [client 13.74.149.244:5375] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/index.php"] [unique_id "aSu6zel_8Vq2nipf7mH4CwAAAo8"]
[Sun Nov 30 11:32:30.071903 2025] [:error] [pid 58704:tid 58725] [client 13.74.149.244:3873] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/index.php"] [unique_id "aSu6zlgCdnbXMzbONnOtqwAAA5I"]
[Sun Nov 30 11:32:31.113854 2025] [:error] [pid 58704:tid 58724] [client 13.74.149.244:11768] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/index.php"] [unique_id "aSu6z1gCdnbXMzbONnOtrgAAA5E"]
[Sun Nov 30 11:32:32.328005 2025] [:error] [pid 58704:tid 58709] [client 13.74.149.244:7192] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/index.php"] [unique_id "aSu60FgCdnbXMzbONnOtsQAAA4I"]
[Sun Nov 30 11:32:33.362274 2025] [:error] [pid 12793:tid 12819] [client 13.74.149.244:7203] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/sitemaps/providers/about.php"] [unique_id "aSu60csEgQeCVydJZ0jsBQAAAFg"]
[Sun Nov 30 11:32:34.277212 2025] [:error] [pid 10550:tid 10584] [client 13.74.149.244:13401] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/upgrade/autoload_classmap.php"] [unique_id "aSu60ul_8Vq2nipf7mH4EgAAAoU"]
[Sun Nov 30 11:32:34.988790 2025] [:error] [pid 58704:tid 58712] [client 13.74.149.244:12144] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/upgrade/autoload_classmap.php"] [unique_id "aSu60lgCdnbXMzbONnOttQAAA4U"]
[Sun Nov 30 11:32:35.669172 2025] [:error] [pid 58704:tid 58715] [client 13.74.149.244:12134] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/upgrade/autoload_classmap.php"] [unique_id "aSu601gCdnbXMzbONnOttwAAA4g"]
[Sun Nov 30 11:32:36.371456 2025] [:error] [pid 10608:tid 10648] [client 13.74.149.244:11641] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/upgrade/autoload_classmap.php"] [unique_id "aSu61OG4qpknNxmxP5c02AAAA8s"]
[Sun Nov 30 11:32:37.180722 2025] [:error] [pid 58704:tid 58731] [client 13.74.149.244:7186] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/images/cjfuns.php"] [unique_id "aSu61VgCdnbXMzbONnOtuwAAA5g"]
[Sun Nov 30 11:32:37.998700 2025] [:error] [pid 10550:tid 10592] [client 13.74.149.244:1547] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/images/cjfuns.php"] [unique_id "aSu61el_8Vq2nipf7mH4FAAAAo0"]
[Sun Nov 30 11:32:38.923061 2025] [:error] [pid 10550:tid 10595] [client 13.74.149.244:13419] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/images/cjfuns.php"] [unique_id "aSu61ul_8Vq2nipf7mH4GQAAApA"]
[Sun Nov 30 11:32:39.592271 2025] [:error] [pid 10518:tid 10539] [client 13.74.149.244:6358] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/images/cjfuns.php"] [unique_id "aSu61w8XjrhaEDJ0Rd9wvwAAAVI"]
[Sun Nov 30 11:32:40.587633 2025] [:error] [pid 10518:tid 10529] [client 13.74.149.244:3146] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/sodium_compat/src/content.php"] [unique_id "aSu62A8XjrhaEDJ0Rd9wwQAAAUg"]
[Sun Nov 30 11:32:41.434220 2025] [:error] [pid 10608:tid 10644] [client 13.74.149.244:6368] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/rest-api/admin.php"] [unique_id "aSu62eG4qpknNxmxP5c03wAAA8c"]
[Sun Nov 30 11:32:42.327240 2025] [:error] [pid 10608:tid 10647] [client 13.74.149.244:6871] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/js/crop/zmFM.php"] [unique_id "aSu62uG4qpknNxmxP5c04QAAA8o"]
[Sun Nov 30 11:32:43.314166 2025] [:error] [pid 10607:tid 10612] [client 13.74.149.244:3175] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-2019.php"] [unique_id "aSu623MxNFmf1l9xA_FbDwAAAsI"]
[Sun Nov 30 11:32:44.327122 2025] [:error] [pid 12554:tid 12559] [client 13.74.149.244:2472] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-2019.php"] [unique_id "aSu63D7q_kXd01TaAD8nBwAAAAM"]
[Sun Nov 30 11:32:45.279729 2025] [:error] [pid 10550:tid 10591] [client 13.74.149.244:12744] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-2019.php"] [unique_id "aSu63el_8Vq2nipf7mH4IQAAAow"]
[Sun Nov 30 11:32:46.434872 2025] [:error] [pid 9374:tid 9379] [client 13.74.149.244:3726] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-2019.php"] [unique_id "aSu63oEwr5jt_cokVdwbkAAAAwI"]
[Sun Nov 30 11:32:47.183235 2025] [:error] [pid 10608:tid 10657] [client 13.74.149.244:11607] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/js/about.php"] [unique_id "aSu63-G4qpknNxmxP5c05wAAA9Q"]
[Sun Nov 30 11:32:47.990723 2025] [:error] [pid 9374:tid 9377] [client 13.74.149.244:15749] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugin.php"] [unique_id "aSu634Ewr5jt_cokVdwbkQAAAwA"]
[Sun Nov 30 11:32:48.939029 2025] [:error] [pid 9374:tid 9383] [client 13.74.149.244:8518] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugin.php"] [unique_id "aSu64IEwr5jt_cokVdwbkgAAAwY"]
[Sun Nov 30 11:32:49.685956 2025] [:error] [pid 12793:tid 12809] [client 13.74.149.244:4763] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugin.php"] [unique_id "aSu64csEgQeCVydJZ0jsFgAAAE4"]
[Sun Nov 30 11:32:50.711874 2025] [:error] [pid 9694:tid 9710] [client 13.74.149.244:15335] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/js/widgets/xmrlpc.php"] [unique_id "aSu64sNOaRChkzIC_nU0pAAAAM4"]
[Sun Nov 30 11:32:51.591796 2025] [:error] [pid 58704:tid 58714] [client 13.74.149.244:13376] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/js/widgets/xmrlpc.php"] [unique_id "aSu641gCdnbXMzbONnOtxAAAA4c"]
[Sun Nov 30 11:32:52.599076 2025] [:error] [pid 58704:tid 58719] [client 13.74.149.244:3739] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/js/widgets/xmrlpc.php"] [unique_id "aSu65FgCdnbXMzbONnOtyAAAA4w"]
[Sun Nov 30 11:32:53.251117 2025] [:error] [pid 58704:tid 58712] [client 13.74.149.244:11695] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/js/widgets/xmrlpc.php"] [unique_id "aSu65VgCdnbXMzbONnOtywAAA4U"]
[Sun Nov 30 11:32:57.450131 2025] [:error] [pid 12554:tid 12564] [client 13.74.149.244:15236] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/Text/wp.php"] [unique_id "aSu66T7q_kXd01TaAD8nFAAAAAg"]
[Sun Nov 30 11:33:00.414116 2025] [:error] [pid 58704:tid 58724] [client 13.74.149.244:10637] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/block-supports/about.php"] [unique_id "aSu67FgCdnbXMzbONnOt2AAAA5E"]
[Sun Nov 30 11:33:03.402672 2025] [:error] [pid 9374:tid 9377] [client 13.74.149.244:5856] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/images/chosen.php"] [unique_id "aSu674Ewr5jt_cokVdwbngAAAwA"]
[Sun Nov 30 11:33:04.209283 2025] [proxy_fcgi:error] [pid 10550:tid 10585] [client 13.74.149.244:12543] AH01071: Got error 'Primary script unknown'
[Sun Nov 30 11:33:04.494151 2025] [:error] [pid 10550:tid 10581] [client 13.74.149.244:12543] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/sodium_compat/src/Core32/Curve25519/Ge/about.php"] [unique_id "aSu68Ol_8Vq2nipf7mH4LgAAAoI"]
[Sun Nov 30 11:33:09.900607 2025] [:error] [pid 9694:tid 9713] [client 13.74.149.244:10302] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/languages/index.php"] [unique_id "aSu69cNOaRChkzIC_nU0tgAAANE"]
[Sun Nov 30 11:33:10.859971 2025] [:error] [pid 58704:tid 58707] [client 13.74.149.244:1384] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/languages/index.php"] [unique_id "aSu69lgCdnbXMzbONnOt4QAAA4A"]
[Sun Nov 30 11:33:11.938667 2025] [:error] [pid 9694:tid 9700] [client 13.74.149.244:6730] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/languages/index.php"] [unique_id "aSu698NOaRChkzIC_nU0vQAAAMQ"]
[Sun Nov 30 11:33:12.884693 2025] [:error] [pid 10550:tid 10603] [client 13.74.149.244:14610] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/languages/index.php"] [unique_id "aSu6-Ol_8Vq2nipf7mH4NQAAApg"]
[Sun Nov 30 11:33:13.676361 2025] [:error] [pid 9694:tid 9697] [client 13.74.149.244:2735] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/network.php"] [unique_id "aSu6-cNOaRChkzIC_nU0xQAAAME"]
[Sun Nov 30 11:33:14.442469 2025] [:error] [pid 9694:tid 9720] [client 13.74.149.244:10759] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/network.php"] [unique_id "aSu6-sNOaRChkzIC_nU0xwAAANg"]
[Sun Nov 30 11:33:15.712336 2025] [:error] [pid 9375:tid 9419] [client 13.74.149.244:15205] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/network.php"] [unique_id "aSu6-9-EkWIUe87KIjOq5gAAA08"]
[Sun Nov 30 11:33:16.498862 2025] [:error] [pid 9694:tid 9703] [client 13.74.149.244:15188] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/network.php"] [unique_id "aSu6_MNOaRChkzIC_nU0zAAAAMc"]
[Sun Nov 30 11:33:17.466128 2025] [:error] [pid 12554:tid 12572] [client 13.74.149.244:10624] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/css/colors/blue/wp-login.php"] [unique_id "aSu6_T7q_kXd01TaAD8nKAAAABA"]
[Sun Nov 30 11:33:18.275710 2025] [:error] [pid 9374:tid 9394] [client 13.74.149.244:11711] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/css/colors/blue/wp-login.php"] [unique_id "aSu6_oEwr5jt_cokVdwbqQAAAxE"]
[Sun Nov 30 11:33:19.261277 2025] [:error] [pid 9375:tid 9404] [client 13.74.149.244:7504] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/css/colors/blue/wp-login.php"] [unique_id "aSu6_9-EkWIUe87KIjOq7gAAA0A"]
[Sun Nov 30 11:33:20.347470 2025] [:error] [pid 9694:tid 9715] [client 13.74.149.244:1426] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/css/colors/blue/wp-login.php"] [unique_id "aSu7AMNOaRChkzIC_nU00wAAANM"]
[Sun Nov 30 11:34:28.462314 2025] [:error] [pid 10550:tid 10596] [client 13.74.149.244:8911] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/Requests/Response/wp-login.php"] [unique_id "aSu7ROl_8Vq2nipf7mH4fAAAApE"]
[Sun Nov 30 11:34:31.526682 2025] [:error] [pid 10550:tid 10600] [client 13.74.149.244:4279] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/SimplePie/Cache/about.php"] [unique_id "aSu7R-l_8Vq2nipf7mH4gQAAApU"]
[Sun Nov 30 11:34:32.757370 2025] [:error] [pid 9694:tid 9707] [client 13.74.149.244:6143] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/sodium_compat/src/alfa-rex.php"] [unique_id "aSu7SMNOaRChkzIC_nU1mAAAAMs"]
[Sun Nov 30 11:34:35.658035 2025] [autoindex:error] [pid 12554:tid 12576] [client 13.74.149.244:1682] AH01276: Cannot serve directory /home/baldivis/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 30 11:34:36.911806 2025] [:error] [pid 58704:tid 58712] [client 13.74.149.244:13078] [client 13.74.149.244] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 13.74.149.244, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/revslider/public/assets/assets/sources/wp-login.php"] [unique_id "aSu7TFgCdnbXMzbONnOuVwAAA4U"]
[Sun Nov 30 11:34:37.917312 2025] [:error] [pid 12554:tid 12575] [client 13.74.149.244:1682] [client 13.74.149.244] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 13.74.149.244, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/revslider/public/assets/assets/sources/wp-login.php"] [unique_id "aSu7TT7q_kXd01TaAD8nZgAAABM"]
[Sun Nov 30 11:34:40.040104 2025] [:error] [pid 12554:tid 12579] [client 13.74.149.244:1682] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 11"] [hostname "paramountbaldivis.com"] [uri "/wp.php"] [unique_id "aSu7UD7q_kXd01TaAD8nZwAAABc"]
[Sun Nov 30 11:34:40.290785 2025] [:error] [pid 58704:tid 58720] [client 13.74.149.244:13078] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 11"] [hostname "paramountbaldivis.com"] [uri "/wp-content/themes/file.php"] [unique_id "aSu7UFgCdnbXMzbONnOuWgAAA40"]
[Sun Nov 30 11:34:41.186077 2025] [:error] [pid 58704:tid 58709] [client 13.74.149.244:9599] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 11"] [hostname "paramountbaldivis.com"] [uri "/css/item.php"] [unique_id "aSu7UVgCdnbXMzbONnOuXAAAA4I"]
[Sun Nov 30 11:34:42.097856 2025] [:error] [pid 9374:tid 9382] [client 13.74.149.244:3356] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 11"] [hostname "paramountbaldivis.com"] [uri "/wp-content/uploads/2020/admin.php"] [unique_id "aSu7UoEwr5jt_cokVdwcIwAAAwU"]
[Sun Nov 30 11:34:42.951833 2025] [:error] [pid 9694:tid 9713] [client 13.74.149.244:3339] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 11"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "aSu7UsNOaRChkzIC_nU1ogAAANE"]
[Sun Nov 30 11:34:43.803158 2025] [:error] [pid 9375:tid 9406] [client 13.74.149.244:4324] [client 13.74.149.244] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 13.74.149.244, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/assets/images/wp-login.php"] [unique_id "aSu7U9-EkWIUe87KIjOr7gAAA0I"]
[Sun Nov 30 11:34:43.803237 2025] [:error] [pid 9375:tid 9406] [client 13.74.149.244:4324] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 12"] [hostname "paramountbaldivis.com"] [uri "/assets/images/wp-login.php"] [unique_id "aSu7U9-EkWIUe87KIjOr7gAAA0I"]
[Sun Nov 30 11:34:44.542373 2025] [:error] [pid 12793:tid 12816] [client 13.74.149.244:5438] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 12"] [hostname "paramountbaldivis.com"] [uri "/css/xp.php"] [unique_id "aSu7VMsEgQeCVydJZ0jsZwAAAFU"]
[Sun Nov 30 11:34:45.701266 2025] [:error] [pid 12793:tid 12810] [client 13.74.149.244:17144] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/assets/themes.php"] [unique_id "aSu7VcsEgQeCVydJZ0jsaQAAAE8"]
[Sun Nov 30 11:34:46.742599 2025] [:error] [pid 9375:tid 9426] [client 13.74.149.244:4232] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 13"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/dummyyummy/wp-signup.php"] [unique_id "aSu7Vt-EkWIUe87KIjOr8QAAA1Y"]
[Sun Nov 30 11:34:47.855200 2025] [:error] [pid 58704:tid 58717] [client 13.74.149.244:17108] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 13"] [hostname "paramountbaldivis.com"] [uri "/wp-content/uploads/chosen.php"] [unique_id "aSu7V1gCdnbXMzbONnOuaQAAA4o"]
[Sun Nov 30 11:34:48.667777 2025] [:error] [pid 10607:tid 10627] [client 13.74.149.244:5747] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aSu7WHMxNFmf1l9xA_FbdwAAAtE"]
[Sun Nov 30 11:34:49.555252 2025] [:error] [pid 10608:tid 10653] [client 13.74.149.244:13837] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/SimplePie/Content/Type/wp-login.php"] [unique_id "aSu7WeG4qpknNxmxP5c1KAAAA9A"]
[Sun Nov 30 11:34:50.401233 2025] [:error] [pid 9374:tid 9397] [client 13.74.149.244:8351] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 13"] [hostname "paramountbaldivis.com"] [uri "/js/style.php"] [unique_id "aSu7WoEwr5jt_cokVdwcLQAAAxQ"]
[Sun Nov 30 11:34:51.336671 2025] [:error] [pid 10550:tid 10587] [client 13.74.149.244:8424] [client 13.74.149.244] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 13.74.149.244, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-content/languages/wp-login.php"] [unique_id "aSu7W-l_8Vq2nipf7mH4jAAAAog"]
[Sun Nov 30 11:34:51.336745 2025] [:error] [pid 10550:tid 10587] [client 13.74.149.244:8424] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 14"] [hostname "paramountbaldivis.com"] [uri "/wp-content/languages/wp-login.php"] [unique_id "aSu7W-l_8Vq2nipf7mH4jAAAAog"]
[Sun Nov 30 11:34:51.995522 2025] [:error] [pid 58704:tid 58708] [client 13.74.149.244:8061] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 15"] [hostname "paramountbaldivis.com"] [uri "/lock.php"] [unique_id "aSu7W1gCdnbXMzbONnOubwAAA4E"]
[Sun Nov 30 11:34:53.000801 2025] [:error] [pid 12554:tid 12570] [client 13.74.149.244:4283] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/js/tinymce/skins/wordpress/images/about.php"] [unique_id "aSu7XD7q_kXd01TaAD8nbgAAAA4"]
[Sun Nov 30 11:34:53.728930 2025] [:error] [pid 58704:tid 58726] [client 13.74.149.244:3383] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/SimplePie/Content/Type/index.php"] [unique_id "aSu7XVgCdnbXMzbONnOucgAAA5M"]
[Sun Nov 30 11:34:54.587034 2025] [:error] [pid 58704:tid 58728] [client 13.74.149.244:1299] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 15"] [hostname "paramountbaldivis.com"] [uri "/.well-known/dropdown.php"] [unique_id "aSu7XlgCdnbXMzbONnOucwAAA5U"]
[Sun Nov 30 11:34:55.411290 2025] [:error] [pid 58704:tid 58720] [client 13.74.149.244:5376] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aSu7X1gCdnbXMzbONnOudAAAA40"]
[Sun Nov 30 11:34:56.520463 2025] [:error] [pid 12554:tid 12577] [client 13.74.149.244:8358] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 15"] [hostname "paramountbaldivis.com"] [uri "/readme.php"] [unique_id "aSu7YD7q_kXd01TaAD8ncgAAABU"]
[Sun Nov 30 11:34:57.709898 2025] [:error] [pid 12554:tid 12564] [client 13.74.149.244:12316] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 15"] [hostname "paramountbaldivis.com"] [uri "/edit.php"] [unique_id "aSu7YT7q_kXd01TaAD8ndQAAAAg"]
[Sun Nov 30 11:34:58.739777 2025] [:error] [pid 10608:tid 10645] [client 13.74.149.244:4403] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 15"] [hostname "paramountbaldivis.com"] [uri "/wp-content/themes/travelscape/json.php"] [unique_id "aSu7YuG4qpknNxmxP5c1LwAAA8g"]
[Sun Nov 30 11:34:59.607011 2025] [:error] [pid 9374:tid 9391] [client 13.74.149.244:13474] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 15"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/wp-admin.php"] [unique_id "aSu7Y4Ewr5jt_cokVdwcNAAAAw4"]
[Sun Nov 30 11:35:00.800085 2025] [:error] [pid 12554:tid 12570] [client 13.74.149.244:4182] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 15"] [hostname "paramountbaldivis.com"] [uri "/wp-content/upgrade/shell.php"] [unique_id "aSu7ZD7q_kXd01TaAD8neAAAAA4"]
[Sun Nov 30 11:35:01.802503 2025] [:error] [pid 58704:tid 58727] [client 13.74.149.244:5399] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 15"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/user/bak.php"] [unique_id "aSu7ZVgCdnbXMzbONnOugAAAA5Q"]
[Sun Nov 30 11:35:02.675337 2025] [:error] [pid 9374:tid 9393] [client 13.74.149.244:12920] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 15"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/admin.php"] [unique_id "aSu7ZoEwr5jt_cokVdwcNwAAAxA"]
[Sun Nov 30 11:35:03.460497 2025] [:error] [pid 9375:tid 9406] [client 13.74.149.244:1102] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 15"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/css/about.php"] [unique_id "aSu7Z9-EkWIUe87KIjOr_AAAA0I"]
[Sun Nov 30 11:35:04.346821 2025] [:error] [pid 9374:tid 9400] [client 13.74.149.244:8253] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 15"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/date.php"] [unique_id "aSu7aIEwr5jt_cokVdwcOQAAAxc"]
[Sun Nov 30 11:35:05.154068 2025] [:error] [pid 12554:tid 12564] [client 13.74.149.244:10977] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 15"] [hostname "paramountbaldivis.com"] [uri "/index/x.php"] [unique_id "aSu7aT7q_kXd01TaAD8negAAAAg"]
[Sun Nov 30 11:35:06.041607 2025] [:error] [pid 9375:tid 9408] [client 13.74.149.244:10708] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/network.php"] [unique_id "aSu7at-EkWIUe87KIjOr_wAAA0Q"]
[Sun Nov 30 11:35:06.857759 2025] [:error] [pid 9694:tid 9699] [client 13.74.149.244:8359] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 15"] [hostname "paramountbaldivis.com"] [uri "/.well-known/.well-known/cc.php"] [unique_id "aSu7asNOaRChkzIC_nU1vQAAAMM"]
[Sun Nov 30 11:35:07.751100 2025] [:error] [pid 9374:tid 9392] [client 13.74.149.244:13507] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/pomo/chosen.php"] [unique_id "aSu7a4Ewr5jt_cokVdwcQwAAAw8"]
[Sun Nov 30 11:35:08.835312 2025] [:error] [pid 58704:tid 58711] [client 13.74.149.244:12677] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 15"] [hostname "paramountbaldivis.com"] [uri "/.well-known/pki-validation/pwnd.php"] [unique_id "aSu7bFgCdnbXMzbONnOuiAAAA4Q"]
[Sun Nov 30 11:35:09.522683 2025] [:error] [pid 9694:tid 9715] [client 13.74.149.244:2125] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 15"] [hostname "paramountbaldivis.com"] [uri "/css/cong.php"] [unique_id "aSu7bcNOaRChkzIC_nU1wgAAANM"]
[Sun Nov 30 11:35:10.590847 2025] [:error] [pid 10607:tid 10623] [client 13.74.149.244:10729] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/customize/shell.php"] [unique_id "aSu7bnMxNFmf1l9xA_FbfgAAAs0"]
[Sun Nov 30 11:35:11.452397 2025] [:error] [pid 9374:tid 9382] [client 13.74.149.244:14610] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 15"] [hostname "paramountbaldivis.com"] [uri "/wp-content/mah.php"] [unique_id "aSu7b4Ewr5jt_cokVdwcRgAAAwU"]
[Sun Nov 30 11:35:12.234858 2025] [:error] [pid 10550:tid 10599] [client 13.74.149.244:10976] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 15"] [hostname "paramountbaldivis.com"] [uri "/wp-content/upgrade/admin.php"] [unique_id "aSu7cOl_8Vq2nipf7mH4nQAAApQ"]
[Sun Nov 30 11:35:13.522981 2025] [:error] [pid 9375:tid 9406] [client 13.74.149.244:3206] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 15"] [hostname "paramountbaldivis.com"] [uri "/wp-content/index.php"] [unique_id "aSu7cd-EkWIUe87KIjOsBAAAA0I"]
[Sun Nov 30 11:35:14.444669 2025] [:error] [pid 58704:tid 58725] [client 13.74.149.244:5240] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 15"] [hostname "paramountbaldivis.com"] [uri "/cgi-bin/fm.php"] [unique_id "aSu7clgCdnbXMzbONnOukQAAA5I"]
[Sun Nov 30 11:35:15.456769 2025] [:error] [pid 10550:tid 10584] [client 13.74.149.244:3403] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/block-supports/variations.php"] [unique_id "aSu7c-l_8Vq2nipf7mH4qgAAAoU"]
[Sun Nov 30 11:35:17.979699 2025] [:error] [pid 9374:tid 9379] [client 13.74.149.244:4821] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/rest-api/wp-login.php"] [unique_id "aSu7dYEwr5jt_cokVdwcSgAAAwI"]
[Sun Nov 30 11:35:18.964491 2025] [:error] [pid 10608:tid 10645] [client 13.74.149.244:2534] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 15"] [hostname "paramountbaldivis.com"] [uri "/.well-known/index.php"] [unique_id "aSu7duG4qpknNxmxP5c1QQAAA8g"]
[Sun Nov 30 11:35:20.178514 2025] [:error] [pid 9375:tid 9404] [client 13.74.149.244:7087] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 15"] [hostname "paramountbaldivis.com"] [uri "/wp-content/languages/link.php"] [unique_id "aSu7eN-EkWIUe87KIjOsEQAAA0A"]
[Sun Nov 30 11:35:20.833963 2025] [:error] [pid 9374:tid 9377] [client 13.74.149.244:7072] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/sitemaps/about.php"] [unique_id "aSu7eIEwr5jt_cokVdwcTwAAAwA"]
[Sun Nov 30 11:35:21.886954 2025] [:error] [pid 58704:tid 58728] [client 13.74.149.244:13582] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 15"] [hostname "paramountbaldivis.com"] [uri "/function.php"] [unique_id "aSu7eVgCdnbXMzbONnOulwAAA5U"]
[Sun Nov 30 11:35:23.163350 2025] [:error] [pid 9374:tid 9387] [client 13.74.149.244:5188] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/customize/autoload_classmap.php"] [unique_id "aSu7e4Ewr5jt_cokVdwcUgAAAwo"]
[Sun Nov 30 11:35:24.189706 2025] [:error] [pid 58704:tid 58717] [client 13.74.149.244:5928] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/fonts/item.php"] [unique_id "aSu7fFgCdnbXMzbONnOunQAAA4o"]
[Sun Nov 30 11:35:25.194073 2025] [:error] [pid 12793:tid 12800] [client 13.74.149.244:1943] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 15"] [hostname "paramountbaldivis.com"] [uri "/wp-content/themes/index.php"] [unique_id "aSu7fcsEgQeCVydJZ0jsjQAAAEU"]
[Sun Nov 30 11:35:25.966112 2025] [:error] [pid 58704:tid 58709] [client 13.74.149.244:2129] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 15"] [hostname "paramountbaldivis.com"] [uri "/wp-content/themes/classic/inc/json.php"] [unique_id "aSu7fVgCdnbXMzbONnOuoAAAA4I"]
[Sun Nov 30 11:35:26.774853 2025] [:error] [pid 58704:tid 58719] [client 13.74.149.244:3805] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 15"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/seoplugins/wso112233.php"] [unique_id "aSu7flgCdnbXMzbONnOuogAAA4w"]
[Sun Nov 30 11:35:27.506687 2025] [:error] [pid 58704:tid 58718] [client 13.74.149.244:13534] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/sodium_compat/link.php"] [unique_id "aSu7f1gCdnbXMzbONnOupAAAA4s"]
[Sun Nov 30 11:35:28.322743 2025] [:error] [pid 12793:tid 12807] [client 13.74.149.244:4850] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/images/wlw/wp-login.php"] [unique_id "aSu7gMsEgQeCVydJZ0jsjwAAAEw"]
[Sun Nov 30 11:35:28.992683 2025] [:error] [pid 12793:tid 12810] [client 13.74.149.244:3146] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 15"] [hostname "paramountbaldivis.com"] [uri "/byp.php"] [unique_id "aSu7gMsEgQeCVydJZ0jskgAAAE8"]
[Sun Nov 30 11:35:29.553875 2025] [:error] [pid 10607:tid 10621] [client 13.74.149.244:1924] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 16"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/WordPressCore/alfa-rex.php"] [unique_id "aSu7gXMxNFmf1l9xA_FbnAAAAss"]
[Sun Nov 30 11:35:30.274639 2025] [:error] [pid 10518:tid 10521] [client 13.74.149.244:1887] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 17"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/revslider/includes/external/page/index.php"] [unique_id "aSu7gg8XjrhaEDJ0Rd9xewAAAUA"]
[Sun Nov 30 11:35:30.884148 2025] [:error] [pid 10608:tid 10642] [client 13.74.149.244:4854] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/style-engine/content.php"] [unique_id "aSu7guG4qpknNxmxP5c1XgAAA8U"]
[Sun Nov 30 11:35:31.637152 2025] [:error] [pid 12793:tid 12806] [client 13.74.149.244:5232] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 17"] [hostname "paramountbaldivis.com"] [uri "/wordpress/wp-admin/includeswp-conflg.php"] [unique_id "aSu7g8sEgQeCVydJZ0jslAAAAEs"]
[Sun Nov 30 11:35:32.539668 2025] [:error] [pid 10518:tid 10533] [client 13.74.149.244:4517] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 17"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/mah.php"] [unique_id "aSu7hA8XjrhaEDJ0Rd9xfQAAAUw"]
[Sun Nov 30 11:35:33.312260 2025] [:error] [pid 9375:tid 9412] [client 13.74.149.244:5919] [client 13.74.149.244] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 13.74.149.244, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aSu7hd-EkWIUe87KIjOsQgAAA0g"]
[Sun Nov 30 11:35:33.312353 2025] [:error] [pid 9375:tid 9412] [client 13.74.149.244:5919] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 18"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aSu7hd-EkWIUe87KIjOsQgAAA0g"]
[Sun Nov 30 11:35:33.863668 2025] [:error] [pid 12554:tid 12567] [client 13.74.149.244:3785] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/js/codemirror/about.php"] [unique_id "aSu7hT7q_kXd01TaAD8nmQAAAAs"]
[Sun Nov 30 11:35:34.461338 2025] [:error] [pid 12793:tid 12809] [client 13.74.149.244:10102] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aSu7hssEgQeCVydJZ0jsmwAAAE4"]
[Sun Nov 30 11:35:35.451357 2025] [:error] [pid 10550:tid 10580] [client 13.74.149.244:14236] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 19"] [hostname "paramountbaldivis.com"] [uri "/wp-mail.php/wp-includes/ID3/Core32.php"] [unique_id "aSu7h-l_8Vq2nipf7mH40wAAAoE"]
[Sun Nov 30 11:35:36.260045 2025] [:error] [pid 9375:tid 9424] [client 13.74.149.244:10177] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/css/wp-login.php"] [unique_id "aSu7iN-EkWIUe87KIjOsSgAAA1Q"]
[Sun Nov 30 11:35:37.116818 2025] [:error] [pid 9375:tid 9414] [client 13.74.149.244:7081] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 19"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/includes/install.php"] [unique_id "aSu7id-EkWIUe87KIjOsTQAAA0o"]
[Sun Nov 30 11:35:37.894485 2025] [:error] [pid 12793:tid 12814] [client 13.74.149.244:3819] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 19"] [hostname "paramountbaldivis.com"] [uri "/wp-content/themes/about.php"] [unique_id "aSu7icsEgQeCVydJZ0jsqQAAAFM"]
[Sun Nov 30 11:35:38.637291 2025] [:error] [pid 9375:tid 9413] [client 13.74.149.244:8273] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 19"] [hostname "paramountbaldivis.com"] [uri "/.well-known/pki-validation/muse.php"] [unique_id "aSu7it-EkWIUe87KIjOsVQAAA0k"]
[Sun Nov 30 11:35:39.651662 2025] [:error] [pid 9694:tid 9716] [client 13.74.149.244:7686] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 19"] [hostname "paramountbaldivis.com"] [uri "/wp-content/languages/chosen.php"] [unique_id "aSu7i8NOaRChkzIC_nU14gAAANQ"]
[Sun Nov 30 11:35:40.444997 2025] [:error] [pid 12793:tid 12800] [client 13.74.149.244:5948] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 19"] [hostname "paramountbaldivis.com"] [uri "/buy.php"] [unique_id "aSu7jMsEgQeCVydJZ0jssQAAAEU"]
[Sun Nov 30 11:35:41.334799 2025] [:error] [pid 9375:tid 9418] [client 13.74.149.244:14257] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/Text/alfa-rex.php"] [unique_id "aSu7jd-EkWIUe87KIjOsXAAAA04"]
[Sun Nov 30 11:35:42.256748 2025] [:error] [pid 9374:tid 9391] [client 13.74.149.244:10040] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "aSu7joEwr5jt_cokVdwcdwAAAw4"]
[Sun Nov 30 11:35:43.234454 2025] [:error] [pid 9694:tid 9713] [client 13.74.149.244:4484] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 19"] [hostname "paramountbaldivis.com"] [uri "/admin/ty.php"] [unique_id "aSu7j8NOaRChkzIC_nU16gAAANE"]
[Sun Nov 30 11:35:43.941719 2025] [:error] [pid 9374:tid 9400] [client 13.74.149.244:7734] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 19"] [hostname "paramountbaldivis.com"] [uri "/assets/images/doc.php"] [unique_id "aSu7j4Ewr5jt_cokVdwcfgAAAxc"]
[Sun Nov 30 11:35:44.831003 2025] [:error] [pid 10608:tid 10638] [client 13.74.149.244:11868] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 19"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/network/admin.php"] [unique_id "aSu7kOG4qpknNxmxP5c1aQAAA8E"]
[Sun Nov 30 11:35:45.549301 2025] [:error] [pid 10608:tid 10659] [client 13.74.149.244:10995] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 19"] [hostname "paramountbaldivis.com"] [uri "/wp-content/themes/cay-van-phong/3luaO.php"] [unique_id "aSu7keG4qpknNxmxP5c1agAAA9Y"]
[Sun Nov 30 11:35:46.439819 2025] [:error] [pid 58704:tid 58708] [client 13.74.149.244:8261] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/sodium_compat/wp-login.php"] [unique_id "aSu7klgCdnbXMzbONnOuswAAA4E"]
[Sun Nov 30 11:35:47.479990 2025] [:error] [pid 12554:tid 12561] [client 13.74.149.244:2038] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aSu7kz7q_kXd01TaAD8npQAAAAU"]
[Sun Nov 30 11:35:48.395677 2025] [:error] [pid 10607:tid 10628] [client 13.74.149.244:14171] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 19"] [hostname "paramountbaldivis.com"] [uri "/wp-mail.php/wp-includes/ID3/info.php"] [unique_id "aSu7lHMxNFmf1l9xA_FbtAAAAtI"]
[Sun Nov 30 11:35:49.141621 2025] [:error] [pid 10550:tid 10592] [client 13.74.149.244:7310] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 19"] [hostname "paramountbaldivis.com"] [uri "/admin/images/slider/CUfcfoH.php"] [unique_id "aSu7lel_8Vq2nipf7mH43gAAAo0"]
[Sun Nov 30 11:35:50.307600 2025] [:error] [pid 9694:tid 9719] [client 13.74.149.244:7951] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 19"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/setup-config.php"] [unique_id "aSu7lsNOaRChkzIC_nU19QAAANc"]
[Sun Nov 30 11:35:51.195901 2025] [:error] [pid 58704:tid 58721] [client 13.74.149.244:12011] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/blocks/edit.php"] [unique_id "aSu7l1gCdnbXMzbONnOuwgAAA44"]
[Sun Nov 30 11:35:52.153161 2025] [:error] [pid 9374:tid 9393] [client 13.74.149.244:7991] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/lock.php"] [unique_id "aSu7mIEwr5jt_cokVdwclAAAAxA"]
[Sun Nov 30 11:35:53.225853 2025] [:error] [pid 9375:tid 9428] [client 13.74.149.244:11540] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 19"] [hostname "paramountbaldivis.com"] [uri "/css/index.php"] [unique_id "aSu7md-EkWIUe87KIjOsbwAAA1g"]
[Sun Nov 30 11:35:54.054171 2025] [:error] [pid 9694:tid 9717] [client 13.74.149.244:8079] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 19"] [hostname "paramountbaldivis.com"] [uri "/wp-content/upgrade/wp-sigunq.php"] [unique_id "aSu7msNOaRChkzIC_nU1_wAAANU"]
[Sun Nov 30 11:35:55.135735 2025] [:error] [pid 58704:tid 58723] [client 13.74.149.244:7976] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/certificates/up.php"] [unique_id "aSu7m1gCdnbXMzbONnOuygAAA5A"]
[Sun Nov 30 11:35:55.971331 2025] [:error] [pid 12793:tid 12808] [client 13.74.149.244:9269] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aSu7m8sEgQeCVydJZ0jswAAAAE0"]
[Sun Nov 30 11:35:56.661823 2025] [:error] [pid 10550:tid 10602] [client 13.74.149.244:11148] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 20"] [hostname "paramountbaldivis.com"] [uri "/admin/atomlib.php"] [unique_id "aSu7nOl_8Vq2nipf7mH47QAAApc"]
[Sun Nov 30 11:35:57.495633 2025] [:error] [pid 10518:tid 10543] [client 13.74.149.244:11520] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 21"] [hostname "paramountbaldivis.com"] [uri "/item.php"] [unique_id "aSu7nQ8XjrhaEDJ0Rd9xqAAAAVY"]
[Sun Nov 30 11:35:58.391027 2025] [:error] [pid 12793:tid 12798] [client 13.74.149.244:11987] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 21"] [hostname "paramountbaldivis.com"] [uri "/wp-content/upgrade/about.php"] [unique_id "aSu7nssEgQeCVydJZ0jswwAAAEM"]
[Sun Nov 30 11:35:59.202311 2025] [:error] [pid 58704:tid 58714] [client 13.74.149.244:14252] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/js/alfa-rex.php"] [unique_id "aSu7n1gCdnbXMzbONnOu0QAAA4c"]
[Sun Nov 30 11:36:00.246208 2025] [:error] [pid 9374:tid 9388] [client 13.74.149.244:11147] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 21"] [hostname "paramountbaldivis.com"] [uri "/css/cloud.php"] [unique_id "aSu7oIEwr5jt_cokVdwcnAAAAws"]
[Sun Nov 30 11:36:00.977864 2025] [:error] [pid 9375:tid 9421] [client 13.74.149.244:8300] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 21"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/js/index.php"] [unique_id "aSu7oN-EkWIUe87KIjOscgAAA1E"]
[Sun Nov 30 11:36:01.912386 2025] [:error] [pid 58704:tid 58711] [client 13.74.149.244:13917] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 21"] [hostname "paramountbaldivis.com"] [uri "/admin/upload/themes-install.php"] [unique_id "aSu7oVgCdnbXMzbONnOu1gAAA4Q"]
[Sun Nov 30 11:36:02.920825 2025] [:error] [pid 10608:tid 10637] [client 13.74.149.244:9254] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 21"] [hostname "paramountbaldivis.com"] [uri "/0x.php"] [unique_id "aSu7ouG4qpknNxmxP5c1eQAAA8A"]
[Sun Nov 30 11:36:03.811545 2025] [:error] [pid 10518:tid 10543] [client 13.74.149.244:6063] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 21"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/js/alfa-rex.php"] [unique_id "aSu7ow8XjrhaEDJ0Rd9xsQAAAVY"]
[Sun Nov 30 11:36:04.489042 2025] [:error] [pid 12793:tid 12806] [client 13.74.149.244:6584] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 21"] [hostname "paramountbaldivis.com"] [uri "/wp-content/about.php"] [unique_id "aSu7pMsEgQeCVydJZ0jsxQAAAEs"]
[Sun Nov 30 11:36:05.463051 2025] [:error] [pid 12793:tid 12817] [client 13.74.149.244:9909] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/assets/file.php"] [unique_id "aSu7pcsEgQeCVydJZ0jsyQAAAFY"]
[Sun Nov 30 11:36:06.219913 2025] [:error] [pid 9375:tid 9405] [client 13.74.149.244:12028] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 21"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/item.php"] [unique_id "aSu7pt-EkWIUe87KIjOsewAAA0E"]
[Sun Nov 30 11:36:07.058758 2025] [:error] [pid 12793:tid 12800] [client 13.74.149.244:9231] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 21"] [hostname "paramountbaldivis.com"] [uri "/include/mail.php"] [unique_id "aSu7p8sEgQeCVydJZ0jszAAAAEU"]
[Sun Nov 30 11:36:07.928009 2025] [:error] [pid 9374:tid 9390] [client 13.74.149.244:9633] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 21"] [hostname "paramountbaldivis.com"] [uri "/.well-known/admin.php"] [unique_id "aSu7p4Ewr5jt_cokVdwcoQAAAw0"]
[Sun Nov 30 11:36:08.702831 2025] [:error] [pid 10550:tid 10592] [client 13.74.149.244:7664] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 21"] [hostname "paramountbaldivis.com"] [uri "/bs1.php"] [unique_id "aSu7qOl_8Vq2nipf7mH48wAAAo0"]
[Sun Nov 30 11:36:09.462383 2025] [:error] [pid 9374:tid 9381] [client 13.74.149.244:7712] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 21"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/images/about.php"] [unique_id "aSu7qYEwr5jt_cokVdwcogAAAwQ"]
[Sun Nov 30 11:36:10.340486 2025] [:error] [pid 10550:tid 10597] [client 13.74.149.244:8123] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 21"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/log.php"] [unique_id "aSu7qul_8Vq2nipf7mH49AAAApI"]
[Sun Nov 30 11:36:11.262007 2025] [:error] [pid 9694:tid 9704] [client 13.74.149.244:3304] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 22"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/xmrlpc.php"] [unique_id "aSu7q8NOaRChkzIC_nU2HwAAAMg"]
[Sun Nov 30 11:36:11.958018 2025] [:error] [pid 58704:tid 58710] [client 13.74.149.244:6053] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 22"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/images/alfa-rex.php"] [unique_id "aSu7q1gCdnbXMzbONnOu3wAAA4M"]
[Sun Nov 30 11:36:12.695913 2025] [:error] [pid 12793:tid 12811] [client 13.74.149.244:8077] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 22"] [hostname "paramountbaldivis.com"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "aSu7rMsEgQeCVydJZ0js0gAAAFA"]
[Sun Nov 30 11:36:13.749975 2025] [:error] [pid 58704:tid 58727] [client 13.74.149.244:10601] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/js/tinymce/skins/wordpress/images/wp-login.php"] [unique_id "aSu7rVgCdnbXMzbONnOu5wAAA5Q"]
[Sun Nov 30 11:36:14.445388 2025] [:error] [pid 12554:tid 12575] [client 13.74.149.244:11536] [client 13.74.149.244] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 13.74.149.244, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/maint/wp-login.php"] [unique_id "aSu7rj7q_kXd01TaAD8nwgAAABM"]
[Sun Nov 30 11:36:14.445461 2025] [:error] [pid 12554:tid 12575] [client 13.74.149.244:11536] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 24"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/maint/wp-login.php"] [unique_id "aSu7rj7q_kXd01TaAD8nwgAAABM"]
[Sun Nov 30 11:36:15.393207 2025] [:error] [pid 12793:tid 12808] [client 13.74.149.244:9627] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/SimplePie/Decode/wp-login.php"] [unique_id "aSu7r8sEgQeCVydJZ0js1gAAAE0"]
[Sun Nov 30 11:36:16.206900 2025] [:error] [pid 9375:tid 9414] [client 13.74.149.244:6639] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 25"] [hostname "paramountbaldivis.com"] [uri "/uploads/test.php"] [unique_id "aSu7sN-EkWIUe87KIjOsfwAAA0o"]
[Sun Nov 30 11:36:16.962620 2025] [:error] [pid 9694:tid 9704] [client 13.74.149.244:6017] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 25"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/upgrade.php"] [unique_id "aSu7sMNOaRChkzIC_nU2JQAAAMg"]
[Sun Nov 30 11:36:17.985934 2025] [:error] [pid 12793:tid 12810] [client 13.74.149.244:7906] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 25"] [hostname "paramountbaldivis.com"] [uri "/max.php"] [unique_id "aSu7scsEgQeCVydJZ0js2wAAAE8"]
[Sun Nov 30 11:36:18.962695 2025] [:error] [pid 10518:tid 10527] [client 13.74.149.244:12459] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 25"] [hostname "paramountbaldivis.com"] [uri "/wp-content/function.php"] [unique_id "aSu7sg8XjrhaEDJ0Rd9xvwAAAUY"]
[Sun Nov 30 11:36:19.699233 2025] [:error] [pid 58704:tid 58717] [client 13.74.149.244:3295] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 25"] [hostname "paramountbaldivis.com"] [uri "/wp-content/upgrade/info.php"] [unique_id "aSu7s1gCdnbXMzbONnOu8AAAA4o"]
[Sun Nov 30 11:36:20.329012 2025] [:error] [pid 58704:tid 58712] [client 13.74.149.244:6615] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/Requests/Cookie/wp-login.php"] [unique_id "aSu7tFgCdnbXMzbONnOu8wAAA4U"]
[Sun Nov 30 11:36:20.906258 2025] [:error] [pid 12793:tid 12806] [client 13.74.149.244:9265] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 25"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/about.php"] [unique_id "aSu7tMsEgQeCVydJZ0js4QAAAEs"]
[Sun Nov 30 11:36:21.650785 2025] [:error] [pid 12793:tid 12799] [client 13.74.149.244:7008] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 25"] [hostname "paramountbaldivis.com"] [uri "/plugins/phpThumb/404.php"] [unique_id "aSu7tcsEgQeCVydJZ0js5QAAAEQ"]
[Sun Nov 30 11:36:22.269238 2025] [:error] [pid 9375:tid 9411] [client 13.74.149.244:4655] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/html-api/wp-conflg.php"] [unique_id "aSu7tt-EkWIUe87KIjOslAAAA0c"]
[Sun Nov 30 11:36:22.904430 2025] [:error] [pid 9375:tid 9421] [client 13.74.149.244:1199] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 25"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/elementor/about.php"] [unique_id "aSu7tt-EkWIUe87KIjOsnwAAA1E"]
[Sun Nov 30 11:36:23.633693 2025] [:error] [pid 10550:tid 10595] [client 13.74.149.244:9959] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 25"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/wp-help/index.php"] [unique_id "aSu7t-l_8Vq2nipf7mH49wAAApA"]
[Sun Nov 30 11:36:24.275439 2025] [:error] [pid 10607:tid 10624] [client 13.74.149.244:13937] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 25"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/media.php"] [unique_id "aSu7uHMxNFmf1l9xA_Fb1wAAAs4"]
[Sun Nov 30 11:36:27.903404 2025] [:error] [pid 10607:tid 10625] [client 13.74.149.244:14381] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/IXR/about.php"] [unique_id "aSu7u3MxNFmf1l9xA_Fb3AAAAs8"]
[Sun Nov 30 11:36:28.580712 2025] [:error] [pid 10608:tid 10637] [client 13.74.149.244:12209] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/css/about.php"] [unique_id "aSu7vOG4qpknNxmxP5c1kwAAA8A"]
[Sun Nov 30 11:36:29.225395 2025] [:error] [pid 58704:tid 58723] [client 13.74.149.244:9626] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/fonts/about.php"] [unique_id "aSu7vVgCdnbXMzbONnOvAAAAA5A"]
[Sun Nov 30 11:36:29.882774 2025] [:error] [pid 10550:tid 10581] [client 13.74.149.244:12435] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 25"] [hostname "paramountbaldivis.com"] [uri "/1.php"] [unique_id "aSu7vel_8Vq2nipf7mH5AQAAAoI"]
[Sun Nov 30 11:36:30.458625 2025] [:error] [pid 10550:tid 10598] [client 13.74.149.244:12441] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 25"] [hostname "paramountbaldivis.com"] [uri "/install.php"] [unique_id "aSu7vul_8Vq2nipf7mH5BQAAApM"]
[Sun Nov 30 11:36:31.280493 2025] [:error] [pid 10608:tid 10651] [client 13.74.149.244:9623] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 25"] [hostname "paramountbaldivis.com"] [uri "/.well-known/pki-validation/siteindex.php"] [unique_id "aSu7v-G4qpknNxmxP5c1nAAAA84"]
[Sun Nov 30 11:36:32.202674 2025] [:error] [pid 10607:tid 10632] [client 13.74.149.244:6592] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 25"] [hostname "paramountbaldivis.com"] [uri "/plugins/DaoZM.php"] [unique_id "aSu7wHMxNFmf1l9xA_Fb3gAAAtY"]
[Sun Nov 30 11:36:32.914699 2025] [:error] [pid 12554:tid 12564] [client 13.74.149.244:12217] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 25"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/install.php"] [unique_id "aSu7wD7q_kXd01TaAD8n2gAAAAg"]
[Sun Nov 30 11:36:33.686862 2025] [:error] [pid 12554:tid 12577] [client 13.74.149.244:2635] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 25"] [hostname "paramountbaldivis.com"] [uri "/cgi-bin/1.php"] [unique_id "aSu7wT7q_kXd01TaAD8n2wAAABU"]
[Sun Nov 30 11:36:34.512016 2025] [:error] [pid 12554:tid 12573] [client 13.74.149.244:6521] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 25"] [hostname "paramountbaldivis.com"] [uri "/cgi-bin/admin.php"] [unique_id "aSu7wj7q_kXd01TaAD8n3QAAABE"]
[Sun Nov 30 11:36:35.397366 2025] [:error] [pid 12554:tid 12557] [client 13.74.149.244:5522] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 25"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/pwnd/gecko.php"] [unique_id "aSu7wz7q_kXd01TaAD8n3gAAAAE"]
[Sun Nov 30 11:36:36.062302 2025] [:error] [pid 9694:tid 9706] [client 13.74.149.244:15439] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 25"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/network/lock.php"] [unique_id "aSu7xMNOaRChkzIC_nU2OgAAAMo"]
[Sun Nov 30 11:36:36.871970 2025] [:error] [pid 10607:tid 10629] [client 13.74.149.244:12130] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 25"] [hostname "paramountbaldivis.com"] [uri "/assets/item.php"] [unique_id "aSu7xHMxNFmf1l9xA_Fb5QAAAtM"]
[Sun Nov 30 11:36:37.609397 2025] [:error] [pid 58704:tid 58729] [client 13.74.149.244:15412] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/SimplePie/system.php"] [unique_id "aSu7xVgCdnbXMzbONnOvDwAAA5Y"]
[Sun Nov 30 11:36:38.397383 2025] [:error] [pid 12554:tid 12565] [client 13.74.149.244:10275] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 25"] [hostname "paramountbaldivis.com"] [uri "/about/wp-conflg.php"] [unique_id "aSu7xj7q_kXd01TaAD8n6gAAAAk"]
[Sun Nov 30 11:36:38.987888 2025] [:error] [pid 58704:tid 58728] [client 13.74.149.244:15362] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 25"] [hostname "paramountbaldivis.com"] [uri "/Assets/admin.php"] [unique_id "aSu7xlgCdnbXMzbONnOvEgAAA5U"]
[Sun Nov 30 11:36:39.707632 2025] [:error] [pid 10518:tid 10533] [client 13.74.149.244:2563] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/sitemaps/alfa-rex.php"] [unique_id "aSu7xw8XjrhaEDJ0Rd9x2gAAAUw"]
[Sun Nov 30 11:36:40.419404 2025] [:error] [pid 10608:tid 10649] [client 13.74.149.244:2638] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aSu7yOG4qpknNxmxP5c1ogAAA8w"]
[Sun Nov 30 11:36:41.052857 2025] [:error] [pid 10608:tid 10653] [client 13.74.149.244:10290] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 25"] [hostname "paramountbaldivis.com"] [uri "/cgi-bin/about.php"] [unique_id "aSu7yeG4qpknNxmxP5c1pAAAA9A"]
[Sun Nov 30 11:36:41.699270 2025] [:error] [pid 12793:tid 12804] [client 13.74.149.244:10596] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 25"] [hostname "paramountbaldivis.com"] [uri "/db.php"] [unique_id "aSu7ycsEgQeCVydJZ0jtAAAAAEk"]
[Sun Nov 30 11:36:42.310211 2025] [:error] [pid 10550:tid 10581] [client 13.74.149.244:5553] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 25"] [hostname "paramountbaldivis.com"] [uri "/wp-content/blue.php"] [unique_id "aSu7yul_8Vq2nipf7mH5CQAAAoI"]
[Sun Nov 30 11:36:43.128341 2025] [:error] [pid 9375:tid 9416] [client 13.74.149.244:8151] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 25"] [hostname "paramountbaldivis.com"] [uri "/.well-known/pki-validation/fm.php"] [unique_id "aSu7y9-EkWIUe87KIjOstwAAA0w"]
[Sun Nov 30 11:36:43.793333 2025] [:error] [pid 58704:tid 58731] [client 13.74.149.244:10298] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 25"] [hostname "paramountbaldivis.com"] [uri "/wp-content/configs.php"] [unique_id "aSu7y1gCdnbXMzbONnOvHAAAA5g"]
[Sun Nov 30 11:36:44.921071 2025] [:error] [pid 58704:tid 58727] [client 13.74.149.244:13997] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/images/media/about.php"] [unique_id "aSu7zFgCdnbXMzbONnOvIAAAA5Q"]
[Sun Nov 30 11:36:45.756081 2025] [:error] [pid 10608:tid 10647] [client 13.74.149.244:2566] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 25"] [hostname "paramountbaldivis.com"] [uri "/cgi-bin/xmrlpc.php"] [unique_id "aSu7zeG4qpknNxmxP5c1qAAAA8o"]
[Sun Nov 30 11:36:46.651812 2025] [:error] [pid 10608:tid 10648] [client 13.74.149.244:6015] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 25"] [hostname "paramountbaldivis.com"] [uri "/assets/admin.php"] [unique_id "aSu7zuG4qpknNxmxP5c1qQAAA8s"]
[Sun Nov 30 11:36:47.350770 2025] [:error] [pid 10607:tid 10623] [client 13.74.149.244:12657] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 25"] [hostname "paramountbaldivis.com"] [uri "/cgi-bin/moon.php"] [unique_id "aSu7z3MxNFmf1l9xA_Fb8AAAAs0"]
[Sun Nov 30 11:36:47.957483 2025] [:error] [pid 10518:tid 10531] [client 13.74.149.244:1327] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "aSu7zw8XjrhaEDJ0Rd9x4AAAAUo"]
[Sun Nov 30 11:36:48.669218 2025] [:error] [pid 58704:tid 58729] [client 13.74.149.244:4111] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 25"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/plugin.php"] [unique_id "aSu70FgCdnbXMzbONnOvKgAAA5Y"]
[Sun Nov 30 11:36:49.458719 2025] [:error] [pid 9694:tid 9706] [client 13.74.149.244:7251] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/SimplePie/Content/Type/alfa-rex.php"] [unique_id "aSu70cNOaRChkzIC_nU2RQAAAMo"]
[Sun Nov 30 11:36:50.087752 2025] [:error] [pid 9694:tid 9709] [client 13.74.149.244:14161] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 25"] [hostname "paramountbaldivis.com"] [uri "/admin/fckeditor/editor/filemanager/owlmailer.php"] [unique_id "aSu70sNOaRChkzIC_nU2RgAAAM0"]
[Sun Nov 30 11:36:50.783506 2025] [:error] [pid 58704:tid 58719] [client 13.74.149.244:9141] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 25"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/wp-help/mini.php"] [unique_id "aSu70lgCdnbXMzbONnOvLwAAA4w"]
[Sun Nov 30 11:36:51.754415 2025] [:error] [pid 12793:tid 12805] [client 13.74.149.244:11942] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 25"] [hostname "paramountbaldivis.com"] [uri "/m.php"] [unique_id "aSu708sEgQeCVydJZ0jtCgAAAEo"]
[Sun Nov 30 11:36:52.467971 2025] [:error] [pid 12554:tid 12576] [client 13.74.149.244:2197] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 25"] [hostname "paramountbaldivis.com"] [uri "/wp-content/themes/wp-pridmag/classwithtostring.php"] [unique_id "aSu71D7q_kXd01TaAD8n_AAAABQ"]
[Sun Nov 30 11:36:53.379300 2025] [:error] [pid 9374:tid 9388] [client 13.74.149.244:7260] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 26"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/Cache/Cache.php"] [unique_id "aSu71YEwr5jt_cokVdwcxQAAAws"]
[Sun Nov 30 11:36:54.031211 2025] [:error] [pid 58704:tid 58710] [client 13.74.149.244:11078] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 27"] [hostname "paramountbaldivis.com"] [uri "/upload/wp-info.php"] [unique_id "aSu71lgCdnbXMzbONnOvNwAAA4M"]
[Sun Nov 30 11:36:54.817533 2025] [:error] [pid 58704:tid 58709] [client 13.74.149.244:4099] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 27"] [hostname "paramountbaldivis.com"] [uri "/gel4y.php"] [unique_id "aSu71lgCdnbXMzbONnOvXgAAA4I"]
[Sun Nov 30 11:36:55.509867 2025] [:error] [pid 12793:tid 12801] [client 13.74.149.244:12659] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/rest-api/blue.php"] [unique_id "aSu718sEgQeCVydJZ0jtDAAAAEY"]
[Sun Nov 30 11:36:56.338227 2025] [:error] [pid 9375:tid 9406] [client 13.74.149.244:15442] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/SimplePie/wp-conflg.php"] [unique_id "aSu72N-EkWIUe87KIjOsxAAAA0I"]
[Sun Nov 30 11:36:57.114526 2025] [:error] [pid 10550:tid 10586] [client 13.74.149.244:11125] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 27"] [hostname "paramountbaldivis.com"] [uri "/wp-content/wp-configs.php"] [unique_id "aSu72el_8Vq2nipf7mH5HAAAAoc"]
[Sun Nov 30 11:36:57.955793 2025] [:error] [pid 58704:tid 58711] [client 13.74.149.244:4131] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 27"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/user/index.php"] [unique_id "aSu72VgCdnbXMzbONnOveQAAA4Q"]
[Sun Nov 30 11:36:58.747182 2025] [:error] [pid 9375:tid 9428] [client 13.74.149.244:10558] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 27"] [hostname "paramountbaldivis.com"] [uri "/wp-content/upgrade-temp-backup/alfa-rex.php"] [unique_id "aSu72t-EkWIUe87KIjOsxQAAA1g"]
[Sun Nov 30 11:36:59.531013 2025] [:error] [pid 10608:tid 10640] [client 13.74.149.244:11233] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 27"] [hostname "paramountbaldivis.com"] [uri "/.well-known/pki-validation/jp.php"] [unique_id "aSu72-G4qpknNxmxP5c1uAAAA8M"]
[Sun Nov 30 11:37:00.290909 2025] [:error] [pid 10518:tid 10530] [client 13.74.149.244:12763] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/Requests/Response/siteindex.php"] [unique_id "aSu73A8XjrhaEDJ0Rd9x9wAAAUk"]
[Sun Nov 30 11:37:00.967536 2025] [:error] [pid 10550:tid 10594] [client 13.74.149.244:11094] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/blocks/wp-conflg.php"] [unique_id "aSu73Ol_8Vq2nipf7mH5IQAAAo8"]
[Sun Nov 30 11:37:01.702994 2025] [:error] [pid 9375:tid 9425] [client 13.74.149.244:11596] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 29"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/tools.php"] [unique_id "aSu73d-EkWIUe87KIjOszAAAA1U"]
[Sun Nov 30 11:37:02.488191 2025] [:error] [pid 9374:tid 9380] [client 13.74.149.244:7266] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 29"] [hostname "paramountbaldivis.com"] [uri "/.well-known/themes.php"] [unique_id "aSu73oEwr5jt_cokVdwczAAAAwM"]
[Sun Nov 30 11:37:03.469416 2025] [:error] [pid 58704:tid 58721] [client 13.74.149.244:3719] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/mah.php"] [unique_id "aSu731gCdnbXMzbONnOvfwAAA44"]
[Sun Nov 30 11:37:04.279154 2025] [:error] [pid 10518:tid 10540] [client 13.74.149.244:13411] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/pomo/install.php"] [unique_id "aSu74A8XjrhaEDJ0Rd9x-gAAAVM"]
[Sun Nov 30 11:37:05.168980 2025] [:error] [pid 12554:tid 12573] [client 13.74.149.244:3635] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/packed.php"] [unique_id "aSu74T7q_kXd01TaAD8oCgAAABE"]
[Sun Nov 30 11:37:05.841782 2025] [:error] [pid 12554:tid 12574] [client 13.74.149.244:4734] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 31"] [hostname "paramountbaldivis.com"] [uri "/simple.php"] [unique_id "aSu74T7q_kXd01TaAD8oCwAAABI"]
[Sun Nov 30 11:37:06.833239 2025] [:error] [pid 9374:tid 9400] [client 13.74.149.244:12156] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 31"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/css/index.php"] [unique_id "aSu74oEwr5jt_cokVdwc0QAAAxc"]
[Sun Nov 30 11:37:07.967071 2025] [:error] [pid 9374:tid 9380] [client 13.74.149.244:2481] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/images/smilies/network.php"] [unique_id "aSu744Ewr5jt_cokVdwc2QAAAwM"]
[Sun Nov 30 11:37:08.867743 2025] [:error] [pid 9375:tid 9409] [client 13.74.149.244:13196] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/ID3/autoload_classmap.php"] [unique_id "aSu75N-EkWIUe87KIjOs4QAAA0U"]
[Sun Nov 30 11:37:09.634044 2025] [:error] [pid 9375:tid 9411] [client 13.74.149.244:3606] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 31"] [hostname "paramountbaldivis.com"] [uri "/wp-content/admin.php"] [unique_id "aSu75d-EkWIUe87KIjOs6gAAA0c"]
[Sun Nov 30 11:37:10.409382 2025] [:error] [pid 9694:tid 9700] [client 13.74.149.244:3727] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 31"] [hostname "paramountbaldivis.com"] [uri "/images/autoload_classmap.php"] [unique_id "aSu75sNOaRChkzIC_nU2ewAAAMQ"]
[Sun Nov 30 11:37:11.027697 2025] [:error] [pid 10518:tid 10533] [client 13.74.149.244:4683] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 32"] [hostname "paramountbaldivis.com"] [uri "/radio.php"] [unique_id "aSu75w8XjrhaEDJ0Rd9yBAAAAUw"]
[Sun Nov 30 11:37:11.826425 2025] [:error] [pid 58704:tid 58726] [client 13.74.149.244:15340] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 32"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/Cache.php"] [unique_id "aSu751gCdnbXMzbONnOvuQAAA5M"]
[Sun Nov 30 11:37:12.562331 2025] [:error] [pid 10518:tid 10525] [client 13.74.149.244:2492] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 33"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/js/widgets/index.php"] [unique_id "aSu76A8XjrhaEDJ0Rd9yCAAAAUQ"]
[Sun Nov 30 11:37:13.281567 2025] [:error] [pid 9374:tid 9388] [client 13.74.149.244:3560] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 33"] [hostname "paramountbaldivis.com"] [uri "/wp-content/packed.php"] [unique_id "aSu76YEwr5jt_cokVdwc3AAAAws"]
[Sun Nov 30 11:37:14.053155 2025] [:error] [pid 58704:tid 58707] [client 13.74.149.244:7216] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 33"] [hostname "paramountbaldivis.com"] [uri "/wp-content/uploads/link.php"] [unique_id "aSu76lgCdnbXMzbONnOvvwAAA4A"]
[Sun Nov 30 11:37:14.819478 2025] [:error] [pid 12554:tid 12574] [client 13.74.149.244:7177] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 33"] [hostname "paramountbaldivis.com"] [uri "/403.php"] [unique_id "aSu76j7q_kXd01TaAD8oOAAAABI"]
[Sun Nov 30 11:37:15.443828 2025] [:error] [pid 10518:tid 10526] [client 13.74.149.244:13263] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 33"] [hostname "paramountbaldivis.com"] [uri "/wp-content/uploads/plugins.php"] [unique_id "aSu76w8XjrhaEDJ0Rd9yCwAAAUU"]
[Sun Nov 30 11:37:16.460615 2025] [:error] [pid 10608:tid 10645] [client 13.74.149.244:15846] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/rest-api/alfa-rex.php"] [unique_id "aSu77OG4qpknNxmxP5c1wwAAA8g"]
[Sun Nov 30 11:37:17.246064 2025] [:error] [pid 9374:tid 9401] [client 13.74.149.244:4799] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 33"] [hostname "paramountbaldivis.com"] [uri "/gecko.php"] [unique_id "aSu77YEwr5jt_cokVdwc4gAAAxg"]
[Sun Nov 30 11:37:17.961305 2025] [:error] [pid 10550:tid 10603] [client 13.74.149.244:1533] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 33"] [hostname "paramountbaldivis.com"] [uri "/plugin.php"] [unique_id "aSu77el_8Vq2nipf7mH5OgAAApg"]
[Sun Nov 30 11:37:18.758293 2025] [:error] [pid 9694:tid 9700] [client 13.74.149.244:6318] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/html-api/wp-login.php"] [unique_id "aSu77sNOaRChkzIC_nU2mgAAAMQ"]
[Sun Nov 30 11:37:19.560599 2025] [:error] [pid 12554:tid 12577] [client 13.74.149.244:4736] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 33"] [hostname "paramountbaldivis.com"] [uri "/Assets/edit.php"] [unique_id "aSu77z7q_kXd01TaAD8oQAAAABU"]
[Sun Nov 30 11:37:20.347266 2025] [:error] [pid 9694:tid 9718] [client 13.74.149.244:15703] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/images/crystal/about.php"] [unique_id "aSu78MNOaRChkzIC_nU2ngAAANY"]
[Sun Nov 30 11:37:22.928538 2025] [:error] [pid 9375:tid 9407] [client 13.74.149.244:2791] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 33"] [hostname "paramountbaldivis.com"] [uri "/wp-content/file.php"] [unique_id "aSu78t-EkWIUe87KIjOtGwAAA0M"]
[Sun Nov 30 11:37:23.718801 2025] [:error] [pid 9694:tid 9710] [client 13.74.149.244:6161] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 33"] [hostname "paramountbaldivis.com"] [uri "/.well-known/pkivalidation/log.php"] [unique_id "aSu788NOaRChkzIC_nU2oQAAAM4"]
[Sun Nov 30 11:37:24.702048 2025] [:error] [pid 12554:tid 12561] [client 13.74.149.244:15749] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aSu79D7q_kXd01TaAD8oRQAAAAU"]
[Sun Nov 30 11:37:25.577750 2025] [:error] [pid 10550:tid 10595] [client 13.74.149.244:6171] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 33"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/packed.php"] [unique_id "aSu79el_8Vq2nipf7mH5QQAAApA"]
[Sun Nov 30 11:37:26.597767 2025] [:error] [pid 10608:tid 10641] [client 13.74.149.244:11444] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 33"] [hostname "paramountbaldivis.com"] [uri "/user.php"] [unique_id "aSu79uG4qpknNxmxP5c10AAAA8Q"]
[Sun Nov 30 11:37:27.288943 2025] [:error] [pid 58704:tid 58711] [client 13.74.149.244:6193] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 33"] [hostname "paramountbaldivis.com"] [uri "/about.php"] [unique_id "aSu791gCdnbXMzbONnOv1AAAA4Q"]
[Sun Nov 30 11:37:28.008869 2025] [:error] [pid 58704:tid 58729] [client 13.74.149.244:4784] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "paramountbaldivis.com"] [uri "/filemanager.php"] [unique_id "aSu7-FgCdnbXMzbONnOv2QAAA5Y"]
[Sun Nov 30 11:37:28.695520 2025] [:error] [pid 12554:tid 12566] [client 13.74.149.244:3069] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/style-engine/wp-login.php"] [unique_id "aSu7-D7q_kXd01TaAD8oSwAAAAo"]
[Sun Nov 30 11:37:30.907158 2025] [:error] [pid 12554:tid 12561] [client 13.74.149.244:13803] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 33"] [hostname "paramountbaldivis.com"] [uri "/wp-content/mu-plugins/index.php"] [unique_id "aSu7-j7q_kXd01TaAD8oTQAAAAU"]
[Sun Nov 30 11:37:31.469644 2025] [:error] [pid 58704:tid 58728] [client 13.74.149.244:1522] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/Text/Diff/about.php"] [unique_id "aSu7-1gCdnbXMzbONnOv5QAAA5U"]
[Sun Nov 30 11:37:32.156781 2025] [:error] [pid 10550:tid 10585] [client 13.74.149.244:6446] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/images/about.php"] [unique_id "aSu7_Ol_8Vq2nipf7mH5RwAAAoY"]
[Sun Nov 30 11:37:33.059774 2025] [:error] [pid 58704:tid 58715] [client 13.74.149.244:1572] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 33"] [hostname "paramountbaldivis.com"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aSu7_VgCdnbXMzbONnOv5wAAA4g"]
[Sun Nov 30 11:37:33.715270 2025] [:error] [pid 9374:tid 9401] [client 13.74.149.244:6144] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 33"] [hostname "paramountbaldivis.com"] [uri "/images/about.php"] [unique_id "aSu7_YEwr5jt_cokVdwc-AAAAxg"]
[Sun Nov 30 11:37:34.326937 2025] [:error] [pid 10518:tid 10523] [client 13.74.149.244:10155] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 33"] [hostname "paramountbaldivis.com"] [uri "/goat1.php"] [unique_id "aSu7_g8XjrhaEDJ0Rd9yFAAAAUI"]
[Sun Nov 30 11:37:35.012205 2025] [:error] [pid 10518:tid 10537] [client 13.74.149.244:6411] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 33"] [hostname "paramountbaldivis.com"] [uri "/wp-mail.php/wp-includes/ID3/class-config.php"] [unique_id "aSu7_w8XjrhaEDJ0Rd9yFQAAAVA"]
[Sun Nov 30 11:37:35.697222 2025] [:error] [pid 10518:tid 10533] [client 13.74.149.244:15836] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aSu7_w8XjrhaEDJ0Rd9yFwAAAUw"]
[Sun Nov 30 11:37:36.462661 2025] [:error] [pid 58704:tid 58724] [client 13.74.149.244:4429] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/html-api/cloud.php"] [unique_id "aSu8AFgCdnbXMzbONnOv7gAAA5E"]
[Sun Nov 30 11:37:37.071394 2025] [:error] [pid 9375:tid 9405] [client 13.74.149.244:3191] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/wp-includes/alfa-rex.php"] [unique_id "aSu8Ad-EkWIUe87KIjOtNwAAA0E"]
[Sun Nov 30 11:37:38.051449 2025] [:error] [pid 10607:tid 10625] [client 13.74.149.244:4766] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 33"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/network/index.php"] [unique_id "aSu8AnMxNFmf1l9xA_FcTwAAAs8"]
[Sun Nov 30 11:37:38.756793 2025] [:error] [pid 10550:tid 10579] [client 13.74.149.244:3013] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 33"] [hostname "paramountbaldivis.com"] [uri "/.well-known/acme-challenge/classwithtostring.php"] [unique_id "aSu8Aul_8Vq2nipf7mH5VwAAAoA"]
[Sun Nov 30 11:37:39.346927 2025] [:error] [pid 9374:tid 9390] [client 13.74.149.244:3044] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/pomo/rk2.php"] [unique_id "aSu8A4Ewr5jt_cokVdwc_gAAAw0"]
[Sun Nov 30 11:37:40.029562 2025] [:error] [pid 9694:tid 9716] [client 13.74.149.244:6451] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 33"] [hostname "paramountbaldivis.com"] [uri "/wp-content/uploads/2024/index.php"] [unique_id "aSu8BMNOaRChkzIC_nU2yAAAANQ"]
[Sun Nov 30 11:37:40.854149 2025] [:error] [pid 58704:tid 58725] [client 13.74.149.244:2752] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 33"] [hostname "paramountbaldivis.com"] [uri "/.well-known/pki-validation/xmrlpc.php"] [unique_id "aSu8BFgCdnbXMzbONnOv-QAAA5I"]
[Sun Nov 30 11:37:41.717342 2025] [:error] [pid 12554:tid 12574] [client 13.74.149.244:15821] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 33"] [hostname "paramountbaldivis.com"] [uri "/wp-content/themes/plugin.php"] [unique_id "aSu8BT7q_kXd01TaAD8oUgAAABI"]
[Sun Nov 30 11:37:42.400834 2025] [:error] [pid 9694:tid 9698] [client 13.74.149.244:10121] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 33"] [hostname "paramountbaldivis.com"] [uri "/admin/controller/extension/extension/blue.php"] [unique_id "aSu8BsNOaRChkzIC_nU2zQAAAMI"]
[Sun Nov 30 11:37:43.088999 2025] [:error] [pid 9694:tid 9718] [client 13.74.149.244:15815] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 33"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/maint/buy.php"] [unique_id "aSu8B8NOaRChkzIC_nU2zwAAANY"]
[Sun Nov 30 11:37:43.753268 2025] [:error] [pid 58704:tid 58711] [client 13.74.149.244:6182] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 33"] [hostname "paramountbaldivis.com"] [uri "/.well-known/acme-challenge/wso112233.php"] [unique_id "aSu8B1gCdnbXMzbONnOwAAAAA4Q"]
[Sun Nov 30 11:37:44.487676 2025] [:error] [pid 10607:tid 10633] [client 13.74.149.244:5861] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/js/crop/shell.php"] [unique_id "aSu8CHMxNFmf1l9xA_FcUwAAAtc"]
[Sun Nov 30 11:37:45.792500 2025] [:error] [pid 9374:tid 9391] [client 13.74.149.244:6363] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 33"] [hostname "paramountbaldivis.com"] [uri "/dropdown.php"] [unique_id "aSu8CYEwr5jt_cokVdwdBAAAAw4"]
[Sun Nov 30 11:37:46.491642 2025] [:error] [pid 10518:tid 10524] [client 13.74.149.244:6987] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 33"] [hostname "paramountbaldivis.com"] [uri "/wp-links.php"] [unique_id "aSu8Cg8XjrhaEDJ0Rd9yGgAAAUM"]
[Sun Nov 30 11:37:47.113647 2025] [:error] [pid 9694:tid 9717] [client 13.74.149.244:1571] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 33"] [hostname "paramountbaldivis.com"] [uri "/wp-mail.php/wp-includes/ID3/esyfvxgmdq.php"] [unique_id "aSu8C8NOaRChkzIC_nU22wAAANU"]
[Sun Nov 30 11:37:47.770765 2025] [:error] [pid 58704:tid 58708] [client 13.74.149.244:10102] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/sodium_compat/autoload_classmap.php"] [unique_id "aSu8C1gCdnbXMzbONnOwBAAAA4E"]
[Sun Nov 30 11:37:48.533626 2025] [:error] [pid 9694:tid 9698] [client 13.74.149.244:15174] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aSu8DMNOaRChkzIC_nU24QAAAMI"]
[Sun Nov 30 11:37:49.235077 2025] [:error] [pid 12793:tid 12800] [client 13.74.149.244:11413] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/customize/index.php"] [unique_id "aSu8DcsEgQeCVydJZ0jtQwAAAEU"]
[Sun Nov 30 11:37:49.893201 2025] [:error] [pid 10608:tid 10661] [client 13.74.149.244:3551] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/customize/wp-conflg.php"] [unique_id "aSu8DeG4qpknNxmxP5c12gAAA9g"]
[Sun Nov 30 11:37:50.485797 2025] [:error] [pid 58704:tid 58714] [client 13.74.149.244:5131] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 34"] [hostname "paramountbaldivis.com"] [uri "/wp-content/themes/sketch/404.php"] [unique_id "aSu8DlgCdnbXMzbONnOwBgAAA4c"]
[Sun Nov 30 11:37:51.227166 2025] [:error] [pid 9375:tid 9411] [client 13.74.149.244:3018] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/images/media/text.php"] [unique_id "aSu8D9-EkWIUe87KIjOtUgAAA0c"]
[Sun Nov 30 11:37:52.069149 2025] [:error] [pid 58704:tid 58725] [client 13.74.149.244:1767] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/customize/muse.php"] [unique_id "aSu8EFgCdnbXMzbONnOwCQAAA5I"]
[Sun Nov 30 11:37:52.920813 2025] [:error] [pid 58704:tid 58729] [client 13.74.149.244:3981] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 35"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/js/admin.php"] [unique_id "aSu8EFgCdnbXMzbONnOwDAAAA5Y"]
[Sun Nov 30 11:37:53.532941 2025] [:error] [pid 9694:tid 9712] [client 13.74.149.244:5658] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/certificates/about.php"] [unique_id "aSu8EcNOaRChkzIC_nU27AAAANA"]
[Sun Nov 30 11:37:54.175626 2025] [:error] [pid 10608:tid 10657] [client 13.74.149.244:15681] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 35"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/classwithtostring.php"] [unique_id "aSu8EuG4qpknNxmxP5c13AAAA9Q"]
[Sun Nov 30 11:37:54.799035 2025] [:error] [pid 10608:tid 10652] [client 13.74.149.244:1494] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/php-compat/chosen.php"] [unique_id "aSu8EuG4qpknNxmxP5c13gAAA88"]
[Sun Nov 30 11:37:55.505669 2025] [:error] [pid 10608:tid 10639] [client 13.74.149.244:10930] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 35"] [hostname "paramountbaldivis.com"] [uri "/wp-content/uploads/2022/update.php"] [unique_id "aSu8E-G4qpknNxmxP5c14gAAA8I"]
[Sun Nov 30 11:37:56.078451 2025] [:error] [pid 12554:tid 12557] [client 13.74.149.244:5875] [client 13.74.149.244] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 13.74.149.244, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/images/wp-login.php"] [unique_id "aSu8FD7q_kXd01TaAD8oXAAAAAE"]
[Sun Nov 30 11:37:56.078521 2025] [:error] [pid 12554:tid 12557] [client 13.74.149.244:5875] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 36"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/images/wp-login.php"] [unique_id "aSu8FD7q_kXd01TaAD8oXAAAAAE"]
[Sun Nov 30 11:37:56.754630 2025] [:error] [pid 9694:tid 9707] [client 13.74.149.244:1536] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 36"] [hostname "paramountbaldivis.com"] [uri "/wp-content/themes/astra/inc/network.php"] [unique_id "aSu8FMNOaRChkzIC_nU28wAAAMs"]
[Sun Nov 30 11:37:57.372377 2025] [:error] [pid 10550:tid 10600] [client 13.74.149.244:6455] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 36"] [hostname "paramountbaldivis.com"] [uri "/shell.php"] [unique_id "aSu8Fel_8Vq2nipf7mH5bgAAApU"]
[Sun Nov 30 11:37:58.700249 2025] [:error] [pid 9694:tid 9708] [client 13.74.149.244:4452] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 36"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/includes/wp-conflg.php"] [unique_id "aSu8FsNOaRChkzIC_nU29wAAAMw"]
[Sun Nov 30 11:37:59.416166 2025] [:error] [pid 10550:tid 10593] [client 13.74.149.244:1347] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 36"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aSu8F-l_8Vq2nipf7mH5bwAAAo4"]
[Sun Nov 30 11:38:00.206781 2025] [:error] [pid 58704:tid 58728] [client 13.74.149.244:3525] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 36"] [hostname "paramountbaldivis.com"] [uri "/.well-knownold/inputs.php"] [unique_id "aSu8GFgCdnbXMzbONnOwJQAAA5U"]
[Sun Nov 30 11:38:00.801684 2025] [:error] [pid 58704:tid 58729] [client 13.74.149.244:5650] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 36"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/seoplugins/mar.php"] [unique_id "aSu8GFgCdnbXMzbONnOwJwAAA5Y"]
[Sun Nov 30 11:38:01.406829 2025] [:error] [pid 58704:tid 58718] [client 13.74.149.244:5685] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aSu8GVgCdnbXMzbONnOwLAAAA4s"]
[Sun Nov 30 11:38:02.152563 2025] [:error] [pid 9694:tid 9708] [client 13.74.149.244:1768] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 37"] [hostname "paramountbaldivis.com"] [uri "/assets/images/about.php"] [unique_id "aSu8GsNOaRChkzIC_nU3AAAAAMw"]
[Sun Nov 30 11:38:02.812468 2025] [:error] [pid 12554:tid 12558] [client 13.74.149.244:1525] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 37"] [hostname "paramountbaldivis.com"] [uri "/wp-content/uploads/json.php"] [unique_id "aSu8Gj7q_kXd01TaAD8ocwAAAAI"]
[Sun Nov 30 11:38:03.596416 2025] [:error] [pid 9694:tid 9714] [client 13.74.149.244:2783] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 37"] [hostname "paramountbaldivis.com"] [uri "/admin/uploads/lv.php"] [unique_id "aSu8G8NOaRChkzIC_nU3BAAAANI"]
[Sun Nov 30 11:38:04.216565 2025] [:error] [pid 9694:tid 9710] [client 13.74.149.244:1515] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/wp-includes/about.php"] [unique_id "aSu8HMNOaRChkzIC_nU3CAAAAM4"]
[Sun Nov 30 11:38:04.777530 2025] [:error] [pid 12554:tid 12569] [client 13.74.149.244:5156] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 37"] [hostname "paramountbaldivis.com"] [uri "/wp-content/themes/wp-pridmag/lock.php"] [unique_id "aSu8HD7q_kXd01TaAD8osAAAAA0"]
[Sun Nov 30 11:38:05.519895 2025] [:error] [pid 10518:tid 10524] [client 13.74.149.244:3041] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 37"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/js/about.php"] [unique_id "aSu8HQ8XjrhaEDJ0Rd9yIwAAAUM"]
[Sun Nov 30 11:38:06.178002 2025] [:error] [pid 10607:tid 10627] [client 13.74.149.244:3058] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 37"] [hostname "paramountbaldivis.com"] [uri "/admin/uploads/media.php"] [unique_id "aSu8HnMxNFmf1l9xA_FcXgAAAtE"]
[Sun Nov 30 11:38:07.117501 2025] [:error] [pid 10550:tid 10596] [client 13.74.149.244:5161] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 37"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/images/index.php"] [unique_id "aSu8H-l_8Vq2nipf7mH5eQAAApE"]
[Sun Nov 30 11:38:07.768131 2025] [:error] [pid 9694:tid 9716] [client 13.74.149.244:4578] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 37"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/css/colors/coffee/about.php"] [unique_id "aSu8H8NOaRChkzIC_nU3DQAAANQ"]
[Sun Nov 30 11:38:08.464112 2025] [:error] [pid 10607:tid 10621] [client 13.74.149.244:15185] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 37"] [hostname "paramountbaldivis.com"] [uri "/browse.php"] [unique_id "aSu8IHMxNFmf1l9xA_FcYQAAAss"]
[Sun Nov 30 11:38:09.066606 2025] [:error] [pid 9375:tid 9409] [client 13.74.149.244:10776] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 37"] [hostname "paramountbaldivis.com"] [uri "/shell20211028.php"] [unique_id "aSu8Id-EkWIUe87KIjOtdwAAA0U"]
[Sun Nov 30 11:38:09.711515 2025] [:error] [pid 12793:tid 12797] [client 13.74.149.244:5175] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 37"] [hostname "paramountbaldivis.com"] [uri "/wp-content/themes/twenty/twenty.php"] [unique_id "aSu8IcsEgQeCVydJZ0jtRQAAAEI"]
[Sun Nov 30 11:38:10.507247 2025] [:error] [pid 10518:tid 10540] [client 13.74.149.244:10897] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 37"] [hostname "paramountbaldivis.com"] [uri "/wp-content/themes/twentytwentytwo/alfa-rex.php"] [unique_id "aSu8Ig8XjrhaEDJ0Rd9yKgAAAVM"]
[Sun Nov 30 11:38:11.111992 2025] [:error] [pid 58704:tid 58730] [client 13.74.149.244:10906] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 37"] [hostname "paramountbaldivis.com"] [uri "/index/lock.php"] [unique_id "aSu8I1gCdnbXMzbONnOwUQAAA5c"]
[Sun Nov 30 11:38:11.824908 2025] [:error] [pid 58704:tid 58729] [client 13.74.149.244:10896] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aSu8I1gCdnbXMzbONnOwVAAAA5Y"]
[Sun Nov 30 11:38:12.552670 2025] [:error] [pid 12793:tid 12796] [client 13.74.149.244:12839] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/theme-compat/chosen.php"] [unique_id "aSu8JMsEgQeCVydJZ0jtUAAAAEE"]
[Sun Nov 30 11:38:13.291937 2025] [:error] [pid 12554:tid 12559] [client 13.74.149.244:5881] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 37"] [hostname "paramountbaldivis.com"] [uri "/wp-content/config.php"] [unique_id "aSu8JT7q_kXd01TaAD8o0QAAAAM"]
[Sun Nov 30 11:38:13.888108 2025] [:error] [pid 10518:tid 10527] [client 13.74.149.244:7446] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 37"] [hostname "paramountbaldivis.com"] [uri "/moon.php"] [unique_id "aSu8JQ8XjrhaEDJ0Rd9yMAAAAUY"]
[Sun Nov 30 11:38:14.580416 2025] [:error] [pid 9694:tid 9702] [client 13.74.149.244:3912] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "aSu8JsNOaRChkzIC_nU3GgAAAMY"]
[Sun Nov 30 11:38:15.217074 2025] [:error] [pid 10518:tid 10529] [client 13.74.149.244:4904] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 37"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aSu8Jw8XjrhaEDJ0Rd9yNAAAAUg"]
[Sun Nov 30 11:38:15.847288 2025] [:error] [pid 12793:tid 12799] [client 13.74.149.244:9481] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 37"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/css/colors/index.php"] [unique_id "aSu8J8sEgQeCVydJZ0jtUwAAAEQ"]
[Sun Nov 30 11:38:16.512156 2025] [:error] [pid 10518:tid 10541] [client 13.74.149.244:10456] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 37"] [hostname "paramountbaldivis.com"] [uri "/css/chosen.php"] [unique_id "aSu8KA8XjrhaEDJ0Rd9yOAAAAVQ"]
[Sun Nov 30 11:38:17.210679 2025] [:error] [pid 58704:tid 58708] [client 13.74.149.244:4423] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/Requests/Utility/cc.php"] [unique_id "aSu8KVgCdnbXMzbONnOwXgAAA4E"]
[Sun Nov 30 11:38:17.898416 2025] [:error] [pid 9694:tid 9719] [client 13.74.149.244:1344] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/Text/index.php"] [unique_id "aSu8KcNOaRChkzIC_nU3HAAAANc"]
[Sun Nov 30 11:38:18.724220 2025] [:error] [pid 10608:tid 10649] [client 13.74.149.244:14933] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 37"] [hostname "paramountbaldivis.com"] [uri "/packed.php"] [unique_id "aSu8KuG4qpknNxmxP5c18QAAA8w"]
[Sun Nov 30 11:38:19.416702 2025] [:error] [pid 12793:tid 12808] [client 13.74.149.244:1359] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 37"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/update.php"] [unique_id "aSu8K8sEgQeCVydJZ0jtVQAAAE0"]
[Sun Nov 30 11:38:20.226469 2025] [:error] [pid 12554:tid 12578] [client 13.74.149.244:7462] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 37"] [hostname "paramountbaldivis.com"] [uri "/wp-content/themes/astra/inc/fm.php"] [unique_id "aSu8LD7q_kXd01TaAD8o2QAAABY"]
[Sun Nov 30 11:38:20.791102 2025] [:error] [pid 12554:tid 12565] [client 13.74.149.244:4925] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 37"] [hostname "paramountbaldivis.com"] [uri "/link.php"] [unique_id "aSu8LD7q_kXd01TaAD8o2wAAAAk"]
[Sun Nov 30 11:38:22.809026 2025] [:error] [pid 58704:tid 58731] [client 13.74.149.244:3904] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 38"] [hostname "paramountbaldivis.com"] [uri "/wp-content/mu-plugins/gecko.php"] [unique_id "aSu8LlgCdnbXMzbONnOwcgAAA5g"]
[Sun Nov 30 11:38:23.482117 2025] [:error] [pid 12554:tid 12557] [client 13.74.149.244:7760] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 38"] [hostname "paramountbaldivis.com"] [uri "/footer.php"] [unique_id "aSu8Lz7q_kXd01TaAD8o4QAAAAE"]
[Sun Nov 30 11:38:24.152980 2025] [:error] [pid 9375:tid 9419] [client 13.74.149.244:14883] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aSu8MN-EkWIUe87KIjOtlwAAA08"]
[Sun Nov 30 11:38:24.704056 2025] [:error] [pid 12554:tid 12573] [client 13.74.149.244:14870] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 38"] [hostname "paramountbaldivis.com"] [uri "/config.php"] [unique_id "aSu8MD7q_kXd01TaAD8o5AAAABE"]
[Sun Nov 30 11:38:25.354003 2025] [:error] [pid 10550:tid 10600] [client 13.74.149.244:5871] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 39"] [hostname "paramountbaldivis.com"] [uri "/fw.php"] [unique_id "aSu8Mel_8Vq2nipf7mH5fgAAApU"]
[Sun Nov 30 11:38:25.990725 2025] [:error] [pid 10550:tid 10588] [client 13.74.149.244:8565] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 39"] [hostname "paramountbaldivis.com"] [uri "/post.php"] [unique_id "aSu8Mel_8Vq2nipf7mH5gAAAAok"]
[Sun Nov 30 11:38:34.396167 2025] [:error] [pid 10550:tid 10585] [client 13.74.149.244:7110] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 39"] [hostname "paramountbaldivis.com"] [uri "/ALFA_DATA/index.php"] [unique_id "aSu8Oul_8Vq2nipf7mH5hAAAAoY"]
[Sun Nov 30 11:38:52.045033 2025] [:error] [pid 12554:tid 12556] [client 13.74.149.244:2103] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 39"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/css/colors/blue/moon.php"] [unique_id "aSu8TD7q_kXd01TaAD8o-gAAAAA"]
[Sun Nov 30 11:39:44.323452 2025] [:error] [pid 9375:tid 9416] [client 13.74.149.244:1239] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/html-api/alfa-rex.php"] [unique_id "aSu8gN-EkWIUe87KIjOt2QAAA0w"]
[Sun Nov 30 11:39:45.062235 2025] [:error] [pid 10607:tid 10628] [client 13.74.149.244:10987] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 39"] [hostname "paramountbaldivis.com"] [uri "/wp-content/upgrade-temp-backup/about.php"] [unique_id "aSu8gXMxNFmf1l9xA_FchAAAAtI"]
[Sun Nov 30 11:39:45.755802 2025] [:error] [pid 10607:tid 10619] [client 13.74.149.244:8778] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 39"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/includes/m.php"] [unique_id "aSu8gXMxNFmf1l9xA_FchQAAAsk"]
[Sun Nov 30 11:39:46.436489 2025] [:error] [pid 10607:tid 10632] [client 13.74.149.244:5592] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 39"] [hostname "paramountbaldivis.com"] [uri "/images/admin.php"] [unique_id "aSu8gnMxNFmf1l9xA_FchgAAAtY"]
[Sun Nov 30 11:39:47.157421 2025] [:error] [pid 9375:tid 9411] [client 13.74.149.244:7302] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 39"] [hostname "paramountbaldivis.com"] [uri "/admin/fckeditor/editor/filemanager/alfanew.php"] [unique_id "aSu8g9-EkWIUe87KIjOt3AAAA0c"]
[Sun Nov 30 11:39:48.249357 2025] [:error] [pid 10607:tid 10613] [client 13.74.149.244:3433] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 39"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/user/admin.php"] [unique_id "aSu8hHMxNFmf1l9xA_FcigAAAsM"]
[Sun Nov 30 11:39:49.033346 2025] [:error] [pid 10608:tid 10637] [client 13.74.149.244:8694] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/IXR/shell.php"] [unique_id "aSu8heG4qpknNxmxP5c2WAAAA8A"]
[Sun Nov 30 11:39:49.860878 2025] [:error] [pid 10518:tid 10542] [client 13.74.149.244:3445] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 39"] [hostname "paramountbaldivis.com"] [uri "/wp-trackback.php"] [unique_id "aSu8hQ8XjrhaEDJ0Rd9ycQAAAVU"]
[Sun Nov 30 11:39:50.654742 2025] [:error] [pid 10518:tid 10540] [client 13.74.149.244:1436] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 39"] [hostname "paramountbaldivis.com"] [uri "/wp-content/content.php"] [unique_id "aSu8hg8XjrhaEDJ0Rd9ycwAAAVM"]
[Sun Nov 30 11:39:51.418176 2025] [:error] [pid 9375:tid 9423] [client 13.74.149.244:2157] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 39"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aSu8h9-EkWIUe87KIjOt4AAAA1M"]
[Sun Nov 30 11:39:52.402131 2025] [:error] [pid 9375:tid 9409] [client 13.74.149.244:7500] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/Requests/Utility/alfa-rex.php"] [unique_id "aSu8iN-EkWIUe87KIjOt4QAAA0U"]
[Sun Nov 30 11:39:53.446069 2025] [:error] [pid 9375:tid 9421] [client 13.74.149.244:8674] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 39"] [hostname "paramountbaldivis.com"] [uri "/wp-content/upgrade-temp-backup/ty.php"] [unique_id "aSu8id-EkWIUe87KIjOt4wAAA1E"]
[Sun Nov 30 11:39:54.306330 2025] [:error] [pid 58704:tid 58731] [client 13.74.149.244:4275] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 39"] [hostname "paramountbaldivis.com"] [uri "/.well-known/content.php"] [unique_id "aSu8ilgCdnbXMzbONnOw8QAAA5g"]
[Sun Nov 30 11:39:55.160262 2025] [:error] [pid 10608:tid 10654] [client 13.74.149.244:12512] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 39"] [hostname "paramountbaldivis.com"] [uri "/index/index.php"] [unique_id "aSu8i-G4qpknNxmxP5c2XgAAA9E"]
[Sun Nov 30 11:39:55.940238 2025] [:error] [pid 10518:tid 10544] [client 13.74.149.244:1084] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aSu8iw8XjrhaEDJ0Rd9yeAAAAVc"]
[Sun Nov 30 11:39:56.879861 2025] [:error] [pid 9694:tid 9697] [client 13.74.149.244:11007] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 39"] [hostname "paramountbaldivis.com"] [uri "/include/wp-configs.php"] [unique_id "aSu8jMNOaRChkzIC_nU3dgAAAME"]
[Sun Nov 30 11:39:57.609508 2025] [:error] [pid 58704:tid 58715] [client 13.74.149.244:2135] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 39"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/js/chosen.php"] [unique_id "aSu8jVgCdnbXMzbONnOw9gAAA4g"]
[Sun Nov 30 11:39:58.816899 2025] [:error] [pid 9694:tid 9700] [client 13.74.149.244:1049] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 39"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/maint/about.php"] [unique_id "aSu8jsNOaRChkzIC_nU3eQAAAMQ"]
[Sun Nov 30 11:39:59.906776 2025] [:error] [pid 58704:tid 58728] [client 13.74.149.244:4247] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/sodium_compat/alfa-rex.php"] [unique_id "aSu8j1gCdnbXMzbONnOw_wAAA5U"]
[Sun Nov 30 11:40:00.839784 2025] [:error] [pid 10518:tid 10539] [client 13.74.149.244:7315] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 39"] [hostname "paramountbaldivis.com"] [uri "/bg/xmrlpc.php"] [unique_id "aSu8kA8XjrhaEDJ0Rd9yfAAAAVI"]
[Sun Nov 30 11:40:01.522467 2025] [:error] [pid 12554:tid 12573] [client 13.74.149.244:1255] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 39"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/core-plugin/file-manager.php"] [unique_id "aSu8kT7q_kXd01TaAD8pJwAAABE"]
[Sun Nov 30 11:40:02.356079 2025] [:error] [pid 9694:tid 9706] [client 13.74.149.244:14178] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 39"] [hostname "paramountbaldivis.com"] [uri "/wp-content/uploads/423_index.php"] [unique_id "aSu8ksNOaRChkzIC_nU3fQAAAMo"]
[Sun Nov 30 11:40:03.428861 2025] [:error] [pid 10608:tid 10642] [client 13.74.149.244:12486] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 39"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aSu8k-G4qpknNxmxP5c2ZgAAA8U"]
[Sun Nov 30 11:40:04.215382 2025] [:error] [pid 10608:tid 10650] [client 13.74.149.244:10948] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 39"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/css/colors/blue/atomlib.php"] [unique_id "aSu8lOG4qpknNxmxP5c2ZwAAA80"]
[Sun Nov 30 11:40:05.019249 2025] [:error] [pid 9374:tid 9396] [client 13.74.149.244:14153] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 40"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/byp.php"] [unique_id "aSu8lYEwr5jt_cokVdwdXAAAAxM"]
[Sun Nov 30 11:40:06.013088 2025] [:error] [pid 10607:tid 10630] [client 13.74.149.244:4232] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/theme-compat/index.php"] [unique_id "aSu8lnMxNFmf1l9xA_FcmgAAAtQ"]
[Sun Nov 30 11:40:07.039586 2025] [:error] [pid 58704:tid 58726] [client 13.74.149.244:7413] [client 13.74.149.244] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 13.74.149.244, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-content/wp-login.php"] [unique_id "aSu8l1gCdnbXMzbONnOxCgAAA5M"]
[Sun Nov 30 11:40:07.039676 2025] [:error] [pid 58704:tid 58726] [client 13.74.149.244:7413] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 41"] [hostname "paramountbaldivis.com"] [uri "/wp-content/wp-login.php"] [unique_id "aSu8l1gCdnbXMzbONnOxCgAAA5M"]
[Sun Nov 30 11:40:07.732142 2025] [:error] [pid 9374:tid 9378] [client 13.74.149.244:5199] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 41"] [hostname "paramountbaldivis.com"] [uri "/admin/editor/engine.php"] [unique_id "aSu8l4Ewr5jt_cokVdwdYQAAAwE"]
[Sun Nov 30 11:40:08.568414 2025] [:error] [pid 12554:tid 12556] [client 13.74.149.244:10211] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 41"] [hostname "paramountbaldivis.com"] [uri "/chosen.php"] [unique_id "aSu8mD7q_kXd01TaAD8pLwAAAAA"]
[Sun Nov 30 11:40:09.486877 2025] [:error] [pid 58704:tid 58718] [client 13.74.149.244:14213] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aSu8mVgCdnbXMzbONnOxEAAAA4s"]
[Sun Nov 30 11:40:10.283048 2025] [:error] [pid 9374:tid 9391] [client 13.74.149.244:10184] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 41"] [hostname "paramountbaldivis.com"] [uri "/wp-content/themes/aahana/json.php"] [unique_id "aSu8moEwr5jt_cokVdwdZgAAAw4"]
[Sun Nov 30 11:40:11.223685 2025] [:error] [pid 9374:tid 9397] [client 13.74.149.244:5197] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/html-api/about.php"] [unique_id "aSu8m4Ewr5jt_cokVdwdagAAAxQ"]
[Sun Nov 30 11:40:12.090977 2025] [:error] [pid 10518:tid 10535] [client 13.74.149.244:10024] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 41"] [hostname "paramountbaldivis.com"] [uri "/wp-content/uploads/index.php"] [unique_id "aSu8nA8XjrhaEDJ0Rd9yhwAAAU4"]
[Sun Nov 30 11:40:12.918074 2025] [:error] [pid 12793:tid 12804] [client 13.74.149.244:3812] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aSu8nMsEgQeCVydJZ0jtlQAAAEk"]
[Sun Nov 30 11:40:13.862164 2025] [:error] [pid 58704:tid 58714] [client 13.74.149.244:12509] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 41"] [hostname "paramountbaldivis.com"] [uri "/assets/plugins/jquery-file-upload/server/php/include.php"] [unique_id "aSu8nVgCdnbXMzbONnOxFgAAA4c"]
[Sun Nov 30 11:40:14.899118 2025] [:error] [pid 12554:tid 12560] [client 13.74.149.244:4578] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 41"] [hostname "paramountbaldivis.com"] [uri "/images/lmfi2.php"] [unique_id "aSu8nj7q_kXd01TaAD8pMwAAAAQ"]
[Sun Nov 30 11:40:15.762910 2025] [:error] [pid 10608:tid 10641] [client 13.74.149.244:11871] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 41"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/function.php"] [unique_id "aSu8n-G4qpknNxmxP5c2bgAAA8Q"]
[Sun Nov 30 11:40:16.823172 2025] [:error] [pid 58704:tid 58707] [client 13.74.149.244:4990] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/Text/Diff/alfa-rex.php"] [unique_id "aSu8oFgCdnbXMzbONnOxHwAAA4A"]
[Sun Nov 30 11:40:19.640711 2025] [:error] [pid 10608:tid 10642] [client 13.74.149.244:4974] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 41"] [hostname "paramountbaldivis.com"] [uri "/images/chosen.php"] [unique_id "aSu8o-G4qpknNxmxP5c2cQAAA8U"]
[Sun Nov 30 11:40:20.459848 2025] [:error] [pid 9375:tid 9412] [client 13.74.149.244:10061] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 41"] [hostname "paramountbaldivis.com"] [uri "/mah.php"] [unique_id "aSu8pN-EkWIUe87KIjOt-wAAA0g"]
[Sun Nov 30 11:40:21.174081 2025] [:error] [pid 9694:tid 9715] [client 13.74.149.244:4519] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 41"] [hostname "paramountbaldivis.com"] [uri "/wp-content/json.php"] [unique_id "aSu8pcNOaRChkzIC_nU3iAAAANM"]
[Sun Nov 30 11:40:22.003565 2025] [:error] [pid 12554:tid 12572] [client 13.74.149.244:4968] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "aSu8pj7q_kXd01TaAD8pPwAAABA"]
[Sun Nov 30 11:40:22.724710 2025] [:error] [pid 10607:tid 10630] [client 13.74.149.244:9260] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/Requests/file.php"] [unique_id "aSu8pnMxNFmf1l9xA_FcowAAAtQ"]
[Sun Nov 30 11:40:23.605036 2025] [:error] [pid 9374:tid 9377] [client 13.74.149.244:12583] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 41"] [hostname "paramountbaldivis.com"] [uri "/wp-content/themes/seotheme/classwithtostring.php"] [unique_id "aSu8p4Ewr5jt_cokVdwddwAAAwA"]
[Sun Nov 30 11:40:24.997695 2025] [:error] [pid 9694:tid 9699] [client 13.74.149.244:7956] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/widgets/parx.php"] [unique_id "aSu8qMNOaRChkzIC_nU3mwAAAMM"]
[Sun Nov 30 11:40:25.724646 2025] [:error] [pid 10607:tid 10622] [client 13.74.149.244:8201] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 41"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/Cache/footer.php"] [unique_id "aSu8qXMxNFmf1l9xA_FcrgAAAsw"]
[Sun Nov 30 11:40:26.409961 2025] [:error] [pid 10518:tid 10545] [client 13.74.149.244:7838] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 41"] [hostname "paramountbaldivis.com"] [uri "/content.php"] [unique_id "aSu8qg8XjrhaEDJ0Rd9yrAAAAVg"]
[Sun Nov 30 11:40:27.220285 2025] [:error] [pid 10608:tid 10648] [client 13.74.149.244:10054] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/css/wp-conflg.php"] [unique_id "aSu8q-G4qpknNxmxP5c2dgAAA8s"]
[Sun Nov 30 11:40:27.830015 2025] [:error] [pid 12793:tid 12808] [client 13.74.149.244:9270] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 41"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/admin-post.php"] [unique_id "aSu8q8sEgQeCVydJZ0jtnwAAAE0"]
[Sun Nov 30 11:40:28.670878 2025] [:error] [pid 58704:tid 58722] [client 13.74.149.244:7863] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aSu8rFgCdnbXMzbONnOxNQAAA48"]
[Sun Nov 30 11:40:29.439349 2025] [:error] [pid 10607:tid 10614] [client 13.74.149.244:13588] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 42"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/includes/cong.php"] [unique_id "aSu8rXMxNFmf1l9xA_FcvQAAAsQ"]
[Sun Nov 30 11:40:30.280068 2025] [:error] [pid 10518:tid 10529] [client 13.74.149.244:5901] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 42"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/network/shell.php"] [unique_id "aSu8rg8XjrhaEDJ0Rd9ysQAAAUg"]
[Sun Nov 30 11:40:30.997638 2025] [:error] [pid 10607:tid 10627] [client 13.74.149.244:3983] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 42"] [hostname "paramountbaldivis.com"] [uri "/cgi-bin/upfile.php"] [unique_id "aSu8rnMxNFmf1l9xA_FcwgAAAtE"]
[Sun Nov 30 11:40:31.740137 2025] [:error] [pid 58704:tid 58709] [client 13.74.149.244:9226] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/images/smilies/wp-login.php"] [unique_id "aSu8r1gCdnbXMzbONnOxOAAAA4I"]
[Sun Nov 30 11:40:32.502144 2025] [:error] [pid 9374:tid 9399] [client 13.74.149.244:13520] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 42"] [hostname "paramountbaldivis.com"] [uri "/cong.php"] [unique_id "aSu8sIEwr5jt_cokVdwdhAAAAxY"]
[Sun Nov 30 11:40:33.226289 2025] [:error] [pid 12554:tid 12572] [client 13.74.149.244:9860] [client 13.74.149.244] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 13.74.149.244, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aSu8sT7q_kXd01TaAD8pSAAAABA"]
[Sun Nov 30 11:40:33.226362 2025] [:error] [pid 12554:tid 12572] [client 13.74.149.244:9860] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 43"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aSu8sT7q_kXd01TaAD8pSAAAABA"]
[Sun Nov 30 11:40:34.027249 2025] [:error] [pid 58704:tid 58725] [client 13.74.149.244:7839] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 43"] [hostname "paramountbaldivis.com"] [uri "/makeasmtp.php"] [unique_id "aSu8slgCdnbXMzbONnOxQwAAA5I"]
[Sun Nov 30 11:40:34.751642 2025] [:error] [pid 9694:tid 9710] [client 13.74.149.244:7336] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 43"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/css/colors/blue/lock.php"] [unique_id "aSu8ssNOaRChkzIC_nU3qgAAAM4"]
[Sun Nov 30 11:40:35.342686 2025] [:error] [pid 10518:tid 10540] [client 13.74.149.244:4661] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 43"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/pwnd/classwithtostring.php"] [unique_id "aSu8sw8XjrhaEDJ0Rd9ytwAAAVM"]
[Sun Nov 30 11:40:36.178282 2025] [:error] [pid 58704:tid 58708] [client 13.74.149.244:11534] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "aSu8tFgCdnbXMzbONnOxRgAAA4E"]
[Sun Nov 30 11:40:36.929952 2025] [:error] [pid 58704:tid 58720] [client 13.74.149.244:13911] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 43"] [hostname "paramountbaldivis.com"] [uri "/13.php"] [unique_id "aSu8tFgCdnbXMzbONnOxSQAAA40"]
[Sun Nov 30 11:40:37.614079 2025] [:error] [pid 9375:tid 9421] [client 13.74.149.244:11571] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aSu8td-EkWIUe87KIjOuHgAAA1E"]
[Sun Nov 30 11:40:38.343848 2025] [:error] [pid 58704:tid 58714] [client 13.74.149.244:2936] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 43"] [hostname "paramountbaldivis.com"] [uri "/.well-known/cache-compat.php"] [unique_id "aSu8tlgCdnbXMzbONnOxTAAAA4c"]
[Sun Nov 30 11:40:39.135102 2025] [:error] [pid 10607:tid 10621] [client 13.74.149.244:13945] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 43"] [hostname "paramountbaldivis.com"] [uri "/wp-mail.php/wp-includes/ID3/rnEPv9.php"] [unique_id "aSu8t3MxNFmf1l9xA_Fc4AAAAss"]
[Sun Nov 30 11:40:40.009453 2025] [:error] [pid 58704:tid 58726] [client 13.74.149.244:12554] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/php-compat/content.php"] [unique_id "aSu8uFgCdnbXMzbONnOxUQAAA5M"]
[Sun Nov 30 11:40:40.684183 2025] [:error] [pid 58704:tid 58731] [client 13.74.149.244:8835] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 43"] [hostname "paramountbaldivis.com"] [uri "/admin/function.php"] [unique_id "aSu8uFgCdnbXMzbONnOxVAAAA5g"]
[Sun Nov 30 11:40:41.368288 2025] [:error] [pid 58704:tid 58725] [client 13.74.149.244:8083] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/fonts/admin.php"] [unique_id "aSu8uVgCdnbXMzbONnOxVwAAA5I"]
[Sun Nov 30 11:40:42.051915 2025] [:error] [pid 10607:tid 10618] [client 13.74.149.244:12172] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 43"] [hostname "paramountbaldivis.com"] [uri "/doc.php"] [unique_id "aSu8unMxNFmf1l9xA_Fc5gAAAsg"]
[Sun Nov 30 11:40:42.718661 2025] [:error] [pid 9694:tid 9710] [client 13.74.149.244:3997] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aSu8usNOaRChkzIC_nU3twAAAM4"]
[Sun Nov 30 11:40:43.457018 2025] [:error] [pid 10607:tid 10615] [client 13.74.149.244:8121] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aSu8u3MxNFmf1l9xA_Fc6QAAAsU"]
[Sun Nov 30 11:40:44.051738 2025] [:error] [pid 10607:tid 10621] [client 13.74.149.244:9928] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/certificates/index.php"] [unique_id "aSu8vHMxNFmf1l9xA_Fc6wAAAss"]
[Sun Nov 30 11:40:45.008724 2025] [:error] [pid 9694:tid 9700] [client 13.74.149.244:2934] [client 13.74.149.244] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 13.74.149.244, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/.well-known/pki-validation/wp-login.php"] [unique_id "aSu8vcNOaRChkzIC_nU3vQAAAMQ"]
[Sun Nov 30 11:40:45.008792 2025] [:error] [pid 9694:tid 9700] [client 13.74.149.244:2934] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 45"] [hostname "paramountbaldivis.com"] [uri "/.well-known/pki-validation/wp-login.php"] [unique_id "aSu8vcNOaRChkzIC_nU3vQAAAMQ"]
[Sun Nov 30 11:40:45.690970 2025] [:error] [pid 10550:tid 10603] [client 13.74.149.244:9663] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 45"] [hostname "paramountbaldivis.com"] [uri "/css/install.php"] [unique_id "aSu8vel_8Vq2nipf7mH5-QAAApg"]
[Sun Nov 30 11:40:46.477814 2025] [:error] [pid 10607:tid 10633] [client 13.74.149.244:13599] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/theme-compat/wp-conflg.php/wp-content/plugins/google-seo-rank/index.php"] [unique_id "aSu8vnMxNFmf1l9xA_Fc8gAAAtc"]
[Sun Nov 30 11:40:47.185747 2025] [:error] [pid 10550:tid 10601] [client 13.74.149.244:13726] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 45"] [hostname "paramountbaldivis.com"] [uri "/xmrlpc.php"] [unique_id "aSu8v-l_8Vq2nipf7mH5_QAAApY"]
[Sun Nov 30 11:40:47.867663 2025] [:error] [pid 10550:tid 10598] [client 13.74.149.244:8853] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 45"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/css/colors/classwithtostring.php"] [unique_id "aSu8v-l_8Vq2nipf7mH5_gAAApM"]
[Sun Nov 30 11:40:48.622155 2025] [:error] [pid 58704:tid 58709] [client 13.74.149.244:6313] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/index.php"] [unique_id "aSu8wFgCdnbXMzbONnOxXwAAA4I"]
[Sun Nov 30 11:40:49.356023 2025] [:error] [pid 10518:tid 10539] [client 13.74.149.244:15393] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/fonts/install.php"] [unique_id "aSu8wQ8XjrhaEDJ0Rd9ywgAAAVI"]
[Sun Nov 30 11:40:50.003449 2025] [:error] [pid 10550:tid 10587] [client 13.74.149.244:12418] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 45"] [hostname "paramountbaldivis.com"] [uri "/assets/edit.php"] [unique_id "aSu8wul_8Vq2nipf7mH6BgAAAog"]
[Sun Nov 30 11:40:50.700777 2025] [:error] [pid 9694:tid 9714] [client 13.74.149.244:9932] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 45"] [hostname "paramountbaldivis.com"] [uri "/file.php"] [unique_id "aSu8wsNOaRChkzIC_nU3xAAAANI"]
[Sun Nov 30 11:40:51.409380 2025] [:error] [pid 10608:tid 10648] [client 13.74.149.244:8097] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 45"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/index.php"] [unique_id "aSu8w-G4qpknNxmxP5c2pAAAA8s"]
[Sun Nov 30 11:40:52.019309 2025] [:error] [pid 9694:tid 9702] [client 13.74.149.244:8183] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/Text/Diff/Engine/wp-login.php"] [unique_id "aSu8xMNOaRChkzIC_nU3xwAAAMY"]
[Sun Nov 30 11:40:52.712945 2025] [:error] [pid 58704:tid 58721] [client 13.74.149.244:5516] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 45"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/user/chosen.php"] [unique_id "aSu8xFgCdnbXMzbONnOxZAAAA44"]
[Sun Nov 30 11:40:53.582055 2025] [:error] [pid 10607:tid 10620] [client 13.74.149.244:15077] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 45"] [hostname "paramountbaldivis.com"] [uri "/wp-content/uploads/wp-conflg.php"] [unique_id "aSu8xXMxNFmf1l9xA_Fc-QAAAso"]
[Sun Nov 30 11:40:54.367505 2025] [:error] [pid 10550:tid 10599] [client 13.74.149.244:7883] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 45"] [hostname "paramountbaldivis.com"] [uri "/ok.php"] [unique_id "aSu8xul_8Vq2nipf7mH6DAAAApQ"]
[Sun Nov 30 11:40:55.367272 2025] [:error] [pid 9374:tid 9400] [client 13.74.149.244:11112] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/IXR/alfa-rex.php"] [unique_id "aSu8x4Ewr5jt_cokVdwdrAAAAxc"]
[Sun Nov 30 11:40:56.066585 2025] [:error] [pid 10550:tid 10594] [client 13.74.149.244:8129] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 45"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/autoload_classmap.php"] [unique_id "aSu8yOl_8Vq2nipf7mH6DgAAAo8"]
[Sun Nov 30 11:40:56.868733 2025] [:error] [pid 9375:tid 9424] [client 13.74.149.244:5558] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aSu8yN-EkWIUe87KIjOuNAAAA1Q"]
[Sun Nov 30 11:40:57.594340 2025] [:error] [pid 12554:tid 12571] [client 13.74.149.244:6000] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "aSu8yT7q_kXd01TaAD8pWQAAAA8"]
[Sun Nov 30 11:40:58.372486 2025] [:error] [pid 10518:tid 10541] [client 13.74.149.244:5517] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/css/alfa-rex.php"] [unique_id "aSu8yg8XjrhaEDJ0Rd9yzgAAAVQ"]
[Sun Nov 30 11:40:59.100713 2025] [:error] [pid 12554:tid 12579] [client 13.74.149.244:1194] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 13.74.149.244 on wp-login.php, counter = 45"] [hostname "paramountbaldivis.com"] [uri "/images/stories/admin-post.php"] [unique_id "aSu8yz7q_kXd01TaAD8pWwAAABc"]
[Sun Nov 30 16:39:25.744164 2025] [:error] [pid 9694:tid 9717] [client 113.141.91.58:59157] [client 113.141.91.58] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.paramountbaldivis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.paramountbaldivis.com"] [uri "/"] [unique_id "aSwCvcNOaRChkzIC_nV8oQAAANU"]
[Sun Nov 30 17:54:46.030685 2025] [:error] [pid 9694:tid 9716] [client 165.227.98.14:35090] [client 165.227.98.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paramountbaldivis.com"] [uri "/.git/config"] [unique_id "aSwUZsNOaRChkzIC_nWS4wAAANQ"]
[Sun Nov 30 17:54:52.679257 2025] [:error] [pid 10607:tid 10614] [client 165.227.98.14:58024] [client 165.227.98.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paramountbaldivis.com"] [uri "/.git/config"] [unique_id "aSwUbHMxNFmf1l9xA_GVnwAAAsQ"]
[Sun Nov 30 18:34:46.140138 2025] [:error] [pid 9374:tid 9380] [client 212.104.215.98:3824] [client 212.104.215.98] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 212.104.215.98, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSwdxoEwr5jt_cokVdxiCgAAAwM"]
[Sun Nov 30 18:34:49.325189 2025] [:error] [pid 9374:tid 9392] [client 212.104.215.98:3824] [client 212.104.215.98] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||paramountbaldivis.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "paramountbaldivis.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aSwdyYEwr5jt_cokVdxiEQAAAw8"]
[Sun Nov 30 18:34:51.020493 2025] [:error] [pid 9374:tid 9384] [client 212.104.215.98:3824] [client 212.104.215.98] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 212.104.215.98, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSwdy4Ewr5jt_cokVdxiFAAAAwc"]
[Sun Nov 30 20:31:05.126720 2025] [:error] [pid 9375:tid 9410] [client 103.13.106.248:65168] [client 103.13.106.248] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.13.106.248, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSw5Cd-EkWIUe87KIjMgnQAAA0Y"]
[Sun Nov 30 20:31:16.430197 2025] [:error] [pid 9375:tid 9415] [client 106.192.120.220:62708] [client 106.192.120.220] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.192.120.220, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aSw5FN-EkWIUe87KIjMgtQAAA0s"]
[Sun Nov 30 23:16:29.967479 2025] [:error] [pid 9694:tid 9715] [client 223.244.35.77:51303] [client 223.244.35.77] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||paramountbaldivis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aSxfzcNOaRChkzIC_nXfHwAAANM"]
[Mon Dec 01 02:10:47.257131 2025] [:error] [pid 32521:tid 32569] [client 165.227.98.14:52384] [client 165.227.98.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paramountbaldivis.com"] [uri "/.git/config"] [unique_id "aSyIpz-OXioBrWvHoPrRtgAAAxE"]
[Mon Dec 01 02:10:53.120672 2025] [:error] [pid 22995:tid 23022] [client 165.227.98.14:47760] [client 165.227.98.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paramountbaldivis.com"] [uri "/.git/config"] [unique_id "aSyIrahgK6YGad0ApM9ZBgAAARg"]
[Mon Dec 01 02:41:49.897771 2025] [:error] [pid 41526:tid 41544] [client 103.65.237.153:57241] [client 103.65.237.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paramountbaldivis.com"] [uri "/sftp-config.json"] [unique_id "aSyP7V0bjN1zt83-HJ0n0wAAAU0"]
[Mon Dec 01 02:41:50.117446 2025] [:error] [pid 32521:tid 32576] [client 103.65.237.153:57269] [client 103.65.237.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/.vscode/sftp.json"] [unique_id "aSyP7j-OXioBrWvHoPrgRAAAAxg"]
[Mon Dec 01 04:23:38.238308 2025] [:error] [pid 38739:tid 38753] [client 216.24.219.129:20913] [client 216.24.219.129] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/txets.php"] [unique_id "aSynyhV3AnmLberc_XDJrAAAAAg"]
[Mon Dec 01 04:23:38.730588 2025] [:error] [pid 39231:tid 39278] [client 216.24.219.120:55559] [client 216.24.219.120] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/txets.php"] [unique_id "aSynyu7b3R8UMMGv2zIhXQAAAZI"]
[Mon Dec 01 04:23:39.225089 2025] [:error] [pid 39231:tid 39276] [client 216.24.219.189:28537] [client 216.24.219.189] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/txets.php"] [unique_id "aSyny-7b3R8UMMGv2zIhXwAAAZA"]
[Mon Dec 01 06:44:01.654958 2025] [:error] [pid 38833:tid 38858] [client 165.227.98.14:33396] [client 165.227.98.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paramountbaldivis.com"] [uri "/.git/config"] [unique_id "aSzIsWQclTT5c5spu4YlWAAAANc"]
[Mon Dec 01 06:44:08.069743 2025] [:error] [pid 38741:tid 38807] [client 165.227.98.14:51468] [client 165.227.98.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paramountbaldivis.com"] [uri "/.git/config"] [unique_id "aSzIuM0L1cmP6Y250z351wAAAIc"]
[Mon Dec 01 07:21:15.326660 2025] [:error] [pid 57483:tid 57552] [client 165.227.98.14:41040] [client 165.227.98.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paramountbaldivis.com"] [uri "/.git/config"] [unique_id "aSzRa6EOZlyeLcmJGedlhgAAAAw"]
[Mon Dec 01 07:21:31.854143 2025] [:error] [pid 57483:tid 57552] [client 165.227.98.14:39360] [client 165.227.98.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paramountbaldivis.com"] [uri "/.git/config"] [unique_id "aSzRe6EOZlyeLcmJGedlngAAAAw"]
[Mon Dec 01 08:07:48.705817 2025] [:error] [pid 57571:tid 57589] [client 193.26.115.110:49700] [client 193.26.115.110] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paramountbaldivis.com"] [uri "/.env"] [unique_id "aSzcVJQRq1ZryWodkfH8xwAAAFA"]
[Mon Dec 01 08:07:48.738363 2025] [:error] [pid 57998:tid 58007] [client 193.26.115.110:49716] [client 193.26.115.110] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paramountbaldivis.com"] [uri "/.env"] [unique_id "aSzcVDM7rlSFI4q0gnqvSAAAAIc"]
[Mon Dec 01 09:03:23.587092 2025] [:error] [pid 43530:tid 43546] [client 192.178.4.101:44032] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aSzpW2vywIryRyy2snHA1QAAAEw"]
[Mon Dec 01 09:03:27.515124 2025] [:error] [pid 46294:tid 46305] [client 192.178.4.101:36695] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aSzpX-1BQAOME2Fzxq1opgAAAEg"]
[Mon Dec 01 09:03:30.768432 2025] [:error] [pid 46356:tid 46360] [client 192.178.4.101:42713] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aSzpYh0eoXJDsPiI2CGaSQAAAMI"]
[Mon Dec 01 09:03:40.347426 2025] [:error] [pid 46294:tid 46298] [client 192.178.4.101:36178] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aSzpbO1BQAOME2Fzxq1pCQAAAEE"]
[Mon Dec 01 09:03:44.375069 2025] [:error] [pid 46295:tid 46347] [client 192.178.4.101:41793] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aSzpcNlri_nCkLB-uuUpbwAAARc"]
[Mon Dec 01 09:03:45.396941 2025] [:error] [pid 46294:tid 46304] [client 192.178.4.101:55019] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aSzpce1BQAOME2Fzxq1pEgAAAEc"]
[Mon Dec 01 09:03:53.344222 2025] [:error] [pid 46295:tid 46334] [client 192.178.4.101:52123] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aSzpedlri_nCkLB-uuUphgAAAQo"]
[Mon Dec 01 09:03:57.071075 2025] [:error] [pid 46294:tid 46317] [client 192.178.4.101:56274] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aSzpfe1BQAOME2Fzxq1pIwAAAFQ"]
[Mon Dec 01 09:04:00.455212 2025] [:error] [pid 46389:tid 46410] [client 192.178.4.101:51036] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aSzpgE_u0xPPSURDijtiAgAAAVM"]
[Mon Dec 01 09:04:05.254933 2025] [:error] [pid 46649:tid 46658] [client 192.178.4.101:40950] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aSzphTF7aTI6a5UiXfb53QAAAAM"]
[Mon Dec 01 09:04:06.194782 2025] [:error] [pid 46740:tid 46744] [client 192.178.4.101:55437] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aSzphiCrLpNKWy5i3fwfmwAAAcA"]
[Mon Dec 01 09:04:11.081065 2025] [:error] [pid 46740:tid 46768] [client 192.178.4.101:39892] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aSzpiyCrLpNKWy5i3fwfrQAAAdc"]
[Mon Dec 01 09:07:35.459876 2025] [:error] [pid 50143:tid 50164] [client 192.178.4.101:52074] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aSzqVw4ii19UTfa9gmbshQAAABM"]
[Mon Dec 01 09:07:51.856276 2025] [:error] [pid 50172:tid 50178] [client 192.178.4.101:62551] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aSzqZ2A_oUkA7PwzMCejNgAAAEE"]
[Mon Dec 01 09:11:54.945389 2025] [:error] [pid 50173:tid 50205] [client 192.178.4.101:65033] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aSzrWov3zN9A0dVx6aRTawAAAQE"]
[Mon Dec 01 09:12:24.417364 2025] [:error] [pid 50173:tid 50219] [client 192.178.4.101:37749] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aSzreIv3zN9A0dVx6aRThgAAAQ8"]
[Mon Dec 01 09:16:56.938450 2025] [:error] [pid 50172:tid 50191] [client 192.178.4.101:40518] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aSzsiGA_oUkA7PwzMCenLQAAAE4"]
[Mon Dec 01 09:21:04.039537 2025] [:error] [pid 50172:tid 50201] [client 192.178.4.101:55878] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aSztgGA_oUkA7PwzMCeo_wAAAFg"]
[Mon Dec 01 09:25:39.822984 2025] [:error] [pid 50173:tid 50223] [client 192.178.4.101:37471] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aSzuk4v3zN9A0dVx6aRauQAAARM"]
[Mon Dec 01 09:25:44.514803 2025] [:error] [pid 50172:tid 50179] [client 192.178.4.101:41043] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aSzumGA_oUkA7PwzMCerYQAAAEI"]
[Mon Dec 01 09:25:51.235635 2025] [:error] [pid 50143:tid 50153] [client 192.178.4.101:54386] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aSzunw4ii19UTfa9gmb1BQAAAAg"]
[Mon Dec 01 10:27:12.056415 2025] [:error] [pid 60651:tid 60671] [client 165.227.98.14:51638] [client 165.227.98.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paramountbaldivis.com"] [uri "/.git/config"] [unique_id "aSz9AGFx-k5xX1VD6QLTcwAAAJE"]
[Mon Dec 01 12:14:59.328898 2025] [:error] [pid 50143:tid 50154] [client 192.178.4.101:65532] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS0WQw4ii19UTfa9gmYrgQAAAAk"]
[Mon Dec 01 12:15:06.863404 2025] [:error] [pid 50143:tid 50145] [client 192.178.4.101:62901] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS0WSg4ii19UTfa9gmYrigAAAAA"]
[Mon Dec 01 12:15:10.966138 2025] [:error] [pid 50172:tid 50179] [client 192.178.4.101:51757] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS0WTmA_oUkA7PwzMCftnAAAAEI"]
[Mon Dec 01 12:15:14.079804 2025] [:error] [pid 50173:tid 50207] [client 192.178.4.101:63753] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS0WUov3zN9A0dVx6aSboAAAAQM"]
[Mon Dec 01 12:15:18.442844 2025] [:error] [pid 7182:tid 7186] [client 192.178.4.101:39639] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS0WVn9TcBzcTIZoEPhioAAAAME"]
[Mon Dec 01 12:15:29.541717 2025] [:error] [pid 60651:tid 60660] [client 192.178.4.101:61072] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS0WYWFx-k5xX1VD6QL8mAAAAIY"]
[Mon Dec 01 12:15:36.456806 2025] [:error] [pid 50236:tid 50251] [client 192.178.4.101:54158] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS0WaNFh6opCMA7G1YQVQAAAAU0"]
[Mon Dec 01 12:15:43.505795 2025] [:error] [pid 50172:tid 50201] [client 192.178.4.101:59828] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS0Wb2A_oUkA7PwzMCftwAAAAFg"]
[Mon Dec 01 12:15:46.159831 2025] [:error] [pid 50172:tid 50191] [client 192.178.4.101:38883] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS0WcmA_oUkA7PwzMCftxwAAAE4"]
[Mon Dec 01 12:16:42.238934 2025] [:error] [pid 50173:tid 50226] [client 192.178.4.101:40231] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS0Wqov3zN9A0dVx6aScEgAAARY"]
[Mon Dec 01 12:16:45.736885 2025] [:error] [pid 60651:tid 60658] [client 192.178.4.101:36923] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS0WrWFx-k5xX1VD6QL9BwAAAIQ"]
[Mon Dec 01 12:16:48.271873 2025] [:error] [pid 50236:tid 50254] [client 192.178.4.101:57298] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS0WsNFh6opCMA7G1YQVlAAAAVA"]
[Mon Dec 01 12:17:05.840164 2025] [:error] [pid 50173:tid 50211] [client 192.178.4.101:56133] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS0WwYv3zN9A0dVx6aScJwAAAQc"]
[Mon Dec 01 12:17:20.457831 2025] [:error] [pid 50143:tid 50158] [client 192.178.4.101:57630] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS0W0A4ii19UTfa9gmYsFAAAAA0"]
[Mon Dec 01 12:17:26.909941 2025] [:error] [pid 50143:tid 50160] [client 192.178.4.101:55139] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS0W1g4ii19UTfa9gmYsGwAAAA8"]
[Mon Dec 01 12:17:30.019343 2025] [:error] [pid 7182:tid 7209] [client 192.178.4.101:49799] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS0W2n9TcBzcTIZoEPhjFwAAANg"]
[Mon Dec 01 12:17:34.240512 2025] [:error] [pid 60651:tid 60678] [client 192.178.4.101:46997] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS0W3mFx-k5xX1VD6QL9QwAAAJg"]
[Mon Dec 01 12:17:38.193284 2025] [:error] [pid 28260:tid 28262] [client 192.178.4.101:48869] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS0W4i8gx66CDAIpR75hNgAAAYA"]
[Mon Dec 01 12:18:39.394366 2025] [:error] [pid 28260:tid 28277] [client 192.178.4.101:48486] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS0XHy8gx66CDAIpR75hpQAAAY8"]
[Mon Dec 01 12:18:48.878743 2025] [:error] [pid 50172:tid 50193] [client 192.178.4.101:59349] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS0XKGA_oUkA7PwzMCfu_gAAAFA"]
[Mon Dec 01 12:19:00.536395 2025] [:error] [pid 50143:tid 50157] [client 192.178.4.101:43914] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS0XNA4ii19UTfa9gmYsWgAAAAw"]
[Mon Dec 01 12:19:08.105730 2025] [:error] [pid 7182:tid 7196] [client 192.178.4.101:52607] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS0XPH9TcBzcTIZoEPhjpQAAAMs"]
[Mon Dec 01 12:19:10.522074 2025] [:error] [pid 50143:tid 50147] [client 192.178.4.101:37468] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS0XPg4ii19UTfa9gmYsZAAAAAI"]
[Mon Dec 01 12:19:16.523782 2025] [:error] [pid 60651:tid 60675] [client 192.178.4.101:41729] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS0XRGFx-k5xX1VD6QL-SwAAAJU"]
[Mon Dec 01 12:19:19.812643 2025] [:error] [pid 28260:tid 28277] [client 192.178.4.101:63325] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS0XRy8gx66CDAIpR75h6wAAAY8"]
[Mon Dec 01 12:19:22.669800 2025] [:error] [pid 60651:tid 60663] [client 192.178.4.101:38192] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS0XSmFx-k5xX1VD6QL-VwAAAIk"]
[Mon Dec 01 12:19:28.048627 2025] [:error] [pid 60651:tid 60654] [client 192.178.4.101:44476] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS0XUGFx-k5xX1VD6QL-ZAAAAIA"]
[Mon Dec 01 12:19:30.355523 2025] [:error] [pid 50172:tid 50187] [client 192.178.4.101:49746] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS0XUmA_oUkA7PwzMCfvLAAAAEo"]
[Mon Dec 01 12:19:33.415781 2025] [:error] [pid 50173:tid 50220] [client 192.178.4.101:41598] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS0XVYv3zN9A0dVx6aSc2wAAARA"]
[Mon Dec 01 12:19:36.478296 2025] [:error] [pid 7182:tid 7198] [client 192.178.4.101:37536] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS0XWH9TcBzcTIZoEPhjxQAAAM0"]
[Mon Dec 01 12:20:48.933298 2025] [:error] [pid 50173:tid 50225] [client 192.178.4.101:38656] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS0XoIv3zN9A0dVx6aSdMwAAARU"]
[Mon Dec 01 12:20:56.857956 2025] [:error] [pid 7182:tid 7191] [client 192.178.4.101:61594] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS0XqH9TcBzcTIZoEPhkSQAAAMY"]
[Mon Dec 01 12:21:00.678853 2025] [:error] [pid 60651:tid 60665] [client 192.178.4.101:44250] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS0XrGFx-k5xX1VD6QL-sgAAAIs"]
[Mon Dec 01 12:21:13.859940 2025] [:error] [pid 7182:tid 7207] [client 192.178.4.101:60391] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS0XuX9TcBzcTIZoEPhkVAAAANY"]
[Mon Dec 01 12:21:16.627500 2025] [:error] [pid 28260:tid 28266] [client 192.178.4.101:63190] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS0XvC8gx66CDAIpR75ijQAAAYQ"]
[Mon Dec 01 12:21:23.502934 2025] [:error] [pid 60651:tid 60674] [client 192.178.4.101:43555] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS0Xw2Fx-k5xX1VD6QL-ugAAAJQ"]
[Mon Dec 01 12:21:27.352071 2025] [:error] [pid 50143:tid 50161] [client 192.178.4.101:59451] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS0Xxw4ii19UTfa9gmYtawAAABA"]
[Mon Dec 01 12:21:31.576143 2025] [:error] [pid 50143:tid 50155] [client 192.178.4.101:57484] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS0Xyw4ii19UTfa9gmYtbQAAAAo"]
[Mon Dec 01 12:21:34.907326 2025] [:error] [pid 50143:tid 50149] [client 192.178.4.101:49207] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS0Xzg4ii19UTfa9gmYtbgAAAAQ"]
[Mon Dec 01 12:21:39.018710 2025] [:error] [pid 50236:tid 50242] [client 192.178.4.101:44701] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS0X09Fh6opCMA7G1YQW8AAAAUQ"]
[Mon Dec 01 12:38:11.835505 2025] [:error] [pid 50172:tid 50184] [client 181.66.158.203:64080] [client 181.66.158.203] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||paramountbaldivis.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "paramountbaldivis.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aS0bs2A_oUkA7PwzMCf2cAAAAEc"]
[Mon Dec 01 12:39:38.492232 2025] [:error] [pid 60651:tid 60655] [client 181.66.158.203:64843] [client 181.66.158.203] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 181.66.158.203, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aS0cCmFx-k5xX1VD6QIFXgAAAIE"]
[Mon Dec 01 12:40:58.077441 2025] [:error] [pid 7182:tid 7197] [client 181.66.158.203:49525] [client 181.66.158.203] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 181.66.158.203, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aS0cWn9TcBzcTIZoEPhp-AAAAMw"]
[Mon Dec 01 13:12:16.282845 2025] [:error] [pid 7182:tid 7197] [client 110.49.126.114:49940] [client 110.49.126.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 110.49.126.114, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aS0jsH9TcBzcTIZoEPhwKgAAAMw"]
[Mon Dec 01 16:34:10.782875 2025] [:error] [pid 53359:tid 53382] [client 209.141.61.93:16639] [client 209.141.61.93] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.141.61.93, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aS1TAjjrFN7YxynOshG2GAAAAFI"]
[Mon Dec 01 16:36:08.021290 2025] [:error] [pid 53360:tid 53399] [client 209.141.61.93:28771] [client 209.141.61.93] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.141.61.93, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aS1TeBALjvdOeXyvOe3XwgAAAIg"]
[Mon Dec 01 22:02:57.090984 2025] [:error] [pid 51614:tid 51623] [client 43.153.19.83:33440] [client 43.153.19.83] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.paramountbaldivis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.paramountbaldivis.com"] [uri "/"] [unique_id "aS2gEaEd44yERYvpOsOvawAAAQc"]
[Mon Dec 01 22:41:41.800705 2025] [:error] [pid 11524:tid 11536] [client 185.2.4.79:53586] [client 185.2.4.79] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.2.4.79, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aS2pJVeLUnPqcqCYYIGW0AAAAIk"]
[Tue Dec 02 01:14:18.535780 2025] [:error] [pid 18735:tid 18779] [client 182.42.111.213:58086] [client 182.42.111.213] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||paramountbaldivis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS3M6iObBdpXdl5ZEt_jNAAAAQ8"]
[Tue Dec 02 02:17:06.642090 2025] [:error] [pid 18797:tid 18802] [client 103.65.236.149:57004] [client 103.65.236.149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paramountbaldivis.com"] [uri "/sftp-config.json"] [unique_id "aS3bonwDQfILaZGBrIxofgAAAYM"]
[Tue Dec 02 04:27:33.917700 2025] [:error] [pid 5272:tid 5290] [client 192.178.4.101:43566] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS36NewbFoRzPGfZYVRWjwAAAU8"]
[Tue Dec 02 04:27:37.030093 2025] [:error] [pid 5273:tid 5326] [client 192.178.4.101:41399] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS36OSMmXO5H1kNwHHVCkwAAAZg"]
[Tue Dec 02 04:27:41.103207 2025] [:error] [pid 3760:tid 3765] [client 192.178.4.101:65295] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS36PVjLYEjdWVcKgVVqDwAAAMM"]
[Tue Dec 02 04:27:48.438683 2025] [:error] [pid 3647:tid 3656] [client 192.178.4.101:37708] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS36RFJaqGDFgh_0XI-xKAAAAAM"]
[Tue Dec 02 04:27:52.091103 2025] [:error] [pid 3648:tid 3692] [client 192.178.4.101:64574] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS36SOQEp5icp6XOJr3ZGgAAAEg"]
[Tue Dec 02 04:27:55.818502 2025] [:error] [pid 5273:tid 5317] [client 192.178.4.101:60835] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS36SyMmXO5H1kNwHHVCnQAAAY8"]
[Tue Dec 02 04:27:59.770860 2025] [:error] [pid 3648:tid 3706] [client 192.178.4.101:38586] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS36T-QEp5icp6XOJr3ZIgAAAFY"]
[Tue Dec 02 04:28:10.770110 2025] [:error] [pid 3648:tid 3703] [client 192.178.4.101:45473] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS36WuQEp5icp6XOJr3ZJgAAAFM"]
[Tue Dec 02 04:29:31.357512 2025] [:error] [pid 3649:tid 3720] [client 192.178.4.101:65156] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS36q7wjL4uqC6YFjxF3kgAAAIk"]
[Tue Dec 02 04:29:34.481398 2025] [:error] [pid 5272:tid 5293] [client 192.178.4.101:53616] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS36ruwbFoRzPGfZYVRXDgAAAVI"]
[Tue Dec 02 04:29:38.147387 2025] [:error] [pid 3647:tid 3675] [client 192.178.4.101:41192] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS36slJaqGDFgh_0XI-xYwAAABY"]
[Tue Dec 02 04:29:42.613282 2025] [:error] [pid 5273:tid 5306] [client 192.178.4.101:56028] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS36tiMmXO5H1kNwHHVDFgAAAYQ"]
[Tue Dec 02 04:29:46.015300 2025] [:error] [pid 5272:tid 5291] [client 192.178.4.101:35351] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS36uuwbFoRzPGfZYVRXMQAAAVA"]
[Tue Dec 02 04:29:57.689398 2025] [:error] [pid 5273:tid 5314] [client 192.178.4.101:63915] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS36xSMmXO5H1kNwHHVDMAAAAYw"]
[Tue Dec 02 04:30:01.412710 2025] [:error] [pid 5272:tid 5275] [client 192.178.4.101:36115] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS36yewbFoRzPGfZYVRXQQAAAUA"]
[Tue Dec 02 04:30:06.783749 2025] [:error] [pid 5273:tid 5321] [client 192.178.4.101:48485] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS36ziMmXO5H1kNwHHVDOQAAAZM"]
[Tue Dec 02 04:30:15.465491 2025] [:error] [pid 3648:tid 3693] [client 192.178.4.101:38033] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS361-QEp5icp6XOJr3ZegAAAEk"]
[Tue Dec 02 04:30:22.431317 2025] [:error] [pid 5273:tid 5321] [client 192.178.4.101:49546] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS363iMmXO5H1kNwHHVDTQAAAZM"]
[Tue Dec 02 06:54:21.829380 2025] [:error] [pid 5272:tid 5290] [client 45.157.54.39:63351] [client 45.157.54.39] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.157.54.39, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aS4cnewbFoRzPGfZYVSU1QAAAU8"]
[Tue Dec 02 06:54:21.831944 2025] [:error] [pid 3647:tid 3677] [client 45.157.54.39:63426] [client 45.157.54.39] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.157.54.39, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aS4cnVJaqGDFgh_0XI_XwgAAABg"]
[Tue Dec 02 08:04:38.091431 2025] [:error] [pid 3648:tid 3697] [client 106.119.167.146:32982] [client 106.119.167.146] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.paramountbaldivis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.paramountbaldivis.com"] [uri "/"] [unique_id "aS4tFuQEp5icp6XOJr0hTgAAAE0"]
[Tue Dec 02 12:01:38.959947 2025] [:error] [pid 3647:tid 3672] [client 192.178.4.101:40173] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS5kolJaqGDFgh_0XI8jHwAAABM"]
[Tue Dec 02 12:01:47.601786 2025] [:error] [pid 5273:tid 5308] [client 192.178.4.101:64610] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS5kqyMmXO5H1kNwHHXHxAAAAYY"]
[Tue Dec 02 12:25:00.851049 2025] [:error] [pid 3760:tid 3779] [client 192.178.4.101:60819] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS5qHFjLYEjdWVcKgVUF3gAAANE"]
[Tue Dec 02 12:25:15.770100 2025] [:error] [pid 3648:tid 3695] [client 192.178.4.101:38807] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS5qK-QEp5icp6XOJr1jwAAAAEs"]
[Tue Dec 02 12:25:28.682328 2025] [:error] [pid 5232:tid 5253] [client 192.178.4.101:57360] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS5qOAApmO-auDy1ob562wAAARM"]
[Tue Dec 02 12:25:33.064905 2025] [:error] [pid 5273:tid 5316] [client 192.178.4.101:37987] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS5qPSMmXO5H1kNwHHXMbgAAAY4"]
[Tue Dec 02 12:25:40.461625 2025] [:error] [pid 3647:tid 3672] [client 192.178.4.101:60600] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS5qRFJaqGDFgh_0XI8oeQAAABM"]
[Tue Dec 02 12:25:42.659952 2025] [:error] [pid 48650:tid 48663] [client 192.178.4.101:48783] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS5qRoQuWSn3xrJsXbnrygAAAcg"]
[Tue Dec 02 12:39:23.364936 2025] [:error] [pid 3649:tid 3720] [client 192.178.4.101:58684] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS5te7wjL4uqC6YFjxENKwAAAIk"]
[Tue Dec 02 12:39:27.903517 2025] [:error] [pid 3649:tid 3725] [client 192.178.4.101:56370] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS5tf7wjL4uqC6YFjxENLgAAAI4"]
[Tue Dec 02 12:39:41.048127 2025] [:error] [pid 3647:tid 3659] [client 192.178.4.101:48700] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS5tjVJaqGDFgh_0XI8q9AAAAAY"]
[Tue Dec 02 12:39:48.781756 2025] [:error] [pid 48650:tid 48674] [client 192.178.4.101:42738] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS5tlIQuWSn3xrJsXbnuXQAAAdM"]
[Tue Dec 02 12:43:11.905812 2025] [:error] [pid 3649:tid 3724] [client 192.178.4.101:43360] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS5uX7wjL4uqC6YFjxEOlQAAAI0"]
[Tue Dec 02 12:43:13.161207 2025] [:error] [pid 48650:tid 48668] [client 192.178.4.101:60758] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS5uYYQuWSn3xrJsXbnvFwAAAc0"]
[Tue Dec 02 12:43:17.973316 2025] [:error] [pid 3649:tid 3725] [client 192.178.4.101:37159] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS5uZbwjL4uqC6YFjxEOowAAAI4"]
[Tue Dec 02 12:43:36.771908 2025] [:error] [pid 5272:tid 5294] [client 192.178.4.101:63930] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS5ueOwbFoRzPGfZYVT_QgAAAVM"]
[Tue Dec 02 12:43:38.129518 2025] [:error] [pid 5272:tid 5291] [client 192.178.4.101:58816] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS5ueuwbFoRzPGfZYVT_RQAAAVA"]
[Tue Dec 02 12:43:46.426986 2025] [:error] [pid 3648:tid 3692] [client 192.178.4.101:51305] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS5uguQEp5icp6XOJr1m0QAAAEg"]
[Tue Dec 02 12:43:53.264504 2025] [:error] [pid 5232:tid 5240] [client 192.178.4.101:48778] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS5uiQApmO-auDy1ob5_1wAAAQY"]
[Tue Dec 02 12:43:56.922909 2025] [:error] [pid 3649:tid 3722] [client 192.178.4.101:45760] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS5ujLwjL4uqC6YFjxEOxQAAAIs"]
[Tue Dec 02 12:46:37.182999 2025] [:error] [pid 3647:tid 3664] [client 192.178.4.101:62110] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS5vLVJaqGDFgh_0XI8sMwAAAAs"]
[Tue Dec 02 12:46:43.480723 2025] [:error] [pid 3647:tid 3659] [client 192.178.4.101:55854] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS5vM1JaqGDFgh_0XI8sOQAAAAY"]
[Tue Dec 02 12:46:48.752377 2025] [:error] [pid 48650:tid 48657] [client 192.178.4.101:63482] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS5vOIQuWSn3xrJsXbnvhgAAAcI"]
[Tue Dec 02 12:47:31.747849 2025] [:error] [pid 5272:tid 5279] [client 192.178.4.101:49753] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS5vY-wbFoRzPGfZYVT_vQAAAUQ"]
[Tue Dec 02 12:49:41.652739 2025] [:error] [pid 48650:tid 48665] [client 192.178.4.101:36599] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS5v5YQuWSn3xrJsXbnwFAAAAco"]
[Tue Dec 02 12:49:43.914687 2025] [:error] [pid 3649:tid 3734] [client 192.178.4.101:58769] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS5v57wjL4uqC6YFjxEQuQAAAJc"]
[Tue Dec 02 12:49:46.876074 2025] [:error] [pid 5272:tid 5297] [client 192.178.4.101:48191] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS5v6uwbFoRzPGfZYVQAQAAAAVY"]
[Tue Dec 02 12:50:01.493783 2025] [:error] [pid 5272:tid 5298] [client 192.178.4.101:48797] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS5v-ewbFoRzPGfZYVQAgwAAAVc"]
[Tue Dec 02 12:50:09.269987 2025] [:error] [pid 5232:tid 5236] [client 192.178.4.101:62761] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS5wAQApmO-auDy1ob6BYQAAAQI"]
[Tue Dec 02 12:50:13.865182 2025] [:error] [pid 3649:tid 3725] [client 192.178.4.101:51936] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS5wBbwjL4uqC6YFjxEQ_AAAAI4"]
[Tue Dec 02 13:12:43.477967 2025] [:error] [pid 3760:tid 3784] [client 165.22.43.113:61497] [client 165.22.43.113] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 165.22.43.113, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aS51S1jLYEjdWVcKgVUPOAAAANY"]
[Tue Dec 02 13:12:45.476865 2025] [:error] [pid 5232:tid 5251] [client 165.22.43.113:61547] [client 165.22.43.113] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 165.22.43.113, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aS51TQApmO-auDy1ob6IfwAAARE"]
[Tue Dec 02 14:11:45.950260 2025] [:error] [pid 3647:tid 3658] [client 192.178.4.101:38320] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS6DIVJaqGDFgh_0XI9AkwAAAAU"]
[Tue Dec 02 14:11:59.810495 2025] [:error] [pid 5272:tid 5286] [client 192.178.4.101:59216] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS6DL-wbFoRzPGfZYVQPqAAAAUs"]
[Tue Dec 02 14:12:03.033803 2025] [:error] [pid 3649:tid 3715] [client 192.178.4.101:53087] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS6DM7wjL4uqC6YFjxEvdwAAAIQ"]
[Tue Dec 02 14:12:09.919716 2025] [:error] [pid 5273:tid 5316] [client 192.178.4.101:65024] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS6DOSMmXO5H1kNwHHXfagAAAY4"]
[Tue Dec 02 14:12:23.333298 2025] [:error] [pid 3648:tid 3699] [client 192.178.4.101:62558] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS6DR-QEp5icp6XOJr14FAAAAE8"]
[Tue Dec 02 14:12:26.981705 2025] [:error] [pid 3760:tid 3783] [client 192.178.4.101:63088] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS6DSljLYEjdWVcKgVUY2wAAANU"]
[Tue Dec 02 14:12:29.549806 2025] [:error] [pid 48650:tid 48657] [client 192.178.4.101:52970] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS6DTYQuWSn3xrJsXbkDiwAAAcI"]
[Tue Dec 02 14:18:17.444688 2025] [:error] [pid 3760:tid 3767] [client 192.178.4.101:36064] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS6EqVjLYEjdWVcKgVUarwAAAMU"]
[Tue Dec 02 14:18:20.422923 2025] [:error] [pid 3649:tid 3716] [client 192.178.4.101:53085] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS6ErLwjL4uqC6YFjxEx_gAAAIU"]
[Tue Dec 02 14:18:24.544075 2025] [:error] [pid 3649:tid 3711] [client 192.178.4.101:35052] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS6EsLwjL4uqC6YFjxEyCwAAAIA"]
[Tue Dec 02 14:18:27.894147 2025] [:error] [pid 3648:tid 3691] [client 192.178.4.101:34851] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS6Es-QEp5icp6XOJr15gQAAAEc"]
[Tue Dec 02 14:18:42.803655 2025] [:error] [pid 3760:tid 3783] [client 192.178.4.101:54102] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS6EwljLYEjdWVcKgVUa0gAAANU"]
[Tue Dec 02 14:18:46.885115 2025] [:error] [pid 5272:tid 5283] [client 192.178.4.101:38588] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS6ExuwbFoRzPGfZYVQRfAAAAUg"]
[Tue Dec 02 14:18:48.080584 2025] [:error] [pid 3649:tid 3722] [client 192.178.4.101:54840] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS6EyLwjL4uqC6YFjxEyOgAAAIs"]
[Tue Dec 02 14:18:53.189651 2025] [:error] [pid 3649:tid 3728] [client 192.178.4.101:63165] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS6EzbwjL4uqC6YFjxEyWwAAAJE"]
[Tue Dec 02 14:20:54.742176 2025] [:error] [pid 5272:tid 5299] [client 192.178.4.101:41428] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS6FRuwbFoRzPGfZYVQSKwAAAVg"]
[Tue Dec 02 14:21:13.977525 2025] [:error] [pid 5232:tid 5248] [client 192.178.4.101:44757] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS6FWQApmO-auDy1ob6b2wAAAQ4"]
[Tue Dec 02 14:21:21.245428 2025] [:error] [pid 5273:tid 5306] [client 192.178.4.101:62449] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS6FYSMmXO5H1kNwHHXhogAAAYQ"]
[Tue Dec 02 14:21:24.305178 2025] [:error] [pid 48650:tid 48672] [client 192.178.4.101:53121] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS6FZIQuWSn3xrJsXbkHMQAAAdE"]
[Tue Dec 02 14:21:28.059656 2025] [:error] [pid 3649:tid 3715] [client 192.178.4.101:41570] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS6FaLwjL4uqC6YFjxEzOgAAAIQ"]
[Tue Dec 02 14:21:32.690845 2025] [:error] [pid 5232:tid 5246] [client 192.178.4.101:62700] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS6FbAApmO-auDy1ob6cHwAAAQw"]
[Tue Dec 02 14:24:22.806397 2025] [:error] [pid 3647:tid 3657] [client 192.178.4.101:40797] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS6GFlJaqGDFgh_0XI9DrwAAAAQ"]
[Tue Dec 02 14:24:26.327215 2025] [:error] [pid 3647:tid 3655] [client 192.178.4.101:38797] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS6GGlJaqGDFgh_0XI9DswAAAAI"]
[Tue Dec 02 14:24:51.298873 2025] [:error] [pid 5232:tid 5239] [client 192.178.4.101:64770] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS6GMwApmO-auDy1ob6dHgAAAQU"]
[Tue Dec 02 14:29:46.590862 2025] [:error] [pid 5232:tid 5237] [client 192.178.4.101:46997] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS6HWgApmO-auDy1ob6fWQAAAQM"]
[Tue Dec 02 14:30:18.918469 2025] [:error] [pid 5272:tid 5282] [client 192.178.4.101:54538] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS6HeuwbFoRzPGfZYVQUNAAAAUc"]
[Tue Dec 02 14:30:22.464818 2025] [:error] [pid 48650:tid 48669] [client 192.178.4.101:39857] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS6HfoQuWSn3xrJsXbkJoAAAAc4"]
[Tue Dec 02 14:30:25.539923 2025] [:error] [pid 5232:tid 5250] [client 192.178.4.101:38265] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS6HgQApmO-auDy1ob6fzAAAARA"]
[Tue Dec 02 14:30:28.947649 2025] [:error] [pid 5273:tid 5317] [client 192.178.4.101:44600] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS6HhCMmXO5H1kNwHHXjxQAAAY8"]
[Tue Dec 02 14:30:33.140486 2025] [:error] [pid 3649:tid 3716] [client 192.178.4.101:44650] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS6HibwjL4uqC6YFjxE4kQAAAIU"]
[Tue Dec 02 14:54:07.938354 2025] [:error] [pid 48650:tid 48665] [client 192.178.4.101:40754] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS6ND4QuWSn3xrJsXbkShAAAAco"]
[Tue Dec 02 14:54:12.109889 2025] [:error] [pid 5272:tid 5289] [client 192.178.4.101:37230] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS6NFOwbFoRzPGfZYVQaqAAAAU4"]
[Tue Dec 02 14:54:26.971892 2025] [:error] [pid 3760:tid 3776] [client 192.178.4.101:37225] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS6NIljLYEjdWVcKgVUkAAAAAM4"]
[Tue Dec 02 14:54:31.145153 2025] [:error] [pid 3647:tid 3669] [client 192.178.4.101:43495] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS6NJ1JaqGDFgh_0XI9OlwAAABA"]
[Tue Dec 02 14:54:35.864685 2025] [:error] [pid 3647:tid 3653] [client 192.178.4.101:45374] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS6NK1JaqGDFgh_0XI9OpgAAAAA"]
[Tue Dec 02 14:54:41.067724 2025] [:error] [pid 5272:tid 5287] [client 192.178.4.101:52076] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS6NMewbFoRzPGfZYVQazgAAAUw"]
[Tue Dec 02 14:54:52.305750 2025] [:error] [pid 48650:tid 48657] [client 192.178.4.101:61813] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS6NPIQuWSn3xrJsXbkSqQAAAcI"]
[Tue Dec 02 14:57:30.735596 2025] [:error] [pid 3648:tid 3699] [client 192.178.4.101:58509] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS6N2uQEp5icp6XOJr2E7wAAAE8"]
[Tue Dec 02 14:57:35.635058 2025] [:error] [pid 5232:tid 5238] [client 192.178.4.101:38485] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS6N3wApmO-auDy1ob6qcgAAAQQ"]
[Tue Dec 02 14:57:41.288477 2025] [:error] [pid 3649:tid 3733] [client 192.178.4.101:48325] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS6N5bwjL4uqC6YFjxFH9QAAAJY"]
[Tue Dec 02 14:57:46.034955 2025] [:error] [pid 48650:tid 48668] [client 192.178.4.101:37967] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS6N6oQuWSn3xrJsXbkTqQAAAc0"]
[Tue Dec 02 14:57:51.193227 2025] [:error] [pid 5232:tid 5247] [client 192.178.4.101:57820] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS6N7wApmO-auDy1ob6qlAAAAQ0"]
[Tue Dec 02 14:58:00.141322 2025] [:error] [pid 3649:tid 3719] [client 192.178.4.101:55790] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS6N-LwjL4uqC6YFjxFIFAAAAIg"]
[Tue Dec 02 14:58:07.285503 2025] [:error] [pid 3649:tid 3715] [client 192.178.4.101:49374] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS6N_7wjL4uqC6YFjxFIHQAAAIQ"]
[Tue Dec 02 14:58:12.107182 2025] [:error] [pid 5272:tid 5290] [client 192.178.4.101:63170] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS6OBOwbFoRzPGfZYVQbmAAAAU8"]
[Tue Dec 02 14:58:20.212745 2025] [:error] [pid 3649:tid 3732] [client 192.178.4.101:49455] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS6ODLwjL4uqC6YFjxFIJQAAAJU"]
[Tue Dec 02 14:58:25.396401 2025] [:error] [pid 3647:tid 3677] [client 192.178.4.101:38687] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS6OEVJaqGDFgh_0XI9P9wAAABg"]
[Tue Dec 02 15:00:56.213838 2025] [:error] [pid 3760:tid 3765] [client 192.178.4.101:47173] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS6OqFjLYEjdWVcKgVUmsAAAAMM"]
[Tue Dec 02 15:01:13.091508 2025] [:error] [pid 48650:tid 48663] [client 192.178.4.101:58244] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS6OuYQuWSn3xrJsXbkVeQAAAcg"]
[Tue Dec 02 15:01:25.488765 2025] [:error] [pid 3648:tid 3700] [client 192.178.4.101:37416] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS6OxeQEp5icp6XOJr2GmAAAAFA"]
[Tue Dec 02 15:01:34.312278 2025] [:error] [pid 5232:tid 5236] [client 192.178.4.101:63178] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS6OzgApmO-auDy1ob6sHQAAAQI"]
[Tue Dec 02 15:15:32.668902 2025] [:error] [pid 3648:tid 3708] [client 192.178.4.101:56493] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS6SFOQEp5icp6XOJr2MKQAAAFg"]
[Tue Dec 02 15:15:37.490559 2025] [:error] [pid 5232:tid 5256] [client 192.178.4.101:51813] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS6SGQApmO-auDy1ob6vRAAAARY"]
[Tue Dec 02 15:15:52.690254 2025] [:error] [pid 5273:tid 5313] [client 192.178.4.101:61712] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS6SKCMmXO5H1kNwHHXxiQAAAYs"]
[Tue Dec 02 15:16:18.001807 2025] [:error] [pid 48650:tid 48660] [client 192.178.4.101:36305] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS6SQoQuWSn3xrJsXbkZ0wAAAcU"]
[Tue Dec 02 15:18:37.267595 2025] [:error] [pid 48650:tid 48671] [client 192.178.4.101:59178] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS6SzYQuWSn3xrJsXbkaugAAAdA"]
[Tue Dec 02 15:18:42.791716 2025] [:error] [pid 3647:tid 3670] [client 192.178.4.101:47146] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS6S0lJaqGDFgh_0XI9V9QAAABE"]
[Tue Dec 02 15:18:48.162854 2025] [:error] [pid 5272:tid 5296] [client 192.178.4.101:53211] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS6S2OwbFoRzPGfZYVQgnQAAAVU"]
[Tue Dec 02 15:18:51.914037 2025] [:error] [pid 48650:tid 48664] [client 192.178.4.101:57482] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS6S24QuWSn3xrJsXbkaywAAAck"]
[Tue Dec 02 15:18:55.391413 2025] [:error] [pid 48650:tid 48671] [client 192.178.4.101:40439] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS6S34QuWSn3xrJsXbka0AAAAdA"]
[Tue Dec 02 15:18:59.175946 2025] [:error] [pid 5232:tid 5256] [client 192.178.4.101:45448] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS6S4wApmO-auDy1ob6v7wAAARY"]
[Tue Dec 02 15:29:31.449982 2025] [:error] [pid 5232:tid 5244] [client 192.178.4.101:48236] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS6VWwApmO-auDy1ob6yEwAAAQo"]
[Tue Dec 02 15:29:43.728564 2025] [:error] [pid 3760:tid 3781] [client 192.178.4.101:59416] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS6VZ1jLYEjdWVcKgVUswgAAANM"]
[Tue Dec 02 15:29:49.481887 2025] [:error] [pid 3649:tid 3721] [client 192.178.4.101:39820] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS6VbbwjL4uqC6YFjxFPtQAAAIo"]
[Tue Dec 02 15:48:05.780565 2025] [:error] [pid 3760:tid 3780] [client 192.178.4.101:63105] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS6ZtVjLYEjdWVcKgVUw0gAAANI"]
[Tue Dec 02 15:48:33.255648 2025] [:error] [pid 5272:tid 5275] [client 192.178.4.101:56518] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS6Z0ewbFoRzPGfZYVQmygAAAUA"]
[Tue Dec 02 15:48:47.402926 2025] [:error] [pid 5232:tid 5234] [client 192.178.4.101:50423] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS6Z3wApmO-auDy1ob62RwAAAQA"]
[Tue Dec 02 16:06:37.421109 2025] [:error] [pid 3760:tid 3781] [client 192.178.4.101:55030] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS6eDVjLYEjdWVcKgVU2TQAAANM"]
[Tue Dec 02 16:06:39.689668 2025] [:error] [pid 48650:tid 48671] [client 192.178.4.101:53553] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS6eD4QuWSn3xrJsXbkwmgAAAdA"]
[Tue Dec 02 16:06:44.356343 2025] [:error] [pid 48650:tid 48678] [client 192.178.4.101:51099] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS6eFIQuWSn3xrJsXbkwoAAAAdc"]
[Tue Dec 02 16:13:02.120040 2025] [:error] [pid 3647:tid 3671] [client 129.45.92.9:14866] [client 129.45.92.9] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 129.45.92.9, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aS6fjlJaqGDFgh_0XI9l7gAAABI"]
[Tue Dec 02 16:15:32.145298 2025] [:error] [pid 3648:tid 3697] [client 129.45.92.9:14872] [client 129.45.92.9] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||paramountbaldivis.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "paramountbaldivis.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aS6gJOQEp5icp6XOJr2hIgAAAE0"]
[Tue Dec 02 16:16:44.958068 2025] [:error] [pid 3647:tid 3667] [client 129.45.92.9:14875] [client 129.45.92.9] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 129.45.92.9, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aS6gbFJaqGDFgh_0XI9mrQAAAA4"]
[Tue Dec 02 18:00:15.106324 2025] [:error] [pid 5273:tid 5309] [client 192.178.4.101:41928] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS64ryMmXO5H1kNwHHUjAwAAAYc"]
[Tue Dec 02 18:00:18.469716 2025] [:error] [pid 48650:tid 48670] [client 192.178.4.101:47952] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS64soQuWSn3xrJsXblhtAAAAc8"]
[Tue Dec 02 18:00:27.727691 2025] [:error] [pid 3648:tid 3698] [client 192.178.4.101:60161] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS64u-QEp5icp6XOJr3BHwAAAE4"]
[Tue Dec 02 18:00:29.104735 2025] [:error] [pid 3760:tid 3784] [client 192.178.4.101:34948] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS64vVjLYEjdWVcKgVVNOAAAANY"]
[Tue Dec 02 18:00:38.890922 2025] [:error] [pid 3760:tid 3764] [client 192.178.4.101:62451] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS64xljLYEjdWVcKgVVNQQAAAMI"]
[Tue Dec 02 18:00:53.346725 2025] [:error] [pid 3647:tid 3658] [client 192.178.4.101:54964] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS641VJaqGDFgh_0XI-AcgAAAAU"]
[Tue Dec 02 18:00:55.970260 2025] [:error] [pid 5273:tid 5319] [client 192.178.4.101:51847] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS641yMmXO5H1kNwHHUjQgAAAZE"]
[Tue Dec 02 19:06:43.356471 2025] [:error] [pid 48650:tid 48669] [client 192.178.4.101:50857] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7IQ4QuWSn3xrJsXbl96QAAAc4"]
[Tue Dec 02 19:24:14.044428 2025] [:error] [pid 3649:tid 3727] [client 192.178.4.101:40232] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7MXrwjL4uqC6YFjxGHsQAAAJA"]
[Tue Dec 02 19:24:21.471062 2025] [:error] [pid 5273:tid 5319] [client 192.178.4.101:53988] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7MZSMmXO5H1kNwHHU6AAAAAZE"]
[Tue Dec 02 19:24:24.499328 2025] [:error] [pid 3648:tid 3703] [client 192.178.4.101:46317] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7MaOQEp5icp6XOJr3Z-wAAAFM"]
[Tue Dec 02 19:24:28.911935 2025] [:error] [pid 48650:tid 48673] [client 192.178.4.101:49096] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7MbIQuWSn3xrJsXbmD1AAAAdI"]
[Tue Dec 02 19:24:34.846496 2025] [:error] [pid 3760:tid 3775] [client 192.178.4.101:58388] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7McljLYEjdWVcKgVVeqgAAAM0"]
[Tue Dec 02 19:31:11.105796 2025] [:error] [pid 5273:tid 5305] [client 192.178.4.101:43373] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7N_yMmXO5H1kNwHHU7igAAAYM"]
[Tue Dec 02 19:31:20.792447 2025] [:error] [pid 5273:tid 5308] [client 192.178.4.101:50921] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7OCCMmXO5H1kNwHHU7lgAAAYY"]
[Tue Dec 02 19:31:46.254794 2025] [:error] [pid 3648:tid 3708] [client 192.178.4.101:63880] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7OIuQEp5icp6XOJr3b-QAAAFg"]
[Tue Dec 02 19:31:59.433227 2025] [:error] [pid 3648:tid 3705] [client 192.178.4.101:39387] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7OL-QEp5icp6XOJr3cCAAAAFU"]
[Tue Dec 02 19:31:59.721057 2025] [:error] [pid 3648:tid 3689] [client 192.178.4.101:38976] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7OL-QEp5icp6XOJr3cCQAAAEU"]
[Tue Dec 02 19:32:02.654371 2025] [:error] [pid 3648:tid 3688] [client 192.178.4.101:52709] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7OMuQEp5icp6XOJr3cCwAAAEQ"]
[Tue Dec 02 19:33:47.868088 2025] [:error] [pid 5273:tid 5306] [client 192.178.4.101:59835] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7OmyMmXO5H1kNwHHU8EgAAAYQ"]
[Tue Dec 02 19:33:58.931049 2025] [:error] [pid 5272:tid 5288] [client 192.178.4.101:48395] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7OpuwbFoRzPGfZYVRYFAAAAU0"]
[Tue Dec 02 19:38:11.931907 2025] [:error] [pid 5273:tid 5315] [client 192.178.4.101:36070] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7PoyMmXO5H1kNwHHU8wAAAAY0"]
[Tue Dec 02 19:38:20.527002 2025] [:error] [pid 5232:tid 5242] [client 192.178.4.101:48772] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7PrAApmO-auDy1ob7rmwAAAQg"]
[Tue Dec 02 19:38:46.611432 2025] [:error] [pid 3648:tid 3689] [client 192.178.4.101:38763] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7PxuQEp5icp6XOJr3d7wAAAEU"]
[Tue Dec 02 19:38:51.508373 2025] [:error] [pid 5232:tid 5256] [client 192.178.4.101:44031] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7PywApmO-auDy1ob7rqgAAARY"]
[Tue Dec 02 19:39:05.880916 2025] [:error] [pid 3649:tid 3721] [client 192.178.4.101:54036] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7P2bwjL4uqC6YFjxGKfgAAAIo"]
[Tue Dec 02 19:41:53.945840 2025] [:error] [pid 5272:tid 5280] [client 192.178.4.101:53041] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7QgewbFoRzPGfZYVRZDwAAAUU"]
[Tue Dec 02 19:41:58.777985 2025] [:error] [pid 3760:tid 3773] [client 192.178.4.101:61995] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7QhljLYEjdWVcKgVVhMQAAAMs"]
[Tue Dec 02 19:42:28.621441 2025] [:error] [pid 5273:tid 5308] [client 192.178.4.101:41607] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7QpCMmXO5H1kNwHHU9ugAAAYY"]
[Tue Dec 02 19:42:30.561869 2025] [:error] [pid 3648:tid 3705] [client 192.178.4.101:41738] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7QpuQEp5icp6XOJr3e9QAAAFU"]
[Tue Dec 02 19:42:33.498645 2025] [:error] [pid 5232:tid 5245] [client 192.178.4.101:46238] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7QqQApmO-auDy1ob7spgAAAQs"]
[Tue Dec 02 19:42:36.238137 2025] [:error] [pid 5272:tid 5295] [client 192.178.4.101:51613] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7QrOwbFoRzPGfZYVRZLwAAAVQ"]
[Tue Dec 02 19:44:23.264786 2025] [:error] [pid 48650:tid 48660] [client 192.178.4.101:58214] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7RF4QuWSn3xrJsXbmJ4QAAAcU"]
[Tue Dec 02 19:44:38.930733 2025] [:error] [pid 3649:tid 3733] [client 192.178.4.101:50206] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7RJrwjL4uqC6YFjxGLOgAAAJY"]
[Tue Dec 02 19:44:48.189929 2025] [:error] [pid 3648:tid 3701] [client 192.178.4.101:58340] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7RMOQEp5icp6XOJr3fVAAAAFE"]
[Tue Dec 02 19:44:50.809452 2025] [:error] [pid 48650:tid 48678] [client 192.178.4.101:50899] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7RMoQuWSn3xrJsXbmJ_AAAAdc"]
[Tue Dec 02 19:44:51.775387 2025] [:error] [pid 48650:tid 48669] [client 192.178.4.101:40902] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7RM4QuWSn3xrJsXbmKAAAAAc4"]
[Tue Dec 02 19:46:20.152544 2025] [:error] [pid 48650:tid 48666] [client 192.178.4.101:60388] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7RjIQuWSn3xrJsXbmKgwAAAcs"]
[Tue Dec 02 19:46:29.280857 2025] [:error] [pid 3649:tid 3726] [client 192.178.4.101:43630] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7RlbwjL4uqC6YFjxGLhwAAAI8"]
[Tue Dec 02 19:46:33.928636 2025] [:error] [pid 5273:tid 5313] [client 192.178.4.101:51576] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7RmSMmXO5H1kNwHHU-aAAAAYs"]
[Tue Dec 02 19:46:38.314416 2025] [:error] [pid 3648:tid 3685] [client 192.178.4.101:46541] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7RnuQEp5icp6XOJr3fygAAAEE"]
[Tue Dec 02 19:46:43.228219 2025] [:error] [pid 3760:tid 3762] [client 192.178.4.101:36227] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7Ro1jLYEjdWVcKgVVh1AAAAMA"]
[Tue Dec 02 19:46:45.924089 2025] [:error] [pid 48650:tid 48661] [client 192.178.4.101:52644] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7RpYQuWSn3xrJsXbmKlAAAAcY"]
[Tue Dec 02 19:46:54.526825 2025] [:error] [pid 3649:tid 3718] [client 192.178.4.101:49171] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7RrrwjL4uqC6YFjxGLlwAAAIc"]
[Tue Dec 02 19:46:57.781723 2025] [:error] [pid 3647:tid 3677] [client 192.178.4.101:40375] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7RsVJaqGDFgh_0XI-XLgAAABg"]
[Tue Dec 02 19:48:55.580310 2025] [:error] [pid 3760:tid 3764] [client 192.178.4.101:36848] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7SJ1jLYEjdWVcKgVViqAAAAMI"]
[Tue Dec 02 19:48:56.827190 2025] [:error] [pid 3649:tid 3713] [client 192.178.4.101:50969] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7SKLwjL4uqC6YFjxGMFQAAAII"]
[Tue Dec 02 19:48:59.573394 2025] [:error] [pid 3647:tid 3661] [client 192.178.4.101:51844] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7SK1JaqGDFgh_0XI-X4QAAAAg"]
[Tue Dec 02 19:49:05.499178 2025] [:error] [pid 48650:tid 48676] [client 192.178.4.101:39702] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7SMYQuWSn3xrJsXbmLswAAAdU"]
[Tue Dec 02 19:54:21.963388 2025] [:error] [pid 48650:tid 48675] [client 192.178.4.101:49035] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7TbYQuWSn3xrJsXbmOfgAAAdQ"]
[Tue Dec 02 19:54:31.915690 2025] [:error] [pid 3647:tid 3670] [client 192.178.4.101:38612] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7Td1JaqGDFgh_0XI-ZfgAAABE"]
[Tue Dec 02 19:54:41.345493 2025] [:error] [pid 48650:tid 48656] [client 192.178.4.101:49552] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7TgYQuWSn3xrJsXbmOmgAAAcE"]
[Tue Dec 02 19:54:50.552372 2025] [:error] [pid 5232:tid 5243] [client 192.178.4.101:45666] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7TigApmO-auDy1ob7vpAAAAQk"]
[Tue Dec 02 19:54:54.011673 2025] [:error] [pid 3760:tid 3764] [client 192.178.4.101:58784] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7TjljLYEjdWVcKgVVkFgAAAMI"]
[Tue Dec 02 19:57:05.248506 2025] [:error] [pid 3647:tid 3655] [client 192.178.4.101:41158] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7UEVJaqGDFgh_0XI-aNAAAAAI"]
[Tue Dec 02 19:57:10.166331 2025] [:error] [pid 48650:tid 48656] [client 192.178.4.101:40553] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7UFoQuWSn3xrJsXbmPwwAAAcE"]
[Tue Dec 02 19:57:27.979155 2025] [:error] [pid 3649:tid 3711] [client 192.178.4.101:57729] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7UJ7wjL4uqC6YFjxGOFwAAAIA"]
[Tue Dec 02 19:57:30.661856 2025] [:error] [pid 3648:tid 3693] [client 192.178.4.101:57258] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7UKuQEp5icp6XOJr3jpgAAAEk"]
[Tue Dec 02 19:57:34.478807 2025] [:error] [pid 48650:tid 48657] [client 192.178.4.101:35075] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7ULoQuWSn3xrJsXbmP9gAAAcI"]
[Tue Dec 02 19:57:35.415847 2025] [:error] [pid 5232:tid 5237] [client 192.178.4.101:60470] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7ULwApmO-auDy1ob7wVQAAAQM"]
[Tue Dec 02 20:00:19.705094 2025] [:error] [pid 3647:tid 3677] [client 192.178.4.101:44783] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7U01JaqGDFgh_0XI-bOQAAABg"]
[Tue Dec 02 20:00:39.217822 2025] [:error] [pid 5273:tid 5306] [client 192.178.4.101:41917] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7U5yMmXO5H1kNwHHVC6wAAAYQ"]
[Tue Dec 02 20:00:47.171928 2025] [:error] [pid 3649:tid 3735] [client 192.178.4.101:42109] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7U77wjL4uqC6YFjxGOvgAAAJg"]
[Tue Dec 02 20:00:58.127764 2025] [:error] [pid 3648:tid 3704] [client 192.178.4.101:40600] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7U-uQEp5icp6XOJr3k6AAAAFQ"]
[Tue Dec 02 20:03:30.443248 2025] [:error] [pid 3649:tid 3718] [client 192.178.4.101:55450] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7VkrwjL4uqC6YFjxGP0AAAAIc"]
[Tue Dec 02 20:03:36.671269 2025] [:error] [pid 3760:tid 3767] [client 192.178.4.101:55258] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7VmFjLYEjdWVcKgVVlvwAAAMU"]
[Tue Dec 02 20:03:52.838960 2025] [:error] [pid 3648:tid 3697] [client 192.178.4.101:48771] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7VqOQEp5icp6XOJr3l3QAAAE0"]
[Tue Dec 02 20:03:58.408580 2025] [:error] [pid 5232:tid 5235] [client 192.178.4.101:48172] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7VrgApmO-auDy1ob7yBgAAAQE"]
[Tue Dec 02 20:04:08.216662 2025] [:error] [pid 5272:tid 5276] [client 192.178.4.101:64526] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7VuOwbFoRzPGfZYVRdgAAAAUE"]
[Tue Dec 02 20:04:14.420496 2025] [:error] [pid 5232:tid 5256] [client 192.178.4.101:65425] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7VvgApmO-auDy1ob7yEgAAARY"]
[Tue Dec 02 20:06:04.301595 2025] [:error] [pid 3647:tid 3662] [client 192.178.4.101:36267] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7WLFJaqGDFgh_0XI-cwwAAAAk"]
[Tue Dec 02 20:06:10.773810 2025] [:error] [pid 3648:tid 3706] [client 192.178.4.101:48088] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7WMuQEp5icp6XOJr3muAAAAFY"]
[Tue Dec 02 20:06:18.049512 2025] [:error] [pid 3649:tid 3712] [client 192.178.4.101:35768] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7WOrwjL4uqC6YFjxGQVQAAAIE"]
[Tue Dec 02 20:06:24.140103 2025] [:error] [pid 3648:tid 3692] [client 192.178.4.101:59487] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7WQOQEp5icp6XOJr3mwAAAAEg"]
[Tue Dec 02 20:06:28.190686 2025] [:error] [pid 3649:tid 3711] [client 192.178.4.101:60391] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7WRLwjL4uqC6YFjxGQWgAAAIA"]
[Tue Dec 02 20:06:33.912121 2025] [:error] [pid 5272:tid 5287] [client 192.178.4.101:35293] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7WSewbFoRzPGfZYVRd-gAAAUw"]
[Tue Dec 02 20:06:51.820888 2025] [:error] [pid 48650:tid 48655] [client 192.178.4.101:42607] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7WW4QuWSn3xrJsXbmUMwAAAcA"]
[Tue Dec 02 20:10:48.914394 2025] [:error] [pid 5272:tid 5276] [client 192.178.4.101:52129] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7XSOwbFoRzPGfZYVRewwAAAUE"]
[Tue Dec 02 20:11:15.999936 2025] [:error] [pid 48650:tid 48676] [client 192.178.4.101:43468] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7XY4QuWSn3xrJsXbmV9gAAAdU"]
[Tue Dec 02 20:11:35.146976 2025] [:error] [pid 5272:tid 5293] [client 192.178.4.101:52030] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7Xd-wbFoRzPGfZYVRe4gAAAVI"]
[Tue Dec 02 20:15:12.891655 2025] [:error] [pid 5273:tid 5322] [client 192.178.4.101:58537] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7YUCMmXO5H1kNwHHVG1wAAAZQ"]
[Tue Dec 02 20:15:20.654527 2025] [:error] [pid 3648:tid 3706] [client 192.178.4.101:40006] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7YWOQEp5icp6XOJr3pZQAAAFY"]
[Tue Dec 02 20:15:25.315911 2025] [:error] [pid 3648:tid 3699] [client 192.178.4.101:43884] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7YXeQEp5icp6XOJr3paAAAAE8"]
[Tue Dec 02 20:15:25.644198 2025] [:error] [pid 48650:tid 48665] [client 192.178.4.101:35984] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7YXYQuWSn3xrJsXbmXeQAAAco"]
[Tue Dec 02 20:15:37.661771 2025] [:error] [pid 3647:tid 3674] [client 192.178.4.101:54980] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7YaVJaqGDFgh_0XI-fbAAAABU"]
[Tue Dec 02 20:15:44.178046 2025] [:error] [pid 3760:tid 3767] [client 192.178.4.101:37599] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7YcFjLYEjdWVcKgVVnzAAAAMU"]
[Tue Dec 02 20:15:51.066051 2025] [:error] [pid 48650:tid 48674] [client 192.178.4.101:60810] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7Yd4QuWSn3xrJsXbmXlAAAAdM"]
[Tue Dec 02 20:17:50.992025 2025] [:error] [pid 3647:tid 3675] [client 192.178.4.101:40902] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7Y7lJaqGDFgh_0XI-f6QAAABY"]
[Tue Dec 02 20:18:00.345409 2025] [:error] [pid 48650:tid 48676] [client 192.178.4.101:64925] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7Y-IQuWSn3xrJsXbmYFQAAAdU"]
[Tue Dec 02 20:18:30.118692 2025] [:error] [pid 3649:tid 3714] [client 192.178.4.101:50405] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7ZFrwjL4uqC6YFjxGTYQAAAIM"]
[Tue Dec 02 20:18:34.177695 2025] [:error] [pid 3760:tid 3770] [client 192.178.4.101:40928] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7ZGljLYEjdWVcKgVVoUQAAAMg"]
[Tue Dec 02 20:21:27.258021 2025] [:error] [pid 3649:tid 3732] [client 192.178.4.101:50532] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7Zx7wjL4uqC6YFjxGUKgAAAJU"]
[Tue Dec 02 20:21:45.053616 2025] [:error] [pid 5273:tid 5307] [client 192.178.4.101:58844] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7Z2SMmXO5H1kNwHHVIewAAAYU"]
[Tue Dec 02 20:26:03.727420 2025] [:error] [pid 3648:tid 3684] [client 192.178.4.101:55471] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7a2-QEp5icp6XOJr3sdAAAAEA"]
[Tue Dec 02 20:26:15.106884 2025] [:error] [pid 5273:tid 5311] [client 192.178.4.101:53897] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7a5yMmXO5H1kNwHHVJxQAAAYk"]
[Tue Dec 02 20:26:20.721745 2025] [:error] [pid 5273:tid 5321] [client 192.178.4.101:53800] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7a7CMmXO5H1kNwHHVJzgAAAZM"]
[Tue Dec 02 20:26:25.251109 2025] [:error] [pid 48650:tid 48661] [client 192.178.4.101:43092] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7a8YQuWSn3xrJsXbmcDQAAAcY"]
[Tue Dec 02 20:26:37.077226 2025] [:error] [pid 3760:tid 3786] [client 192.178.4.101:55368] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7a_VjLYEjdWVcKgVVqKAAAANg"]
[Tue Dec 02 20:26:46.314692 2025] [:error] [pid 3760:tid 3775] [client 192.178.4.101:54359] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7bBljLYEjdWVcKgVVqMAAAAM0"]
[Tue Dec 02 20:26:53.959852 2025] [:error] [pid 3649:tid 3713] [client 192.178.4.101:53933] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7bDbwjL4uqC6YFjxGVWAAAAII"]
[Tue Dec 02 20:38:57.306211 2025] [:error] [pid 5232:tid 5235] [client 192.178.4.101:50970] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7d4QApmO-auDy1ob77KgAAAQE"]
[Tue Dec 02 20:39:16.056190 2025] [:error] [pid 3647:tid 3656] [client 192.178.4.101:52566] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7d9FJaqGDFgh_0XI-mJQAAAAM"]
[Tue Dec 02 20:39:21.655279 2025] [:error] [pid 5273:tid 5303] [client 192.178.4.101:49493] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7d-SMmXO5H1kNwHHVOQgAAAYE"]
[Tue Dec 02 20:39:27.054435 2025] [:error] [pid 3648:tid 3684] [client 192.178.4.101:50052] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7d_-QEp5icp6XOJr3xbAAAAEA"]
[Tue Dec 02 20:39:30.532145 2025] [:error] [pid 48650:tid 48659] [client 192.178.4.101:61831] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7eAoQuWSn3xrJsXbmixQAAAcQ"]
[Tue Dec 02 20:39:42.884010 2025] [:error] [pid 5232:tid 5236] [client 192.178.4.101:38396] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7eDgApmO-auDy1ob77TgAAAQI"]
[Tue Dec 02 20:39:47.470764 2025] [:error] [pid 3760:tid 3785] [client 192.178.4.101:51731] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7eE1jLYEjdWVcKgVVtWgAAANc"]
[Tue Dec 02 20:39:51.517899 2025] [:error] [pid 5273:tid 5305] [client 192.178.4.101:51621] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7eFyMmXO5H1kNwHHVOjgAAAYM"]
[Tue Dec 02 20:41:50.479099 2025] [:error] [pid 3648:tid 3686] [client 192.178.4.101:55645] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7ejuQEp5icp6XOJr3yHwAAAEI"]
[Tue Dec 02 20:41:56.120207 2025] [:error] [pid 48650:tid 48677] [client 192.178.4.101:58764] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7elIQuWSn3xrJsXbmkEwAAAdY"]
[Tue Dec 02 20:42:01.982746 2025] [:error] [pid 5272:tid 5292] [client 192.178.4.101:39373] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7emewbFoRzPGfZYVRmYAAAAVE"]
[Tue Dec 02 20:42:06.230417 2025] [:error] [pid 3647:tid 3674] [client 192.178.4.101:41361] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7enlJaqGDFgh_0XI-ngQAAABU"]
[Tue Dec 02 20:42:10.498164 2025] [:error] [pid 3649:tid 3720] [client 192.178.4.101:46416] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7eorwjL4uqC6YFjxGabQAAAIk"]
[Tue Dec 02 20:42:15.370588 2025] [:error] [pid 48650:tid 48667] [client 192.178.4.101:46141] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7ep4QuWSn3xrJsXbmkuAAAAcw"]
[Tue Dec 02 20:42:21.855079 2025] [:error] [pid 3649:tid 3727] [client 192.178.4.101:47156] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7erbwjL4uqC6YFjxGafgAAAJA"]
[Tue Dec 02 20:42:25.008194 2025] [:error] [pid 48650:tid 48658] [client 192.178.4.101:48772] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7esYQuWSn3xrJsXbmlBgAAAcM"]
[Tue Dec 02 20:42:29.293637 2025] [:error] [pid 5272:tid 5294] [client 192.178.4.101:53055] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7etewbFoRzPGfZYVRmcwAAAVM"]
[Tue Dec 02 20:42:34.907451 2025] [:error] [pid 3760:tid 3783] [client 192.178.4.101:36758] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7euljLYEjdWVcKgVVuBgAAANU"]
[Tue Dec 02 20:44:20.775331 2025] [:error] [pid 5272:tid 5276] [client 192.178.4.101:54108] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7fJOwbFoRzPGfZYVRm8AAAAUE"]
[Tue Dec 02 20:44:31.980404 2025] [:error] [pid 3648:tid 3693] [client 192.178.4.101:53182] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7fL-QEp5icp6XOJr30SgAAAEk"]
[Tue Dec 02 20:44:38.602103 2025] [:error] [pid 48650:tid 48660] [client 192.178.4.101:35354] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7fNoQuWSn3xrJsXbmooAAAAcU"]
[Tue Dec 02 20:48:29.029649 2025] [:error] [pid 5272:tid 5297] [client 192.178.4.101:49718] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7gHewbFoRzPGfZYVRn0wAAAVY"]
[Tue Dec 02 20:48:35.446218 2025] [:error] [pid 3649:tid 3722] [client 192.178.4.101:59030] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7gI7wjL4uqC6YFjxGcdAAAAIs"]
[Tue Dec 02 20:48:45.260457 2025] [:error] [pid 3647:tid 3670] [client 192.178.4.101:39546] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7gLVJaqGDFgh_0XI-qiAAAABE"]
[Tue Dec 02 20:48:53.781853 2025] [:error] [pid 3648:tid 3702] [client 192.178.4.101:55444] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7gNeQEp5icp6XOJr31qgAAAFI"]
[Tue Dec 02 20:48:57.517632 2025] [:error] [pid 48650:tid 48677] [client 192.178.4.101:37967] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7gOYQuWSn3xrJsXbmqcwAAAdY"]
[Tue Dec 02 20:49:02.054957 2025] [:error] [pid 5273:tid 5311] [client 192.178.4.101:39409] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7gPiMmXO5H1kNwHHVSQAAAAYk"]
[Tue Dec 02 20:49:06.756909 2025] [:error] [pid 5273:tid 5322] [client 192.178.4.101:50391] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7gQiMmXO5H1kNwHHVSSgAAAZQ"]
[Tue Dec 02 20:49:19.797509 2025] [:error] [pid 5272:tid 5276] [client 192.178.4.101:36828] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7gT-wbFoRzPGfZYVRn8gAAAUE"]
[Tue Dec 02 20:50:47.906796 2025] [:error] [pid 5273:tid 5304] [client 192.178.4.101:52533] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7gpyMmXO5H1kNwHHVTJQAAAYI"]
[Tue Dec 02 20:50:56.898182 2025] [:error] [pid 48650:tid 48669] [client 192.178.4.101:62089] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7gsIQuWSn3xrJsXbmrxgAAAc4"]
[Tue Dec 02 20:51:00.509840 2025] [:error] [pid 5232:tid 5250] [client 192.178.4.101:54603] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7gtAApmO-auDy1ob7-0AAAARA"]
[Tue Dec 02 20:51:05.080189 2025] [:error] [pid 3648:tid 3684] [client 192.178.4.101:47740] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7gueQEp5icp6XOJr323AAAAEA"]
[Tue Dec 02 20:51:08.054959 2025] [:error] [pid 5273:tid 5309] [client 192.178.4.101:63030] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7gvCMmXO5H1kNwHHVTOwAAAYc"]
[Tue Dec 02 20:51:31.480772 2025] [:error] [pid 5232:tid 5239] [client 192.178.4.101:51412] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7g0wApmO-auDy1ob7_EgAAAQU"]
[Tue Dec 02 20:51:35.857333 2025] [:error] [pid 5272:tid 5278] [client 192.178.4.101:53750] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7g1-wbFoRzPGfZYVRo5QAAAUM"]
[Tue Dec 02 20:51:42.967686 2025] [:error] [pid 3648:tid 3692] [client 192.178.4.101:44361] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7g3uQEp5icp6XOJr33TAAAAEg"]
[Tue Dec 02 20:52:47.240992 2025] [:error] [pid 5272:tid 5284] [client 192.178.4.101:45359] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7hH-wbFoRzPGfZYVRpRAAAAUk"]
[Tue Dec 02 20:52:50.827911 2025] [:error] [pid 3647:tid 3674] [client 192.178.4.101:48062] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7hIlJaqGDFgh_0XI-sWAAAABU"]
[Tue Dec 02 20:53:09.977669 2025] [:error] [pid 3648:tid 3700] [client 192.178.4.101:41644] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7hNeQEp5icp6XOJr335AAAAFA"]
[Tue Dec 02 20:53:16.483584 2025] [:error] [pid 5232:tid 5245] [client 192.178.4.101:34953] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7hPAApmO-auDy1ob7_jQAAAQs"]
[Tue Dec 02 20:53:33.393607 2025] [:error] [pid 3648:tid 3685] [client 192.178.4.101:60731] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7hTeQEp5icp6XOJr34AwAAAEE"]
[Tue Dec 02 20:55:10.991505 2025] [:error] [pid 3648:tid 3690] [client 192.178.4.101:39621] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7hruQEp5icp6XOJr34wwAAAEY"]
[Tue Dec 02 20:55:14.321723 2025] [:error] [pid 5232:tid 5255] [client 192.178.4.101:63533] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7hsgApmO-auDy1ob4AHwAAARU"]
[Tue Dec 02 20:55:18.174673 2025] [:error] [pid 3647:tid 3660] [client 192.178.4.101:46186] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7htlJaqGDFgh_0XI-tFgAAAAc"]
[Tue Dec 02 20:55:29.127995 2025] [:error] [pid 5273:tid 5325] [client 192.178.4.101:48772] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7hwSMmXO5H1kNwHHVU7QAAAZc"]
[Tue Dec 02 20:55:47.497275 2025] [:error] [pid 48650:tid 48655] [client 192.178.4.101:55167] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7h04QuWSn3xrJsXbmuYQAAAcA"]
[Tue Dec 02 20:55:50.494874 2025] [:error] [pid 3649:tid 3725] [client 192.178.4.101:61840] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7h1rwjL4uqC6YFjxGfNQAAAI4"]
[Tue Dec 02 20:55:55.521761 2025] [:error] [pid 48650:tid 48672] [client 192.178.4.101:50917] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7h24QuWSn3xrJsXbmueQAAAdE"]
[Tue Dec 02 20:55:58.627023 2025] [:error] [pid 3760:tid 3782] [client 192.178.4.101:42539] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7h3ljLYEjdWVcKgVVyJgAAANQ"]
[Tue Dec 02 20:57:27.528866 2025] [:error] [pid 48650:tid 48667] [client 192.178.4.101:37158] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7iN4QuWSn3xrJsXbmvSQAAAcw"]
[Tue Dec 02 20:57:33.921304 2025] [:error] [pid 3760:tid 3773] [client 192.178.4.101:62287] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7iPVjLYEjdWVcKgVVylQAAAMs"]
[Tue Dec 02 20:57:40.988788 2025] [:error] [pid 48650:tid 48655] [client 192.178.4.101:50900] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7iRIQuWSn3xrJsXbmvcQAAAcA"]
[Tue Dec 02 20:57:46.165672 2025] [:error] [pid 48650:tid 48666] [client 192.178.4.101:59683] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7iSoQuWSn3xrJsXbmvhAAAAcs"]
[Tue Dec 02 20:57:56.963767 2025] [:error] [pid 5272:tid 5284] [client 192.178.4.101:53057] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7iVOwbFoRzPGfZYVRq1QAAAUk"]
[Tue Dec 02 20:58:20.059063 2025] [:error] [pid 3648:tid 3706] [client 192.178.4.101:44780] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7ibOQEp5icp6XOJr356QAAAFY"]
[Tue Dec 02 21:01:13.065739 2025] [:error] [pid 3648:tid 3700] [client 192.178.4.101:63259] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS7jGeQEp5icp6XOJr37HwAAAFA"]
[Tue Dec 02 21:07:11.634489 2025] [:error] [pid 5272:tid 5278] [client 182.42.111.156:57255] [client 182.42.111.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.paramountbaldivis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.paramountbaldivis.com"] [uri "/"] [unique_id "aS7kf-wbFoRzPGfZYVRthAAAAUM"]
[Tue Dec 02 23:28:59.406842 2025] [:error] [pid 48650:tid 48658] [client 192.178.4.101:61960] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8Fu4QuWSn3xrJsXbn6wAAAAcM"]
[Tue Dec 02 23:29:01.899542 2025] [:error] [pid 3760:tid 3781] [client 192.178.4.101:36471] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8FvVjLYEjdWVcKgVWZAQAAANM"]
[Tue Dec 02 23:29:10.260647 2025] [:error] [pid 3760:tid 3770] [client 192.178.4.101:39878] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8FxljLYEjdWVcKgVWZEQAAAMg"]
[Tue Dec 02 23:29:12.730453 2025] [:error] [pid 5232:tid 5254] [client 192.178.4.101:63314] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8FyAApmO-auDy1ob4ozQAAARQ"]
[Tue Dec 02 23:29:13.657998 2025] [:error] [pid 3648:tid 3690] [client 192.178.4.101:41758] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8FyeQEp5icp6XOJr0w_gAAAEY"]
[Tue Dec 02 23:29:29.932414 2025] [:error] [pid 3649:tid 3712] [client 192.178.4.101:64009] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8F2bwjL4uqC6YFjxHK6AAAAIE"]
[Wed Dec 03 00:22:26.444018 2025] [:error] [pid 25475:tid 25523] [client 192.178.4.101:37880] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8SQh7VdEeEe8GnPSXtxgAAAQs"]
[Wed Dec 03 00:22:27.474108 2025] [:error] [pid 47069:tid 47143] [client 192.178.4.101:37730] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8SQ3liPX01jdRNUv1ZHgAAAJA"]
[Wed Dec 03 00:22:29.322518 2025] [:error] [pid 47068:tid 47121] [client 192.178.4.101:52888] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8SRSDFatpzeF4tcYVkQgAAAFU"]
[Wed Dec 03 00:22:31.695875 2025] [:error] [pid 47067:tid 47083] [client 192.178.4.101:40672] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8SRwcYJkWYuBnpVaoUtQAAAAs"]
[Wed Dec 03 00:22:39.178780 2025] [:error] [pid 47069:tid 47146] [client 192.178.4.101:38351] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8ST3liPX01jdRNUv1ZQAAAAJM"]
[Wed Dec 03 00:22:46.015089 2025] [:error] [pid 47068:tid 47115] [client 192.178.4.101:48174] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8SViDFatpzeF4tcYVkZwAAAE8"]
[Wed Dec 03 00:22:48.287729 2025] [:error] [pid 47158:tid 47165] [client 192.178.4.101:35004] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8SWF3-jeg4VwJRw7HoBQAAAMU"]
[Wed Dec 03 00:22:50.580985 2025] [:error] [pid 47069:tid 47147] [client 192.178.4.101:39233] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8SWnliPX01jdRNUv1ZZQAAAJQ"]
[Wed Dec 03 00:22:53.079949 2025] [:error] [pid 47067:tid 47078] [client 192.178.4.101:38696] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8SXQcYJkWYuBnpVaoU8gAAAAY"]
[Wed Dec 03 00:24:04.203678 2025] [:error] [pid 47069:tid 47132] [client 192.178.4.101:46667] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8SpHliPX01jdRNUv1aRwAAAIU"]
[Wed Dec 03 00:24:12.896395 2025] [:error] [pid 47069:tid 47134] [client 192.178.4.101:40938] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8SrHliPX01jdRNUv1aYAAAAIc"]
[Wed Dec 03 00:24:31.222881 2025] [:error] [pid 47158:tid 47176] [client 192.178.4.101:41461] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8Sv13-jeg4VwJRw7HpdgAAANA"]
[Wed Dec 03 00:24:36.133148 2025] [:error] [pid 25475:tid 25536] [client 192.178.4.101:41833] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8SxB7VdEeEe8GnPSXv4wAAARg"]
[Wed Dec 03 00:24:54.930069 2025] [:error] [pid 47067:tid 47080] [client 192.178.4.101:38441] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8S1gcYJkWYuBnpVaoWfwAAAAg"]
[Wed Dec 03 00:24:55.874013 2025] [:error] [pid 25475:tid 25529] [client 192.178.4.101:50042] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8S1x7VdEeEe8GnPSXwRQAAARE"]
[Wed Dec 03 00:24:59.737869 2025] [:error] [pid 25475:tid 25522] [client 192.178.4.101:63285] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8S2x7VdEeEe8GnPSXwVgAAAQo"]
[Wed Dec 03 00:27:15.111504 2025] [:error] [pid 47067:tid 47090] [client 192.178.4.101:37983] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8TYwcYJkWYuBnpVaoYHQAAABI"]
[Wed Dec 03 00:27:17.253864 2025] [:error] [pid 25475:tid 25529] [client 192.178.4.101:35692] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8TZR7VdEeEe8GnPSXzHAAAARE"]
[Wed Dec 03 00:27:20.869510 2025] [:error] [pid 47068:tid 47121] [client 192.178.4.101:56608] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8TaCDFatpzeF4tcYVnfgAAAFU"]
[Wed Dec 03 00:27:29.250561 2025] [:error] [pid 47068:tid 47119] [client 192.178.4.101:40816] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8TcSDFatpzeF4tcYVnnwAAAFM"]
[Wed Dec 03 00:27:40.427263 2025] [:error] [pid 47067:tid 47074] [client 192.178.4.101:54955] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8TfAcYJkWYuBnpVaoYzgAAAAI"]
[Wed Dec 03 00:27:55.715732 2025] [:error] [pid 47067:tid 47079] [client 192.178.4.101:65441] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8TiwcYJkWYuBnpVaoZPAAAAAc"]
[Wed Dec 03 00:28:00.230569 2025] [:error] [pid 47069:tid 47147] [client 192.178.4.101:49872] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8TkHliPX01jdRNUv1dwgAAAJQ"]
[Wed Dec 03 00:29:53.060506 2025] [:error] [pid 47158:tid 47176] [client 192.178.4.101:46041] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8UAV3-jeg4VwJRw7HvxgAAANA"]
[Wed Dec 03 00:30:06.287622 2025] [:error] [pid 25475:tid 25527] [client 192.178.4.101:51359] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8UDh7VdEeEe8GnPSX4MQAAAQ8"]
[Wed Dec 03 00:30:14.448823 2025] [:error] [pid 25475:tid 25526] [client 192.178.4.101:50845] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8UFh7VdEeEe8GnPSX4SwAAAQ4"]
[Wed Dec 03 00:30:22.590045 2025] [:error] [pid 47068:tid 47101] [client 192.178.4.101:46711] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8UHiDFatpzeF4tcYVqqgAAAEE"]
[Wed Dec 03 00:30:26.945994 2025] [:error] [pid 47068:tid 47124] [client 192.178.4.101:63549] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8UIiDFatpzeF4tcYVqswAAAFg"]
[Wed Dec 03 00:35:33.232290 2025] [:error] [pid 47068:tid 47122] [client 192.178.4.101:34988] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8VVSDFatpzeF4tcYVuAgAAAFY"]
[Wed Dec 03 00:35:38.664764 2025] [:error] [pid 47068:tid 47101] [client 192.178.4.101:51927] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8VWiDFatpzeF4tcYVuCwAAAEE"]
[Wed Dec 03 00:35:40.157346 2025] [:error] [pid 25475:tid 25533] [client 192.178.4.101:38036] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8VXB7VdEeEe8GnPSX-ngAAARU"]
[Wed Dec 03 00:35:47.803050 2025] [:error] [pid 25475:tid 25528] [client 192.178.4.101:58635] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8VYx7VdEeEe8GnPSX-7QAAARA"]
[Wed Dec 03 00:38:17.120778 2025] [:error] [pid 47067:tid 47079] [client 192.178.4.101:35235] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8V-QcYJkWYuBnpVaohuwAAAAc"]
[Wed Dec 03 00:38:20.875938 2025] [:error] [pid 47067:tid 47075] [client 192.178.4.101:50731] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8V_AcYJkWYuBnpVaohxAAAAAM"]
[Wed Dec 03 00:38:30.673901 2025] [:error] [pid 47069:tid 47140] [client 192.178.4.101:56594] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8WBnliPX01jdRNUv1mBwAAAI0"]
[Wed Dec 03 00:38:47.998121 2025] [:error] [pid 47067:tid 47081] [client 192.178.4.101:64973] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8WFwcYJkWYuBnpVaoibQAAAAk"]
[Wed Dec 03 00:40:46.790623 2025] [:error] [pid 25475:tid 25530] [client 192.178.4.101:40820] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8Wjh7VdEeEe8GnPSUDOAAAARI"]
[Wed Dec 03 00:41:38.728021 2025] [:error] [pid 25475:tid 25535] [client 192.178.4.101:60319] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8Wwh7VdEeEe8GnPSUD-QAAARc"]
[Wed Dec 03 00:42:56.366573 2025] [:error] [pid 47067:tid 47077] [client 192.178.4.101:38804] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8XEAcYJkWYuBnpVaolJgAAAAU"]
[Wed Dec 03 00:43:15.376819 2025] [:error] [pid 47067:tid 47094] [client 192.178.4.101:59779] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8XIwcYJkWYuBnpVaolSwAAABY"]
[Wed Dec 03 00:43:39.933684 2025] [:error] [pid 47068:tid 47122] [client 192.178.4.101:46608] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8XOyDFatpzeF4tcYVyrwAAAFY"]
[Wed Dec 03 00:43:48.168959 2025] [:error] [pid 25475:tid 25521] [client 192.178.4.101:62615] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8XRB7VdEeEe8GnPSUFwwAAAQk"]
[Wed Dec 03 00:43:52.262263 2025] [:error] [pid 47069:tid 47134] [client 192.178.4.101:56694] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8XSHliPX01jdRNUv1paQAAAIc"]
[Wed Dec 03 00:45:07.845442 2025] [:error] [pid 25475:tid 25520] [client 192.178.4.101:63068] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8Xkx7VdEeEe8GnPSUIXgAAAQg"]
[Wed Dec 03 00:45:15.578529 2025] [:error] [pid 25475:tid 25524] [client 192.178.4.101:53537] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8Xmx7VdEeEe8GnPSUI8gAAAQw"]
[Wed Dec 03 00:45:18.049677 2025] [:error] [pid 47068:tid 47102] [client 192.178.4.101:54239] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8XniDFatpzeF4tcYV0SgAAAEI"]
[Wed Dec 03 00:45:19.929982 2025] [:error] [pid 47158:tid 47169] [client 192.178.4.101:44769] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8Xn13-jeg4VwJRw7H8KwAAAMk"]
[Wed Dec 03 00:45:25.865766 2025] [:error] [pid 25475:tid 25520] [client 192.178.4.101:60679] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8XpR7VdEeEe8GnPSUJDwAAAQg"]
[Wed Dec 03 00:45:33.821369 2025] [:error] [pid 47069:tid 47138] [client 192.178.4.101:58418] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8XrXliPX01jdRNUv1rQwAAAIs"]
[Wed Dec 03 00:45:35.789022 2025] [:error] [pid 47067:tid 47079] [client 192.178.4.101:41465] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8XrwcYJkWYuBnpVaontQAAAAc"]
[Wed Dec 03 00:45:45.556202 2025] [:error] [pid 47158:tid 47163] [client 192.178.4.101:48696] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8XuV3-jeg4VwJRw7H8ewAAAMM"]
[Wed Dec 03 00:45:48.897784 2025] [:error] [pid 47068:tid 47109] [client 192.178.4.101:36878] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8XvCDFatpzeF4tcYV0jwAAAEk"]
[Wed Dec 03 00:45:53.065844 2025] [:error] [pid 47158:tid 47168] [client 192.178.4.101:61917] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8XwV3-jeg4VwJRw7H8jAAAAMg"]
[Wed Dec 03 00:45:57.278109 2025] [:error] [pid 25475:tid 25536] [client 192.178.4.101:37503] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8XxR7VdEeEe8GnPSUJkwAAARg"]
[Wed Dec 03 00:45:59.280696 2025] [:error] [pid 47069:tid 47127] [client 192.178.4.101:36072] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8Xx3liPX01jdRNUv1rcgAAAIA"]
[Wed Dec 03 00:47:43.655644 2025] [:error] [pid 47158:tid 47181] [client 192.178.4.101:47011] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8YL13-jeg4VwJRw7H9eQAAANU"]
[Wed Dec 03 00:47:55.209486 2025] [:error] [pid 47158:tid 47160] [client 192.178.4.101:36833] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8YO13-jeg4VwJRw7H9mgAAAMA"]
[Wed Dec 03 00:50:04.682909 2025] [:error] [pid 47158:tid 47175] [client 192.178.4.101:60184] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8YvF3-jeg4VwJRw7H-iQAAAM8"]
[Wed Dec 03 00:50:10.450202 2025] [:error] [pid 25475:tid 25514] [client 192.178.4.101:40979] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8Ywh7VdEeEe8GnPSUMfgAAAQI"]
[Wed Dec 03 00:50:22.459362 2025] [:error] [pid 25475:tid 25534] [client 192.178.4.101:56499] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8Yzh7VdEeEe8GnPSUMoAAAARY"]
[Wed Dec 03 00:50:29.151856 2025] [:error] [pid 47069:tid 47146] [client 192.178.4.101:47827] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8Y1XliPX01jdRNUv1tHAAAAJM"]
[Wed Dec 03 00:50:34.460700 2025] [:error] [pid 25475:tid 25521] [client 192.178.4.101:46206] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8Y2h7VdEeEe8GnPSUMygAAAQk"]
[Wed Dec 03 00:50:44.524229 2025] [:error] [pid 47158:tid 47179] [client 192.178.4.101:43433] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8Y5F3-jeg4VwJRw7H-wgAAANM"]
[Wed Dec 03 00:50:49.962644 2025] [:error] [pid 25475:tid 25529] [client 192.178.4.101:47300] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8Y6R7VdEeEe8GnPSUM4gAAARE"]
[Wed Dec 03 00:50:51.905984 2025] [:error] [pid 25475:tid 25515] [client 192.178.4.101:47670] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8Y6x7VdEeEe8GnPSUM7AAAAQM"]
[Wed Dec 03 00:50:54.289193 2025] [:error] [pid 47069:tid 47134] [client 192.178.4.101:61783] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8Y7nliPX01jdRNUv1tQQAAAIc"]
[Wed Dec 03 00:53:06.368418 2025] [:error] [pid 47158:tid 47170] [client 192.178.4.101:53327] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8Zcl3-jeg4VwJRw7H_vwAAAMo"]
[Wed Dec 03 00:53:14.251771 2025] [:error] [pid 47158:tid 47177] [client 192.178.4.101:45933] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8Zel3-jeg4VwJRw7H_xgAAANE"]
[Wed Dec 03 00:53:25.962319 2025] [:error] [pid 25475:tid 25516] [client 192.178.4.101:48731] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8ZhR7VdEeEe8GnPSUOWwAAAQQ"]
[Wed Dec 03 00:55:35.625147 2025] [:error] [pid 25475:tid 25527] [client 192.178.4.101:43323] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8aBx7VdEeEe8GnPSUP3gAAAQ8"]
[Wed Dec 03 00:55:45.619855 2025] [:error] [pid 47068:tid 47108] [client 192.178.4.101:64736] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8aESDFatpzeF4tcYV36QAAAEg"]
[Wed Dec 03 00:55:50.953727 2025] [:error] [pid 47158:tid 47168] [client 192.178.4.101:37507] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8aFl3-jeg4VwJRw7EBXwAAAMg"]
[Wed Dec 03 00:55:54.354660 2025] [:error] [pid 47067:tid 47083] [client 192.178.4.101:50288] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8aGgcYJkWYuBnpVaorxwAAAAs"]
[Wed Dec 03 00:58:55.834925 2025] [:error] [pid 47158:tid 47161] [client 192.178.4.101:65094] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8az13-jeg4VwJRw7ED7AAAAME"]
[Wed Dec 03 00:58:57.701866 2025] [:error] [pid 47158:tid 47160] [client 192.178.4.101:58725] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8a0V3-jeg4VwJRw7ED8QAAAMA"]
[Wed Dec 03 00:59:00.257848 2025] [:error] [pid 47067:tid 47074] [client 192.178.4.101:61271] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8a1AcYJkWYuBnpVaouBwAAAAI"]
[Wed Dec 03 00:59:12.314021 2025] [:error] [pid 25475:tid 25529] [client 192.178.4.101:62692] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8a4B7VdEeEe8GnPSUSywAAARE"]
[Wed Dec 03 00:59:14.762036 2025] [:error] [pid 25475:tid 25536] [client 192.178.4.101:44304] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8a4h7VdEeEe8GnPSUS1QAAARg"]
[Wed Dec 03 00:59:18.463646 2025] [:error] [pid 47067:tid 47095] [client 192.178.4.101:49701] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8a5gcYJkWYuBnpVaouJgAAABc"]
[Wed Dec 03 00:59:22.379907 2025] [:error] [pid 25475:tid 25534] [client 192.178.4.101:49001] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8a6h7VdEeEe8GnPSUS6AAAARY"]
[Wed Dec 03 00:59:26.054281 2025] [:error] [pid 47067:tid 47092] [client 192.178.4.101:61689] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8a7gcYJkWYuBnpVaouNwAAABQ"]
[Wed Dec 03 01:06:50.574294 2025] [:error] [pid 47069:tid 47138] [client 192.178.4.101:40899] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8cqnliPX01jdRNUv118gAAAIs"]
[Wed Dec 03 01:07:03.414055 2025] [:error] [pid 47158:tid 47170] [client 192.178.4.101:61322] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8ct13-jeg4VwJRw7EIUwAAAMo"]
[Wed Dec 03 01:07:17.167105 2025] [:error] [pid 47158:tid 47175] [client 192.178.4.101:35863] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8cxV3-jeg4VwJRw7EIfgAAAM8"]
[Wed Dec 03 01:07:24.769905 2025] [:error] [pid 47069:tid 47143] [client 192.178.4.101:62303] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8czHliPX01jdRNUv12MgAAAJA"]
[Wed Dec 03 01:07:29.024542 2025] [:error] [pid 47158:tid 47173] [client 192.178.4.101:56068] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8c0V3-jeg4VwJRw7EIkwAAAM0"]
[Wed Dec 03 01:08:36.071636 2025] [:error] [pid 47069:tid 47138] [client 192.178.4.101:61171] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8dFHliPX01jdRNUv12_QAAAIs"]
[Wed Dec 03 01:08:49.082821 2025] [:error] [pid 47158:tid 47164] [client 192.178.4.101:38693] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8dIV3-jeg4VwJRw7EJIAAAAMQ"]
[Wed Dec 03 01:08:52.185887 2025] [:error] [pid 25475:tid 25531] [client 192.178.4.101:42130] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8dJB7VdEeEe8GnPSUZsAAAARM"]
[Wed Dec 03 01:08:54.147227 2025] [:error] [pid 47158:tid 47179] [client 192.178.4.101:44598] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8dJl3-jeg4VwJRw7EJKAAAANM"]
[Wed Dec 03 01:08:55.963934 2025] [:error] [pid 47067:tid 47092] [client 192.178.4.101:47270] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8dJwcYJkWYuBnpVaozFwAAABQ"]
[Wed Dec 03 01:08:57.210455 2025] [:error] [pid 47069:tid 47135] [client 192.178.4.101:44844] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8dKXliPX01jdRNUv13NQAAAIg"]
[Wed Dec 03 01:09:19.618454 2025] [:error] [pid 47067:tid 47091] [client 192.178.4.101:59032] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8dPwcYJkWYuBnpVaozRwAAABM"]
[Wed Dec 03 01:09:23.547078 2025] [:error] [pid 47158:tid 47184] [client 192.178.4.101:46303] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8dQ13-jeg4VwJRw7EJWwAAANg"]
[Wed Dec 03 01:09:25.846667 2025] [:error] [pid 47068:tid 47122] [client 192.178.4.101:35651] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8dRSDFatpzeF4tcYV9qgAAAFY"]
[Wed Dec 03 01:11:10.228733 2025] [:error] [pid 47069:tid 47141] [client 192.178.4.101:52466] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8drnliPX01jdRNUv14LAAAAI4"]
[Wed Dec 03 01:11:17.065352 2025] [:error] [pid 47068:tid 47123] [client 192.178.4.101:48265] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8dtSDFatpzeF4tcYV-KwAAAFc"]
[Wed Dec 03 01:11:17.991273 2025] [:error] [pid 47067:tid 47090] [client 192.178.4.101:35927] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8dtQcYJkWYuBnpVao0AQAAABI"]
[Wed Dec 03 01:11:32.261303 2025] [:error] [pid 25475:tid 25530] [client 192.178.4.101:54109] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8dxB7VdEeEe8GnPSUbKwAAARI"]
[Wed Dec 03 01:11:36.716439 2025] [:error] [pid 47069:tid 47127] [client 192.178.4.101:64679] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8dyHliPX01jdRNUv14VAAAAIA"]
[Wed Dec 03 01:14:00.305222 2025] [:error] [pid 47067:tid 47077] [client 192.178.4.101:49732] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8eWAcYJkWYuBnpVao1YwAAAAU"]
[Wed Dec 03 01:14:01.250238 2025] [:error] [pid 47068:tid 47115] [client 192.178.4.101:47950] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8eWSDFatpzeF4tcYV_0wAAAE8"]
[Wed Dec 03 01:14:06.088262 2025] [:error] [pid 25475:tid 25518] [client 192.178.4.101:38449] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8eXh7VdEeEe8GnPSUduQAAAQY"]
[Wed Dec 03 01:14:12.564836 2025] [:error] [pid 47068:tid 47119] [client 192.178.4.101:55096] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8eZCDFatpzeF4tcYWAAgAAAFM"]
[Wed Dec 03 01:14:23.295057 2025] [:error] [pid 25475:tid 25516] [client 192.178.4.101:46742] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8ebx7VdEeEe8GnPSUeCwAAAQQ"]
[Wed Dec 03 01:14:24.794224 2025] [:error] [pid 47068:tid 47124] [client 192.178.4.101:55558] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8ecCDFatpzeF4tcYWAIAAAAFg"]
[Wed Dec 03 01:14:26.391766 2025] [:error] [pid 47158:tid 47162] [client 192.178.4.101:44106] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8ecl3-jeg4VwJRw7EMCQAAAMI"]
[Wed Dec 03 01:14:30.648149 2025] [:error] [pid 47068:tid 47123] [client 192.178.4.101:58321] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8ediDFatpzeF4tcYWAKwAAAFc"]
[Wed Dec 03 01:14:31.772859 2025] [:error] [pid 25475:tid 25516] [client 192.178.4.101:60504] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8edx7VdEeEe8GnPSUeNwAAAQQ"]
[Wed Dec 03 01:14:36.132735 2025] [:error] [pid 47068:tid 47105] [client 192.178.4.101:45350] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8efCDFatpzeF4tcYWAOQAAAEU"]
[Wed Dec 03 01:14:44.530339 2025] [:error] [pid 25475:tid 25527] [client 192.178.4.101:52924] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8ehB7VdEeEe8GnPSUefgAAAQ8"]
[Wed Dec 03 01:14:49.772672 2025] [:error] [pid 47067:tid 47087] [client 192.178.4.101:42323] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8eiQcYJkWYuBnpVao2EwAAAA8"]
[Wed Dec 03 01:14:50.684746 2025] [:error] [pid 47158:tid 47182] [client 192.178.4.101:37862] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8eil3-jeg4VwJRw7EMcgAAANY"]
[Wed Dec 03 01:14:52.604295 2025] [:error] [pid 25475:tid 25525] [client 192.178.4.101:37691] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8ejB7VdEeEe8GnPSUetAAAAQ0"]
[Wed Dec 03 01:16:10.836126 2025] [:error] [pid 47067:tid 47086] [client 192.178.4.101:57808] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8e2gcYJkWYuBnpVao3NgAAAA4"]
[Wed Dec 03 01:16:13.527148 2025] [:error] [pid 47158:tid 47184] [client 192.178.4.101:42882] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8e3V3-jeg4VwJRw7ENxgAAANg"]
[Wed Dec 03 01:16:14.461611 2025] [:error] [pid 47068:tid 47116] [client 192.178.4.101:63158] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8e3iDFatpzeF4tcYWB6gAAAFA"]
[Wed Dec 03 01:16:17.319267 2025] [:error] [pid 25475:tid 25512] [client 192.178.4.101:37065] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8e4R7VdEeEe8GnPSUgSgAAAQA"]
[Wed Dec 03 01:16:26.348812 2025] [:error] [pid 47068:tid 47106] [client 192.178.4.101:42916] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8e6iDFatpzeF4tcYWCFwAAAEY"]
[Wed Dec 03 01:16:33.123187 2025] [:error] [pid 47068:tid 47115] [client 192.178.4.101:47847] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8e8SDFatpzeF4tcYWCJgAAAE8"]
[Wed Dec 03 01:16:39.245286 2025] [:error] [pid 47158:tid 47177] [client 192.178.4.101:46912] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8e913-jeg4VwJRw7EOGQAAANE"]
[Wed Dec 03 01:16:56.371241 2025] [:error] [pid 47068:tid 47116] [client 192.178.4.101:58689] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8fCCDFatpzeF4tcYWCXgAAAFA"]
[Wed Dec 03 01:16:59.704516 2025] [:error] [pid 47069:tid 47134] [client 192.178.4.101:36161] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8fC3liPX01jdRNUv18LAAAAIc"]
[Wed Dec 03 01:18:52.959164 2025] [:error] [pid 47068:tid 47119] [client 192.178.4.101:62464] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8ffCDFatpzeF4tcYWDRwAAAFM"]
[Wed Dec 03 01:18:57.158557 2025] [:error] [pid 47158:tid 47165] [client 192.178.4.101:39438] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8fgV3-jeg4VwJRw7EPhQAAAMU"]
[Wed Dec 03 01:19:03.509155 2025] [:error] [pid 47069:tid 47150] [client 192.178.4.101:56870] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8fh3liPX01jdRNUv19JAAAAJc"]
[Wed Dec 03 01:19:12.519969 2025] [:error] [pid 47067:tid 47073] [client 192.178.4.101:54222] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8fkAcYJkWYuBnpVao48wAAAAE"]
[Wed Dec 03 01:19:18.092468 2025] [:error] [pid 47069:tid 47140] [client 192.178.4.101:41884] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8flnliPX01jdRNUv19OgAAAI0"]
[Wed Dec 03 01:19:20.807490 2025] [:error] [pid 47158:tid 47161] [client 192.178.4.101:44577] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8fmF3-jeg4VwJRw7EP0QAAAME"]
[Wed Dec 03 01:19:22.211638 2025] [:error] [pid 47068:tid 47111] [client 192.178.4.101:45931] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8fmiDFatpzeF4tcYWDdAAAAEs"]
[Wed Dec 03 01:19:26.024848 2025] [:error] [pid 47069:tid 47131] [client 192.178.4.101:41061] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8fnnliPX01jdRNUv19RgAAAIQ"]
[Wed Dec 03 01:19:32.496155 2025] [:error] [pid 47158:tid 47162] [client 192.178.4.101:51465] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8fpF3-jeg4VwJRw7EP6wAAAMI"]
[Wed Dec 03 01:21:06.049603 2025] [:error] [pid 47158:tid 47184] [client 192.178.4.101:42506] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8gAl3-jeg4VwJRw7EQrQAAANg"]
[Wed Dec 03 01:21:12.504887 2025] [:error] [pid 47158:tid 47160] [client 192.178.4.101:35604] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8gCF3-jeg4VwJRw7EQtwAAAMA"]
[Wed Dec 03 01:21:12.620384 2025] [:error] [pid 25475:tid 25513] [client 192.178.4.101:55576] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8gCB7VdEeEe8GnPSUjvgAAAQE"]
[Wed Dec 03 01:21:20.620834 2025] [:error] [pid 25475:tid 25515] [client 192.178.4.101:49484] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8gEB7VdEeEe8GnPSUj1wAAAQM"]
[Wed Dec 03 01:21:22.158652 2025] [:error] [pid 25475:tid 25531] [client 192.178.4.101:37087] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8gEh7VdEeEe8GnPSUj3AAAARM"]
[Wed Dec 03 01:21:27.644761 2025] [:error] [pid 47158:tid 47160] [client 192.178.4.101:60329] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8gF13-jeg4VwJRw7EQ1QAAAMA"]
[Wed Dec 03 01:21:28.927802 2025] [:error] [pid 47068:tid 47115] [client 192.178.4.101:59036] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8gGCDFatpzeF4tcYWEaAAAAE8"]
[Wed Dec 03 01:21:30.069161 2025] [:error] [pid 47068:tid 47110] [client 192.178.4.101:45178] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8gGiDFatpzeF4tcYWEbAAAAEo"]
[Wed Dec 03 01:21:48.480289 2025] [:error] [pid 47067:tid 47075] [client 192.178.4.101:50336] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8gLAcYJkWYuBnpVao6CwAAAAM"]
[Wed Dec 03 01:21:55.409505 2025] [:error] [pid 47067:tid 47081] [client 192.178.4.101:46124] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8gMwcYJkWYuBnpVao6EwAAAAk"]
[Wed Dec 03 01:21:58.396766 2025] [:error] [pid 47068:tid 47104] [client 192.178.4.101:53822] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8gNiDFatpzeF4tcYWEpQAAAEQ"]
[Wed Dec 03 01:22:56.857327 2025] [:error] [pid 47067:tid 47093] [client 192.178.4.101:51891] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8gcAcYJkWYuBnpVao6eQAAABU"]
[Wed Dec 03 01:23:01.768106 2025] [:error] [pid 47069:tid 47151] [client 192.178.4.101:37269] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8gdXliPX01jdRNUv1-_gAAAJg"]
[Wed Dec 03 01:23:10.791657 2025] [:error] [pid 47158:tid 47179] [client 192.178.4.101:37838] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8gfl3-jeg4VwJRw7ERnwAAANM"]
[Wed Dec 03 01:23:22.572788 2025] [:error] [pid 47067:tid 47076] [client 192.178.4.101:41952] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8gigcYJkWYuBnpVao6ngAAAAQ"]
[Wed Dec 03 01:23:31.683417 2025] [:error] [pid 47158:tid 47170] [client 192.178.4.101:53311] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8gk13-jeg4VwJRw7ERuAAAAMo"]
[Wed Dec 03 01:23:35.792564 2025] [:error] [pid 25475:tid 25523] [client 192.178.4.101:38295] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8glx7VdEeEe8GnPSUlLQAAAQs"]
[Wed Dec 03 01:23:36.825660 2025] [:error] [pid 47158:tid 47164] [client 192.178.4.101:37583] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8gmF3-jeg4VwJRw7ERxAAAAMQ"]
[Wed Dec 03 01:23:49.218540 2025] [:error] [pid 47069:tid 47134] [client 192.178.4.101:35525] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8gpXliPX01jdRNUv1_YgAAAIc"]
[Wed Dec 03 01:23:52.071752 2025] [:error] [pid 47067:tid 47089] [client 192.178.4.101:57828] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8gqAcYJkWYuBnpVao6_AAAABE"]
[Wed Dec 03 01:24:25.567444 2025] [:error] [pid 25475:tid 25513] [client 192.178.4.101:57601] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8gyR7VdEeEe8GnPSUl1gAAAQE"]
[Wed Dec 03 01:24:31.069497 2025] [:error] [pid 47069:tid 47127] [client 192.178.4.101:56022] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8gz3liPX01jdRNUv1_swAAAIA"]
[Wed Dec 03 01:24:36.081770 2025] [:error] [pid 25475:tid 25528] [client 192.178.4.101:64093] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8g1B7VdEeEe8GnPSUl9gAAARA"]
[Wed Dec 03 01:24:40.540024 2025] [:error] [pid 47069:tid 47148] [client 192.178.4.101:42418] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8g2HliPX01jdRNUv1_wgAAAJU"]
[Wed Dec 03 01:24:43.489336 2025] [:error] [pid 47158:tid 47178] [client 192.178.4.101:47308] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8g213-jeg4VwJRw7ESVwAAANI"]
[Wed Dec 03 01:24:46.847983 2025] [:error] [pid 25475:tid 25536] [client 192.178.4.101:40298] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8g3h7VdEeEe8GnPSUmQgAAARg"]
[Wed Dec 03 01:24:49.086028 2025] [:error] [pid 47069:tid 47151] [client 192.178.4.101:60891] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8g4XliPX01jdRNUv1_2AAAAJg"]
[Wed Dec 03 01:24:54.305371 2025] [:error] [pid 25475:tid 25516] [client 192.178.4.101:39291] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8g5h7VdEeEe8GnPSUmVQAAAQQ"]
[Wed Dec 03 01:24:56.485806 2025] [:error] [pid 25475:tid 25519] [client 192.178.4.101:45464] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8g6B7VdEeEe8GnPSUmXQAAAQc"]
[Wed Dec 03 01:25:01.868099 2025] [:error] [pid 25475:tid 25521] [client 192.178.4.101:47018] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8g7R7VdEeEe8GnPSUmYgAAAQk"]
[Wed Dec 03 01:25:08.339542 2025] [:error] [pid 25475:tid 25519] [client 192.178.4.101:44015] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8g9B7VdEeEe8GnPSUmbAAAAQc"]
[Wed Dec 03 01:25:19.133352 2025] [:error] [pid 47067:tid 47073] [client 192.178.4.101:58143] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8g_wcYJkWYuBnpVao7WwAAAAE"]
[Wed Dec 03 01:26:28.311610 2025] [:error] [pid 25475:tid 25536] [client 192.178.4.101:45752] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8hRB7VdEeEe8GnPSUnOAAAARg"]
[Wed Dec 03 01:26:29.723626 2025] [:error] [pid 47067:tid 47082] [client 192.178.4.101:39223] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8hRQcYJkWYuBnpVao76AAAAAo"]
[Wed Dec 03 01:26:31.515666 2025] [:error] [pid 25475:tid 25516] [client 192.178.4.101:60788] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8hRx7VdEeEe8GnPSUnQQAAAQQ"]
[Wed Dec 03 01:26:39.679106 2025] [:error] [pid 47067:tid 47088] [client 192.178.4.101:42009] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8hTwcYJkWYuBnpVao7_wAAABA"]
[Wed Dec 03 01:26:42.457987 2025] [:error] [pid 47069:tid 47138] [client 192.178.4.101:42313] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8hUnliPX01jdRNUv2AsAAAAIs"]
[Wed Dec 03 01:26:46.578788 2025] [:error] [pid 47068:tid 47110] [client 192.178.4.101:49060] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8hViDFatpzeF4tcYWGRgAAAEo"]
[Wed Dec 03 01:26:49.117699 2025] [:error] [pid 47068:tid 47102] [client 192.178.4.101:55203] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8hWSDFatpzeF4tcYWGUAAAAEI"]
[Wed Dec 03 01:26:53.014936 2025] [:error] [pid 47158:tid 47166] [client 192.178.4.101:63199] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8hXV3-jeg4VwJRw7ETZAAAAMY"]
[Wed Dec 03 01:26:57.096652 2025] [:error] [pid 47067:tid 47092] [client 192.178.4.101:41481] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8hYQcYJkWYuBnpVao8HwAAABQ"]
[Wed Dec 03 01:26:58.665448 2025] [:error] [pid 47069:tid 47143] [client 192.178.4.101:64271] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8hYnliPX01jdRNUv2AxAAAAJA"]
[Wed Dec 03 01:29:06.553881 2025] [:error] [pid 47068:tid 47113] [client 192.178.4.101:45599] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8h4iDFatpzeF4tcYWHwQAAAE0"]
[Wed Dec 03 01:29:10.058081 2025] [:error] [pid 47158:tid 47181] [client 192.178.4.101:40418] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8h5l3-jeg4VwJRw7EUgQAAANU"]
[Wed Dec 03 01:29:15.934635 2025] [:error] [pid 47158:tid 47163] [client 192.178.4.101:55604] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8h613-jeg4VwJRw7EUjwAAAMM"]
[Wed Dec 03 01:29:20.018075 2025] [:error] [pid 47069:tid 47141] [client 192.178.4.101:40415] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8h8HliPX01jdRNUv2B0wAAAI4"]
[Wed Dec 03 01:29:22.234224 2025] [:error] [pid 25475:tid 25521] [client 192.178.4.101:61971] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8h8h7VdEeEe8GnPSUorQAAAQk"]
[Wed Dec 03 01:29:23.850342 2025] [:error] [pid 25475:tid 25534] [client 192.178.4.101:38623] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8h8x7VdEeEe8GnPSUosAAAARY"]
[Wed Dec 03 01:33:22.061408 2025] [:error] [pid 25475:tid 25521] [client 192.178.4.101:59976] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8i4h7VdEeEe8GnPSUsnQAAAQk"]
[Wed Dec 03 01:33:25.973496 2025] [:error] [pid 47068:tid 47105] [client 192.178.4.101:52591] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8i5SDFatpzeF4tcYWKcQAAAEU"]
[Wed Dec 03 01:33:34.261173 2025] [:error] [pid 25475:tid 25535] [client 192.178.4.101:36679] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8i7h7VdEeEe8GnPSUs3gAAARc"]
[Wed Dec 03 01:33:40.159224 2025] [:error] [pid 47067:tid 47073] [client 192.178.4.101:51295] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8i9AcYJkWYuBnpVapAmgAAAAE"]
[Wed Dec 03 01:33:43.490338 2025] [:error] [pid 47158:tid 47161] [client 192.178.4.101:48521] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8i913-jeg4VwJRw7EYNQAAAME"]
[Wed Dec 03 01:33:43.942951 2025] [:error] [pid 25475:tid 25527] [client 192.178.4.101:55985] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8i9x7VdEeEe8GnPSUtDQAAAQ8"]
[Wed Dec 03 01:38:26.720290 2025] [:error] [pid 47068:tid 47104] [client 43.130.154.56:56754] [client 43.130.154.56] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||paramountbaldivis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8kEiDFatpzeF4tcYWNfwAAAEQ"]
[Wed Dec 03 01:39:36.631930 2025] [:error] [pid 47158:tid 47179] [client 192.178.4.101:55483] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8kWF3-jeg4VwJRw7EcFwAAANM"]
[Wed Dec 03 01:39:39.034110 2025] [:error] [pid 25475:tid 25522] [client 192.178.4.101:63516] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8kWx7VdEeEe8GnPSUytQAAAQo"]
[Wed Dec 03 01:39:45.229524 2025] [:error] [pid 47158:tid 47169] [client 192.178.4.101:64297] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8kYV3-jeg4VwJRw7EcKAAAAMk"]
[Wed Dec 03 01:39:48.647770 2025] [:error] [pid 47067:tid 47090] [client 192.178.4.101:57791] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8kZAcYJkWYuBnpVapFTwAAABI"]
[Wed Dec 03 01:39:49.581768 2025] [:error] [pid 47068:tid 47104] [client 192.178.4.101:58747] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8kZSDFatpzeF4tcYWOLAAAAEQ"]
[Wed Dec 03 01:40:18.483583 2025] [:error] [pid 47158:tid 47173] [client 192.178.4.101:62706] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8kgl3-jeg4VwJRw7EciAAAAM0"]
[Wed Dec 03 01:40:27.056492 2025] [:error] [pid 47158:tid 47174] [client 192.178.4.101:60481] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8ki13-jeg4VwJRw7EclgAAAM4"]
[Wed Dec 03 01:47:03.389365 2025] [:error] [pid 47069:tid 47145] [client 192.178.4.101:40782] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8mF3liPX01jdRNUv2MWgAAAJI"]
[Wed Dec 03 01:47:22.721303 2025] [:error] [pid 47068:tid 47116] [client 192.178.4.101:45710] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8mKiDFatpzeF4tcYWRnwAAAFA"]
[Wed Dec 03 01:47:47.044702 2025] [:error] [pid 47069:tid 47149] [client 192.178.4.101:53721] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8mQ3liPX01jdRNUv2MswAAAJY"]
[Wed Dec 03 01:48:33.729705 2025] [:error] [pid 47068:tid 47122] [client 192.178.4.101:44483] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8mcSDFatpzeF4tcYWSSgAAAFY"]
[Wed Dec 03 01:48:35.083440 2025] [:error] [pid 47067:tid 47077] [client 192.178.4.101:61412] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8mcwcYJkWYuBnpVapKQAAAAAU"]
[Wed Dec 03 01:48:37.557812 2025] [:error] [pid 47158:tid 47163] [client 192.178.4.101:45794] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8mdV3-jeg4VwJRw7EhLgAAAMM"]
[Wed Dec 03 01:48:39.720644 2025] [:error] [pid 47158:tid 47174] [client 192.178.4.101:40637] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8md13-jeg4VwJRw7EhOgAAAM4"]
[Wed Dec 03 01:48:43.310224 2025] [:error] [pid 47067:tid 47091] [client 192.178.4.101:41018] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8mewcYJkWYuBnpVapKTgAAABM"]
[Wed Dec 03 01:48:46.906064 2025] [:error] [pid 47068:tid 47113] [client 192.178.4.101:57240] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8mfiDFatpzeF4tcYWSYwAAAE0"]
[Wed Dec 03 01:48:49.492099 2025] [:error] [pid 47067:tid 47085] [client 192.178.4.101:55697] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8mgQcYJkWYuBnpVapKXgAAAA0"]
[Wed Dec 03 01:48:49.770855 2025] [:error] [pid 47067:tid 47084] [client 192.178.4.101:46887] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8mgQcYJkWYuBnpVapKYgAAAAw"]
[Wed Dec 03 01:48:52.647746 2025] [:error] [pid 47158:tid 47175] [client 192.178.4.101:53568] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8mhF3-jeg4VwJRw7EhVQAAAM8"]
[Wed Dec 03 01:48:56.464721 2025] [:error] [pid 47068:tid 47103] [client 192.178.4.101:55547] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8miCDFatpzeF4tcYWScAAAAEM"]
[Wed Dec 03 01:48:57.978829 2025] [:error] [pid 25475:tid 25520] [client 192.178.4.101:36293] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8miR7VdEeEe8GnPSU46QAAAQg"]
[Wed Dec 03 01:49:00.504418 2025] [:error] [pid 47068:tid 47107] [client 192.178.4.101:49079] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8mjCDFatpzeF4tcYWSdQAAAEc"]
[Wed Dec 03 01:49:03.449474 2025] [:error] [pid 25475:tid 25520] [client 192.178.4.101:65425] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8mjx7VdEeEe8GnPSU4_gAAAQg"]
[Wed Dec 03 01:49:04.381063 2025] [:error] [pid 47067:tid 47081] [client 192.178.4.101:47824] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8mkAcYJkWYuBnpVapKfwAAAAk"]
[Wed Dec 03 01:49:13.962115 2025] [:error] [pid 47067:tid 47078] [client 192.178.4.101:65185] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8mmQcYJkWYuBnpVapKoAAAAAY"]
[Wed Dec 03 01:49:24.205344 2025] [:error] [pid 47158:tid 47175] [client 192.178.4.101:44136] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8mpF3-jeg4VwJRw7EhoAAAAM8"]
[Wed Dec 03 01:49:28.477660 2025] [:error] [pid 25475:tid 25525] [client 192.178.4.101:59935] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8mqB7VdEeEe8GnPSU5TQAAAQ0"]
[Wed Dec 03 01:49:30.501756 2025] [:error] [pid 25475:tid 25532] [client 192.178.4.101:41488] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8mqh7VdEeEe8GnPSU5YgAAARQ"]
[Wed Dec 03 01:50:28.719674 2025] [:error] [pid 25475:tid 25525] [client 192.178.4.101:35325] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8m5B7VdEeEe8GnPSU6PQAAAQ0"]
[Wed Dec 03 01:50:40.937103 2025] [:error] [pid 25475:tid 25533] [client 192.178.4.101:40399] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8m8B7VdEeEe8GnPSU6VwAAARU"]
[Wed Dec 03 01:50:41.706716 2025] [:error] [pid 47067:tid 47088] [client 192.178.4.101:60525] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8m8QcYJkWYuBnpVapLkQAAABA"]
[Wed Dec 03 01:50:46.892739 2025] [:error] [pid 47069:tid 47140] [client 192.178.4.101:65219] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8m9nliPX01jdRNUv2OaAAAAI0"]
[Wed Dec 03 01:50:49.468046 2025] [:error] [pid 47067:tid 47078] [client 192.178.4.101:60790] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8m-QcYJkWYuBnpVapLpQAAAAY"]
[Wed Dec 03 01:50:52.008504 2025] [:error] [pid 47067:tid 47073] [client 192.178.4.101:56880] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8m_AcYJkWYuBnpVapLswAAAAE"]
[Wed Dec 03 01:51:02.713242 2025] [:error] [pid 47067:tid 47072] [client 192.178.4.101:61831] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8nBgcYJkWYuBnpVapL5QAAAAA"]
[Wed Dec 03 01:51:07.099507 2025] [:error] [pid 25475:tid 25524] [client 192.178.4.101:42522] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8nCx7VdEeEe8GnPSU6vgAAAQw"]
[Wed Dec 03 01:51:08.762977 2025] [:error] [pid 25475:tid 25522] [client 192.178.4.101:51294] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8nDB7VdEeEe8GnPSU6ygAAAQo"]
[Wed Dec 03 01:51:11.122261 2025] [:error] [pid 47158:tid 47179] [client 192.178.4.101:39183] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8nD13-jeg4VwJRw7Ei5gAAANM"]
[Wed Dec 03 01:51:12.125751 2025] [:error] [pid 47069:tid 47135] [client 192.178.4.101:44143] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8nEHliPX01jdRNUv2OuAAAAIg"]
[Wed Dec 03 01:51:14.698972 2025] [:error] [pid 47067:tid 47078] [client 192.178.4.101:46764] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8nEgcYJkWYuBnpVapL_wAAAAY"]
[Wed Dec 03 01:51:16.508425 2025] [:error] [pid 47067:tid 47093] [client 192.178.4.101:61375] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8nFAcYJkWYuBnpVapMBgAAABU"]
[Wed Dec 03 01:51:19.802607 2025] [:error] [pid 47069:tid 47136] [client 192.178.4.101:62744] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8nF3liPX01jdRNUv2OzAAAAIk"]
[Wed Dec 03 01:51:20.834685 2025] [:error] [pid 47068:tid 47100] [client 192.178.4.101:35145] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8nGCDFatpzeF4tcYWT1AAAAEA"]
[Wed Dec 03 01:51:24.636220 2025] [:error] [pid 47158:tid 47172] [client 192.178.4.101:38093] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8nHF3-jeg4VwJRw7EjBQAAAMw"]
[Wed Dec 03 01:53:23.248750 2025] [:error] [pid 47158:tid 47176] [client 192.178.4.101:51650] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8nk13-jeg4VwJRw7EkBAAAANA"]
[Wed Dec 03 01:53:26.352278 2025] [:error] [pid 25475:tid 25525] [client 192.178.4.101:51192] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8nlh7VdEeEe8GnPSU8TAAAAQ0"]
[Wed Dec 03 01:53:31.139826 2025] [:error] [pid 47067:tid 47073] [client 192.178.4.101:50902] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8nmwcYJkWYuBnpVapNBQAAAAE"]
[Wed Dec 03 01:53:34.705099 2025] [:error] [pid 47069:tid 47142] [client 192.178.4.101:61938] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8nnnliPX01jdRNUv2QBQAAAI8"]
[Wed Dec 03 01:53:35.923385 2025] [:error] [pid 47158:tid 47164] [client 192.178.4.101:38223] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8nn13-jeg4VwJRw7EkEwAAAMQ"]
[Wed Dec 03 01:53:41.869091 2025] [:error] [pid 47067:tid 47076] [client 192.178.4.101:59635] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8npQcYJkWYuBnpVapNFwAAAAQ"]
[Wed Dec 03 01:53:52.750634 2025] [:error] [pid 47068:tid 47110] [client 192.178.4.101:42296] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8nsCDFatpzeF4tcYWUywAAAEo"]
[Wed Dec 03 01:53:55.431307 2025] [:error] [pid 25475:tid 25519] [client 192.178.4.101:37113] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8nsx7VdEeEe8GnPSU8dgAAAQc"]
[Wed Dec 03 01:53:56.585528 2025] [:error] [pid 25475:tid 25527] [client 192.178.4.101:59872] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8ntB7VdEeEe8GnPSU8eQAAAQ8"]
[Wed Dec 03 01:53:58.003151 2025] [:error] [pid 47069:tid 47131] [client 192.178.4.101:51366] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8ntnliPX01jdRNUv2QKwAAAIQ"]
[Wed Dec 03 01:54:01.674113 2025] [:error] [pid 47069:tid 47132] [client 192.178.4.101:39034] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8nuXliPX01jdRNUv2QLgAAAIU"]
[Wed Dec 03 01:54:05.120909 2025] [:error] [pid 47068:tid 47112] [client 192.178.4.101:54286] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8nvSDFatpzeF4tcYWU1gAAAEw"]
[Wed Dec 03 01:55:11.319274 2025] [:error] [pid 47067:tid 47075] [client 192.178.4.101:55941] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8n_wcYJkWYuBnpVapOAgAAAAM"]
[Wed Dec 03 01:55:13.971685 2025] [:error] [pid 47067:tid 47078] [client 192.178.4.101:51939] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8oAQcYJkWYuBnpVapOCgAAAAY"]
[Wed Dec 03 01:55:15.182912 2025] [:error] [pid 47069:tid 47143] [client 192.178.4.101:45337] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8oA3liPX01jdRNUv2QvAAAAJA"]
[Wed Dec 03 01:55:18.594429 2025] [:error] [pid 47158:tid 47166] [client 192.178.4.101:51888] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8oBl3-jeg4VwJRw7ElCAAAAMY"]
[Wed Dec 03 01:55:22.048619 2025] [:error] [pid 47068:tid 47115] [client 192.178.4.101:50854] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8oCiDFatpzeF4tcYWVawAAAE8"]
[Wed Dec 03 01:55:22.982656 2025] [:error] [pid 25475:tid 25531] [client 192.178.4.101:54390] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8oCh7VdEeEe8GnPSU9fgAAARM"]
[Wed Dec 03 01:55:24.245066 2025] [:error] [pid 47158:tid 47182] [client 192.178.4.101:64711] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8oDF3-jeg4VwJRw7ElLAAAANY"]
[Wed Dec 03 01:55:32.708561 2025] [:error] [pid 25475:tid 25524] [client 192.178.4.101:64202] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8oFB7VdEeEe8GnPSU9mwAAAQw"]
[Wed Dec 03 01:55:36.735739 2025] [:error] [pid 47158:tid 47175] [client 192.178.4.101:36375] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8oGF3-jeg4VwJRw7ElRwAAAM8"]
[Wed Dec 03 01:55:38.075334 2025] [:error] [pid 47067:tid 47091] [client 192.178.4.101:45868] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8oGgcYJkWYuBnpVapOPAAAABM"]
[Wed Dec 03 01:55:39.444597 2025] [:error] [pid 47158:tid 47179] [client 192.178.4.101:38116] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8oG13-jeg4VwJRw7ElTQAAANM"]
[Wed Dec 03 01:55:43.967191 2025] [:error] [pid 47067:tid 47076] [client 192.178.4.101:47605] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8oHwcYJkWYuBnpVapORwAAAAQ"]
[Wed Dec 03 01:55:50.992646 2025] [:error] [pid 47067:tid 47083] [client 192.178.4.101:35755] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8oJgcYJkWYuBnpVapOUgAAAAs"]
[Wed Dec 03 01:55:52.154414 2025] [:error] [pid 47069:tid 47145] [client 192.178.4.101:64422] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8oKHliPX01jdRNUv2RAgAAAJI"]
[Wed Dec 03 01:55:53.853314 2025] [:error] [pid 47158:tid 47178] [client 192.178.4.101:56644] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8oKV3-jeg4VwJRw7ElZQAAANI"]
[Wed Dec 03 01:55:55.297423 2025] [:error] [pid 47068:tid 47112] [client 192.178.4.101:52431] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8oKyDFatpzeF4tcYWVtQAAAEw"]
[Wed Dec 03 01:56:44.624412 2025] [:error] [pid 47158:tid 47168] [client 192.178.4.101:56398] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8oXF3-jeg4VwJRw7EltgAAAMg"]
[Wed Dec 03 01:56:49.854014 2025] [:error] [pid 47067:tid 47078] [client 192.178.4.101:39192] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8oYQcYJkWYuBnpVapOsQAAAAY"]
[Wed Dec 03 01:56:52.977610 2025] [:error] [pid 47069:tid 47148] [client 192.178.4.101:49947] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8oZHliPX01jdRNUv2RZgAAAJU"]
[Wed Dec 03 01:56:54.817754 2025] [:error] [pid 47067:tid 47087] [client 192.178.4.101:58184] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8oZgcYJkWYuBnpVapOuwAAAA8"]
[Wed Dec 03 01:56:56.289013 2025] [:error] [pid 47067:tid 47073] [client 192.178.4.101:39353] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8oaAcYJkWYuBnpVapOwQAAAAE"]
[Wed Dec 03 01:56:58.892760 2025] [:error] [pid 47158:tid 47181] [client 192.178.4.101:38366] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8oal3-jeg4VwJRw7ElzgAAANU"]
[Wed Dec 03 01:57:03.838174 2025] [:error] [pid 47067:tid 47086] [client 192.178.4.101:49108] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8obwcYJkWYuBnpVapOygAAAA4"]
[Wed Dec 03 01:57:13.789355 2025] [:error] [pid 47068:tid 47120] [client 192.178.4.101:35629] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8oeSDFatpzeF4tcYWWFwAAAFQ"]
[Wed Dec 03 01:57:14.721816 2025] [:error] [pid 47069:tid 47140] [client 192.178.4.101:53269] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8oenliPX01jdRNUv2RfAAAAI0"]
[Wed Dec 03 01:57:30.502966 2025] [:error] [pid 47069:tid 47151] [client 192.178.4.101:41710] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8oinliPX01jdRNUv2RnAAAAJg"]
[Wed Dec 03 01:57:40.036320 2025] [:error] [pid 47069:tid 47133] [client 192.178.4.101:56773] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8olHliPX01jdRNUv2RrAAAAIY"]
[Wed Dec 03 01:57:40.868716 2025] [:error] [pid 47158:tid 47169] [client 192.178.4.101:42746] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8olF3-jeg4VwJRw7EmGQAAAMk"]
[Wed Dec 03 01:58:47.362872 2025] [:error] [pid 47158:tid 47162] [client 192.178.4.101:60980] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8o113-jeg4VwJRw7EmjwAAAMI"]
[Wed Dec 03 01:58:51.404023 2025] [:error] [pid 47069:tid 47146] [client 192.178.4.101:49553] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8o23liPX01jdRNUv2SMAAAAJM"]
[Wed Dec 03 01:58:56.342924 2025] [:error] [pid 47158:tid 47163] [client 192.178.4.101:53503] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8o4F3-jeg4VwJRw7EmqgAAAMM"]
[Wed Dec 03 01:59:12.819483 2025] [:error] [pid 47069:tid 47131] [client 192.178.4.101:53926] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8o8HliPX01jdRNUv2SXgAAAIQ"]
[Wed Dec 03 01:59:17.671723 2025] [:error] [pid 47158:tid 47161] [client 192.178.4.101:43748] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8o9V3-jeg4VwJRw7Em6gAAAME"]
[Wed Dec 03 01:59:18.933653 2025] [:error] [pid 47068:tid 47101] [client 192.178.4.101:59455] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8o9iDFatpzeF4tcYWW6AAAAEE"]
[Wed Dec 03 01:59:23.697655 2025] [:error] [pid 47068:tid 47105] [client 192.178.4.101:47115] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8o-yDFatpzeF4tcYWW8wAAAEU"]
[Wed Dec 03 01:59:27.164941 2025] [:error] [pid 25475:tid 25519] [client 192.178.4.101:36091] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8o_x7VdEeEe8GnPSVAegAAAQc"]
[Wed Dec 03 01:59:30.278514 2025] [:error] [pid 47158:tid 47172] [client 192.178.4.101:61891] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8pAl3-jeg4VwJRw7EnBQAAAMw"]
[Wed Dec 03 02:00:05.817659 2025] [:error] [pid 25475:tid 25534] [client 192.178.4.101:53603] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8pJR7VdEeEe8GnPSVBJQAAARY"]
[Wed Dec 03 02:00:11.381098 2025] [:error] [pid 47069:tid 47138] [client 192.178.4.101:50978] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8pK3liPX01jdRNUv2S9AAAAIs"]
[Wed Dec 03 02:00:12.316192 2025] [:error] [pid 25475:tid 25533] [client 192.178.4.101:35501] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8pLB7VdEeEe8GnPSVBVQAAARU"]
[Wed Dec 03 02:00:15.374951 2025] [:error] [pid 47068:tid 47113] [client 192.178.4.101:44241] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8pLyDFatpzeF4tcYWXkAAAAE0"]
[Wed Dec 03 02:00:16.515288 2025] [:error] [pid 25475:tid 25512] [client 192.178.4.101:42936] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8pMB7VdEeEe8GnPSVBawAAAQA"]
[Wed Dec 03 02:00:21.983997 2025] [:error] [pid 47068:tid 47100] [client 192.178.4.101:65474] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8pNSDFatpzeF4tcYWXmQAAAEA"]
[Wed Dec 03 02:00:22.920013 2025] [:error] [pid 47068:tid 47112] [client 192.178.4.101:38871] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8pNiDFatpzeF4tcYWXnAAAAEw"]
[Wed Dec 03 02:00:24.015044 2025] [:error] [pid 47069:tid 47135] [client 192.178.4.101:61553] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8pOHliPX01jdRNUv2TBgAAAIg"]
[Wed Dec 03 02:00:26.811303 2025] [:error] [pid 47158:tid 47166] [client 192.178.4.101:41830] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8pOl3-jeg4VwJRw7EnowAAAMY"]
[Wed Dec 03 02:00:36.920083 2025] [:error] [pid 47158:tid 47166] [client 192.178.4.101:45926] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8pRF3-jeg4VwJRw7EnwgAAAMY"]
[Wed Dec 03 02:00:37.895634 2025] [:error] [pid 25475:tid 25519] [client 192.178.4.101:65079] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8pRR7VdEeEe8GnPSVBzgAAAQc"]
[Wed Dec 03 02:00:43.911744 2025] [:error] [pid 47069:tid 47134] [client 192.178.4.101:45580] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8pS3liPX01jdRNUv2TMAAAAIc"]
[Wed Dec 03 02:00:52.594523 2025] [:error] [pid 47069:tid 47140] [client 192.178.4.101:57221] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8pVHliPX01jdRNUv2TVQAAAI0"]
[Wed Dec 03 02:00:53.929489 2025] [:error] [pid 47069:tid 47142] [client 192.178.4.101:51385] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8pVXliPX01jdRNUv2TWQAAAI8"]
[Wed Dec 03 02:00:55.778203 2025] [:error] [pid 47068:tid 47101] [client 192.178.4.101:57019] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8pVyDFatpzeF4tcYWX6wAAAEE"]
[Wed Dec 03 02:00:56.417503 2025] [:error] [pid 47067:tid 47084] [client 192.178.4.101:64696] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8pWAcYJkWYuBnpVapQpgAAAAw"]
[Wed Dec 03 02:02:02.523467 2025] [:error] [pid 25475:tid 25525] [client 192.178.4.101:65355] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8pmh7VdEeEe8GnPSVDfAAAAQ0"]
[Wed Dec 03 02:02:14.129774 2025] [:error] [pid 47069:tid 47148] [client 192.178.4.101:52768] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8ppnliPX01jdRNUv2UeQAAAJU"]
[Wed Dec 03 02:02:16.276954 2025] [:error] [pid 47069:tid 47146] [client 192.178.4.101:41580] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8pqHliPX01jdRNUv2UgQAAAJM"]
[Wed Dec 03 02:02:24.463935 2025] [:error] [pid 47067:tid 47086] [client 192.178.4.101:58117] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8psAcYJkWYuBnpVapRsAAAAA4"]
[Wed Dec 03 02:02:34.685329 2025] [:error] [pid 47068:tid 47119] [client 192.178.4.101:61154] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8puiDFatpzeF4tcYWY7gAAAFM"]
[Wed Dec 03 02:02:42.982904 2025] [:error] [pid 47158:tid 47163] [client 192.178.4.101:49816] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8pwl3-jeg4VwJRw7EpJwAAAMM"]
[Wed Dec 03 02:02:47.026479 2025] [:error] [pid 25475:tid 25513] [client 192.178.4.101:59537] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8pxx7VdEeEe8GnPSVD6wAAAQE"]
[Wed Dec 03 02:02:52.615546 2025] [:error] [pid 47067:tid 47081] [client 192.178.4.101:41018] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8pzAcYJkWYuBnpVapR7AAAAAk"]
[Wed Dec 03 02:02:54.470197 2025] [:error] [pid 47068:tid 47105] [client 192.178.4.101:48130] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8pziDFatpzeF4tcYWZHwAAAEU"]
[Wed Dec 03 02:04:51.848879 2025] [:error] [pid 25475:tid 25532] [client 192.178.4.101:61592] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8qQx7VdEeEe8GnPSVFmgAAARQ"]
[Wed Dec 03 02:05:22.176328 2025] [:error] [pid 47067:tid 47077] [client 192.178.4.101:43355] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8qYgcYJkWYuBnpVapTQAAAAAU"]
[Wed Dec 03 02:05:31.021460 2025] [:error] [pid 47158:tid 47174] [client 192.178.4.101:43435] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8qa13-jeg4VwJRw7EquwAAAM4"]
[Wed Dec 03 02:05:37.097668 2025] [:error] [pid 47067:tid 47081] [client 192.178.4.101:39842] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8qcQcYJkWYuBnpVapTWwAAAAk"]
[Wed Dec 03 02:07:56.625342 2025] [:error] [pid 25475:tid 25516] [client 192.178.4.101:47304] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8q_B7VdEeEe8GnPSVJYAAAAQQ"]
[Wed Dec 03 02:08:30.171353 2025] [:error] [pid 25475:tid 25524] [client 192.178.4.101:64768] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8rHh7VdEeEe8GnPSVKBgAAAQw"]
[Wed Dec 03 02:12:21.200685 2025] [:error] [pid 47069:tid 47144] [client 192.178.4.101:61435] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8sBXliPX01jdRNUv2cZQAAAJE"]
[Wed Dec 03 02:12:25.252081 2025] [:error] [pid 25475:tid 25520] [client 192.178.4.101:35081] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8sCR7VdEeEe8GnPSVPdgAAAQg"]
[Wed Dec 03 02:12:33.082021 2025] [:error] [pid 47158:tid 47173] [client 192.178.4.101:57796] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8sEV3-jeg4VwJRw7Ew8gAAAM0"]
[Wed Dec 03 02:12:34.964833 2025] [:error] [pid 47158:tid 47176] [client 192.178.4.101:58540] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8sEl3-jeg4VwJRw7Ew9wAAANA"]
[Wed Dec 03 02:12:39.778897 2025] [:error] [pid 25475:tid 25531] [client 192.178.4.101:52131] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8sFx7VdEeEe8GnPSVPugAAARM"]
[Wed Dec 03 02:12:42.760946 2025] [:error] [pid 47067:tid 47079] [client 192.178.4.101:59855] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8sGgcYJkWYuBnpVapZ4AAAAAc"]
[Wed Dec 03 02:12:43.933338 2025] [:error] [pid 47068:tid 47123] [client 192.178.4.101:50436] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8sGyDFatpzeF4tcYWgIQAAAFc"]
[Wed Dec 03 02:12:47.191113 2025] [:error] [pid 47067:tid 47084] [client 192.178.4.101:50130] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8sHwcYJkWYuBnpVapZ8wAAAAw"]
[Wed Dec 03 02:12:51.941115 2025] [:error] [pid 47067:tid 47076] [client 192.178.4.101:48871] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8sIwcYJkWYuBnpVapZ_wAAAAQ"]
[Wed Dec 03 02:12:52.876637 2025] [:error] [pid 25475:tid 25514] [client 192.178.4.101:47174] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8sJB7VdEeEe8GnPSVP5QAAAQI"]
[Wed Dec 03 02:12:57.052369 2025] [:error] [pid 47158:tid 47183] [client 192.178.4.101:36430] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8sKV3-jeg4VwJRw7ExUQAAANc"]
[Wed Dec 03 02:13:00.620146 2025] [:error] [pid 25475:tid 25525] [client 192.178.4.101:37469] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8sLB7VdEeEe8GnPSVQCwAAAQ0"]
[Wed Dec 03 02:13:01.975459 2025] [:error] [pid 47068:tid 47117] [client 192.178.4.101:56620] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8sLSDFatpzeF4tcYWgSgAAAFE"]
[Wed Dec 03 02:13:05.224402 2025] [:error] [pid 47158:tid 47162] [client 192.178.4.101:46372] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8sMV3-jeg4VwJRw7ExcgAAAMI"]
[Wed Dec 03 02:13:08.635014 2025] [:error] [pid 25475:tid 25512] [client 192.178.4.101:38792] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8sNB7VdEeEe8GnPSVQJQAAAQA"]
[Wed Dec 03 02:13:09.397103 2025] [:error] [pid 47069:tid 47140] [client 192.178.4.101:49449] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8sNXliPX01jdRNUv2c_QAAAI0"]
[Wed Dec 03 02:13:20.965502 2025] [:error] [pid 47067:tid 47075] [client 154.213.165.53:21293] [client 154.213.165.53] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paramountbaldivis.com"] [uri "/.git/HEAD"] [unique_id "aS8sQAcYJkWYuBnpVapaZgAAAAM"]
[Wed Dec 03 02:13:24.426252 2025] [:error] [pid 47158:tid 47169] [client 104.207.50.222:11609] [client 104.207.50.222] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paramountbaldivis.com"] [uri "/.env"] [unique_id "aS8sRF3-jeg4VwJRw7ExrwAAAMk"]
[Wed Dec 03 02:13:24.988870 2025] [:error] [pid 47069:tid 47128] [client 45.3.42.130:43639] [client 45.3.42.130] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paramountbaldivis.com"] [uri "/.svn/wc.db"] [unique_id "aS8sRHliPX01jdRNUv2dTQAAAIE"]
[Wed Dec 03 02:20:49.953578 2025] [:error] [pid 47158:tid 47161] [client 192.178.4.101:58364] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8uAV3-jeg4VwJRw7E2qQAAAME"]
[Wed Dec 03 02:20:51.662498 2025] [:error] [pid 25475:tid 25513] [client 192.178.4.101:51960] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8uAx7VdEeEe8GnPSVW0gAAAQE"]
[Wed Dec 03 02:20:52.933786 2025] [:error] [pid 47069:tid 47147] [client 192.178.4.101:59303] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8uBHliPX01jdRNUv2iGQAAAJQ"]
[Wed Dec 03 02:20:53.917756 2025] [:error] [pid 25475:tid 25531] [client 192.178.4.101:56416] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8uBR7VdEeEe8GnPSVW2AAAARM"]
[Wed Dec 03 02:20:58.886614 2025] [:error] [pid 25475:tid 25534] [client 192.178.4.101:63685] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8uCh7VdEeEe8GnPSVW7gAAARY"]
[Wed Dec 03 02:21:13.524228 2025] [:error] [pid 25475:tid 25532] [client 192.178.4.101:50655] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8uGR7VdEeEe8GnPSVXEAAAARQ"]
[Wed Dec 03 02:21:21.778229 2025] [:error] [pid 47069:tid 47128] [client 192.178.4.101:57153] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8uIXliPX01jdRNUv2iVAAAAIE"]
[Wed Dec 03 02:21:30.528225 2025] [:error] [pid 47068:tid 47105] [client 192.178.4.101:60590] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8uKiDFatpzeF4tcYWlRwAAAEU"]
[Wed Dec 03 02:21:35.609460 2025] [:error] [pid 47158:tid 47178] [client 192.178.4.101:61983] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8uL13-jeg4VwJRw7E3LgAAANI"]
[Wed Dec 03 02:23:46.590151 2025] [:error] [pid 25475:tid 25529] [client 192.178.4.101:54243] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8ush7VdEeEe8GnPSVZBQAAARE"]
[Wed Dec 03 02:23:50.638107 2025] [:error] [pid 47069:tid 47129] [client 192.178.4.101:60763] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8utnliPX01jdRNUv2jyAAAAII"]
[Wed Dec 03 02:23:55.284769 2025] [:error] [pid 47068:tid 47111] [client 192.178.4.101:45959] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8uuyDFatpzeF4tcYWmoQAAAEs"]
[Wed Dec 03 02:23:56.761612 2025] [:error] [pid 25475:tid 25517] [client 192.178.4.101:55656] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8uvB7VdEeEe8GnPSVZIQAAAQU"]
[Wed Dec 03 02:23:58.648890 2025] [:error] [pid 25475:tid 25534] [client 192.178.4.101:51307] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8uvh7VdEeEe8GnPSVZKQAAARY"]
[Wed Dec 03 02:24:12.143181 2025] [:error] [pid 47067:tid 47078] [client 192.178.4.101:60913] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8uzAcYJkWYuBnpVaphWwAAAAY"]
[Wed Dec 03 02:24:14.180961 2025] [:error] [pid 47069:tid 47136] [client 192.178.4.101:63575] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8uznliPX01jdRNUv2kCQAAAIk"]
[Wed Dec 03 02:24:20.126776 2025] [:error] [pid 47158:tid 47174] [client 192.178.4.101:39361] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8u1F3-jeg4VwJRw7E5LgAAAM4"]
[Wed Dec 03 02:24:21.927392 2025] [:error] [pid 25475:tid 25525] [client 192.178.4.101:38610] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8u1R7VdEeEe8GnPSVZlQAAAQ0"]
[Wed Dec 03 02:24:25.336419 2025] [:error] [pid 47158:tid 47161] [client 192.178.4.101:64300] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8u2V3-jeg4VwJRw7E5PwAAAME"]
[Wed Dec 03 02:24:26.197254 2025] [:error] [pid 47158:tid 47162] [client 192.178.4.101:52103] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8u2l3-jeg4VwJRw7E5RQAAAMI"]
[Wed Dec 03 02:24:30.413305 2025] [:error] [pid 47068:tid 47111] [client 192.178.4.101:59582] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8u3iDFatpzeF4tcYWnCgAAAEs"]
[Wed Dec 03 02:24:32.435697 2025] [:error] [pid 25475:tid 25519] [client 192.178.4.101:35916] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8u4B7VdEeEe8GnPSVZxQAAAQc"]
[Wed Dec 03 02:24:38.291964 2025] [:error] [pid 47069:tid 47138] [client 192.178.4.101:53867] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8u5nliPX01jdRNUv2kTAAAAIs"]
[Wed Dec 03 02:24:40.136571 2025] [:error] [pid 47067:tid 47082] [client 192.178.4.101:35200] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8u6AcYJkWYuBnpVaphwwAAAAo"]
[Wed Dec 03 02:24:41.411563 2025] [:error] [pid 47158:tid 47165] [client 192.178.4.101:38908] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8u6V3-jeg4VwJRw7E5fwAAAMU"]
[Wed Dec 03 02:25:35.005189 2025] [:error] [pid 47158:tid 47160] [client 192.178.4.101:59504] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8vH13-jeg4VwJRw7E6OAAAAMA"]
[Wed Dec 03 02:32:54.946942 2025] [:error] [pid 47067:tid 47089] [client 192.178.4.101:50824] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8w1gcYJkWYuBnpVapoPgAAABE"]
[Wed Dec 03 02:33:01.678071 2025] [:error] [pid 25475:tid 25523] [client 192.178.4.101:58058] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8w3R7VdEeEe8GnPSVimAAAAQs"]
[Wed Dec 03 02:33:08.599875 2025] [:error] [pid 47158:tid 47184] [client 192.178.4.101:55912] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8w5F3-jeg4VwJRw7FAtwAAANg"]
[Wed Dec 03 02:33:35.105957 2025] [:error] [pid 25475:tid 25533] [client 192.178.4.101:41916] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8w_x7VdEeEe8GnPSVjUQAAARU"]
[Wed Dec 03 02:33:43.213930 2025] [:error] [pid 47067:tid 47072] [client 192.178.4.101:52165] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8xBwcYJkWYuBnpVapo5gAAAAA"]
[Wed Dec 03 02:41:13.309938 2025] [:error] [pid 25475:tid 25514] [client 192.178.4.101:65315] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8yyR7VdEeEe8GnPSVpZAAAAQI"]
[Wed Dec 03 02:41:16.667395 2025] [:error] [pid 47069:tid 47145] [client 192.178.4.101:46939] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8yzHliPX01jdRNUv2vqQAAAJI"]
[Wed Dec 03 02:41:22.467618 2025] [:error] [pid 47067:tid 47083] [client 192.178.4.101:61854] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8y0gcYJkWYuBnpVapt-QAAAAs"]
[Wed Dec 03 02:41:24.490796 2025] [:error] [pid 47067:tid 47094] [client 192.178.4.101:46552] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8y1AcYJkWYuBnpVapt_AAAABY"]
[Wed Dec 03 02:41:25.649690 2025] [:error] [pid 47069:tid 47136] [client 192.178.4.101:42434] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8y1XliPX01jdRNUv2vuAAAAIk"]
[Wed Dec 03 02:41:32.089378 2025] [:error] [pid 25475:tid 25529] [client 192.178.4.101:39402] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8y3B7VdEeEe8GnPSVpggAAARE"]
[Wed Dec 03 02:41:47.619240 2025] [:error] [pid 47069:tid 47143] [client 192.178.4.101:42694] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8y63liPX01jdRNUv2v2AAAAJA"]
[Wed Dec 03 02:41:55.560803 2025] [:error] [pid 47069:tid 47139] [client 192.178.4.101:38780] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8y83liPX01jdRNUv2v6gAAAIw"]
[Wed Dec 03 02:51:36.796433 2025] [:error] [pid 25475:tid 25512] [client 72.11.150.128:40634] [client 72.11.150.128] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||paramountbaldivis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS81OB7VdEeEe8GnPSVwLAAAAQA"], referer: https://www.google.com
[Wed Dec 03 03:01:52.642229 2025] [:error] [pid 47067:tid 47084] [client 192.178.4.101:38631] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS83oAcYJkWYuBnpVap2hgAAAAw"]
[Wed Dec 03 03:01:53.518516 2025] [:error] [pid 47068:tid 47100] [client 192.178.4.101:45543] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS83oSDFatpzeF4tcYW6dwAAAEA"]
[Wed Dec 03 03:02:00.036193 2025] [:error] [pid 47158:tid 47161] [client 192.178.4.101:44731] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS83qF3-jeg4VwJRw7FRiQAAAME"]
[Wed Dec 03 03:27:48.208370 2025] [:error] [pid 22986:tid 23093] [client 192.178.4.101:53589] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS89tMEmVAoAsngrNkWjMQAAAFU"]
[Wed Dec 03 03:27:59.293809 2025] [:error] [pid 23153:tid 23163] [client 192.178.4.101:49756] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS89v3z6Lac_9dX2FesnCAAAAME"]
[Wed Dec 03 03:28:02.122507 2025] [:error] [pid 22985:tid 23055] [client 192.178.4.101:58187] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS89wsI-18t9YqYbgUISPgAAABc"]
[Wed Dec 03 03:28:18.937285 2025] [:error] [pid 22986:tid 23079] [client 192.178.4.101:55347] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS890sEmVAoAsngrNkWjYgAAAEc"]
[Wed Dec 03 03:28:29.367644 2025] [:error] [pid 22987:tid 23110] [client 192.178.4.101:63927] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS893e0Or1j6Pql8cQxEUwAAAIk"]
[Wed Dec 03 03:28:37.123945 2025] [:error] [pid 23153:tid 23162] [client 192.178.4.101:47175] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS895Xz6Lac_9dX2FesnYwAAAMA"]
[Wed Dec 03 03:31:19.287389 2025] [:error] [pid 61833:tid 61879] [client 192.178.4.101:48525] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8-h4xcxW9_FDSj5AzgjwAAAFA"]
[Wed Dec 03 03:31:23.171383 2025] [:error] [pid 61938:tid 61957] [client 192.178.4.101:65241] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS8-i-PiqqPeV4rvGMA-vwAAANE"]
[Wed Dec 03 03:43:28.953450 2025] [:error] [pid 28089:tid 28143] [client 192.178.4.101:53718] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9BYEYCt5vAs8Zp49Og9wAAAFY"]
[Wed Dec 03 03:43:32.575712 2025] [:error] [pid 28184:tid 28217] [client 192.178.4.101:49946] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9BZJOELf9lFqFaitEEGwAAANg"]
[Wed Dec 03 03:45:45.153560 2025] [:error] [pid 1974:tid 2052] [client 192.178.4.101:51437] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9B6SswdCleqw-LxtOLBQAAAEI"]
[Wed Dec 03 03:45:50.779866 2025] [:error] [pid 1975:tid 2113] [client 192.178.4.101:38560] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9B7gbOj51RQycskZWPfwAAAJg"]
[Wed Dec 03 03:45:59.798836 2025] [:error] [pid 1974:tid 2057] [client 192.178.4.101:53991] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9B9yswdCleqw-LxtOLEQAAAEU"]
[Wed Dec 03 03:46:03.131855 2025] [:error] [pid 1975:tid 2103] [client 192.178.4.101:58909] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9B-wbOj51RQycskZWPngAAAI4"]
[Wed Dec 03 03:46:09.197826 2025] [:error] [pid 1975:tid 2109] [client 192.178.4.101:54603] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9CAQbOj51RQycskZWPuAAAAJQ"]
[Wed Dec 03 03:46:16.936620 2025] [:error] [pid 2129:tid 2153] [client 192.178.4.101:36555] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9CCMCOASBJJ15wBwdb_wAAANA"]
[Wed Dec 03 03:46:19.170085 2025] [:error] [pid 1973:tid 1999] [client 192.178.4.101:59936] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9CCwfedWX_N6IrYC7UCAAAAAQ"]
[Wed Dec 03 03:46:25.201469 2025] [:error] [pid 2129:tid 2144] [client 192.178.4.101:52049] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9CEcCOASBJJ15wBwdcEgAAAMc"]
[Wed Dec 03 03:46:30.120707 2025] [:error] [pid 1974:tid 2074] [client 192.178.4.101:36210] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9CFiswdCleqw-LxtOLXQAAAE0"]
[Wed Dec 03 03:46:32.175777 2025] [:error] [pid 1973:tid 1994] [client 192.178.4.101:53546] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9CGAfedWX_N6IrYC7UIgAAAAI"]
[Wed Dec 03 03:46:37.422886 2025] [:error] [pid 1974:tid 2069] [client 192.178.4.101:44745] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9CHSswdCleqw-LxtOLcAAAAEk"]
[Wed Dec 03 03:46:38.999215 2025] [:error] [pid 1975:tid 2092] [client 192.178.4.101:60961] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9CHgbOj51RQycskZWP7QAAAIM"]
[Wed Dec 03 03:47:25.785205 2025] [:error] [pid 1973:tid 2031] [client 192.178.4.101:47896] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9CTQfedWX_N6IrYC7UbwAAAAg"]
[Wed Dec 03 03:47:37.884138 2025] [:error] [pid 1973:tid 2043] [client 192.178.4.101:42837] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9CWQfedWX_N6IrYC7UfgAAABQ"]
[Wed Dec 03 03:47:39.074179 2025] [:error] [pid 1975:tid 2100] [client 192.178.4.101:58203] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9CWwbOj51RQycskZWQcAAAAIs"]
[Wed Dec 03 03:47:41.200485 2025] [:error] [pid 2129:tid 2143] [client 192.178.4.101:37704] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9CXcCOASBJJ15wBwdc5AAAAMY"]
[Wed Dec 03 03:47:42.930143 2025] [:error] [pid 1973:tid 2044] [client 192.178.4.101:53546] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9CXgfedWX_N6IrYC7UgQAAABU"]
[Wed Dec 03 03:51:41.758581 2025] [:error] [pid 1973:tid 1996] [client 192.178.4.101:53823] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9DTQfedWX_N6IrYC7VnwAAAAM"]
[Wed Dec 03 03:51:51.860680 2025] [:error] [pid 1973:tid 1992] [client 192.178.4.101:48361] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9DVwfedWX_N6IrYC7VpAAAAAA"]
[Wed Dec 03 03:52:34.253788 2025] [:error] [pid 19121:tid 19168] [client 192.178.4.101:54916] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9DguDpfj4eaU_IBkwvZwAAAQ4"]
[Wed Dec 03 03:53:02.991017 2025] [:error] [pid 1973:tid 2027] [client 119.96.24.54:51444] [client 119.96.24.54] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||paramountbaldivis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9DngfedWX_N6IrYC7VvQAAAAU"]
[Wed Dec 03 03:53:20.055961 2025] [:error] [pid 46993:tid 46999] [client 37.140.223.237:30475] [client 37.140.223.237] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-json/wp/v2/posts"] [unique_id "aS9DsKfmmy2Qwo-29xB4SwAAAAI"]
[Wed Dec 03 03:53:20.760506 2025] [:error] [pid 46994:tid 47025] [client 136.144.33.12:54861] [client 136.144.33.12] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/wp-parsidate/includes/admin/acf-fields-adyrui.php"] [unique_id "aS9DsAHTXie6yvgtpe5AxAAAAEA"]
[Wed Dec 03 03:53:21.518842 2025] [:error] [pid 46995:tid 47053] [client 37.140.223.229:33843] [client 37.140.223.229] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/asasx.php"] [unique_id "aS9DsS49R77DGA8IkDD5iAAAAIA"]
[Wed Dec 03 03:53:22.255697 2025] [:error] [pid 46995:tid 47055] [client 136.144.33.42:58077] [client 136.144.33.42] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/themes/aback.php"] [unique_id "aS9Dsi49R77DGA8IkDD5iQAAAII"]
[Wed Dec 03 03:53:22.959823 2025] [:error] [pid 46994:tid 47031] [client 37.140.223.218:31991] [client 37.140.223.218] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/new.php"] [unique_id "aS9DsgHTXie6yvgtpe5AxwAAAEY"]
[Wed Dec 03 03:53:23.668232 2025] [:error] [pid 47089:tid 47102] [client 37.140.223.238:57877] [client 37.140.223.238] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/ad.php"] [unique_id "aS9Dswd82EVr621c8CXkcwAAAMs"]
[Wed Dec 03 03:53:24.354124 2025] [:error] [pid 46994:tid 47036] [client 37.140.223.246:26047] [client 37.140.223.246] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/moderation.php"] [unique_id "aS9DtAHTXie6yvgtpe5AyQAAAEs"]
[Wed Dec 03 03:53:25.054194 2025] [:error] [pid 46995:tid 47063] [client 37.140.223.240:64861] [client 37.140.223.240] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/themes/classwithtostring.php"] [unique_id "aS9DtS49R77DGA8IkDD5jQAAAIk"]
[Wed Dec 03 03:53:25.753616 2025] [:error] [pid 46994:tid 47041] [client 37.140.223.236:54837] [client 37.140.223.236] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/test.php"] [unique_id "aS9DtQHTXie6yvgtpe5AzAAAAFA"]
[Wed Dec 03 03:53:27.204446 2025] [:error] [pid 47089:tid 47113] [client 37.140.223.215:50589] [client 37.140.223.215] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/themes.php"] [unique_id "aS9Dtwd82EVr621c8CXkegAAANY"]
[Wed Dec 03 03:53:27.874063 2025] [:error] [pid 46994:tid 47026] [client 136.144.33.12:39017] [client 136.144.33.12] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/jindex.php"] [unique_id "aS9DtwHTXie6yvgtpe5A0QAAAEE"]
[Wed Dec 03 03:53:28.558368 2025] [:error] [pid 46995:tid 47061] [client 37.140.223.217:53779] [client 37.140.223.217] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wso.php"] [unique_id "aS9DuC49R77DGA8IkDD5mQAAAIc"]
[Wed Dec 03 03:53:29.252960 2025] [:error] [pid 46994:tid 47031] [client 172.245.102.86:42163] [client 172.245.102.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/Text/network.php"] [unique_id "aS9DuQHTXie6yvgtpe5A0wAAAEY"]
[Wed Dec 03 03:53:29.956015 2025] [:error] [pid 46995:tid 47062] [client 37.140.223.247:41089] [client 37.140.223.247] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/erinyani/default.php"] [unique_id "aS9DuS49R77DGA8IkDD5nQAAAIg"]
[Wed Dec 03 03:53:30.656874 2025] [:error] [pid 46994:tid 47039] [client 172.245.102.86:63133] [client 172.245.102.86] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/leaf.php"] [unique_id "aS9DugHTXie6yvgtpe5A1gAAAE4"]
[Wed Dec 03 03:53:31.357144 2025] [:error] [pid 46994:tid 47041] [client 37.140.223.217:26595] [client 37.140.223.217] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/past.php"] [unique_id "aS9DuwHTXie6yvgtpe5A2QAAAFA"]
[Wed Dec 03 03:53:32.050442 2025] [:error] [pid 46994:tid 47038] [client 37.140.223.236:54953] [client 37.140.223.236] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/z.php"] [unique_id "aS9DvAHTXie6yvgtpe5A2wAAAE0"]
[Wed Dec 03 03:53:32.766322 2025] [:error] [pid 46994:tid 47030] [client 37.140.223.243:29927] [client 37.140.223.243] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/ioxi/ioxi/dropdown.php"] [unique_id "aS9DvAHTXie6yvgtpe5A3gAAAEU"]
[Wed Dec 03 03:53:33.458012 2025] [:error] [pid 46994:tid 47041] [client 37.140.223.242:31961] [client 37.140.223.242] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/mainhosting/default.php"] [unique_id "aS9DvQHTXie6yvgtpe5A4gAAAFA"]
[Wed Dec 03 03:53:34.163210 2025] [:error] [pid 47089:tid 47095] [client 37.140.223.226:28691] [client 37.140.223.226] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/about.php"] [unique_id "aS9Dvgd82EVr621c8CXklQAAAMQ"]
[Wed Dec 03 03:53:34.856171 2025] [:error] [pid 46994:tid 47038] [client 37.140.223.247:48621] [client 37.140.223.247] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/inc.php"] [unique_id "aS9DvgHTXie6yvgtpe5A5AAAAE0"]
[Wed Dec 03 03:53:35.552106 2025] [:error] [pid 47089:tid 47112] [client 37.140.223.228:53481] [client 37.140.223.228] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/system_log.php"] [unique_id "aS9Dvwd82EVr621c8CXkmAAAANU"]
[Wed Dec 03 03:53:36.251250 2025] [:error] [pid 46994:tid 47025] [client 37.140.223.247:20961] [client 37.140.223.247] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/gg.php"] [unique_id "aS9DwAHTXie6yvgtpe5A5QAAAEA"]
[Wed Dec 03 03:53:36.958920 2025] [:error] [pid 46993:tid 47008] [client 37.140.223.216:57293] [client 37.140.223.216] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/sim.php"] [unique_id "aS9DwKfmmy2Qwo-29xB4YwAAAAs"]
[Wed Dec 03 03:53:37.659145 2025] [:error] [pid 47089:tid 47114] [client 37.140.223.251:29977] [client 37.140.223.251] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/admin/function.php"] [unique_id "aS9DwQd82EVr621c8CXknwAAANc"]
[Wed Dec 03 03:53:38.357008 2025] [:error] [pid 47089:tid 47106] [client 172.245.102.86:51673] [client 172.245.102.86] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/core.php"] [unique_id "aS9Dwgd82EVr621c8CXkoQAAAM8"]
[Wed Dec 03 03:53:39.053997 2025] [:error] [pid 47089:tid 47104] [client 37.140.223.229:23935] [client 37.140.223.229] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/mail.php"] [unique_id "aS9Dwwd82EVr621c8CXkpQAAAM0"]
[Wed Dec 03 03:53:39.737037 2025] [:error] [pid 47089:tid 47114] [client 37.140.223.244:42041] [client 37.140.223.244] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/themes/about.php"] [unique_id "aS9Dwwd82EVr621c8CXkpwAAANc"]
[Wed Dec 03 03:53:40.410670 2025] [:error] [pid 46993:tid 47017] [client 37.140.223.239:32909] [client 37.140.223.239] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/xml.php"] [unique_id "aS9DxKfmmy2Qwo-29xB4ZQAAABQ"]
[Wed Dec 03 03:53:41.084440 2025] [:error] [pid 47089:tid 47109] [client 37.140.223.251:26703] [client 37.140.223.251] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/css.php"] [unique_id "aS9DxQd82EVr621c8CXkrgAAANI"]
[Wed Dec 03 03:53:41.765564 2025] [:error] [pid 47089:tid 47099] [client 136.144.33.1:48857] [client 136.144.33.1] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/images/class-config.php"] [unique_id "aS9DxQd82EVr621c8CXksgAAAMg"]
[Wed Dec 03 03:53:42.466004 2025] [:error] [pid 46995:tid 47072] [client 136.144.33.232:47037] [client 136.144.33.232] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/g.php"] [unique_id "aS9Dxi49R77DGA8IkDD5swAAAJI"]
[Wed Dec 03 03:53:43.153633 2025] [:error] [pid 46995:tid 47070] [client 136.144.33.12:40299] [client 136.144.33.12] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-mail.php"] [unique_id "aS9Dxy49R77DGA8IkDD5tQAAAJA"]
[Wed Dec 03 03:53:43.862974 2025] [:error] [pid 46995:tid 47063] [client 37.140.223.215:54725] [client 37.140.223.215] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/default.php"] [unique_id "aS9Dxy49R77DGA8IkDD5uQAAAIk"]
[Wed Dec 03 03:53:44.555735 2025] [:error] [pid 46994:tid 47032] [client 172.245.102.84:57279] [client 172.245.102.84] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/back.php"] [unique_id "aS9DyAHTXie6yvgtpe5A6wAAAEc"]
[Wed Dec 03 03:53:45.392267 2025] [:error] [pid 46995:tid 47068] [client 172.245.102.87:57099] [client 172.245.102.87] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aS9DyS49R77DGA8IkDD5vQAAAI4"]
[Wed Dec 03 03:53:46.063521 2025] [:error] [pid 46993:tid 46999] [client 37.140.223.244:42617] [client 37.140.223.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aS9Dyqfmmy2Qwo-29xB4agAAAAI"]
[Wed Dec 03 03:53:46.755334 2025] [:error] [pid 46995:tid 47064] [client 37.140.223.216:36583] [client 37.140.223.216] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/content.php"] [unique_id "aS9Dyi49R77DGA8IkDD5wQAAAIo"]
[Wed Dec 03 03:53:47.467758 2025] [:error] [pid 46994:tid 47044] [client 172.245.102.83:30075] [client 172.245.102.83] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/leafmailer2.8.php"] [unique_id "aS9DywHTXie6yvgtpe5A7gAAAFM"]
[Wed Dec 03 03:53:48.152487 2025] [:error] [pid 46995:tid 47054] [client 37.140.223.237:45171] [client 37.140.223.237] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/modules/mod_simplefileuploadv1.3/elements/filemanager.php"] [unique_id "aS9DzC49R77DGA8IkDD5wwAAAIE"]
[Wed Dec 03 03:53:48.854048 2025] [:error] [pid 46994:tid 47050] [client 136.144.33.11:24143] [client 136.144.33.11] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/modules/mod_simplefileuploadv1.3/elements/up.php"] [unique_id "aS9DzAHTXie6yvgtpe5A8QAAAFg"]
[Wed Dec 03 03:53:49.553850 2025] [:error] [pid 47089:tid 47093] [client 37.140.223.239:47693] [client 37.140.223.239] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wsa.php"] [unique_id "aS9DzQd82EVr621c8CXkwwAAAMI"]
[Wed Dec 03 03:53:50.241757 2025] [:error] [pid 46994:tid 47027] [client 37.140.223.216:54549] [client 37.140.223.216] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/f35.php"] [unique_id "aS9DzgHTXie6yvgtpe5A9QAAAEI"]
[Wed Dec 03 03:53:50.909417 2025] [:error] [pid 46993:tid 47016] [client 37.140.223.233:41673] [client 37.140.223.233] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-l0gin.php"] [unique_id "aS9Dzqfmmy2Qwo-29xB4bgAAABM"]
[Wed Dec 03 03:53:51.659626 2025] [:error] [pid 46994:tid 47030] [client 37.140.223.223:28753] [client 37.140.223.223] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/abcd.php"] [unique_id "aS9DzwHTXie6yvgtpe5A-gAAAEU"]
[Wed Dec 03 03:53:52.334631 2025] [:error] [pid 46995:tid 47072] [client 172.245.102.87:55651] [client 172.245.102.87] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/aa.php"] [unique_id "aS9D0C49R77DGA8IkDD5xQAAAJI"]
[Wed Dec 03 03:53:53.002537 2025] [:error] [pid 47089:tid 47098] [client 37.140.223.228:53201] [client 37.140.223.228] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/info.php"] [unique_id "aS9D0Qd82EVr621c8CXkxwAAAMc"]
[Wed Dec 03 03:53:53.692665 2025] [:error] [pid 46993:tid 47013] [client 37.140.223.234:30167] [client 37.140.223.234] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/"] [unique_id "aS9D0afmmy2Qwo-29xB4cgAAABA"]
[Wed Dec 03 03:53:54.367204 2025] [:error] [pid 46994:tid 47050] [client 136.144.33.248:35077] [client 136.144.33.248] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/classwithtostring.php"] [unique_id "aS9D0gHTXie6yvgtpe5A_wAAAFg"]
[Wed Dec 03 03:53:55.053938 2025] [:error] [pid 46995:tid 47061] [client 172.245.102.87:64105] [client 172.245.102.87] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/autoload_classmap/function.php"] [unique_id "aS9D0y49R77DGA8IkDD5yAAAAIc"]
[Wed Dec 03 03:53:55.801459 2025] [:error] [pid 46995:tid 47054] [client 136.144.33.13:52311] [client 136.144.33.13] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aS9D0y49R77DGA8IkDD5ywAAAIE"]
[Wed Dec 03 03:53:56.484860 2025] [:error] [pid 46994:tid 47045] [client 37.140.223.225:52627] [client 37.140.223.225] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/cgi-bin/"] [unique_id "aS9D1AHTXie6yvgtpe5BAgAAAFQ"]
[Wed Dec 03 03:53:57.158386 2025] [:error] [pid 46994:tid 47042] [client 37.140.223.242:57609] [client 37.140.223.242] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/autoload_classmap/function.php"] [unique_id "aS9D1QHTXie6yvgtpe5BBQAAAFE"]
[Wed Dec 03 03:53:57.856685 2025] [:error] [pid 46994:tid 47050] [client 136.144.33.13:59061] [client 136.144.33.13] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/js/widgets/"] [unique_id "aS9D1QHTXie6yvgtpe5BBwAAAFg"]
[Wed Dec 03 03:53:58.567868 2025] [:error] [pid 46994:tid 47040] [client 37.140.223.244:55127] [client 37.140.223.244] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/buy.php"] [unique_id "aS9D1gHTXie6yvgtpe5BCAAAAE8"]
[Wed Dec 03 03:53:59.251493 2025] [:error] [pid 46995:tid 47053] [client 136.144.33.1:22009] [client 136.144.33.1] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-file.php"] [unique_id "aS9D1y49R77DGA8IkDD50gAAAIA"]
[Wed Dec 03 03:53:59.954447 2025] [:error] [pid 46995:tid 47078] [client 37.140.223.223:61113] [client 37.140.223.223] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/chosen.php"] [unique_id "aS9D1y49R77DGA8IkDD50wAAAJg"]
[Wed Dec 03 03:54:00.658088 2025] [:error] [pid 46993:tid 47001] [client 37.140.223.248:47787] [client 37.140.223.248] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/dropdown.php"] [unique_id "aS9D2Kfmmy2Qwo-29xB4dgAAAAQ"]
[Wed Dec 03 03:54:01.357862 2025] [:error] [pid 46993:tid 47008] [client 172.245.102.88:59927] [client 172.245.102.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/alfa.php"] [unique_id "aS9D2afmmy2Qwo-29xB4eAAAAAs"]
[Wed Dec 03 03:54:02.057254 2025] [:error] [pid 47089:tid 47096] [client 136.144.33.13:40867] [client 136.144.33.13] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp.php"] [unique_id "aS9D2gd82EVr621c8CXk3AAAAMU"]
[Wed Dec 03 03:54:02.806151 2025] [:error] [pid 47089:tid 47104] [client 136.144.33.232:54207] [client 136.144.33.232] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/nf_tracking.php"] [unique_id "aS9D2gd82EVr621c8CXk3wAAAM0"]
[Wed Dec 03 03:54:03.557415 2025] [:error] [pid 47089:tid 47092] [client 37.140.223.232:39661] [client 37.140.223.232] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/nc4.php"] [unique_id "aS9D2wd82EVr621c8CXk4gAAAME"]
[Wed Dec 03 03:54:04.262376 2025] [:error] [pid 46995:tid 47076] [client 136.144.33.13:50767] [client 136.144.33.13] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/admin.php"] [unique_id "aS9D3C49R77DGA8IkDD52gAAAJY"]
[Wed Dec 03 03:54:04.958447 2025] [:error] [pid 47089:tid 47094] [client 37.140.223.243:61097] [client 37.140.223.243] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/blocks/comments/"] [unique_id "aS9D3Ad82EVr621c8CXk5wAAAMM"]
[Wed Dec 03 03:54:05.680595 2025] [:error] [pid 47089:tid 47112] [client 37.140.223.245:20321] [client 37.140.223.245] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/js/"] [unique_id "aS9D3Qd82EVr621c8CXk6QAAANU"]
[Wed Dec 03 03:54:06.356520 2025] [:error] [pid 47089:tid 47103] [client 37.140.223.250:53845] [client 37.140.223.250] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/network/natural.php"] [unique_id "aS9D3gd82EVr621c8CXk7QAAAMw"]
[Wed Dec 03 03:54:07.081599 2025] [:error] [pid 46994:tid 47037] [client 136.144.33.12:22685] [client 136.144.33.12] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/index.php"] [unique_id "aS9D3wHTXie6yvgtpe5BCgAAAEw"]
[Wed Dec 03 03:54:07.773462 2025] [:error] [pid 46993:tid 47007] [client 37.140.223.230:50937] [client 37.140.223.230] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/wp-conflg.php"] [unique_id "aS9D36fmmy2Qwo-29xB4fQAAAAo"]
[Wed Dec 03 03:54:08.559083 2025] [:error] [pid 47089:tid 47109] [client 37.140.223.246:50231] [client 37.140.223.246] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/block-bindings/"] [unique_id "aS9D4Ad82EVr621c8CXk8gAAANI"]
[Wed Dec 03 03:54:09.268297 2025] [:error] [pid 46993:tid 47019] [client 37.140.223.249:63815] [client 37.140.223.249] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/admin.php"] [unique_id "aS9D4afmmy2Qwo-29xB4gAAAABY"]
[Wed Dec 03 03:54:09.960696 2025] [:error] [pid 46995:tid 47060] [client 37.140.223.240:27647] [client 37.140.223.240] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/Text/about.php"] [unique_id "aS9D4S49R77DGA8IkDD55AAAAIY"]
[Wed Dec 03 03:54:10.661302 2025] [:error] [pid 46995:tid 47073] [client 37.140.223.229:21389] [client 37.140.223.229] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/uploads/"] [unique_id "aS9D4i49R77DGA8IkDD55gAAAJM"]
[Wed Dec 03 03:54:11.355271 2025] [:error] [pid 47089:tid 47107] [client 172.245.102.83:43651] [client 172.245.102.83] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/about.php"] [unique_id "aS9D4wd82EVr621c8CXk-gAAANA"]
[Wed Dec 03 03:54:12.059869 2025] [:error] [pid 47089:tid 47112] [client 172.245.102.86:21107] [client 172.245.102.86] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/worksec.php"] [unique_id "aS9D5Ad82EVr621c8CXk_QAAANU"]
[Wed Dec 03 03:54:12.755131 2025] [:error] [pid 46995:tid 47055] [client 37.140.223.242:26955] [client 37.140.223.242] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/makeasmtp.php"] [unique_id "aS9D5C49R77DGA8IkDD55wAAAII"]
[Wed Dec 03 03:54:13.459765 2025] [:error] [pid 46995:tid 47067] [client 37.140.223.218:33855] [client 37.140.223.218] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/k.php"] [unique_id "aS9D5S49R77DGA8IkDD56wAAAI0"]
[Wed Dec 03 03:54:14.152630 2025] [:error] [pid 46995:tid 47058] [client 37.140.223.223:54095] [client 37.140.223.223] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/function.php"] [unique_id "aS9D5i49R77DGA8IkDD57AAAAIU"]
[Wed Dec 03 03:54:14.886941 2025] [:error] [pid 47089:tid 47091] [client 37.140.223.218:22653] [client 37.140.223.218] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/about.php"] [unique_id "aS9D5gd82EVr621c8CXlAQAAAMA"]
[Wed Dec 03 03:54:15.572617 2025] [:error] [pid 46994:tid 47043] [client 37.140.223.228:59691] [client 37.140.223.228] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/images/"] [unique_id "aS9D5wHTXie6yvgtpe5BEwAAAFI"]
[Wed Dec 03 03:54:16.255567 2025] [:error] [pid 46995:tid 47063] [client 37.140.223.221:64969] [client 37.140.223.221] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/fast.php"] [unique_id "aS9D6C49R77DGA8IkDD58gAAAIk"]
[Wed Dec 03 03:54:16.956928 2025] [:error] [pid 46995:tid 47077] [client 37.140.223.247:30927] [client 37.140.223.247] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/cache.php"] [unique_id "aS9D6C49R77DGA8IkDD59QAAAJc"]
[Wed Dec 03 03:54:17.638293 2025] [:error] [pid 46995:tid 47056] [client 37.140.223.227:62491] [client 37.140.223.227] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-good.php"] [unique_id "aS9D6S49R77DGA8IkDD5-QAAAIM"]
[Wed Dec 03 03:54:18.356958 2025] [:error] [pid 46994:tid 47028] [client 37.140.223.219:53531] [client 37.140.223.219] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/ID3/"] [unique_id "aS9D6gHTXie6yvgtpe5BFAAAAEM"]
[Wed Dec 03 03:54:19.053541 2025] [:error] [pid 46994:tid 47041] [client 172.245.102.88:55853] [client 172.245.102.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/randkeyword.PhP7"] [unique_id "aS9D6wHTXie6yvgtpe5BFgAAAFA"]
[Wed Dec 03 03:54:19.755771 2025] [:error] [pid 46995:tid 47064] [client 37.140.223.230:23953] [client 37.140.223.230] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/ioxi002.PhP7"] [unique_id "aS9D6y49R77DGA8IkDD5_gAAAIo"]
[Wed Dec 03 03:54:20.454067 2025] [:error] [pid 46994:tid 47038] [client 136.144.33.232:30059] [client 136.144.33.232] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/js/about.php7"] [unique_id "aS9D7AHTXie6yvgtpe5BFwAAAE0"]
[Wed Dec 03 03:54:21.163893 2025] [:error] [pid 46995:tid 47062] [client 136.144.33.11:27493] [client 136.144.33.11] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/akcc.php"] [unique_id "aS9D7S49R77DGA8IkDD6AwAAAIg"]
[Wed Dec 03 03:54:22.001938 2025] [:error] [pid 46995:tid 47058] [client 37.140.223.219:59507] [client 37.140.223.219] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/function/function.php"] [unique_id "aS9D7i49R77DGA8IkDD6BgAAAIU"]
[Wed Dec 03 03:54:22.670405 2025] [:error] [pid 46994:tid 47040] [client 37.140.223.236:24913] [client 37.140.223.236] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/includes/"] [unique_id "aS9D7gHTXie6yvgtpe5BGwAAAE8"]
[Wed Dec 03 03:54:23.414146 2025] [:error] [pid 46995:tid 47063] [client 37.140.223.228:20827] [client 37.140.223.228] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/1.php"] [unique_id "aS9D7y49R77DGA8IkDD6CQAAAIk"]
[Wed Dec 03 03:54:24.083290 2025] [:error] [pid 46994:tid 47037] [client 136.144.33.13:60791] [client 136.144.33.13] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/autoload_classmap.php"] [unique_id "aS9D8AHTXie6yvgtpe5BIwAAAEw"]
[Wed Dec 03 03:54:24.768597 2025] [:error] [pid 46993:tid 47005] [client 37.140.223.233:33487] [client 37.140.223.233] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/fonts/"] [unique_id "aS9D8Kfmmy2Qwo-29xB4kwAAAAg"]
[Wed Dec 03 03:54:25.584663 2025] [:error] [pid 46994:tid 47027] [client 136.144.33.11:51153] [client 136.144.33.11] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aS9D8QHTXie6yvgtpe5BKwAAAEI"]
[Wed Dec 03 03:54:26.390506 2025] [:error] [pid 46993:tid 47010] [client 37.140.223.244:41527] [client 37.140.223.244] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-"] [unique_id "aS9D8qfmmy2Qwo-29xB4lgAAAA0"]
[Wed Dec 03 03:54:27.059231 2025] [:error] [pid 47089:tid 47097] [client 37.140.223.227:24029] [client 37.140.223.227] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-error.php"] [unique_id "aS9D8wd82EVr621c8CXlFAAAAMY"]
[Wed Dec 03 03:54:27.772400 2025] [:error] [pid 47089:tid 47095] [client 37.140.223.233:39855] [client 37.140.223.233] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/file2.php"] [unique_id "aS9D8wd82EVr621c8CXlFgAAAMQ"]
[Wed Dec 03 03:54:28.460317 2025] [:error] [pid 46993:tid 46999] [client 136.144.33.10:63519] [client 136.144.33.10] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/adminfuns.php"] [unique_id "aS9D9Kfmmy2Qwo-29xB4mQAAAAI"]
[Wed Dec 03 03:54:29.135376 2025] [:error] [pid 46995:tid 47064] [client 136.144.33.13:47485] [client 136.144.33.13] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/"] [unique_id "aS9D9S49R77DGA8IkDD6FAAAAIo"]
[Wed Dec 03 03:54:29.877983 2025] [:error] [pid 46993:tid 47009] [client 37.140.223.228:36017] [client 37.140.223.228] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/xc.php"] [unique_id "aS9D9afmmy2Qwo-29xB4nAAAAAw"]
[Wed Dec 03 03:54:30.551326 2025] [:error] [pid 46993:tid 47005] [client 37.140.223.224:50179] [client 37.140.223.224] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/classwithtostring.php"] [unique_id "aS9D9qfmmy2Qwo-29xB4nQAAAAg"]
[Wed Dec 03 03:54:31.262308 2025] [:error] [pid 47089:tid 47101] [client 37.140.223.241:50319] [client 37.140.223.241] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/moon.php"] [unique_id "aS9D9wd82EVr621c8CXlGQAAAMo"]
[Wed Dec 03 03:54:31.969996 2025] [:error] [pid 46995:tid 47062] [client 172.245.102.85:43819] [client 172.245.102.85] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/IXR/"] [unique_id "aS9D9y49R77DGA8IkDD6GAAAAIg"]
[Wed Dec 03 03:54:32.656299 2025] [:error] [pid 46994:tid 47036] [client 136.144.33.10:43733] [client 136.144.33.10] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-trackback.php"] [unique_id "aS9D-AHTXie6yvgtpe5BPQAAAEs"]
[Wed Dec 03 03:54:33.359017 2025] [:error] [pid 46993:tid 46999] [client 37.140.223.239:56173] [client 37.140.223.239] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/rest-api/"] [unique_id "aS9D-afmmy2Qwo-29xB4owAAAAI"]
[Wed Dec 03 03:54:34.057080 2025] [:error] [pid 46994:tid 47037] [client 37.140.223.221:41901] [client 37.140.223.221] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/load.php"] [unique_id "aS9D-gHTXie6yvgtpe5BPwAAAEw"]
[Wed Dec 03 03:54:34.762028 2025] [:error] [pid 46995:tid 47066] [client 136.144.33.12:44289] [client 136.144.33.12] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/edit.php"] [unique_id "aS9D-i49R77DGA8IkDD6HQAAAIw"]
[Wed Dec 03 03:54:35.468228 2025] [:error] [pid 46994:tid 47044] [client 37.140.223.239:47557] [client 37.140.223.239] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/as.php"] [unique_id "aS9D-wHTXie6yvgtpe5BQwAAAFM"]
[Wed Dec 03 03:54:36.155484 2025] [:error] [pid 46995:tid 47061] [client 37.140.223.245:62037] [client 37.140.223.245] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/xmrlpc.php"] [unique_id "aS9D_C49R77DGA8IkDD6HwAAAIc"]
[Wed Dec 03 03:54:36.852458 2025] [:error] [pid 46995:tid 47068] [client 37.140.223.231:47709] [client 37.140.223.231] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/403.php"] [unique_id "aS9D_C49R77DGA8IkDD6IgAAAI4"]
[Wed Dec 03 03:54:37.553168 2025] [:error] [pid 46994:tid 47036] [client 37.140.223.249:60005] [client 37.140.223.249] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/blocks/about.php"] [unique_id "aS9D_QHTXie6yvgtpe5BRgAAAEs"]
[Wed Dec 03 03:54:38.284236 2025] [:error] [pid 46995:tid 47070] [client 136.144.33.12:24867] [client 136.144.33.12] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/m.php"] [unique_id "aS9D_i49R77DGA8IkDD6JQAAAJA"]
[Wed Dec 03 03:54:38.961068 2025] [:error] [pid 46994:tid 47040] [client 136.144.33.248:60719] [client 136.144.33.248] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/uploads/"] [unique_id "aS9D_gHTXie6yvgtpe5BRwAAAE8"]
[Wed Dec 03 03:54:39.557819 2025] [:error] [pid 46995:tid 47057] [client 192.178.4.101:39705] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9D_y49R77DGA8IkDD6KgAAAIQ"]
[Wed Dec 03 03:54:39.653124 2025] [:error] [pid 46995:tid 47063] [client 37.140.223.217:44193] [client 37.140.223.217] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/themes/twentyfifteen/shell3.php"] [unique_id "aS9D_y49R77DGA8IkDD6LAAAAIk"]
[Wed Dec 03 03:54:40.349659 2025] [:error] [pid 46995:tid 47075] [client 37.140.223.245:29985] [client 37.140.223.245] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/inputs.php"] [unique_id "aS9EAC49R77DGA8IkDD6LQAAAJU"]
[Wed Dec 03 03:54:41.058623 2025] [:error] [pid 47089:tid 47111] [client 37.140.223.226:59403] [client 37.140.223.226] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/"] [unique_id "aS9EAQd82EVr621c8CXlJAAAANQ"]
[Wed Dec 03 03:54:41.767017 2025] [:error] [pid 46995:tid 47072] [client 172.245.102.87:23433] [client 172.245.102.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aS9EAS49R77DGA8IkDD6LgAAAJI"]
[Wed Dec 03 03:54:42.450440 2025] [:error] [pid 46995:tid 47076] [client 37.140.223.235:31845] [client 37.140.223.235] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/customize/wp-conflg.php"] [unique_id "aS9EAi49R77DGA8IkDD6LwAAAJY"]
[Wed Dec 03 03:54:43.158063 2025] [:error] [pid 46995:tid 47067] [client 37.140.223.215:54913] [client 37.140.223.215] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/file.php"] [unique_id "aS9EAy49R77DGA8IkDD6MQAAAI0"]
[Wed Dec 03 03:54:43.858505 2025] [:error] [pid 46995:tid 47078] [client 37.140.223.216:49419] [client 37.140.223.216] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/upload/"] [unique_id "aS9EAy49R77DGA8IkDD6NAAAAJg"]
[Wed Dec 03 03:54:44.557453 2025] [:error] [pid 46993:tid 47009] [client 37.140.223.223:20855] [client 37.140.223.223] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/ioxi-o.php"] [unique_id "aS9EBKfmmy2Qwo-29xB4sgAAAAw"]
[Wed Dec 03 03:54:45.260856 2025] [:error] [pid 46993:tid 47014] [client 37.140.223.244:21965] [client 37.140.223.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "paramountbaldivis.com"] [uri "/fm.php"] [unique_id "aS9EBafmmy2Qwo-29xB4swAAABE"]
[Wed Dec 03 03:54:45.931343 2025] [:error] [pid 46995:tid 47068] [client 37.140.223.223:21253] [client 37.140.223.223] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/css/"] [unique_id "aS9EBS49R77DGA8IkDD6OAAAAI4"]
[Wed Dec 03 03:54:46.601767 2025] [:error] [pid 47089:tid 47094] [client 37.140.223.226:20351] [client 37.140.223.226] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/bless.php"] [unique_id "aS9EBgd82EVr621c8CXlMQAAAMM"]
[Wed Dec 03 03:54:47.272443 2025] [:error] [pid 46995:tid 47067] [client 37.140.223.235:41919] [client 37.140.223.235] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/assets/"] [unique_id "aS9EBy49R77DGA8IkDD6PgAAAI0"]
[Wed Dec 03 03:54:47.954791 2025] [:error] [pid 46995:tid 47058] [client 172.245.102.87:57751] [client 172.245.102.87] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/revslider/includes/external/page/"] [unique_id "aS9EBy49R77DGA8IkDD6PwAAAIU"]
[Wed Dec 03 03:54:48.655056 2025] [:error] [pid 46993:tid 47007] [client 37.140.223.233:49379] [client 37.140.223.233] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/"] [unique_id "aS9ECKfmmy2Qwo-29xB4uAAAAAo"]
[Wed Dec 03 03:54:48.944133 2025] [:error] [pid 47089:tid 47092] [client 192.178.4.101:46256] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9ECAd82EVr621c8CXlNQAAAME"]
[Wed Dec 03 03:54:49.327097 2025] [:error] [pid 46995:tid 47069] [client 37.140.223.218:54497] [client 37.140.223.218] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/system.php"] [unique_id "aS9ECS49R77DGA8IkDD6QwAAAI8"]
[Wed Dec 03 03:54:50.064486 2025] [:error] [pid 46994:tid 47047] [client 37.140.223.227:20571] [client 37.140.223.227] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/themes/admin.php"] [unique_id "aS9ECgHTXie6yvgtpe5BVQAAAFU"]
[Wed Dec 03 03:54:50.755181 2025] [:error] [pid 47089:tid 47107] [client 37.140.223.227:61853] [client 37.140.223.227] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/images/admin.php"] [unique_id "aS9ECgd82EVr621c8CXlQgAAANA"]
[Wed Dec 03 03:54:51.658518 2025] [:error] [pid 46994:tid 47038] [client 192.178.4.101:40793] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9ECwHTXie6yvgtpe5BWAAAAE0"]
[Wed Dec 03 03:54:52.452327 2025] [:error] [pid 46995:tid 47057] [client 136.144.33.13:41983] [client 136.144.33.13] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/Text/"] [unique_id "aS9EDC49R77DGA8IkDD6WAAAAIQ"]
[Wed Dec 03 03:54:52.598328 2025] [:error] [pid 47089:tid 47102] [client 192.178.4.101:42823] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9EDAd82EVr621c8CXlZgAAAMs"]
[Wed Dec 03 03:54:53.270857 2025] [:error] [pid 47089:tid 47103] [client 37.140.223.232:27929] [client 37.140.223.232] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/class.api.php"] [unique_id "aS9EDQd82EVr621c8CXlawAAAMw"]
[Wed Dec 03 03:54:54.001723 2025] [:error] [pid 46993:tid 47002] [client 37.140.223.238:24581] [client 37.140.223.238] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/about.php"] [unique_id "aS9EDqfmmy2Qwo-29xB4wAAAAAU"]
[Wed Dec 03 03:54:54.672250 2025] [:error] [pid 47089:tid 47102] [client 37.140.223.251:39959] [client 37.140.223.251] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-signin.php"] [unique_id "aS9EDgd82EVr621c8CXlcgAAAMs"]
[Wed Dec 03 03:54:55.249173 2025] [:error] [pid 46993:tid 47007] [client 192.178.4.101:59281] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9ED6fmmy2Qwo-29xB4xgAAAAo"]
[Wed Dec 03 03:54:55.354853 2025] [:error] [pid 46995:tid 47074] [client 37.140.223.246:24289] [client 37.140.223.246] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/assets/images/selam.php"] [unique_id "aS9EDy49R77DGA8IkDD6XAAAAJQ"]
[Wed Dec 03 03:54:56.052153 2025] [:error] [pid 46993:tid 47003] [client 37.140.223.249:31683] [client 37.140.223.249] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/404.php"] [unique_id "aS9EEKfmmy2Qwo-29xB4yAAAAAY"]
[Wed Dec 03 03:54:56.730606 2025] [:error] [pid 46993:tid 47020] [client 136.144.33.248:63349] [client 136.144.33.248] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/Text/Diff/"] [unique_id "aS9EEKfmmy2Qwo-29xB4ygAAABc"]
[Wed Dec 03 03:54:57.453169 2025] [:error] [pid 46995:tid 47076] [client 37.140.223.218:48683] [client 37.140.223.218] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-config-sample.php"] [unique_id "aS9EES49R77DGA8IkDD6XgAAAJY"]
[Wed Dec 03 03:54:58.156288 2025] [:error] [pid 47089:tid 47114] [client 136.144.33.1:34793] [client 136.144.33.1] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/files/"] [unique_id "aS9EEgd82EVr621c8CXleQAAANc"]
[Wed Dec 03 03:54:58.851647 2025] [:error] [pid 46994:tid 47047] [client 37.140.223.235:45399] [client 37.140.223.235] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/themes/"] [unique_id "aS9EEgHTXie6yvgtpe5BYAAAAFU"]
[Wed Dec 03 03:54:59.551817 2025] [:error] [pid 46993:tid 47014] [client 172.245.102.84:45585] [client 172.245.102.84] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/css/"] [unique_id "aS9EE6fmmy2Qwo-29xB4zAAAABE"]
[Wed Dec 03 03:55:00.253821 2025] [:error] [pid 46993:tid 46998] [client 136.144.33.11:20141] [client 136.144.33.11] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/simple.php"] [unique_id "aS9EFKfmmy2Qwo-29xB4zgAAAAE"]
[Wed Dec 03 03:55:00.975360 2025] [:error] [pid 46995:tid 47055] [client 172.245.102.84:30877] [client 172.245.102.84] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/admin-header.php"] [unique_id "aS9EFC49R77DGA8IkDD6ZAAAAII"]
[Wed Dec 03 03:55:01.663495 2025] [:error] [pid 46994:tid 47044] [client 136.144.33.10:31285] [client 136.144.33.10] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/shell.php"] [unique_id "aS9EFQHTXie6yvgtpe5BZAAAAFM"]
[Wed Dec 03 03:55:02.334649 2025] [:error] [pid 47089:tid 47112] [client 37.140.223.244:31091] [client 37.140.223.244] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-conflg/function.php"] [unique_id "aS9EFgd82EVr621c8CXlgwAAANU"]
[Wed Dec 03 03:55:03.006342 2025] [:error] [pid 46994:tid 47040] [client 37.140.223.233:27309] [client 37.140.223.233] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-info.php"] [unique_id "aS9EFwHTXie6yvgtpe5BaAAAAE8"]
[Wed Dec 03 03:55:03.677034 2025] [:error] [pid 47089:tid 47106] [client 37.140.223.234:59443] [client 37.140.223.234] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/themes/404.php"] [unique_id "aS9EFwd82EVr621c8CXlhgAAAM8"]
[Wed Dec 03 03:55:04.358828 2025] [:error] [pid 46994:tid 47045] [client 172.245.102.88:29621] [client 172.245.102.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/shell/"] [unique_id "aS9EGAHTXie6yvgtpe5BbAAAAFQ"]
[Wed Dec 03 03:55:05.029149 2025] [:error] [pid 46995:tid 47063] [client 172.245.102.88:28017] [client 172.245.102.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/js/about.php"] [unique_id "aS9EGS49R77DGA8IkDD6aQAAAIk"]
[Wed Dec 03 03:55:05.705787 2025] [:error] [pid 47089:tid 47109] [client 172.245.102.86:40193] [client 172.245.102.86] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/images/"] [unique_id "aS9EGQd82EVr621c8CXljgAAANI"]
[Wed Dec 03 03:55:06.374972 2025] [:error] [pid 47089:tid 47115] [client 172.245.102.88:43637] [client 172.245.102.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/admin/"] [unique_id "aS9EGgd82EVr621c8CXlkgAAANg"]
[Wed Dec 03 03:55:07.053509 2025] [:error] [pid 47089:tid 47111] [client 37.140.223.230:22057] [client 37.140.223.230] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-links.php"] [unique_id "aS9EGwd82EVr621c8CXllgAAANQ"]
[Wed Dec 03 03:55:07.752840 2025] [:error] [pid 46994:tid 47025] [client 37.140.223.226:59377] [client 37.140.223.226] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/edit.php"] [unique_id "aS9EGwHTXie6yvgtpe5BdAAAAEA"]
[Wed Dec 03 03:55:08.461715 2025] [:error] [pid 46993:tid 47004] [client 172.245.102.85:42959] [client 172.245.102.85] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-conflg.php"] [unique_id "aS9EHKfmmy2Qwo-29xB44gAAAAc"]
[Wed Dec 03 03:55:09.152588 2025] [:error] [pid 47089:tid 47098] [client 37.140.223.243:65173] [client 37.140.223.243] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/index/function.php"] [unique_id "aS9EHQd82EVr621c8CXlmgAAAMc"]
[Wed Dec 03 03:55:09.870693 2025] [:error] [pid 47089:tid 47093] [client 136.144.33.1:32379] [client 136.144.33.1] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/maint/"] [unique_id "aS9EHQd82EVr621c8CXlnAAAAMI"]
[Wed Dec 03 03:55:10.539314 2025] [:error] [pid 47089:tid 47101] [client 37.140.223.250:60233] [client 37.140.223.250] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/bolt.php"] [unique_id "aS9EHgd82EVr621c8CXloAAAAMo"]
[Wed Dec 03 03:55:12.863205 2025] [:error] [pid 46995:tid 47060] [client 172.245.102.87:36023] [client 172.245.102.87] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/languages/"] [unique_id "aS9EIC49R77DGA8IkDD6cgAAAIY"]
[Wed Dec 03 03:55:13.555035 2025] [:error] [pid 46995:tid 47056] [client 37.140.223.238:30807] [client 37.140.223.238] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/we.php"] [unique_id "aS9EIS49R77DGA8IkDD6dQAAAIM"]
[Wed Dec 03 03:55:14.241806 2025] [:error] [pid 46993:tid 47003] [client 37.140.223.247:63395] [client 37.140.223.247] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/admin.php"] [unique_id "aS9EIqfmmy2Qwo-29xB49AAAAAY"]
[Wed Dec 03 03:55:14.952328 2025] [:error] [pid 46993:tid 47021] [client 37.140.223.232:43015] [client 37.140.223.232] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/item.php"] [unique_id "aS9EIqfmmy2Qwo-29xB49QAAABg"]
[Wed Dec 03 03:55:15.657305 2025] [:error] [pid 47089:tid 47108] [client 37.140.223.222:59137] [client 37.140.223.222] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/languages/admin.php"] [unique_id "aS9EIwd82EVr621c8CXlqAAAANE"]
[Wed Dec 03 03:55:16.366761 2025] [:error] [pid 46993:tid 47018] [client 172.245.102.86:43001] [client 172.245.102.86] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/fm.php/sts.php"] [unique_id "aS9EJKfmmy2Qwo-29xB4-QAAABU"]
[Wed Dec 03 03:55:17.035959 2025] [:error] [pid 46995:tid 47065] [client 172.245.102.85:35657] [client 172.245.102.85] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/PHPMailer/"] [unique_id "aS9EJS49R77DGA8IkDD6fQAAAIs"]
[Wed Dec 03 03:55:17.770666 2025] [:error] [pid 47089:tid 47099] [client 37.140.223.250:49209] [client 37.140.223.250] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/pomo/"] [unique_id "aS9EJQd82EVr621c8CXlsAAAAMg"]
[Wed Dec 03 03:55:18.765534 2025] [:error] [pid 47089:tid 47113] [client 37.140.223.216:47715] [client 37.140.223.216] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/css/dist/"] [unique_id "aS9EJgd82EVr621c8CXltgAAANY"]
[Wed Dec 03 03:55:19.446774 2025] [:error] [pid 46993:tid 47001] [client 172.245.102.85:28163] [client 172.245.102.85] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/files.php"] [unique_id "aS9EJ6fmmy2Qwo-29xB4-gAAAAQ"]
[Wed Dec 03 03:55:20.153944 2025] [:error] [pid 46994:tid 47038] [client 37.140.223.230:22469] [client 37.140.223.230] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/widgets/"] [unique_id "aS9EKAHTXie6yvgtpe5BgAAAAE0"]
[Wed Dec 03 03:55:20.856341 2025] [:error] [pid 46995:tid 47067] [client 37.140.223.251:30441] [client 37.140.223.251] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/av.php"] [unique_id "aS9EKC49R77DGA8IkDD6gwAAAI0"]
[Wed Dec 03 03:55:21.566446 2025] [:error] [pid 46994:tid 47032] [client 172.245.102.83:55319] [client 172.245.102.83] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/maint/about.php"] [unique_id "aS9EKQHTXie6yvgtpe5BgwAAAEc"]
[Wed Dec 03 03:55:22.283333 2025] [:error] [pid 46995:tid 47057] [client 37.140.223.233:42033] [client 37.140.223.233] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/readme.php"] [unique_id "aS9EKi49R77DGA8IkDD6iAAAAIQ"]
[Wed Dec 03 03:55:22.973988 2025] [:error] [pid 47089:tid 47101] [client 136.144.33.12:53867] [client 136.144.33.12] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/admin-wolf.php"] [unique_id "aS9EKgd82EVr621c8CXlvgAAAMo"]
[Wed Dec 03 03:55:23.763929 2025] [:error] [pid 47089:tid 47096] [client 37.140.223.247:59505] [client 37.140.223.247] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/log.php"] [unique_id "aS9EKwd82EVr621c8CXlwQAAAMU"]
[Wed Dec 03 03:55:24.460689 2025] [:error] [pid 47089:tid 47093] [client 37.140.223.231:48673] [client 37.140.223.231] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/blocks/code/"] [unique_id "aS9ELAd82EVr621c8CXlxwAAAMI"]
[Wed Dec 03 03:55:25.180094 2025] [:error] [pid 47089:tid 47102] [client 37.140.223.223:44151] [client 37.140.223.223] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aS9ELQd82EVr621c8CXlygAAAMs"]
[Wed Dec 03 03:55:25.960941 2025] [:error] [pid 46993:tid 47015] [client 37.140.223.226:27437] [client 37.140.223.226] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/css/colors/blue/acxx.php"] [unique_id "aS9ELafmmy2Qwo-29xB5AQAAABI"]
[Wed Dec 03 03:55:26.650527 2025] [:error] [pid 46993:tid 47010] [client 37.140.223.248:39511] [client 37.140.223.248] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/themes/news-portal/error.php"] [unique_id "aS9ELqfmmy2Qwo-29xB5BQAAAA0"]
[Wed Dec 03 03:55:27.361999 2025] [:error] [pid 46995:tid 47074] [client 37.140.223.220:34307] [client 37.140.223.220] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/an.php"] [unique_id "aS9ELy49R77DGA8IkDD6jgAAAJQ"]
[Wed Dec 03 03:55:28.061074 2025] [:error] [pid 47089:tid 47091] [client 37.140.223.233:46721] [client 37.140.223.233] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/Requests/"] [unique_id "aS9EMAd82EVr621c8CXl0AAAAMA"]
[Wed Dec 03 03:55:28.759306 2025] [:error] [pid 46995:tid 47057] [client 37.140.223.247:27803] [client 37.140.223.247] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/a.php"] [unique_id "aS9EMC49R77DGA8IkDD6kAAAAIQ"]
[Wed Dec 03 03:55:29.454012 2025] [:error] [pid 46995:tid 47065] [client 37.140.223.247:24941] [client 37.140.223.247] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/core-plugin/include.php"] [unique_id "aS9EMS49R77DGA8IkDD6lQAAAIs"]
[Wed Dec 03 03:55:30.153833 2025] [:error] [pid 46993:tid 47007] [client 37.140.223.236:38937] [client 37.140.223.236] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/includes/nav.php"] [unique_id "aS9EMqfmmy2Qwo-29xB5CgAAAAo"]
[Wed Dec 03 03:55:30.971904 2025] [:error] [pid 46995:tid 47071] [client 136.144.33.12:50553] [client 136.144.33.12] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/SimplePie/"] [unique_id "aS9EMi49R77DGA8IkDD6mgAAAJE"]
[Wed Dec 03 03:55:31.653044 2025] [:error] [pid 47089:tid 47110] [client 37.140.223.230:52161] [client 37.140.223.230] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/sitemaps/"] [unique_id "aS9EMwd82EVr621c8CXl1gAAANM"]
[Wed Dec 03 03:55:32.360489 2025] [:error] [pid 46993:tid 47001] [client 37.140.223.245:25371] [client 37.140.223.245] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/license.php"] [unique_id "aS9ENKfmmy2Qwo-29xB5DQAAAAQ"]
[Wed Dec 03 03:55:33.051218 2025] [:error] [pid 47089:tid 47102] [client 172.245.102.88:22295] [client 172.245.102.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/blocks/archives/"] [unique_id "aS9ENQd82EVr621c8CXl2AAAAMs"]
[Wed Dec 03 03:55:33.773589 2025] [:error] [pid 46995:tid 47065] [client 37.140.223.251:63985] [client 37.140.223.251] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/images/"] [unique_id "aS9ENS49R77DGA8IkDD6pAAAAIs"]
[Wed Dec 03 03:55:34.458065 2025] [:error] [pid 46993:tid 47019] [client 136.144.33.11:23615] [client 136.144.33.11] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/byp.php"] [unique_id "aS9ENqfmmy2Qwo-29xB5DwAAABY"]
[Wed Dec 03 03:55:35.154477 2025] [:error] [pid 47089:tid 47107] [client 37.140.223.217:36825] [client 37.140.223.217] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content.php"] [unique_id "aS9ENwd82EVr621c8CXl3QAAANA"]
[Wed Dec 03 03:55:35.843072 2025] [:error] [pid 46995:tid 47063] [client 37.140.223.215:31373] [client 37.140.223.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "aS9ENy49R77DGA8IkDD6qQAAAIk"]
[Wed Dec 03 03:55:36.529711 2025] [:error] [pid 46994:tid 47036] [client 136.144.33.42:41399] [client 136.144.33.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aS9EOAHTXie6yvgtpe5BjgAAAEs"]
[Wed Dec 03 03:55:37.199740 2025] [:error] [pid 47089:tid 47106] [client 136.144.33.10:52665] [client 136.144.33.10] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/mah.php"] [unique_id "aS9EOQd82EVr621c8CXl5AAAAM8"]
[Wed Dec 03 03:55:37.874507 2025] [:error] [pid 46993:tid 47007] [client 37.140.223.241:25393] [client 37.140.223.241] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-signup.php"] [unique_id "aS9EOafmmy2Qwo-29xB5EQAAAAo"]
[Wed Dec 03 03:55:38.558657 2025] [:error] [pid 46993:tid 47014] [client 37.140.223.235:54527] [client 37.140.223.235] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/theme-compat/"] [unique_id "aS9EOqfmmy2Qwo-29xB5FAAAABE"]
[Wed Dec 03 03:55:39.250362 2025] [:error] [pid 46995:tid 47072] [client 172.245.102.83:37573] [client 172.245.102.83] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/uploads/about.php"] [unique_id "aS9EOy49R77DGA8IkDD6rQAAAJI"]
[Wed Dec 03 03:55:39.955439 2025] [:error] [pid 47089:tid 47104] [client 37.140.223.245:43367] [client 37.140.223.245] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/css/dist/block-directory/"] [unique_id "aS9EOwd82EVr621c8CXl8AAAAM0"]
[Wed Dec 03 03:55:40.623873 2025] [:error] [pid 46994:tid 47030] [client 136.144.33.42:56429] [client 136.144.33.42] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/m.php"] [unique_id "aS9EPAHTXie6yvgtpe5BlQAAAEU"]
[Wed Dec 03 03:55:41.292205 2025] [:error] [pid 46994:tid 47026] [client 136.144.33.10:43203] [client 136.144.33.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/js/jcrop/Jcrop.php"] [unique_id "aS9EPQHTXie6yvgtpe5BlgAAAEE"]
[Wed Dec 03 03:55:41.962408 2025] [:error] [pid 47089:tid 47111] [client 172.245.102.85:56391] [client 172.245.102.85] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/s.php"] [unique_id "aS9EPQd82EVr621c8CXl9wAAANQ"]
[Wed Dec 03 03:55:42.668807 2025] [:error] [pid 46993:tid 46999] [client 37.140.223.242:20349] [client 37.140.223.242] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/f.php"] [unique_id "aS9EPqfmmy2Qwo-29xB5GQAAAAI"]
[Wed Dec 03 03:55:43.355100 2025] [:error] [pid 46995:tid 47060] [client 37.140.223.232:52545] [client 37.140.223.232] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aS9EPy49R77DGA8IkDD6sgAAAIY"]
[Wed Dec 03 03:55:44.184268 2025] [:error] [pid 47089:tid 47112] [client 136.144.33.43:21373] [client 136.144.33.43] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/js/"] [unique_id "aS9EQAd82EVr621c8CXl-wAAANU"]
[Wed Dec 03 03:55:44.873532 2025] [:error] [pid 47089:tid 47098] [client 37.140.223.226:59271] [client 37.140.223.226] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/manager.php"] [unique_id "aS9EQAd82EVr621c8CXl_AAAAMc"]
[Wed Dec 03 03:55:45.561872 2025] [:error] [pid 46995:tid 47058] [client 37.140.223.235:56107] [client 37.140.223.235] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/shell3.php"] [unique_id "aS9EQS49R77DGA8IkDD6uAAAAIU"]
[Wed Dec 03 03:55:46.253443 2025] [:error] [pid 46995:tid 47075] [client 37.140.223.232:58517] [client 37.140.223.232] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/blocks/calendar/"] [unique_id "aS9EQi49R77DGA8IkDD6ugAAAJU"]
[Wed Dec 03 03:55:46.959224 2025] [:error] [pid 47089:tid 47101] [client 136.144.33.232:44911] [client 136.144.33.232] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/languages/themes/"] [unique_id "aS9EQgd82EVr621c8CXmAgAAAMo"]
[Wed Dec 03 03:55:47.654844 2025] [:error] [pid 46994:tid 47040] [client 172.245.102.88:62367] [client 172.245.102.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/themes/twentytwentyfour/patterns/wp-good.php"] [unique_id "aS9EQwHTXie6yvgtpe5BnAAAAE8"]
[Wed Dec 03 03:55:48.353887 2025] [:error] [pid 46993:tid 47015] [client 37.140.223.242:54813] [client 37.140.223.242] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/certificates/"] [unique_id "aS9ERKfmmy2Qwo-29xB5IQAAABI"]
[Wed Dec 03 03:55:49.261948 2025] [:error] [pid 46993:tid 47011] [client 37.140.223.218:42623] [client 37.140.223.218] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/block-supports/"] [unique_id "aS9ERafmmy2Qwo-29xB5IwAAAA4"]
[Wed Dec 03 03:55:49.930614 2025] [:error] [pid 46993:tid 47010] [client 37.140.223.223:52365] [client 37.140.223.223] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/languages/about.php"] [unique_id "aS9ERafmmy2Qwo-29xB5JAAAAA0"]
[Wed Dec 03 03:55:50.652120 2025] [:error] [pid 46995:tid 47070] [client 37.140.223.240:35069] [client 37.140.223.240] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/rest-api/fields/"] [unique_id "aS9ERi49R77DGA8IkDD6vwAAAJA"]
[Wed Dec 03 03:55:51.365959 2025] [:error] [pid 46994:tid 47047] [client 136.144.33.11:61621] [client 136.144.33.11] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/hello.php"] [unique_id "aS9ERwHTXie6yvgtpe5BoAAAAFU"]
[Wed Dec 03 03:55:52.053845 2025] [:error] [pid 46994:tid 47043] [client 37.140.223.217:63075] [client 37.140.223.217] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/bk/"] [unique_id "aS9ESAHTXie6yvgtpe5BpAAAAFI"]
[Wed Dec 03 03:55:52.758715 2025] [:error] [pid 47089:tid 47104] [client 37.140.223.248:44139] [client 37.140.223.248] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/admin.php"] [unique_id "aS9ESAd82EVr621c8CXmCgAAAM0"]
[Wed Dec 03 03:55:53.439359 2025] [:error] [pid 46994:tid 47035] [client 37.140.223.238:25675] [client 37.140.223.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/wp-conflg.php"] [unique_id "aS9ESQHTXie6yvgtpe5BqAAAAEo"]
[Wed Dec 03 03:55:54.156949 2025] [:error] [pid 46995:tid 47076] [client 37.140.223.216:34135] [client 37.140.223.216] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/packed.php"] [unique_id "aS9ESi49R77DGA8IkDD6xAAAAJY"]
[Wed Dec 03 03:55:54.825172 2025] [:error] [pid 46994:tid 47025] [client 37.140.223.234:22357] [client 37.140.223.234] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/x.php"] [unique_id "aS9ESgHTXie6yvgtpe5BqgAAAEA"]
[Wed Dec 03 03:55:55.497130 2025] [:error] [pid 46995:tid 47069] [client 172.245.102.87:60875] [client 172.245.102.87] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/uploads/2024/"] [unique_id "aS9ESy49R77DGA8IkDD6yQAAAI8"]
[Wed Dec 03 03:55:56.166991 2025] [:error] [pid 47089:tid 47093] [client 37.140.223.223:21169] [client 37.140.223.223] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "aS9ETAd82EVr621c8CXmEAAAAMI"]
[Wed Dec 03 03:55:56.855901 2025] [:error] [pid 46995:tid 47068] [client 172.245.102.88:42087] [client 172.245.102.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/css/admin.php"] [unique_id "aS9ETC49R77DGA8IkDD6ywAAAI4"]
[Wed Dec 03 03:55:57.557267 2025] [:error] [pid 47089:tid 47103] [client 172.245.102.87:23099] [client 172.245.102.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aS9ETQd82EVr621c8CXmFgAAAMw"]
[Wed Dec 03 03:55:58.259138 2025] [:error] [pid 46995:tid 47065] [client 37.140.223.245:36425] [client 37.140.223.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/assets/about.php"] [unique_id "aS9ETi49R77DGA8IkDD6zwAAAIs"]
[Wed Dec 03 03:55:58.961686 2025] [:error] [pid 46993:tid 47005] [client 37.140.223.232:39799] [client 37.140.223.232] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/chosen/function.php"] [unique_id "aS9ETqfmmy2Qwo-29xB5KQAAAAg"]
[Wed Dec 03 03:55:59.693854 2025] [:error] [pid 46993:tid 47016] [client 37.140.223.218:40839] [client 37.140.223.218] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/.well-known/acme-challenge/"] [unique_id "aS9ET6fmmy2Qwo-29xB5LAAAABM"]
[Wed Dec 03 03:56:00.371083 2025] [:error] [pid 46994:tid 47029] [client 37.140.223.251:26823] [client 37.140.223.251] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/rest-api/endpoints/"] [unique_id "aS9EUAHTXie6yvgtpe5BrQAAAEQ"]
[Wed Dec 03 03:56:01.254974 2025] [:error] [pid 47089:tid 47100] [client 37.140.223.221:53539] [client 37.140.223.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/theme-compat/wp-conflg.php"] [unique_id "aS9EUQd82EVr621c8CXmHQAAAMk"]
[Wed Dec 03 03:56:01.957008 2025] [:error] [pid 46994:tid 47035] [client 136.144.33.248:32661] [client 136.144.33.248] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/sodium_compat/lib/"] [unique_id "aS9EUQHTXie6yvgtpe5BsAAAAEo"]
[Wed Dec 03 03:56:02.655571 2025] [:error] [pid 46995:tid 47060] [client 172.245.102.86:61081] [client 172.245.102.86] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/css/colors/sunrise/"] [unique_id "aS9EUi49R77DGA8IkDD60gAAAIY"]
[Wed Dec 03 03:56:03.356702 2025] [:error] [pid 46993:tid 46998] [client 37.140.223.245:23221] [client 37.140.223.245] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/radio.php"] [unique_id "aS9EU6fmmy2Qwo-29xB5MAAAAAE"]
[Wed Dec 03 03:56:04.054769 2025] [:error] [pid 46995:tid 47057] [client 37.140.223.234:45833] [client 37.140.223.234] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/css/"] [unique_id "aS9EVC49R77DGA8IkDD61AAAAIQ"]
[Wed Dec 03 03:56:04.754931 2025] [:error] [pid 47089:tid 47113] [client 37.140.223.224:48105] [client 37.140.223.224] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/options.php"] [unique_id "aS9EVAd82EVr621c8CXmIQAAANY"]
[Wed Dec 03 03:56:05.453839 2025] [:error] [pid 46995:tid 47063] [client 172.245.102.87:52009] [client 172.245.102.87] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-files.php"] [unique_id "aS9EVS49R77DGA8IkDD61gAAAIk"]
[Wed Dec 03 03:56:06.131003 2025] [:error] [pid 46995:tid 47058] [client 37.140.223.232:33197] [client 37.140.223.232] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/about.php"] [unique_id "aS9EVi49R77DGA8IkDD61wAAAIU"]
[Wed Dec 03 03:56:06.798952 2025] [:error] [pid 47089:tid 47113] [client 37.140.223.221:61967] [client 37.140.223.221] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/js/widgets/admin.php"] [unique_id "aS9EVgd82EVr621c8CXmMgAAANY"]
[Wed Dec 03 03:56:07.466993 2025] [:error] [pid 47089:tid 47091] [client 136.144.33.43:49571] [client 136.144.33.43] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/block-patterns/"] [unique_id "aS9EVwd82EVr621c8CXmNAAAAMA"]
[Wed Dec 03 03:56:08.141868 2025] [:error] [pid 46995:tid 47053] [client 37.140.223.239:37809] [client 37.140.223.239] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/mini.php"] [unique_id "aS9EWC49R77DGA8IkDD62wAAAIA"]
[Wed Dec 03 03:56:08.855769 2025] [:error] [pid 46995:tid 47069] [client 37.140.223.221:25745] [client 37.140.223.221] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aS9EWC49R77DGA8IkDD63AAAAI8"]
[Wed Dec 03 03:56:09.537423 2025] [:error] [pid 46995:tid 47067] [client 37.140.223.231:28127] [client 37.140.223.231] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/js/privacy-tools.min.php"] [unique_id "aS9EWS49R77DGA8IkDD63gAAAI0"]
[Wed Dec 03 03:56:10.284948 2025] [:error] [pid 46993:tid 47015] [client 136.144.33.12:57915] [client 136.144.33.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/Text/wp-login.php"] [unique_id "aS9EWqfmmy2Qwo-29xB5NQAAABI"]
[Wed Dec 03 03:56:11.031826 2025] [:error] [pid 46995:tid 47061] [client 37.140.223.241:57459] [client 37.140.223.241] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/maint/wp-login.php"] [unique_id "aS9EWy49R77DGA8IkDD65AAAAIc"]
[Wed Dec 03 03:56:11.699368 2025] [:error] [pid 46993:tid 47014] [client 37.140.223.250:57255] [client 37.140.223.250] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/radio.php"] [unique_id "aS9EW6fmmy2Qwo-29xB5NwAAABE"]
[Wed Dec 03 03:56:12.372194 2025] [:error] [pid 46993:tid 46998] [client 37.140.223.220:64801] [client 37.140.223.220] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aS9EXKfmmy2Qwo-29xB5OwAAAAE"]
[Wed Dec 03 03:56:13.053615 2025] [:error] [pid 47089:tid 47103] [client 37.140.223.245:58237] [client 37.140.223.245] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/css/dist/components/"] [unique_id "aS9EXQd82EVr621c8CXmPQAAAMw"]
[Wed Dec 03 03:56:13.850391 2025] [:error] [pid 47089:tid 47098] [client 37.140.223.242:38997] [client 37.140.223.242] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/function.php"] [unique_id "aS9EXQd82EVr621c8CXmQQAAAMc"]
[Wed Dec 03 03:56:14.553847 2025] [:error] [pid 46994:tid 47025] [client 37.140.223.237:56845] [client 37.140.223.237] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/ty.php"] [unique_id "aS9EXgHTXie6yvgtpe5BwQAAAEA"]
[Wed Dec 03 03:56:15.253032 2025] [:error] [pid 46995:tid 47060] [client 37.140.223.218:37049] [client 37.140.223.218] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-header.php"] [unique_id "aS9EXy49R77DGA8IkDD66wAAAIY"]
[Wed Dec 03 03:56:16.087186 2025] [:error] [pid 46993:tid 47007] [client 37.140.223.247:63489] [client 37.140.223.247] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/index2.php"] [unique_id "aS9EYKfmmy2Qwo-29xB5PwAAAAo"]
[Wed Dec 03 03:56:16.755201 2025] [:error] [pid 47089:tid 47101] [client 172.245.102.88:34373] [client 172.245.102.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aS9EYAd82EVr621c8CXmUAAAAMo"]
[Wed Dec 03 03:56:17.454038 2025] [:error] [pid 47089:tid 47102] [client 37.140.223.249:28401] [client 37.140.223.249] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/blocks/post-author-name/"] [unique_id "aS9EYQd82EVr621c8CXmVQAAAMs"]
[Wed Dec 03 03:56:18.126798 2025] [:error] [pid 46995:tid 47062] [client 37.140.223.237:28811] [client 37.140.223.237] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/db.php"] [unique_id "aS9EYi49R77DGA8IkDD67wAAAIg"]
[Wed Dec 03 03:56:18.855709 2025] [:error] [pid 46993:tid 47014] [client 37.140.223.222:39123] [client 37.140.223.222] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/css/colors/"] [unique_id "aS9EYqfmmy2Qwo-29xB5QQAAABE"]
[Wed Dec 03 03:56:19.566502 2025] [:error] [pid 46995:tid 47075] [client 37.140.223.225:33055] [client 37.140.223.225] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/includes/admin-ajax.php"] [unique_id "aS9EYy49R77DGA8IkDD68QAAAJU"]
[Wed Dec 03 03:56:20.255864 2025] [:error] [pid 46994:tid 47033] [client 37.140.223.241:55677] [client 37.140.223.241] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/uploads/wp.php"] [unique_id "aS9EZAHTXie6yvgtpe5BygAAAEg"]
[Wed Dec 03 03:56:20.953302 2025] [:error] [pid 47089:tid 47093] [client 37.140.223.219:47323] [client 37.140.223.219] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/css/about.php"] [unique_id "aS9EZAd82EVr621c8CXmYQAAAMI"]
[Wed Dec 03 03:56:21.652167 2025] [:error] [pid 46993:tid 47017] [client 37.140.223.246:50889] [client 37.140.223.246] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/buy.php"] [unique_id "aS9EZafmmy2Qwo-29xB5SQAAABQ"]
[Wed Dec 03 03:56:22.352408 2025] [:error] [pid 47089:tid 47115] [client 37.140.223.231:28169] [client 37.140.223.231] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/Text/Diff/Renderer/"] [unique_id "aS9EZgd82EVr621c8CXmZQAAANg"]
[Wed Dec 03 03:56:23.058718 2025] [:error] [pid 46995:tid 47063] [client 37.140.223.235:42567] [client 37.140.223.235] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/sitemaps/providers/"] [unique_id "aS9EZy49R77DGA8IkDD6-AAAAIk"]
[Wed Dec 03 03:56:23.754436 2025] [:error] [pid 46993:tid 47015] [client 37.140.223.239:56903] [client 37.140.223.239] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/advanced-llms-txt-generator/assets/css/css_json.php"] [unique_id "aS9EZ6fmmy2Qwo-29xB5TgAAABI"]
[Wed Dec 03 03:56:24.438335 2025] [:error] [pid 46995:tid 47054] [client 37.140.223.220:36023] [client 37.140.223.220] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/chosen.php"] [unique_id "aS9EaC49R77DGA8IkDD6-gAAAIE"]
[Wed Dec 03 03:56:25.108340 2025] [:error] [pid 46994:tid 47028] [client 37.140.223.229:32293] [client 37.140.223.229] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/.well-known/"] [unique_id "aS9EaQHTXie6yvgtpe5B0AAAAEM"]
[Wed Dec 03 03:56:25.780879 2025] [:error] [pid 46994:tid 47029] [client 172.245.102.86:22777] [client 172.245.102.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/js/wp-login.php"] [unique_id "aS9EaQHTXie6yvgtpe5B1AAAAEQ"]
[Wed Dec 03 03:56:26.455702 2025] [:error] [pid 46995:tid 47076] [client 37.140.223.248:32625] [client 37.140.223.248] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/widgets/autoload_classmap.php"] [unique_id "aS9Eai49R77DGA8IkDD6_AAAAJY"]
[Wed Dec 03 03:56:27.153047 2025] [:error] [pid 46994:tid 47033] [client 37.140.223.246:57299] [client 37.140.223.246] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/html-api/"] [unique_id "aS9EawHTXie6yvgtpe5B1gAAAEg"]
[Wed Dec 03 03:56:27.832601 2025] [:error] [pid 46994:tid 47027] [client 37.140.223.243:50815] [client 37.140.223.243] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/product.php"] [unique_id "aS9EawHTXie6yvgtpe5B1wAAAEI"]
[Wed Dec 03 03:56:28.500632 2025] [:error] [pid 46995:tid 47071] [client 37.140.223.241:61921] [client 37.140.223.241] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/js/crop/"] [unique_id "aS9EbC49R77DGA8IkDD6_wAAAJE"]
[Wed Dec 03 03:56:29.168260 2025] [:error] [pid 46995:tid 47064] [client 37.140.223.235:32207] [client 37.140.223.235] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/includes/about.php"] [unique_id "aS9EbS49R77DGA8IkDD7AgAAAIo"]
[Wed Dec 03 03:56:29.884265 2025] [:error] [pid 46994:tid 47048] [client 37.140.223.227:33575] [client 37.140.223.227] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/options.php"] [unique_id "aS9EbQHTXie6yvgtpe5B3AAAAFY"]
[Wed Dec 03 03:56:30.564325 2025] [:error] [pid 46995:tid 47065] [client 136.144.33.248:49377] [client 136.144.33.248] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/about/function.php"] [unique_id "aS9Ebi49R77DGA8IkDD7CAAAAIs"]
[Wed Dec 03 03:56:31.264193 2025] [:error] [pid 46995:tid 47066] [client 37.140.223.224:61607] [client 37.140.223.224] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/bypass.php"] [unique_id "aS9Eby49R77DGA8IkDD7CwAAAIw"]
[Wed Dec 03 03:56:31.954429 2025] [:error] [pid 46994:tid 47031] [client 37.140.223.247:28425] [client 37.140.223.247] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/Text/Diff/Engine/"] [unique_id "aS9EbwHTXie6yvgtpe5B4gAAAEY"]
[Wed Dec 03 03:56:32.653344 2025] [:error] [pid 47089:tid 47092] [client 37.140.223.236:40237] [client 37.140.223.236] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/themes/twentytwentyfour/"] [unique_id "aS9EcAd82EVr621c8CXmfAAAAME"]
[Wed Dec 03 03:56:33.483950 2025] [:error] [pid 47089:tid 47115] [client 37.140.223.217:26961] [client 37.140.223.217] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/error.php"] [unique_id "aS9EcQd82EVr621c8CXmfgAAANg"]
[Wed Dec 03 03:56:34.153047 2025] [:error] [pid 47089:tid 47111] [client 37.140.223.251:29751] [client 37.140.223.251] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/js/dist/"] [unique_id "aS9Ecgd82EVr621c8CXmgwAAANQ"]
[Wed Dec 03 03:56:34.855512 2025] [:error] [pid 47089:tid 47102] [client 37.140.223.248:56627] [client 37.140.223.248] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/WordPressCore/include.php"] [unique_id "aS9Ecgd82EVr621c8CXmhgAAAMs"]
[Wed Dec 03 03:56:35.523018 2025] [:error] [pid 46995:tid 47055] [client 37.140.223.248:48583] [client 37.140.223.248] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/WordPressCore/"] [unique_id "aS9Ecy49R77DGA8IkDD7EwAAAII"]
[Wed Dec 03 03:56:36.192558 2025] [:error] [pid 47089:tid 47104] [client 172.245.102.87:43471] [client 172.245.102.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/chosen.php"] [unique_id "aS9EdAd82EVr621c8CXmiQAAAM0"]
[Wed Dec 03 03:56:36.863478 2025] [:error] [pid 46995:tid 47067] [client 37.140.223.224:35397] [client 37.140.223.224] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/js/tinymce/plugins/colorpicker/"] [unique_id "aS9EdC49R77DGA8IkDD7FgAAAI0"]
[Wed Dec 03 03:56:37.556668 2025] [:error] [pid 46993:tid 47016] [client 37.140.223.226:49679] [client 37.140.223.226] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/Text/chosen.php"] [unique_id "aS9Edafmmy2Qwo-29xB5ZgAAABM"]
[Wed Dec 03 03:56:38.256883 2025] [:error] [pid 46993:tid 47005] [client 136.144.33.10:63415] [client 136.144.33.10] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "aS9Edqfmmy2Qwo-29xB5aAAAAAg"]
[Wed Dec 03 03:56:38.951979 2025] [:error] [pid 46993:tid 47002] [client 136.144.33.248:23937] [client 136.144.33.248] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/Requests/src/Utility/about.php"] [unique_id "aS9Edqfmmy2Qwo-29xB5bAAAAAU"]
[Wed Dec 03 03:56:39.761794 2025] [:error] [pid 46994:tid 47032] [client 37.140.223.240:59939] [client 37.140.223.240] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/themes/twentytwenty/404.php"] [unique_id "aS9EdwHTXie6yvgtpe5B8gAAAEc"]
[Wed Dec 03 03:56:40.452129 2025] [:error] [pid 47089:tid 47096] [client 136.144.33.248:39463] [client 136.144.33.248] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/lock360.php"] [unique_id "aS9EeAd82EVr621c8CXmmAAAAMU"]
[Wed Dec 03 03:56:41.153824 2025] [:error] [pid 46993:tid 47005] [client 37.140.223.223:46989] [client 37.140.223.223] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/classwithtostring.php"] [unique_id "aS9Eeafmmy2Qwo-29xB5cwAAAAg"]
[Wed Dec 03 03:56:41.835529 2025] [:error] [pid 46993:tid 47008] [client 37.140.223.218:42123] [client 37.140.223.218] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/post.php"] [unique_id "aS9Eeafmmy2Qwo-29xB5eQAAAAs"]
[Wed Dec 03 03:56:42.506122 2025] [:error] [pid 47089:tid 47092] [client 172.245.102.88:52433] [client 172.245.102.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/js/tinymce/"] [unique_id "aS9Eegd82EVr621c8CXmmwAAAME"]
[Wed Dec 03 03:56:43.301349 2025] [:error] [pid 46993:tid 47020] [client 172.245.102.83:54053] [client 172.245.102.83] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/option-old.php"] [unique_id "aS9Ee6fmmy2Qwo-29xB5fAAAABc"]
[Wed Dec 03 03:56:43.975484 2025] [:error] [pid 47089:tid 47101] [client 37.140.223.250:33143] [client 37.140.223.250] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/2.php"] [unique_id "aS9Eewd82EVr621c8CXmowAAAMo"]
[Wed Dec 03 03:56:44.652714 2025] [:error] [pid 46994:tid 47038] [client 37.140.223.226:42143] [client 37.140.223.226] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/xx.php"] [unique_id "aS9EfAHTXie6yvgtpe5B_AAAAE0"]
[Wed Dec 03 03:56:45.349711 2025] [:error] [pid 46994:tid 47031] [client 37.140.223.245:45637] [client 37.140.223.245] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/css/colors/modern/about.php"] [unique_id "aS9EfQHTXie6yvgtpe5B_wAAAEY"]
[Wed Dec 03 03:56:46.066626 2025] [:error] [pid 46994:tid 47037] [client 136.144.33.248:32183] [client 136.144.33.248] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/pwnd/cloud.php"] [unique_id "aS9EfgHTXie6yvgtpe5CAwAAAEw"]
[Wed Dec 03 03:56:46.765576 2025] [:error] [pid 46994:tid 47035] [client 37.140.223.223:58875] [client 37.140.223.223] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/woh.php"] [unique_id "aS9EfgHTXie6yvgtpe5CBQAAAEo"]
[Wed Dec 03 03:56:47.460851 2025] [:error] [pid 46995:tid 47061] [client 37.140.223.225:21583] [client 37.140.223.225] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/blocks/navigation/"] [unique_id "aS9Efy49R77DGA8IkDD7NAAAAIc"]
[Wed Dec 03 03:56:48.158289 2025] [:error] [pid 47089:tid 47099] [client 37.140.223.230:22973] [client 37.140.223.230] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/click.php"] [unique_id "aS9EgAd82EVr621c8CXmqgAAAMg"]
[Wed Dec 03 03:56:48.855812 2025] [:error] [pid 46993:tid 47005] [client 136.144.33.11:30041] [client 136.144.33.11] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/shelp.php"] [unique_id "aS9EgKfmmy2Qwo-29xB5iAAAAAg"]
[Wed Dec 03 03:56:49.567474 2025] [:error] [pid 46993:tid 47015] [client 37.140.223.246:25959] [client 37.140.223.246] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/user/about.php"] [unique_id "aS9Egafmmy2Qwo-29xB5jQAAABI"]
[Wed Dec 03 03:56:50.260207 2025] [:error] [pid 46993:tid 47009] [client 37.140.223.225:56507] [client 37.140.223.225] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/css/colors/midnight/"] [unique_id "aS9Egqfmmy2Qwo-29xB5jwAAAAw"]
[Wed Dec 03 03:56:50.953312 2025] [:error] [pid 46993:tid 47020] [client 136.144.33.43:38303] [client 136.144.33.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/pomo/wp-login.php"] [unique_id "aS9Egqfmmy2Qwo-29xB5kgAAABc"]
[Wed Dec 03 03:56:51.658533 2025] [:error] [pid 46994:tid 47037] [client 136.144.33.232:38087] [client 136.144.33.232] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/user/wp-conflg.php"] [unique_id "aS9EgwHTXie6yvgtpe5CDgAAAEw"]
[Wed Dec 03 03:56:52.349943 2025] [:error] [pid 46995:tid 47053] [client 37.140.223.246:50615] [client 37.140.223.246] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/config.php"] [unique_id "aS9EhC49R77DGA8IkDD7PgAAAIA"]
[Wed Dec 03 03:56:53.051469 2025] [:error] [pid 46994:tid 47032] [client 37.140.223.236:30007] [client 37.140.223.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/sodium_compat/namespaced/Core/about.php"] [unique_id "aS9EhQHTXie6yvgtpe5CEwAAAEc"]
[Wed Dec 03 03:56:53.750224 2025] [:error] [pid 47089:tid 47112] [client 172.245.102.83:53155] [client 172.245.102.83] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aS9EhQd82EVr621c8CXmtgAAANU"]
[Wed Dec 03 03:56:54.607530 2025] [:error] [pid 47089:tid 47097] [client 37.140.223.240:25869] [client 37.140.223.240] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/themes/chosen.php"] [unique_id "aS9Ehgd82EVr621c8CXmtwAAAMY"]
[Wed Dec 03 03:56:55.283612 2025] [:error] [pid 46993:tid 47020] [client 37.140.223.215:40967] [client 37.140.223.215] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-cron-backup.php"] [unique_id "aS9Eh6fmmy2Qwo-29xB5mgAAABc"]
[Wed Dec 03 03:56:55.956640 2025] [:error] [pid 47089:tid 47093] [client 136.144.33.13:33973] [client 136.144.33.13] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/themes/twentyfive/include.php"] [unique_id "aS9Ehwd82EVr621c8CXmuAAAAMI"]
[Wed Dec 03 03:56:56.654000 2025] [:error] [pid 46994:tid 47028] [client 136.144.33.42:30825] [client 136.144.33.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/themes.php"] [unique_id "aS9EiAHTXie6yvgtpe5CIAAAAEM"]
[Wed Dec 03 03:56:57.353057 2025] [:error] [pid 47089:tid 47113] [client 136.144.33.43:48669] [client 136.144.33.43] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/languages/wp-login.php"] [unique_id "aS9EiQd82EVr621c8CXmvAAAANY"]
[Wed Dec 03 03:56:58.061425 2025] [:error] [pid 46993:tid 46998] [client 37.140.223.219:28147] [client 37.140.223.219] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/js/tinymce/plugins/directionality/"] [unique_id "aS9Eiqfmmy2Qwo-29xB5oQAAAAE"]
[Wed Dec 03 03:56:58.752538 2025] [:error] [pid 47089:tid 47092] [client 136.144.33.232:64757] [client 136.144.33.232] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/images/chosen.php"] [unique_id "aS9Eigd82EVr621c8CXmwAAAAME"]
[Wed Dec 03 03:56:59.459333 2025] [:error] [pid 47089:tid 47107] [client 172.245.102.83:24331] [client 172.245.102.83] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/.well-known/pki-validation/"] [unique_id "aS9Eiwd82EVr621c8CXmwwAAANA"]
[Wed Dec 03 03:57:00.155286 2025] [:error] [pid 46993:tid 47019] [client 37.140.223.216:46615] [client 37.140.223.216] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/wp-content.php"] [unique_id "aS9EjKfmmy2Qwo-29xB5pwAAABY"]
[Wed Dec 03 03:57:01.023969 2025] [:error] [pid 46993:tid 47003] [client 136.144.33.42:53387] [client 136.144.33.42] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/cc.php"] [unique_id "aS9Ejafmmy2Qwo-29xB5qwAAAAY"]
[Wed Dec 03 03:57:01.696355 2025] [:error] [pid 47089:tid 47092] [client 37.140.223.233:23145] [client 37.140.223.233] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/cong.php"] [unique_id "aS9EjQd82EVr621c8CXmzgAAAME"]
[Wed Dec 03 03:57:02.364178 2025] [:error] [pid 46993:tid 47004] [client 37.140.223.226:21073] [client 37.140.223.226] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/menu.php"] [unique_id "aS9Ejqfmmy2Qwo-29xB5rQAAAAc"]
[Wed Dec 03 03:57:03.055747 2025] [:error] [pid 46993:tid 46999] [client 37.140.223.250:29057] [client 37.140.223.250] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/js/imgareaselect/"] [unique_id "aS9Ej6fmmy2Qwo-29xB5sAAAAAI"]
[Wed Dec 03 03:57:03.760497 2025] [:error] [pid 46994:tid 47040] [client 37.140.223.239:44511] [client 37.140.223.239] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/blocks/post-terms/"] [unique_id "aS9EjwHTXie6yvgtpe5CJAAAAE8"]
[Wed Dec 03 03:57:04.452794 2025] [:error] [pid 47089:tid 47096] [client 136.144.33.13:23685] [client 136.144.33.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/blocks/image/about.php"] [unique_id "aS9EkAd82EVr621c8CXm1AAAAMU"]
[Wed Dec 03 03:57:05.153207 2025] [:error] [pid 47089:tid 47110] [client 37.140.223.242:41891] [client 37.140.223.242] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/assets/chosen.php"] [unique_id "aS9EkQd82EVr621c8CXm1wAAANM"]
[Wed Dec 03 03:57:05.851221 2025] [:error] [pid 47089:tid 47093] [client 136.144.33.232:41197] [client 136.144.33.232] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/blocks/details/about.php"] [unique_id "aS9EkQd82EVr621c8CXm2wAAAMI"]
[Wed Dec 03 03:57:06.554768 2025] [:error] [pid 47089:tid 47097] [client 37.140.223.247:61829] [client 37.140.223.247] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/b.php"] [unique_id "aS9Ekgd82EVr621c8CXm3gAAAMY"]
[Wed Dec 03 03:57:07.260666 2025] [:error] [pid 47089:tid 47100] [client 37.140.223.230:60219] [client 37.140.223.230] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/contact.php"] [unique_id "aS9Ekwd82EVr621c8CXm4AAAAMk"]
[Wed Dec 03 03:57:07.932618 2025] [:error] [pid 46994:tid 47027] [client 37.140.223.225:34315] [client 37.140.223.225] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/blocks/column/"] [unique_id "aS9EkwHTXie6yvgtpe5CMQAAAEI"]
[Wed Dec 03 03:57:08.609591 2025] [:error] [pid 47089:tid 47103] [client 37.140.223.238:62943] [client 37.140.223.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/blocks/more/about.php"] [unique_id "aS9ElAd82EVr621c8CXm4wAAAMw"]
[Wed Dec 03 03:57:09.456095 2025] [:error] [pid 46995:tid 47060] [client 37.140.223.249:58215] [client 37.140.223.249] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/class-json-ajax-session.php"] [unique_id "aS9ElS49R77DGA8IkDD7aAAAAIY"]
[Wed Dec 03 03:57:11.895422 2025] [:error] [pid 46995:tid 47070] [client 37.140.223.219:30833] [client 37.140.223.219] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/blocks/post-comments-form/"] [unique_id "aS9Ely49R77DGA8IkDD7bAAAAJA"]
[Wed Dec 03 03:57:12.565004 2025] [:error] [pid 46995:tid 47076] [client 136.144.33.11:55775] [client 136.144.33.11] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/maint/autoload_classmap.php"] [unique_id "aS9EmC49R77DGA8IkDD7bwAAAJY"]
[Wed Dec 03 03:57:13.252931 2025] [:error] [pid 47089:tid 47099] [client 37.140.223.228:56031] [client 37.140.223.228] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/rest-api/search/"] [unique_id "aS9EmQd82EVr621c8CXm7QAAAMg"]
[Wed Dec 03 03:57:13.955545 2025] [:error] [pid 46993:tid 46999] [client 37.140.223.216:50843] [client 37.140.223.216] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/blocks/post-template/"] [unique_id "aS9Emafmmy2Qwo-29xB5xQAAAAI"]
[Wed Dec 03 03:57:14.628896 2025] [:error] [pid 47089:tid 47096] [client 37.140.223.230:25779] [client 37.140.223.230] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/phpad/acp.php"] [unique_id "aS9Emgd82EVr621c8CXm7wAAAMU"]
[Wed Dec 03 03:57:15.494264 2025] [:error] [pid 46994:tid 47029] [client 136.144.33.232:57875] [client 136.144.33.232] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/includes/wp-login.php"] [unique_id "aS9EmwHTXie6yvgtpe5CSwAAAEQ"]
[Wed Dec 03 03:57:16.168164 2025] [:error] [pid 47089:tid 47094] [client 37.140.223.233:62637] [client 37.140.223.233] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/blocks/site-title/about.php"] [unique_id "aS9EnAd82EVr621c8CXm9AAAAMM"]
[Wed Dec 03 03:57:16.844990 2025] [:error] [pid 46995:tid 47068] [client 37.140.223.240:36119] [client 37.140.223.240] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/themes/covr-wpcom/assets/fonts/manrope.php"] [unique_id "aS9EnC49R77DGA8IkDD7eQAAAI4"]
[Wed Dec 03 03:57:17.553537 2025] [:error] [pid 46994:tid 47050] [client 37.140.223.217:52781] [client 37.140.223.217] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/js/tinymce/plugins/wptextpattern/about.php"] [unique_id "aS9EnQHTXie6yvgtpe5CUgAAAFg"]
[Wed Dec 03 03:57:18.252207 2025] [:error] [pid 46994:tid 47031] [client 136.144.33.12:41643] [client 136.144.33.12] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/ss.php"] [unique_id "aS9EngHTXie6yvgtpe5CVAAAAEY"]
[Wed Dec 03 03:57:18.952878 2025] [:error] [pid 46995:tid 47078] [client 37.140.223.222:55431] [client 37.140.223.222] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/blocks/site-tagline/"] [unique_id "aS9Eni49R77DGA8IkDD7ggAAAJg"]
[Wed Dec 03 03:57:19.653022 2025] [:error] [pid 46994:tid 47044] [client 37.140.223.229:34007] [client 37.140.223.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/wp-login.php"] [unique_id "aS9EnwHTXie6yvgtpe5CVwAAAFM"]
[Wed Dec 03 03:57:20.355006 2025] [:error] [pid 46994:tid 47049] [client 37.140.223.219:32975] [client 37.140.223.219] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/themes/twentytwentythree/"] [unique_id "aS9EoAHTXie6yvgtpe5CWAAAAFc"]
[Wed Dec 03 03:57:21.033469 2025] [:error] [pid 47089:tid 47103] [client 136.144.33.1:40257] [client 136.144.33.1] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/class.php"] [unique_id "aS9EoQd82EVr621c8CXm9gAAAMw"]
[Wed Dec 03 03:57:21.709461 2025] [:error] [pid 47089:tid 47105] [client 37.140.223.227:28257] [client 37.140.223.227] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/customize/autoload_classmap.php"] [unique_id "aS9EoQd82EVr621c8CXm-gAAAM4"]
[Wed Dec 03 03:57:22.380643 2025] [:error] [pid 46995:tid 47061] [client 37.140.223.248:47369] [client 37.140.223.248] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/includes/wp-conflg.php"] [unique_id "aS9Eoi49R77DGA8IkDD7jAAAAIc"]
[Wed Dec 03 03:57:23.052545 2025] [:error] [pid 47089:tid 47102] [client 37.140.223.220:36863] [client 37.140.223.220] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/update/function.php"] [unique_id "aS9Eowd82EVr621c8CXnAAAAAMs"]
[Wed Dec 03 03:57:23.736668 2025] [:error] [pid 46993:tid 47009] [client 37.140.223.240:59097] [client 37.140.223.240] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/akismet/_inc/img/about.php"] [unique_id "aS9Eo6fmmy2Qwo-29xB51AAAAAw"]
[Wed Dec 03 03:57:24.454002 2025] [:error] [pid 47089:tid 47105] [client 37.140.223.235:53841] [client 37.140.223.235] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/blocks/spacer/about.php"] [unique_id "aS9EpAd82EVr621c8CXnBgAAAM4"]
[Wed Dec 03 03:57:25.130190 2025] [:error] [pid 46993:tid 47018] [client 136.144.33.10:24695] [client 136.144.33.10] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-configs.php"] [unique_id "aS9Epafmmy2Qwo-29xB52AAAABU"]
[Wed Dec 03 03:57:25.806093 2025] [:error] [pid 46995:tid 47070] [client 37.140.223.219:63933] [client 37.140.223.219] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9EpS49R77DGA8IkDD7kQAAAJA"]
[Wed Dec 03 03:57:26.483782 2025] [:error] [pid 46994:tid 47026] [client 136.144.33.42:59861] [client 136.144.33.42] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/blocks/comments-pagination/"] [unique_id "aS9EpgHTXie6yvgtpe5CYQAAAEE"]
[Wed Dec 03 03:57:27.155211 2025] [:error] [pid 46995:tid 47073] [client 37.140.223.244:28779] [client 37.140.223.244] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/public_html/404.php"] [unique_id "aS9Epy49R77DGA8IkDD7kwAAAJM"]
[Wed Dec 03 03:57:27.855084 2025] [:error] [pid 47089:tid 47106] [client 37.140.223.244:32999] [client 37.140.223.244] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/languages/database.php"] [unique_id "aS9Epwd82EVr621c8CXnEAAAAM8"]
[Wed Dec 03 03:57:28.551834 2025] [:error] [pid 46994:tid 47042] [client 37.140.223.240:61509] [client 37.140.223.240] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/wp-trackback.php"] [unique_id "aS9EqAHTXie6yvgtpe5CZQAAAFE"]
[Wed Dec 03 03:57:29.250742 2025] [:error] [pid 47089:tid 47096] [client 37.140.223.232:30219] [client 37.140.223.232] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/languages/elish.php"] [unique_id "aS9EqQd82EVr621c8CXnFwAAAMU"]
[Wed Dec 03 03:57:29.960939 2025] [:error] [pid 46993:tid 47011] [client 37.140.223.215:38167] [client 37.140.223.215] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/languages/enum.php"] [unique_id "aS9Eqafmmy2Qwo-29xB53gAAAA4"]
[Wed Dec 03 03:57:30.658328 2025] [:error] [pid 46994:tid 47048] [client 172.245.102.88:59491] [client 172.245.102.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/php-compat/autoload_classmap.php"] [unique_id "aS9EqgHTXie6yvgtpe5CaAAAAFY"]
[Wed Dec 03 03:57:31.358489 2025] [:error] [pid 46995:tid 47055] [client 37.140.223.232:33705] [client 37.140.223.232] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/interactivity-api/autoload_classmap.php"] [unique_id "aS9Eqy49R77DGA8IkDD7nAAAAII"]
[Wed Dec 03 03:57:32.071381 2025] [:error] [pid 46995:tid 47078] [client 37.140.223.248:62971] [client 37.140.223.248] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/js/dist/script-modules/block-library/query/"] [unique_id "aS9ErC49R77DGA8IkDD7oQAAAJg"]
[Wed Dec 03 03:57:32.752519 2025] [:error] [pid 47089:tid 47097] [client 172.245.102.84:46187] [client 172.245.102.84] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/ALFA_DATA/wp-admin.php"] [unique_id "aS9ErAd82EVr621c8CXnIwAAAMY"]
[Wed Dec 03 03:57:33.473319 2025] [:error] [pid 46993:tid 47015] [client 37.140.223.230:35187] [client 37.140.223.230] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/themes/popularfx/template-parts/"] [unique_id "aS9Erafmmy2Qwo-29xB55QAAABI"]
[Wed Dec 03 03:57:34.154127 2025] [:error] [pid 47089:tid 47101] [client 136.144.33.10:53221] [client 136.144.33.10] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/about-cong.php"] [unique_id "aS9Ergd82EVr621c8CXnKQAAAMo"]
[Wed Dec 03 03:57:34.856315 2025] [:error] [pid 46995:tid 47069] [client 192.178.4.101:48029] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9Eri49R77DGA8IkDD7rAAAAI8"]
[Wed Dec 03 03:57:35.165829 2025] [:error] [pid 47089:tid 47107] [client 37.140.223.242:28949] [client 37.140.223.242] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/js/dist/development/"] [unique_id "aS9Erwd82EVr621c8CXnLgAAANA"]
[Wed Dec 03 03:57:35.854015 2025] [:error] [pid 46995:tid 47065] [client 37.140.223.230:26567] [client 37.140.223.230] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/Iitespeed-cache/157.php"] [unique_id "aS9Ery49R77DGA8IkDD7rgAAAIs"]
[Wed Dec 03 03:57:36.554370 2025] [:error] [pid 47089:tid 47109] [client 136.144.33.13:36143] [client 136.144.33.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/ID3/wp.php"] [unique_id "aS9EsAd82EVr621c8CXnNQAAANI"]
[Wed Dec 03 03:57:37.252591 2025] [:error] [pid 47089:tid 47112] [client 37.140.223.249:63521] [client 37.140.223.249] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/wp-rocket-config/"] [unique_id "aS9EsQd82EVr621c8CXnOwAAANU"]
[Wed Dec 03 03:57:37.720655 2025] [:error] [pid 47089:tid 47111] [client 192.178.4.101:45005] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9EsQd82EVr621c8CXnPAAAANQ"]
[Wed Dec 03 03:57:38.062875 2025] [:error] [pid 46994:tid 47030] [client 37.140.223.249:44715] [client 37.140.223.249] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/css/dist/list-reusable-blocks/"] [unique_id "aS9EsgHTXie6yvgtpe5CcAAAAEU"]
[Wed Dec 03 03:57:38.752504 2025] [:error] [pid 46993:tid 47014] [client 37.140.223.229:44639] [client 37.140.223.229] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/blocks/audio/"] [unique_id "aS9Esqfmmy2Qwo-29xB56gAAABE"]
[Wed Dec 03 03:57:39.491178 2025] [:error] [pid 46994:tid 47028] [client 37.140.223.221:37777] [client 37.140.223.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aS9EswHTXie6yvgtpe5CcQAAAEM"]
[Wed Dec 03 03:57:40.262672 2025] [:error] [pid 46993:tid 47011] [client 37.140.223.219:27615] [client 37.140.223.219] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/js/autoload_classmap.php"] [unique_id "aS9EtKfmmy2Qwo-29xB57AAAAA4"]
[Wed Dec 03 03:57:40.956715 2025] [:error] [pid 47089:tid 47101] [client 37.140.223.239:60939] [client 37.140.223.239] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aS9EtAd82EVr621c8CXnTAAAAMo"]
[Wed Dec 03 03:57:41.654871 2025] [:error] [pid 47089:tid 47091] [client 37.140.223.220:34605] [client 37.140.223.220] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aS9EtQd82EVr621c8CXnUAAAAMA"]
[Wed Dec 03 03:57:42.340175 2025] [:error] [pid 46994:tid 47025] [client 136.144.33.12:41153] [client 136.144.33.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aS9EtgHTXie6yvgtpe5CdwAAAEA"]
[Wed Dec 03 03:57:43.058178 2025] [:error] [pid 47089:tid 47115] [client 136.144.33.13:61953] [client 136.144.33.13] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/autoload_classmap.php"] [unique_id "aS9Etwd82EVr621c8CXnVgAAANg"]
[Wed Dec 03 03:57:43.778900 2025] [:error] [pid 47089:tid 47095] [client 136.144.33.11:49915] [client 136.144.33.11] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/images/autoload_classmap.php"] [unique_id "aS9Etwd82EVr621c8CXnWgAAAMQ"]
[Wed Dec 03 03:57:44.455454 2025] [:error] [pid 46993:tid 47007] [client 172.245.102.84:26211] [client 172.245.102.84] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/sama.php"] [unique_id "aS9EuKfmmy2Qwo-29xB58QAAAAo"]
[Wed Dec 03 03:57:45.139439 2025] [:error] [pid 46993:tid 47005] [client 37.140.223.241:63913] [client 37.140.223.241] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/SimplePie/library/about.php"] [unique_id "aS9Euafmmy2Qwo-29xB59AAAAAg"]
[Wed Dec 03 03:57:45.835921 2025] [:error] [pid 46994:tid 47042] [client 37.140.223.220:40251] [client 37.140.223.220] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/js/tinymce/utils/"] [unique_id "aS9EuQHTXie6yvgtpe5CewAAAFE"]
[Wed Dec 03 03:57:46.557609 2025] [:error] [pid 46995:tid 47069] [client 37.140.223.217:21433] [client 37.140.223.217] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/gosmtp/"] [unique_id "aS9Eui49R77DGA8IkDD7tgAAAI8"]
[Wed Dec 03 03:57:47.236560 2025] [:error] [pid 47089:tid 47104] [client 37.140.223.235:63825] [client 37.140.223.235] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/js/thickbox/"] [unique_id "aS9Euwd82EVr621c8CXnYgAAAM0"]
[Wed Dec 03 03:57:47.906591 2025] [:error] [pid 46993:tid 47018] [client 37.140.223.247:34227] [client 37.140.223.247] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/blocks/file/"] [unique_id "aS9Eu6fmmy2Qwo-29xB5-QAAABU"]
[Wed Dec 03 03:57:48.590952 2025] [:error] [pid 46994:tid 47029] [client 37.140.223.232:53709] [client 37.140.223.232] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/upgrade/plex1.php"] [unique_id "aS9EvAHTXie6yvgtpe5CgwAAAEQ"]
[Wed Dec 03 03:57:49.269708 2025] [:error] [pid 46995:tid 47057] [client 37.140.223.217:30705] [client 37.140.223.217] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/upgrade/mlex.php"] [unique_id "aS9EvS49R77DGA8IkDD7uAAAAIQ"]
[Wed Dec 03 03:57:49.953392 2025] [:error] [pid 46993:tid 46998] [client 136.144.33.1:60079] [client 136.144.33.1] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aS9Evafmmy2Qwo-29xB5_QAAAAE"]
[Wed Dec 03 03:57:50.654078 2025] [:error] [pid 47089:tid 47096] [client 37.140.223.249:34311] [client 37.140.223.249] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/css/chosen.php"] [unique_id "aS9Evgd82EVr621c8CXnagAAAMU"]
[Wed Dec 03 03:57:51.329788 2025] [:error] [pid 46995:tid 47061] [client 37.140.223.248:36671] [client 37.140.223.248] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/maint/Noname6.php"] [unique_id "aS9Evy49R77DGA8IkDD7vgAAAIc"]
[Wed Dec 03 03:57:52.028401 2025] [:error] [pid 46995:tid 47065] [client 172.245.102.85:41643] [client 172.245.102.85] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/network/configYFW/about.php"] [unique_id "aS9EwC49R77DGA8IkDD7wgAAAIs"]
[Wed Dec 03 03:57:52.698087 2025] [:error] [pid 47089:tid 47105] [client 172.245.102.83:25605] [client 172.245.102.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/js/tinymce/plugins/compat3x/about.php"] [unique_id "aS9EwAd82EVr621c8CXnbAAAAM4"]
[Wed Dec 03 03:57:53.382822 2025] [:error] [pid 46995:tid 47068] [client 136.144.33.232:63549] [client 136.144.33.232] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/Requests/src/Transport/about.php"] [unique_id "aS9EwS49R77DGA8IkDD7yAAAAI4"]
[Wed Dec 03 03:57:54.056165 2025] [:error] [pid 46994:tid 47045] [client 136.144.33.248:52615] [client 136.144.33.248] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/Requests/src/Exception/about.php"] [unique_id "aS9EwgHTXie6yvgtpe5CigAAAFQ"]
[Wed Dec 03 03:57:54.740734 2025] [:error] [pid 46994:tid 47049] [client 172.245.102.84:52857] [client 172.245.102.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/blocks/page-list-item/about.php"] [unique_id "aS9EwgHTXie6yvgtpe5CjAAAAFc"]
[Wed Dec 03 03:57:55.409654 2025] [:error] [pid 47089:tid 47100] [client 136.144.33.12:48101] [client 136.144.33.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/blocks/post-navigation-link/admin.php"] [unique_id "aS9Ewwd82EVr621c8CXncQAAAMk"]
[Wed Dec 03 03:57:56.080760 2025] [:error] [pid 46993:tid 47012] [client 172.245.102.87:46867] [client 172.245.102.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/css/dist/edit-site/about.php"] [unique_id "aS9ExKfmmy2Qwo-29xB6CAAAAA8"]
[Wed Dec 03 03:57:56.758427 2025] [:error] [pid 46993:tid 47000] [client 172.245.102.88:22439] [client 172.245.102.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/wordpress-seo/src/user-profiles-additions/about.php"] [unique_id "aS9ExKfmmy2Qwo-29xB6CQAAAAM"]
[Wed Dec 03 03:57:57.394607 2025] [:error] [pid 46994:tid 47030] [client 192.178.4.101:56534] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9ExQHTXie6yvgtpe5ClAAAAEU"]
[Wed Dec 03 03:57:57.459214 2025] [:error] [pid 47089:tid 47106] [client 136.144.33.12:27443] [client 136.144.33.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/js/dist/script-modules/about.php"] [unique_id "aS9ExQd82EVr621c8CXneQAAAM8"]
[Wed Dec 03 03:57:58.154232 2025] [:error] [pid 46995:tid 47066] [client 37.140.223.236:51491] [client 37.140.223.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/theme-compat/chosen.php"] [unique_id "aS9Exi49R77DGA8IkDD71gAAAIw"]
[Wed Dec 03 03:57:58.831128 2025] [:error] [pid 46994:tid 47045] [client 37.140.223.251:24567] [client 37.140.223.251] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/blocks/tag-cloud/about.php"] [unique_id "aS9ExgHTXie6yvgtpe5ClQAAAFQ"]
[Wed Dec 03 03:57:59.050964 2025] [:error] [pid 47089:tid 47102] [client 192.178.4.101:62144] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9Exwd82EVr621c8CXngQAAAMs"]
[Wed Dec 03 03:57:59.497388 2025] [:error] [pid 47089:tid 47092] [client 37.140.223.248:46833] [client 37.140.223.248] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/upgrade/acxx.php"] [unique_id "aS9Exwd82EVr621c8CXniAAAAME"]
[Wed Dec 03 03:58:00.170475 2025] [:error] [pid 47089:tid 47096] [client 136.144.33.232:59695] [client 136.144.33.232] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/newuser.php"] [unique_id "aS9EyAd82EVr621c8CXniwAAAMU"]
[Wed Dec 03 03:58:00.865977 2025] [:error] [pid 47089:tid 47091] [client 172.245.102.84:45163] [client 172.245.102.84] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/Requests/Exception/"] [unique_id "aS9EyAd82EVr621c8CXnjQAAAMA"]
[Wed Dec 03 03:58:01.557375 2025] [:error] [pid 47089:tid 47114] [client 37.140.223.237:60317] [client 37.140.223.237] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/PHPMailer/autoload_classmap.php"] [unique_id "aS9EyQd82EVr621c8CXnlAAAANc"]
[Wed Dec 03 03:58:02.359716 2025] [:error] [pid 47089:tid 47111] [client 37.140.223.231:23681] [client 37.140.223.231] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/assets/ty.php"] [unique_id "aS9Eygd82EVr621c8CXnlgAAANQ"]
[Wed Dec 03 03:58:03.035997 2025] [:error] [pid 46993:tid 47012] [client 136.144.33.248:48385] [client 136.144.33.248] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/js/dist/script-modules/block-library/file/"] [unique_id "aS9Ey6fmmy2Qwo-29xB6EQAAAA8"]
[Wed Dec 03 03:58:03.708342 2025] [:error] [pid 46993:tid 47008] [client 37.140.223.219:41043] [client 37.140.223.219] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/blocks/post-date/"] [unique_id "aS9Ey6fmmy2Qwo-29xB6EwAAAAs"]
[Wed Dec 03 03:58:04.396297 2025] [:error] [pid 47089:tid 47091] [client 37.140.223.247:27277] [client 37.140.223.247] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/uploads/wp-conflg.php"] [unique_id "aS9EzAd82EVr621c8CXnoAAAAMA"]
[Wed Dec 03 03:58:05.259867 2025] [:error] [pid 46993:tid 47013] [client 37.140.223.230:55279] [client 37.140.223.230] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/js/dist/script-modules/block-library/form/"] [unique_id "aS9Ezafmmy2Qwo-29xB6FQAAABA"]
[Wed Dec 03 03:58:05.948945 2025] [:error] [pid 46995:tid 47056] [client 172.245.102.85:28211] [client 172.245.102.85] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/images/chosen.php"] [unique_id "aS9EzS49R77DGA8IkDD76gAAAIM"]
[Wed Dec 03 03:58:06.624185 2025] [:error] [pid 46994:tid 47041] [client 136.144.33.248:58997] [client 136.144.33.248] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/upgrade/about.php"] [unique_id "aS9EzgHTXie6yvgtpe5CpAAAAFA"]
[Wed Dec 03 03:58:07.295056 2025] [:error] [pid 46994:tid 47048] [client 136.144.33.43:42437] [client 136.144.33.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aS9EzwHTXie6yvgtpe5CpgAAAFY"]
[Wed Dec 03 03:58:07.979714 2025] [:error] [pid 46994:tid 47028] [client 37.140.223.241:40471] [client 37.140.223.241] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/themes/twentytwentyfive/styles/blocks/"] [unique_id "aS9EzwHTXie6yvgtpe5CqwAAAEM"]
[Wed Dec 03 03:58:08.659079 2025] [:error] [pid 46994:tid 47042] [client 172.245.102.84:31437] [client 172.245.102.84] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/themes/twentytwentythree/assets/fonts/ibm-plex-mono/"] [unique_id "aS9E0AHTXie6yvgtpe5CrAAAAFE"]
[Wed Dec 03 03:58:09.580338 2025] [:error] [pid 47089:tid 47112] [client 37.140.223.230:45141] [client 37.140.223.230] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/Requests/src/Auth/admin.php"] [unique_id "aS9E0Qd82EVr621c8CXnqQAAANU"]
[Wed Dec 03 03:58:10.257646 2025] [:error] [pid 47089:tid 47093] [client 37.140.223.248:49399] [client 37.140.223.248] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/filester/assets/css/cc.php"] [unique_id "aS9E0gd82EVr621c8CXnqgAAAMI"]
[Wed Dec 03 03:58:10.279869 2025] [:error] [pid 47089:tid 47111] [client 192.178.4.101:40181] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9E0gd82EVr621c8CXnqwAAANQ"]
[Wed Dec 03 03:58:10.934083 2025] [:error] [pid 47089:tid 47108] [client 37.140.223.219:31599] [client 37.140.223.219] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/themes/modern/assets/images/"] [unique_id "aS9E0gd82EVr621c8CXnrgAAANE"]
[Wed Dec 03 03:58:11.604853 2025] [:error] [pid 46995:tid 47077] [client 37.140.223.239:41107] [client 37.140.223.239] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/themes/modern/includes/setup/config-setup.php"] [unique_id "aS9E0y49R77DGA8IkDD8VQAAAJc"]
[Wed Dec 03 03:58:12.275729 2025] [:error] [pid 47089:tid 47101] [client 172.245.102.84:55453] [client 172.245.102.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/Requests/src/Utility/admin.php"] [unique_id "aS9E1Ad82EVr621c8CXnswAAAMo"]
[Wed Dec 03 03:58:12.943418 2025] [:error] [pid 46995:tid 47072] [client 172.245.102.83:58541] [client 172.245.102.83] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/themes/wp-pridmag/22x.php"] [unique_id "aS9E1C49R77DGA8IkDD8WgAAAJI"]
[Wed Dec 03 03:58:13.628882 2025] [:error] [pid 46995:tid 47057] [client 37.140.223.247:40249] [client 37.140.223.247] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/wolf.php"] [unique_id "aS9E1S49R77DGA8IkDD8XQAAAIQ"]
[Wed Dec 03 03:58:14.299313 2025] [:error] [pid 47089:tid 47112] [client 136.144.33.11:20487] [client 136.144.33.11] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/files/admin.php"] [unique_id "aS9E1gd82EVr621c8CXnxwAAANU"]
[Wed Dec 03 03:58:14.967700 2025] [:error] [pid 47089:tid 47108] [client 136.144.33.1:44087] [client 136.144.33.1] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/themes/theme-check/theme-check.php"] [unique_id "aS9E1gd82EVr621c8CXnygAAANE"]
[Wed Dec 03 03:58:15.890183 2025] [:error] [pid 46993:tid 47020] [client 192.178.4.101:45953] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9E16fmmy2Qwo-29xB6QAAAABc"]
[Wed Dec 03 03:58:17.163050 2025] [:error] [pid 46994:tid 47037] [client 37.140.223.216:49709] [client 37.140.223.216] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/js/plupload/"] [unique_id "aS9E2QHTXie6yvgtpe5CuAAAAEw"]
[Wed Dec 03 03:58:17.851451 2025] [:error] [pid 47089:tid 47114] [client 37.140.223.237:53753] [client 37.140.223.237] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/themes/1.php"] [unique_id "aS9E2Qd82EVr621c8CXn0gAAANc"]
[Wed Dec 03 03:58:18.521645 2025] [:error] [pid 46995:tid 47075] [client 136.144.33.13:59013] [client 136.144.33.13] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/themes/cei-Biz/1.php"] [unique_id "aS9E2i49R77DGA8IkDD8YgAAAJU"]
[Wed Dec 03 03:58:19.206275 2025] [:error] [pid 47089:tid 47102] [client 37.140.223.231:39763] [client 37.140.223.231] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/languages/plugins/"] [unique_id "aS9E2wd82EVr621c8CXn1gAAAMs"]
[Wed Dec 03 03:58:19.490699 2025] [:error] [pid 46994:tid 47041] [client 192.178.4.101:45696] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9E2wHTXie6yvgtpe5CugAAAFA"]
[Wed Dec 03 03:58:19.873361 2025] [:error] [pid 46994:tid 47048] [client 37.140.223.233:47911] [client 37.140.223.233] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/Mencintai.php"] [unique_id "aS9E2wHTXie6yvgtpe5CvAAAAFY"]
[Wed Dec 03 03:58:20.554786 2025] [:error] [pid 46994:tid 47028] [client 37.140.223.225:63893] [client 37.140.223.225] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/network/m.php"] [unique_id "aS9E3AHTXie6yvgtpe5CvwAAAEM"]
[Wed Dec 03 03:58:21.256541 2025] [:error] [pid 46995:tid 47062] [client 136.144.33.10:55025] [client 136.144.33.10] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/themes/bbn.php"] [unique_id "aS9E3S49R77DGA8IkDD8aAAAAIg"]
[Wed Dec 03 03:58:21.954833 2025] [:error] [pid 46995:tid 47078] [client 37.140.223.241:58185] [client 37.140.223.241] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/themes/twentytwenty/1.php"] [unique_id "aS9E3S49R77DGA8IkDD8awAAAJg"]
[Wed Dec 03 03:58:22.652380 2025] [:error] [pid 47089:tid 47101] [client 37.140.223.241:21131] [client 37.140.223.241] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/easy-bootstrap-shortcode-pro/1.php"] [unique_id "aS9E3gd82EVr621c8CXn2wAAAMo"]
[Wed Dec 03 03:58:23.359906 2025] [:error] [pid 46995:tid 47071] [client 37.140.223.244:53411] [client 37.140.223.244] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/really-simple-captcha/tmp/1.php"] [unique_id "aS9E3y49R77DGA8IkDD8cwAAAJE"]
[Wed Dec 03 03:58:24.205477 2025] [:error] [pid 46995:tid 47078] [client 136.144.33.13:64919] [client 136.144.33.13] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/w3-total-cache/inc/1.php"] [unique_id "aS9E4C49R77DGA8IkDD8fAAAAJg"]
[Wed Dec 03 03:58:24.907541 2025] [:error] [pid 47089:tid 47094] [client 37.140.223.246:28185] [client 37.140.223.246] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/htdocs/shell.php"] [unique_id "aS9E4Ad82EVr621c8CXn4QAAAMM"]
[Wed Dec 03 03:58:25.575239 2025] [:error] [pid 47089:tid 47113] [client 172.245.102.87:45347] [client 172.245.102.87] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/public/admin.php"] [unique_id "aS9E4Qd82EVr621c8CXn4gAAANY"]
[Wed Dec 03 03:58:26.256314 2025] [:error] [pid 46994:tid 47032] [client 172.245.102.85:27919] [client 172.245.102.85] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/web/shell.php"] [unique_id "aS9E4gHTXie6yvgtpe5CxQAAAEc"]
[Wed Dec 03 03:58:26.964272 2025] [:error] [pid 47089:tid 47091] [client 37.140.223.220:59759] [client 37.140.223.220] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugin.php"] [unique_id "aS9E4gd82EVr621c8CXn5QAAAMA"]
[Wed Dec 03 03:58:27.656478 2025] [:error] [pid 47089:tid 47097] [client 37.140.223.227:37911] [client 37.140.223.227] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/wpai-woocommerce-add-on/models/import/about.php"] [unique_id "aS9E4wd82EVr621c8CXn6AAAAMY"]
[Wed Dec 03 03:58:28.353132 2025] [:error] [pid 47089:tid 47103] [client 37.140.223.233:29359] [client 37.140.223.233] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/public_html/admin.php"] [unique_id "aS9E5Ad82EVr621c8CXn7AAAAMw"]
[Wed Dec 03 03:58:29.054090 2025] [:error] [pid 46994:tid 47027] [client 37.140.223.241:24393] [client 37.140.223.241] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/themes/semplice4/assets/js/admin.php"] [unique_id "aS9E5QHTXie6yvgtpe5CygAAAEI"]
[Wed Dec 03 03:58:29.753169 2025] [:error] [pid 46993:tid 47010] [client 37.140.223.249:28393] [client 37.140.223.249] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/themes/Divi/et-pagebuilder/about.php"] [unique_id "aS9E5afmmy2Qwo-29xB6VgAAAA0"]
[Wed Dec 03 03:58:30.455437 2025] [:error] [pid 47089:tid 47107] [client 37.140.223.224:61701] [client 37.140.223.224] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/wp-file-manager/lib/sounds/admin.php"] [unique_id "aS9E5gd82EVr621c8CXn8wAAANA"]
[Wed Dec 03 03:58:31.153677 2025] [:error] [pid 47089:tid 47095] [client 37.140.223.241:51419] [client 37.140.223.241] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/img/portfolio/seton/about.php"] [unique_id "aS9E5wd82EVr621c8CXn9wAAAMQ"]
[Wed Dec 03 03:58:31.853670 2025] [:error] [pid 46994:tid 47042] [client 37.140.223.241:47723] [client 37.140.223.241] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/img/portfolio/about.php"] [unique_id "aS9E5wHTXie6yvgtpe5CzgAAAFE"]
[Wed Dec 03 03:58:32.557609 2025] [:error] [pid 46995:tid 47055] [client 37.140.223.225:46281] [client 37.140.223.225] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/img/single/about.php"] [unique_id "aS9E6C49R77DGA8IkDD8kQAAAII"]
[Wed Dec 03 03:58:33.238582 2025] [:error] [pid 46995:tid 47054] [client 37.140.223.218:44881] [client 37.140.223.218] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/img/full/admin.php"] [unique_id "aS9E6S49R77DGA8IkDD8lQAAAIE"]
[Wed Dec 03 03:58:33.954187 2025] [:error] [pid 46994:tid 47050] [client 136.144.33.42:53765] [client 136.144.33.42] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/wp-file-manager/classes/admin.php"] [unique_id "aS9E6QHTXie6yvgtpe5C0QAAAFg"]
[Wed Dec 03 03:58:34.731624 2025] [:error] [pid 47089:tid 47104] [client 37.140.223.249:59253] [client 37.140.223.249] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-install.php"] [unique_id "aS9E6gd82EVr621c8CXoCQAAAM0"]
[Wed Dec 03 03:58:35.426398 2025] [:error] [pid 46993:tid 47002] [client 37.140.223.228:46235] [client 37.140.223.228] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/SimplePie/405.php"] [unique_id "aS9E66fmmy2Qwo-29xB6XgAAAAU"]
[Wed Dec 03 03:58:36.146204 2025] [:error] [pid 46995:tid 47067] [client 37.140.223.221:54619] [client 37.140.223.221] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/sql.php"] [unique_id "aS9E7C49R77DGA8IkDD8mQAAAI0"]
[Wed Dec 03 03:58:36.822335 2025] [:error] [pid 46995:tid 47069] [client 136.144.33.13:52685] [client 136.144.33.13] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/js/widgets/service.php"] [unique_id "aS9E7C49R77DGA8IkDD8nAAAAI8"]
[Wed Dec 03 03:58:37.504464 2025] [:error] [pid 47089:tid 47106] [client 37.140.223.224:26925] [client 37.140.223.224] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/js/widgets/nux.php"] [unique_id "aS9E7Qd82EVr621c8CXoFQAAAM8"]
[Wed Dec 03 03:58:38.177870 2025] [:error] [pid 46993:tid 47006] [client 136.144.33.10:34785] [client 136.144.33.10] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/js/admin.php"] [unique_id "aS9E7qfmmy2Qwo-29xB6YwAAAAk"]
[Wed Dec 03 03:58:39.274352 2025] [:error] [pid 46994:tid 47032] [client 37.140.223.239:57965] [client 37.140.223.239] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugin/3d-flipbook-dflip-lite/3d-flipbook-dflip-lite.php"] [unique_id "aS9E7wHTXie6yvgtpe5C4AAAAEc"]
[Wed Dec 03 03:58:39.965247 2025] [:error] [pid 46995:tid 47076] [client 136.144.33.232:49681] [client 136.144.33.232] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/network/sss.php"] [unique_id "aS9E7y49R77DGA8IkDD8oAAAAJY"]
[Wed Dec 03 03:58:40.652391 2025] [:error] [pid 47089:tid 47113] [client 172.245.102.83:31737] [client 172.245.102.83] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugin/advanced-custom-fields/acf.php"] [unique_id "aS9E8Ad82EVr621c8CXoGQAAANY"]
[Wed Dec 03 03:58:41.358456 2025] [:error] [pid 46994:tid 47047] [client 37.140.223.227:31493] [client 37.140.223.227] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/js/buy.php"] [unique_id "aS9E8QHTXie6yvgtpe5C5AAAAFU"]
[Wed Dec 03 03:58:42.055591 2025] [:error] [pid 46994:tid 47043] [client 37.140.223.221:26753] [client 37.140.223.221] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/themes/edit.php"] [unique_id "aS9E8gHTXie6yvgtpe5C5gAAAFI"]
[Wed Dec 03 03:58:44.463718 2025] [:error] [pid 46995:tid 47060] [client 37.140.223.226:50635] [client 37.140.223.226] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugin/pngoptimazie.php"] [unique_id "aS9E9C49R77DGA8IkDD8pgAAAIY"]
[Wed Dec 03 03:58:45.155846 2025] [:error] [pid 46993:tid 47007] [client 37.140.223.222:65119] [client 37.140.223.222] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/database.php"] [unique_id "aS9E9afmmy2Qwo-29xB6bAAAAAo"]
[Wed Dec 03 03:58:45.852786 2025] [:error] [pid 46993:tid 47010] [client 172.245.102.87:44219] [client 172.245.102.87] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/obfuscate.php"] [unique_id "aS9E9afmmy2Qwo-29xB6bwAAAA0"]
[Wed Dec 03 03:58:46.528621 2025] [:error] [pid 46994:tid 47050] [client 37.140.223.224:57351] [client 37.140.223.224] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/themes/mabar88/inc/assets/images/lock.php"] [unique_id "aS9E9gHTXie6yvgtpe5C8QAAAFg"]
[Wed Dec 03 03:58:47.261123 2025] [:error] [pid 46993:tid 47004] [client 37.140.223.249:42511] [client 37.140.223.249] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/block-patterns/chosen.php"] [unique_id "aS9E96fmmy2Qwo-29xB6cgAAAAc"]
[Wed Dec 03 03:58:47.972529 2025] [:error] [pid 46994:tid 47047] [client 37.140.223.245:26165] [client 37.140.223.245] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/themes/maxwin88/inc/metabox/extend-metabox/lock.php"] [unique_id "aS9E9wHTXie6yvgtpe5C8wAAAFU"]
[Wed Dec 03 03:58:48.656297 2025] [:error] [pid 46993:tid 47012] [client 37.140.223.222:29675] [client 37.140.223.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/blocks/comment-content/about.php"] [unique_id "aS9E-Kfmmy2Qwo-29xB6dwAAAA8"]
[Wed Dec 03 03:58:49.352956 2025] [:error] [pid 47089:tid 47095] [client 37.140.223.240:49425] [client 37.140.223.240] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/rest-api/wp-conflg.php"] [unique_id "aS9E-Qd82EVr621c8CXoJgAAAMQ"]
[Wed Dec 03 03:58:50.058369 2025] [:error] [pid 46995:tid 47058] [client 172.245.102.87:53817] [client 172.245.102.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/js/mediaelement/renderers/about.php"] [unique_id "aS9E-i49R77DGA8IkDD8tgAAAIU"]
[Wed Dec 03 03:58:50.736083 2025] [:error] [pid 46993:tid 47014] [client 136.144.33.11:39565] [client 136.144.33.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/block-supports/about.php"] [unique_id "aS9E-qfmmy2Qwo-29xB6egAAABE"]
[Wed Dec 03 03:58:51.455687 2025] [:error] [pid 47089:tid 47103] [client 37.140.223.246:45633] [client 37.140.223.246] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/SimplePie/src/Decode/ahax.php"] [unique_id "aS9E-wd82EVr621c8CXoLAAAAMw"]
[Wed Dec 03 03:58:52.166992 2025] [:error] [pid 47089:tid 47114] [client 37.140.223.233:38583] [client 37.140.223.233] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/assets/connects.php"] [unique_id "aS9E_Ad82EVr621c8CXoLwAAANc"]
[Wed Dec 03 03:58:52.854941 2025] [:error] [pid 46993:tid 47006] [client 37.140.223.232:59655] [client 37.140.223.232] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/theme-compat/alfa.php"] [unique_id "aS9E_Kfmmy2Qwo-29xB6gQAAAAk"]
[Wed Dec 03 03:58:53.535967 2025] [:error] [pid 47089:tid 47102] [client 37.140.223.218:25365] [client 37.140.223.218] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/network/css.php"] [unique_id "aS9E_Qd82EVr621c8CXoNAAAAMs"]
[Wed Dec 03 03:58:54.210385 2025] [:error] [pid 47089:tid 47094] [client 37.140.223.239:41671] [client 37.140.223.239] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/block-bindings/hexa.php"] [unique_id "aS9E_gd82EVr621c8CXoNwAAAMM"]
[Wed Dec 03 03:58:54.879204 2025] [:error] [pid 46993:tid 47008] [client 37.140.223.226:63843] [client 37.140.223.226] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/images/images/images/images/images/images/images/images/images/images/images/images/Contacts.php"] [unique_id "aS9E_qfmmy2Qwo-29xB6hAAAAAs"]
[Wed Dec 03 03:58:55.555299 2025] [:error] [pid 46995:tid 47066] [client 37.140.223.232:26727] [client 37.140.223.232] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/js/tinymce/tag-cloud.php"] [unique_id "aS9E_y49R77DGA8IkDD8uwAAAIw"]
[Wed Dec 03 03:58:56.249215 2025] [:error] [pid 46993:tid 47017] [client 37.140.223.239:25803] [client 37.140.223.239] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/vpihdxu/wp-loader.php"] [unique_id "aS9FAKfmmy2Qwo-29xB6iAAAABQ"]
[Wed Dec 03 03:58:56.951952 2025] [:error] [pid 46994:tid 47035] [client 37.140.223.225:27855] [client 37.140.223.225] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/class-json.php"] [unique_id "aS9FAAHTXie6yvgtpe5DBwAAAEo"]
[Wed Dec 03 03:58:57.654133 2025] [:error] [pid 46993:tid 47000] [client 136.144.33.1:50897] [client 136.144.33.1] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/certificates/plugin.php"] [unique_id "aS9FAafmmy2Qwo-29xB6jAAAAAM"]
[Wed Dec 03 03:58:58.356701 2025] [:error] [pid 47089:tid 47102] [client 37.140.223.243:55315] [client 37.140.223.243] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/images/images/images/images/images/images/images/images/images/images/images/images/Contacts.php"] [unique_id "aS9FAgd82EVr621c8CXoPwAAAMs"]
[Wed Dec 03 03:58:59.094505 2025] [:error] [pid 47089:tid 47108] [client 37.140.223.235:20161] [client 37.140.223.235] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/css/lib-view/code-snippet/lock.php"] [unique_id "aS9FAwd82EVr621c8CXoRAAAANE"]
[Wed Dec 03 03:58:59.784323 2025] [:error] [pid 46993:tid 47007] [client 136.144.33.13:27451] [client 136.144.33.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/js/dist/script-modules/block-library/navigation/lock.php"] [unique_id "aS9FA6fmmy2Qwo-29xB6kgAAAAo"]
[Wed Dec 03 03:59:00.486205 2025] [:error] [pid 46994:tid 47041] [client 37.140.223.234:39579] [client 37.140.223.234] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/quadmenu/assets/frontend/icons/fontawesome/css/lock.php"] [unique_id "aS9FBAHTXie6yvgtpe5DEQAAAFA"]
[Wed Dec 03 03:59:01.165847 2025] [:error] [pid 47089:tid 47114] [client 37.140.223.220:33349] [client 37.140.223.220] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/checkout-for-woocommerce/templates/glass/about.php"] [unique_id "aS9FBQd82EVr621c8CXoSQAAANc"]
[Wed Dec 03 03:59:01.852959 2025] [:error] [pid 46995:tid 47074] [client 37.140.223.228:28267] [client 37.140.223.228] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/ngg/modules/photocrati-nextgen_basic_imagebrowser/static/lock.php"] [unique_id "aS9FBS49R77DGA8IkDD8wQAAAJQ"]
[Wed Dec 03 03:59:02.554647 2025] [:error] [pid 47089:tid 47096] [client 37.140.223.216:57509] [client 37.140.223.216] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/class-wp-image-editor-gd-pic.php"] [unique_id "aS9FBgd82EVr621c8CXoSwAAAMU"]
[Wed Dec 03 03:59:04.183528 2025] [:error] [pid 47089:tid 47091] [client 136.144.33.1:54663] [client 136.144.33.1] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/block-bindings/connects.php"] [unique_id "aS9FCAd82EVr621c8CXoUgAAAMA"]
[Wed Dec 03 03:59:04.855843 2025] [:error] [pid 46993:tid 47013] [client 136.144.33.42:52433] [client 136.144.33.42] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/options-privacy-part.php"] [unique_id "aS9FCKfmmy2Qwo-29xB6ogAAABA"]
[Wed Dec 03 03:59:05.559394 2025] [:error] [pid 46995:tid 47069] [client 37.140.223.242:41337] [client 37.140.223.242] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/link-template-variable.php"] [unique_id "aS9FCS49R77DGA8IkDD8yQAAAI8"]
[Wed Dec 03 03:59:06.256912 2025] [:error] [pid 46995:tid 47053] [client 37.140.223.243:29127] [client 37.140.223.243] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/themes/twentytwentyone/assets/sass/05-blocks/latest-comments/poisontalk.php"] [unique_id "aS9FCi49R77DGA8IkDD8zQAAAIA"]
[Wed Dec 03 03:59:06.975591 2025] [:error] [pid 46994:tid 47033] [client 37.140.223.220:37095] [client 37.140.223.220] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/wpfilemangersobject/"] [unique_id "aS9FCgHTXie6yvgtpe5DIwAAAEg"]
[Wed Dec 03 03:59:07.672508 2025] [:error] [pid 46995:tid 47071] [client 37.140.223.235:33575] [client 37.140.223.235] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/blocks/media-text-double.php"] [unique_id "aS9FCy49R77DGA8IkDD80gAAAJE"]
[Wed Dec 03 03:59:08.358908 2025] [:error] [pid 46995:tid 47058] [client 136.144.33.10:29227] [client 136.144.33.10] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/includes/class-walker-category-checklist-hashing.php"] [unique_id "aS9FDC49R77DGA8IkDD80wAAAIU"]
[Wed Dec 03 03:59:09.063064 2025] [:error] [pid 47089:tid 47114] [client 136.144.33.1:27461] [client 136.144.33.1] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/link-manager-first.php"] [unique_id "aS9FDQd82EVr621c8CXoXQAAANc"]
[Wed Dec 03 03:59:09.757760 2025] [:error] [pid 46995:tid 47064] [client 37.140.223.238:48639] [client 37.140.223.238] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/miansha.php"] [unique_id "aS9FDS49R77DGA8IkDD81QAAAIo"]
[Wed Dec 03 03:59:10.460485 2025] [:error] [pid 46995:tid 47057] [client 37.140.223.221:31889] [client 37.140.223.221] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/user.php"] [unique_id "aS9FDi49R77DGA8IkDD82AAAAIQ"]
[Wed Dec 03 03:59:11.168600 2025] [:error] [pid 46994:tid 47033] [client 37.140.223.224:29823] [client 37.140.223.224] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/xax.php"] [unique_id "aS9FDwHTXie6yvgtpe5DLAAAAEg"]
[Wed Dec 03 03:59:12.158020 2025] [:error] [pid 47089:tid 47115] [client 37.140.223.238:63051] [client 37.140.223.238] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/nodeinfo/theme.php"] [unique_id "aS9FEAd82EVr621c8CXoZAAAANg"]
[Wed Dec 03 03:59:12.854709 2025] [:error] [pid 46994:tid 47037] [client 37.140.223.228:36289] [client 37.140.223.228] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/mainhosting/past.php"] [unique_id "aS9FEAHTXie6yvgtpe5DLQAAAEw"]
[Wed Dec 03 03:59:13.543591 2025] [:error] [pid 46995:tid 47074] [client 136.144.33.13:24495] [client 136.144.33.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/css/load.php"] [unique_id "aS9FES49R77DGA8IkDD83AAAAJQ"]
[Wed Dec 03 03:59:14.266497 2025] [:error] [pid 46993:tid 47019] [client 37.140.223.231:46241] [client 37.140.223.231] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/SimplePie/src/Decode/HTML/sitemaps.php"] [unique_id "aS9FEqfmmy2Qwo-29xB6ygAAABY"]
[Wed Dec 03 03:59:14.938028 2025] [:error] [pid 47089:tid 47097] [client 37.140.223.231:33417] [client 37.140.223.231] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/SimplePie/library/SimplePie/Net/"] [unique_id "aS9FEgd82EVr621c8CXobQAAAMY"]
[Wed Dec 03 04:05:39.359071 2025] [:error] [pid 46993:tid 47020] [client 192.178.4.101:65064] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9Gk6fmmy2Qwo-29xB9HwAAABc"]
[Wed Dec 03 04:05:49.317698 2025] [:error] [pid 14082:tid 14099] [client 192.178.4.101:38113] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9GnWCTjxEQjhsJ5EQQBgAAAQ8"]
[Wed Dec 03 04:06:16.335005 2025] [:error] [pid 46993:tid 47010] [client 192.178.4.101:59079] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9GuKfmmy2Qwo-29xB9TwAAAA0"]
[Wed Dec 03 04:06:31.238250 2025] [:error] [pid 46994:tid 47047] [client 192.178.4.101:50875] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9GxwHTXie6yvgtpe5GigAAAFU"]
[Wed Dec 03 04:06:34.063369 2025] [:error] [pid 14082:tid 14099] [client 192.178.4.101:63066] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9GymCTjxEQjhsJ5EQQUAAAAQ8"]
[Wed Dec 03 04:08:58.773956 2025] [:error] [pid 47089:tid 47105] [client 192.178.4.101:61628] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9HWgd82EVr621c8CXtEgAAAM4"]
[Wed Dec 03 04:09:02.170566 2025] [:error] [pid 47089:tid 47102] [client 192.178.4.101:63581] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9HXgd82EVr621c8CXtIQAAAMs"]
[Wed Dec 03 04:09:08.391147 2025] [:error] [pid 14082:tid 14107] [client 192.178.4.101:44275] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9HZGCTjxEQjhsJ5EQRpAAAARc"]
[Wed Dec 03 04:09:11.100998 2025] [:error] [pid 46994:tid 47032] [client 192.178.4.101:52081] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9HZwHTXie6yvgtpe5HbwAAAEc"]
[Wed Dec 03 04:09:34.253239 2025] [:error] [pid 46995:tid 47055] [client 192.178.4.101:63638] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9Hfi49R77DGA8IkDABTgAAAII"]
[Wed Dec 03 04:09:50.122243 2025] [:error] [pid 46995:tid 47060] [client 192.178.4.101:62016] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9Hji49R77DGA8IkDABhwAAAIY"]
[Wed Dec 03 04:13:14.262815 2025] [:error] [pid 46994:tid 47035] [client 192.178.4.101:36477] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9IWgHTXie6yvgtpe5KSgAAAEo"]
[Wed Dec 03 04:13:17.043166 2025] [:error] [pid 14082:tid 14097] [client 192.178.4.101:56961] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9IXWCTjxEQjhsJ5EQVHgAAAQ0"]
[Wed Dec 03 04:13:19.807619 2025] [:error] [pid 14082:tid 14089] [client 192.178.4.101:51098] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9IX2CTjxEQjhsJ5EQVJgAAAQU"]
[Wed Dec 03 04:13:35.209111 2025] [:error] [pid 14082:tid 14105] [client 192.178.4.101:57962] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9Ib2CTjxEQjhsJ5EQVPAAAARU"]
[Wed Dec 03 04:13:37.514132 2025] [:error] [pid 46993:tid 47007] [client 192.178.4.101:47474] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9Icafmmy2Qwo-29xCAbAAAAAo"]
[Wed Dec 03 04:13:47.142218 2025] [:error] [pid 46993:tid 46997] [client 192.178.4.101:49820] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9Ie6fmmy2Qwo-29xCAeAAAAAA"]
[Wed Dec 03 04:13:49.011025 2025] [:error] [pid 14082:tid 14098] [client 192.178.4.101:42832] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9IfWCTjxEQjhsJ5EQVTwAAAQ4"]
[Wed Dec 03 04:13:54.993782 2025] [:error] [pid 46995:tid 47072] [client 192.178.4.101:47809] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9Igi49R77DGA8IkDADdgAAAJI"]
[Wed Dec 03 04:13:58.833974 2025] [:error] [pid 46993:tid 47020] [client 192.178.4.101:45717] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9Ihqfmmy2Qwo-29xCAgQAAABc"]
[Wed Dec 03 04:13:59.776082 2025] [:error] [pid 46994:tid 47047] [client 192.178.4.101:64756] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9IhwHTXie6yvgtpe5KggAAAFU"]
[Wed Dec 03 04:17:44.776234 2025] [:error] [pid 14082:tid 14107] [client 192.178.4.101:51979] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9JaGCTjxEQjhsJ5EQX-AAAARc"]
[Wed Dec 03 04:17:57.029209 2025] [:error] [pid 47089:tid 47111] [client 192.178.4.101:44568] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9JdQd82EVr621c8CXxbAAAANQ"]
[Wed Dec 03 04:33:54.611373 2025] [:error] [pid 14082:tid 14085] [client 192.178.4.101:58646] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9NMmCTjxEQjhsJ5EQihgAAAQE"]
[Wed Dec 03 04:33:58.128184 2025] [:error] [pid 46993:tid 47012] [client 192.178.4.101:63152] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9NNqfmmy2Qwo-29xCIoQAAAA8"]
[Wed Dec 03 04:37:58.335115 2025] [:error] [pid 46995:tid 47065] [client 192.178.4.101:62064] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9OJi49R77DGA8IkDAN9gAAAIs"]
[Wed Dec 03 04:38:02.206154 2025] [:error] [pid 46993:tid 47016] [client 192.178.4.101:55742] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9OKqfmmy2Qwo-29xCKZgAAABM"]
[Wed Dec 03 04:38:07.734187 2025] [:error] [pid 14082:tid 14101] [client 192.178.4.101:38032] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9OL2CTjxEQjhsJ5EQlegAAARE"]
[Wed Dec 03 04:38:27.995133 2025] [:error] [pid 46993:tid 47012] [client 192.178.4.101:38644] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9OQ6fmmy2Qwo-29xCKjgAAAA8"]
[Wed Dec 03 04:38:32.588261 2025] [:error] [pid 14082:tid 14087] [client 192.178.4.101:65145] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9OSGCTjxEQjhsJ5EQlxAAAAQM"]
[Wed Dec 03 04:38:36.650801 2025] [:error] [pid 46995:tid 47073] [client 192.178.4.101:39306] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9OTC49R77DGA8IkDAORAAAAJM"]
[Wed Dec 03 04:50:23.239398 2025] [:error] [pid 14082:tid 14086] [client 134.209.175.162:55652] [client 134.209.175.162] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.paramountbaldivis.com"] [uri "/.git/config"] [unique_id "aS9RD2CTjxEQjhsJ5EQtegAAAQI"]
[Wed Dec 03 04:52:39.997656 2025] [:error] [pid 46995:tid 47053] [client 192.178.4.101:50820] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9Rly49R77DGA8IkDAUHwAAAIA"]
[Wed Dec 03 04:52:42.844448 2025] [:error] [pid 46995:tid 47056] [client 192.178.4.101:54948] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9Rmi49R77DGA8IkDAUJQAAAIM"]
[Wed Dec 03 05:00:44.715221 2025] [:error] [pid 33526:tid 33546] [client 192.178.4.101:57248] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9TfGkHVvyO7JLEhwYBAAAAApI"]
[Wed Dec 03 05:00:52.800637 2025] [:error] [pid 46993:tid 47007] [client 192.178.4.101:56742] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9ThKfmmy2Qwo-29xCUMAAAAAo"]
[Wed Dec 03 05:01:28.147600 2025] [:error] [pid 33411:tid 33426] [client 192.178.4.101:60253] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9TqAaAszyHc_21rY_2JwAAAck"]
[Wed Dec 03 05:44:56.129631 2025] [:error] [pid 33336:tid 33354] [client 192.178.4.101:53993] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9d2F1BwcDaKU65W1Ui-QAAAU0"]
[Wed Dec 03 05:48:32.866786 2025] [:error] [pid 46995:tid 47078] [client 192.178.4.101:52447] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9esC49R77DGA8IkDAjGQAAAJg"]
[Wed Dec 03 05:48:39.137290 2025] [:error] [pid 33526:tid 33552] [client 192.178.4.101:52502] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9et2kHVvyO7JLEhwYK6gAAApg"]
[Wed Dec 03 05:48:46.617043 2025] [:error] [pid 46995:tid 47064] [client 192.178.4.101:49207] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9evi49R77DGA8IkDAjKgAAAIo"]
[Wed Dec 03 05:48:48.913112 2025] [:error] [pid 36048:tid 36060] [client 192.178.4.101:59410] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9ewBATOC5ACZsH0EJvJwAAAQk"]
[Wed Dec 03 05:48:51.046632 2025] [:error] [pid 47089:tid 47106] [client 192.178.4.101:35685] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9ewwd82EVr621c8CUNEwAAAM8"]
[Wed Dec 03 05:48:53.598877 2025] [:error] [pid 33526:tid 33547] [client 192.178.4.101:54930] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9exWkHVvyO7JLEhwYK8QAAApM"]
[Wed Dec 03 05:49:02.254747 2025] [:error] [pid 33336:tid 33353] [client 192.178.4.101:48573] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9ezl1BwcDaKU65W1UkfwAAAUw"]
[Wed Dec 03 05:49:28.726901 2025] [:error] [pid 46994:tid 47032] [client 192.178.4.101:48740] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9e6AHTXie6yvgtpe5qJwAAAEc"]
[Wed Dec 03 05:51:36.264874 2025] [:error] [pid 33336:tid 33348] [client 192.178.4.101:42249] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9faF1BwcDaKU65W1UlTAAAAUc"]
[Wed Dec 03 05:51:42.498965 2025] [:error] [pid 46994:tid 47047] [client 192.178.4.101:34936] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9fbgHTXie6yvgtpe5rHwAAAFU"]
[Wed Dec 03 05:51:58.936821 2025] [:error] [pid 36048:tid 36068] [client 192.178.4.101:57455] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9ffhATOC5ACZsH0EJwagAAARE"]
[Wed Dec 03 06:09:03.928656 2025] [:error] [pid 33336:tid 33343] [client 192.178.4.101:64602] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9jf11BwcDaKU65W1UpuAAAAUI"]
[Wed Dec 03 06:09:17.312254 2025] [:error] [pid 33479:tid 33484] [client 192.178.4.101:44346] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9jjXtPHKTrY8dx_x7I-wAAAkM"]
[Wed Dec 03 06:09:22.085283 2025] [:error] [pid 33526:tid 33528] [client 192.178.4.101:40454] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9jkmkHVvyO7JLEhwYO6wAAAoA"]
[Wed Dec 03 06:09:27.929960 2025] [:error] [pid 33411:tid 33418] [client 192.178.4.101:58443] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9jlwaAszyHc_21rY8BZgAAAcE"]
[Wed Dec 03 06:09:36.551099 2025] [:error] [pid 36048:tid 36075] [client 192.178.4.101:57335] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9joBATOC5ACZsH0EJ3EAAAARc"]
[Wed Dec 03 06:09:40.706870 2025] [:error] [pid 33336:tid 33350] [client 192.178.4.101:62547] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9jpF1BwcDaKU65W1Up3QAAAUk"]
[Wed Dec 03 06:09:52.440363 2025] [:error] [pid 36048:tid 36065] [client 192.178.4.101:47425] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9jsBATOC5ACZsH0EJ3KQAAAQ4"]
[Wed Dec 03 06:09:56.547467 2025] [:error] [pid 33526:tid 33548] [client 192.178.4.101:53042] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9jtGkHVvyO7JLEhwYO9gAAApQ"]
[Wed Dec 03 06:13:20.196670 2025] [:error] [pid 36048:tid 36075] [client 192.178.4.101:59473] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9kgBATOC5ACZsH0EJ4TgAAARc"]
[Wed Dec 03 06:13:26.046683 2025] [:error] [pid 36048:tid 36065] [client 192.178.4.101:46071] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9khhATOC5ACZsH0EJ4WgAAAQ4"]
[Wed Dec 03 06:13:45.696924 2025] [:error] [pid 36048:tid 36059] [client 192.178.4.101:65519] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9kmRATOC5ACZsH0EJ4fAAAAQg"]
[Wed Dec 03 06:13:53.531154 2025] [:error] [pid 33336:tid 33345] [client 192.178.4.101:59603] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9koV1BwcDaKU65W1Uq7AAAAUQ"]
[Wed Dec 03 06:16:22.246454 2025] [:error] [pid 33336:tid 33349] [client 192.178.4.101:45499] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9lNl1BwcDaKU65W1UrzgAAAUg"]
[Wed Dec 03 06:16:30.739565 2025] [:error] [pid 46994:tid 47047] [client 192.178.4.101:41120] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9lPgHTXie6yvgtpe5vnwAAAFU"]
[Wed Dec 03 06:16:38.703900 2025] [:error] [pid 33336:tid 33350] [client 192.178.4.101:49027] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9lRl1BwcDaKU65W1Ur6AAAAUk"]
[Wed Dec 03 06:17:12.205273 2025] [:error] [pid 46994:tid 47027] [client 192.178.4.101:45116] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9laAHTXie6yvgtpe5v9AAAAEI"]
[Wed Dec 03 06:27:25.621749 2025] [:error] [pid 33559:tid 33569] [client 192.178.4.101:54610] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9nzRjwmvaY39XExDtwBQAAAsg"]
[Wed Dec 03 06:33:22.445670 2025] [:error] [pid 33526:tid 33536] [client 192.178.4.101:52854] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9pMmkHVvyO7JLEhwYT4wAAAog"]
[Wed Dec 03 06:33:22.703240 2025] [:error] [pid 33526:tid 33543] [client 192.178.4.101:45031] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9pMmkHVvyO7JLEhwYT5AAAAo8"]
[Wed Dec 03 06:33:29.531542 2025] [:error] [pid 46994:tid 47034] [client 192.178.4.101:52564] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9pOQHTXie6yvgtpe50PgAAAEk"]
[Wed Dec 03 06:33:50.841771 2025] [:error] [pid 46995:tid 47071] [client 192.178.4.101:56876] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9pTi49R77DGA8IkDAuzAAAAJE"]
[Wed Dec 03 06:33:54.438968 2025] [:error] [pid 47089:tid 47113] [client 192.178.4.101:47355] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9pUgd82EVr621c8CUT5gAAANY"]
[Wed Dec 03 06:36:06.495227 2025] [:error] [pid 33412:tid 33462] [client 192.178.4.101:47380] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9p1kcTQQQWx2_k4FdDLAAAAhI"]
[Wed Dec 03 06:36:10.415749 2025] [:error] [pid 33479:tid 33506] [client 192.178.4.101:34922] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9p2ntPHKTrY8dx_x7OrwAAAlg"]
[Wed Dec 03 06:36:19.106773 2025] [:error] [pid 33412:tid 33446] [client 192.178.4.101:46268] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9p40cTQQQWx2_k4FdDPQAAAgI"]
[Wed Dec 03 06:37:27.080251 2025] [:error] [pid 46995:tid 47072] [client 192.178.4.101:41945] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9qJy49R77DGA8IkDAvtAAAAJI"]
[Wed Dec 03 06:37:31.032157 2025] [:error] [pid 33479:tid 33483] [client 192.178.4.101:56490] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9qK3tPHKTrY8dx_x7O2wAAAkI"]
[Wed Dec 03 06:37:34.224405 2025] [:error] [pid 33479:tid 33481] [client 192.178.4.101:56414] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9qLntPHKTrY8dx_x7O4AAAAkA"]
[Wed Dec 03 06:37:36.574442 2025] [:error] [pid 46995:tid 47058] [client 192.178.4.101:61783] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9qMC49R77DGA8IkDAvuAAAAIU"]
[Wed Dec 03 06:37:40.671926 2025] [:error] [pid 33336:tid 33357] [client 192.178.4.101:40172] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9qNF1BwcDaKU65W1UyQAAAAVA"]
[Wed Dec 03 06:37:44.997524 2025] [:error] [pid 46994:tid 47036] [client 192.178.4.101:58565] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9qOAHTXie6yvgtpe51AAAAAEs"]
[Wed Dec 03 06:37:48.722641 2025] [:error] [pid 33412:tid 33456] [client 192.178.4.101:35381] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9qPEcTQQQWx2_k4FdDdgAAAgw"]
[Wed Dec 03 06:37:51.325618 2025] [:error] [pid 33336:tid 33360] [client 192.178.4.101:36087] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9qP11BwcDaKU65W1UyTAAAAVM"]
[Wed Dec 03 06:37:52.992832 2025] [:error] [pid 46995:tid 47077] [client 192.178.4.101:50963] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9qQC49R77DGA8IkDAvxgAAAJc"]
[Wed Dec 03 06:37:55.509473 2025] [:error] [pid 33411:tid 33423] [client 192.178.4.101:57639] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9qQwaAszyHc_21rY8GqwAAAcY"]
[Wed Dec 03 06:38:00.585968 2025] [:error] [pid 36048:tid 36067] [client 192.178.4.101:57192] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9qSBATOC5ACZsH0EKCsAAAARA"]
[Wed Dec 03 06:38:06.308913 2025] [:error] [pid 33411:tid 33417] [client 192.178.4.101:50141] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9qTgaAszyHc_21rY8GsAAAAcA"]
[Wed Dec 03 06:38:13.387224 2025] [:error] [pid 33526:tid 33545] [client 192.178.4.101:64918] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9qVWkHVvyO7JLEhwYUtQAAApE"]
[Wed Dec 03 06:38:17.689742 2025] [:error] [pid 33559:tid 33584] [client 192.178.4.101:43980] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9qWRjwmvaY39XExDtyxwAAAtc"]
[Wed Dec 03 06:38:20.717653 2025] [:error] [pid 33559:tid 33575] [client 192.178.4.101:37831] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9qXBjwmvaY39XExDtyzQAAAs4"]
[Wed Dec 03 06:38:22.840798 2025] [:error] [pid 46995:tid 47070] [client 192.178.4.101:61712] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9qXi49R77DGA8IkDAv4QAAAJA"]
[Wed Dec 03 06:39:18.851630 2025] [:error] [pid 46995:tid 47067] [client 192.178.4.101:35150] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9qli49R77DGA8IkDAwAwAAAI0"]
[Wed Dec 03 06:39:22.016321 2025] [:error] [pid 33479:tid 33499] [client 192.178.4.101:36581] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9qmntPHKTrY8dx_x7PGAAAAlE"]
[Wed Dec 03 06:39:27.390223 2025] [:error] [pid 36048:tid 36062] [client 192.178.4.101:47977] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9qnxATOC5ACZsH0EKDAgAAAQs"]
[Wed Dec 03 06:39:29.542522 2025] [:error] [pid 36048:tid 36064] [client 192.178.4.101:38065] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9qoRATOC5ACZsH0EKDBgAAAQ0"]
[Wed Dec 03 06:39:32.012027 2025] [:error] [pid 46995:tid 47075] [client 192.178.4.101:50405] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9qpC49R77DGA8IkDAwBgAAAJU"]
[Wed Dec 03 06:39:35.096577 2025] [:error] [pid 46995:tid 47073] [client 192.178.4.101:39294] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9qpy49R77DGA8IkDAwCwAAAJM"]
[Wed Dec 03 06:39:40.172090 2025] [:error] [pid 33336:tid 33352] [client 192.178.4.101:57473] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9qrF1BwcDaKU65W1UynwAAAUs"]
[Wed Dec 03 06:39:42.727362 2025] [:error] [pid 46994:tid 47043] [client 192.178.4.101:60853] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9qrgHTXie6yvgtpe51YgAAAFI"]
[Wed Dec 03 06:39:45.163469 2025] [:error] [pid 46995:tid 47055] [client 192.178.4.101:41398] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9qsS49R77DGA8IkDAwHQAAAII"]
[Wed Dec 03 06:39:50.251855 2025] [:error] [pid 33526:tid 33531] [client 192.178.4.101:52609] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9qtmkHVvyO7JLEhwYVDQAAAoM"]
[Wed Dec 03 06:39:53.459643 2025] [:error] [pid 33526:tid 33529] [client 192.178.4.101:64552] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9quWkHVvyO7JLEhwYVEQAAAoE"]
[Wed Dec 03 06:39:56.178005 2025] [:error] [pid 46995:tid 47074] [client 192.178.4.101:64064] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9qvC49R77DGA8IkDAwIAAAAJQ"]
[Wed Dec 03 06:40:00.162026 2025] [:error] [pid 33479:tid 33481] [client 192.178.4.101:55135] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9qwHtPHKTrY8dx_x7PIAAAAkA"]
[Wed Dec 03 06:40:04.985797 2025] [:error] [pid 33336:tid 33349] [client 192.178.4.101:41168] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9qxF1BwcDaKU65W1UytgAAAUg"]
[Wed Dec 03 06:40:07.450190 2025] [:error] [pid 46994:tid 47048] [client 192.178.4.101:43583] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9qxwHTXie6yvgtpe51bAAAAFY"]
[Wed Dec 03 06:40:10.567592 2025] [:error] [pid 33336:tid 33365] [client 192.178.4.101:64926] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9qyl1BwcDaKU65W1UyvwAAAVg"]
[Wed Dec 03 06:41:09.445503 2025] [:error] [pid 33526:tid 33535] [client 192.178.4.101:39666] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9rBWkHVvyO7JLEhwYVRwAAAoc"]
[Wed Dec 03 06:41:14.522926 2025] [:error] [pid 33559:tid 33569] [client 192.178.4.101:50401] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9rChjwmvaY39XExDtzIwAAAsg"]
[Wed Dec 03 06:41:17.517352 2025] [:error] [pid 33336:tid 33356] [client 192.178.4.101:52472] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9rDV1BwcDaKU65W1UzLwAAAU8"]
[Wed Dec 03 06:41:20.564636 2025] [:error] [pid 47089:tid 47100] [client 192.178.4.101:58831] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9rEAd82EVr621c8CUU1gAAAMk"]
[Wed Dec 03 06:41:29.274673 2025] [:error] [pid 33412:tid 33467] [client 192.178.4.101:36187] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9rGUcTQQQWx2_k4FdDxwAAAhc"]
[Wed Dec 03 06:41:41.062883 2025] [:error] [pid 46995:tid 47069] [client 192.178.4.101:55341] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9rJS49R77DGA8IkDAwXQAAAI8"]
[Wed Dec 03 06:41:43.504438 2025] [:error] [pid 46995:tid 47070] [client 192.178.4.101:36041] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9rJy49R77DGA8IkDAwXgAAAJA"]
[Wed Dec 03 06:41:48.251742 2025] [:error] [pid 33526:tid 33538] [client 192.178.4.101:37355] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9rLGkHVvyO7JLEhwYVXAAAAoo"]
[Wed Dec 03 06:41:51.619083 2025] [:error] [pid 33559:tid 33561] [client 192.178.4.101:53430] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9rLxjwmvaY39XExDtzOwAAAsA"]
[Wed Dec 03 06:41:59.867798 2025] [:error] [pid 33559:tid 33579] [client 192.178.4.101:59799] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9rNxjwmvaY39XExDtzSAAAAtI"]
[Wed Dec 03 06:43:47.201546 2025] [:error] [pid 36048:tid 36068] [client 192.178.4.101:62941] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9roxATOC5ACZsH0EKElAAAARE"]
[Wed Dec 03 06:43:50.445941 2025] [:error] [pid 36048:tid 36063] [client 192.178.4.101:48452] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9rphATOC5ACZsH0EKEmgAAAQw"]
[Wed Dec 03 06:43:52.841953 2025] [:error] [pid 36048:tid 36064] [client 192.178.4.101:35735] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9rqBATOC5ACZsH0EKEnQAAAQ0"]
[Wed Dec 03 06:43:57.777304 2025] [:error] [pid 33559:tid 33561] [client 192.178.4.101:59832] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9rrRjwmvaY39XExDtzjQAAAsA"]
[Wed Dec 03 06:44:01.654216 2025] [:error] [pid 36048:tid 36057] [client 192.178.4.101:62797] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9rsRATOC5ACZsH0EKEsgAAAQY"]
[Wed Dec 03 06:44:04.076348 2025] [:error] [pid 46995:tid 47075] [client 192.178.4.101:42478] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9rtC49R77DGA8IkDAw8QAAAJU"]
[Wed Dec 03 06:44:06.943408 2025] [:error] [pid 47089:tid 47091] [client 192.178.4.101:63545] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9rtgd82EVr621c8CUVLgAAAMA"]
[Wed Dec 03 06:44:11.523507 2025] [:error] [pid 33411:tid 33431] [client 192.178.4.101:63820] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9ruwaAszyHc_21rY8HewAAAc4"]
[Wed Dec 03 06:44:15.608613 2025] [:error] [pid 33479:tid 33485] [client 192.178.4.101:35365] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9rv3tPHKTrY8dx_x7P7wAAAkQ"]
[Wed Dec 03 06:44:18.020225 2025] [:error] [pid 46995:tid 47077] [client 192.178.4.101:38938] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9rwi49R77DGA8IkDAxCwAAAJc"]
[Wed Dec 03 06:44:21.611835 2025] [:error] [pid 36048:tid 36055] [client 192.178.4.101:46521] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9rxRATOC5ACZsH0EKEywAAAQQ"]
[Wed Dec 03 06:44:25.129416 2025] [:error] [pid 33559:tid 33571] [client 192.178.4.101:61649] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9ryRjwmvaY39XExDtzqgAAAso"]
[Wed Dec 03 06:44:27.200315 2025] [:error] [pid 33336:tid 33348] [client 192.178.4.101:36256] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9ry11BwcDaKU65W1Uz4QAAAUc"]
[Wed Dec 03 06:44:30.870176 2025] [:error] [pid 33559:tid 33574] [client 192.178.4.101:62707] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9rzhjwmvaY39XExDtzsQAAAs0"]
[Wed Dec 03 06:44:35.648088 2025] [:error] [pid 46994:tid 47050] [client 192.178.4.101:60221] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9r0wHTXie6yvgtpe52RAAAAFg"]
[Wed Dec 03 06:44:39.196821 2025] [:error] [pid 33479:tid 33491] [client 192.178.4.101:57147] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9r13tPHKTrY8dx_x7P_AAAAko"]
[Wed Dec 03 06:48:34.328049 2025] [:error] [pid 33411:tid 33438] [client 192.178.4.101:55387] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9swgaAszyHc_21rY8ILgAAAdU"]
[Wed Dec 03 06:48:37.275154 2025] [:error] [pid 33336:tid 33353] [client 192.178.4.101:41057] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9sxV1BwcDaKU65W1U0zgAAAUw"]
[Wed Dec 03 06:48:51.359252 2025] [:error] [pid 33479:tid 33501] [client 192.178.4.101:35338] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9s03tPHKTrY8dx_x7QrgAAAlM"]
[Wed Dec 03 06:48:56.982622 2025] [:error] [pid 46995:tid 47066] [client 192.178.4.101:60324] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9s2C49R77DGA8IkDAyGgAAAIw"]
[Wed Dec 03 06:49:00.685523 2025] [:error] [pid 36048:tid 36061] [client 192.178.4.101:50627] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9s3BATOC5ACZsH0EKGbAAAAQo"]
[Wed Dec 03 06:49:03.950799 2025] [:error] [pid 33559:tid 33569] [client 192.178.4.101:65251] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9s3xjwmvaY39XExDt0fwAAAsg"]
[Wed Dec 03 06:49:08.543024 2025] [:error] [pid 33336:tid 33357] [client 192.178.4.101:58597] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9s5F1BwcDaKU65W1U08QAAAVA"]
[Wed Dec 03 06:49:10.925781 2025] [:error] [pid 33411:tid 33431] [client 192.178.4.101:51243] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9s5gaAszyHc_21rY8IVQAAAc4"]
[Wed Dec 03 06:49:13.905870 2025] [:error] [pid 33411:tid 33417] [client 192.178.4.101:53142] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9s6QaAszyHc_21rY8IVwAAAcA"]
[Wed Dec 03 06:49:18.028492 2025] [:error] [pid 33336:tid 33354] [client 192.178.4.101:35636] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9s7l1BwcDaKU65W1U0-wAAAU0"]
[Wed Dec 03 06:49:20.155184 2025] [:error] [pid 33412:tid 33461] [client 192.178.4.101:60278] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9s8EcTQQQWx2_k4FdE8wAAAhE"]
[Wed Dec 03 06:49:23.979293 2025] [:error] [pid 33479:tid 33490] [client 192.178.4.101:48408] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9s83tPHKTrY8dx_x7QwQAAAkk"]
[Wed Dec 03 06:49:26.456298 2025] [:error] [pid 33412:tid 33457] [client 192.178.4.101:57791] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9s9kcTQQQWx2_k4FdE-AAAAg0"]
[Wed Dec 03 06:49:31.653098 2025] [:error] [pid 46994:tid 47047] [client 192.178.4.101:49051] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9s-wHTXie6yvgtpe53OgAAAFU"]
[Wed Dec 03 06:50:22.083733 2025] [:error] [pid 33412:tid 33468] [client 192.178.4.101:46494] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9tLkcTQQQWx2_k4FdFGwAAAhg"]
[Wed Dec 03 06:50:25.221603 2025] [:error] [pid 33526:tid 33545] [client 192.178.4.101:54537] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9tMWkHVvyO7JLEhwYW4AAAApE"]
[Wed Dec 03 06:50:34.668907 2025] [:error] [pid 33412:tid 33447] [client 192.178.4.101:44298] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9tOkcTQQQWx2_k4FdFJwAAAgM"]
[Wed Dec 03 06:50:37.429911 2025] [:error] [pid 33412:tid 33454] [client 192.178.4.101:52230] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9tPUcTQQQWx2_k4FdFLQAAAgo"]
[Wed Dec 03 06:50:40.693334 2025] [:error] [pid 46995:tid 47055] [client 192.178.4.101:55846] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9tQC49R77DGA8IkDAyhgAAAII"]
[Wed Dec 03 06:50:44.847354 2025] [:error] [pid 46994:tid 47041] [client 192.178.4.101:39583] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9tRAHTXie6yvgtpe53fgAAAFA"]
[Wed Dec 03 06:50:47.211492 2025] [:error] [pid 36048:tid 36069] [client 192.178.4.101:63556] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9tRxATOC5ACZsH0EKG7gAAARI"]
[Wed Dec 03 06:50:50.643901 2025] [:error] [pid 33411:tid 33426] [client 192.178.4.101:38700] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9tSgaAszyHc_21rY8InQAAAck"]
[Wed Dec 03 06:50:54.051142 2025] [:error] [pid 33479:tid 33486] [client 192.178.4.101:65260] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9tTntPHKTrY8dx_x7RBgAAAkU"]
[Wed Dec 03 06:50:57.096371 2025] [:error] [pid 36048:tid 36063] [client 192.178.4.101:64518] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9tURATOC5ACZsH0EKHBwAAAQw"]
[Wed Dec 03 06:50:58.260609 2025] [:error] [pid 33559:tid 33571] [client 192.178.4.101:56791] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9tUhjwmvaY39XExDt06AAAAso"]
[Wed Dec 03 06:51:05.779753 2025] [:error] [pid 33559:tid 33571] [client 192.178.4.101:45384] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9tWRjwmvaY39XExDt09QAAAso"]
[Wed Dec 03 06:51:14.097171 2025] [:error] [pid 33411:tid 33422] [client 192.178.4.101:59126] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9tYgaAszyHc_21rY8ItQAAAcU"]
[Wed Dec 03 06:51:50.855811 2025] [:error] [pid 33559:tid 33572] [client 192.178.4.101:62088] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9thhjwmvaY39XExDt1IwAAAss"]
[Wed Dec 03 06:51:57.653137 2025] [:error] [pid 33336:tid 33355] [client 192.178.4.101:47259] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9tjV1BwcDaKU65W1U1sAAAAU4"]
[Wed Dec 03 06:52:00.702233 2025] [:error] [pid 36048:tid 36061] [client 192.178.4.101:39612] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9tkBATOC5ACZsH0EKHhQAAAQo"]
[Wed Dec 03 06:52:03.536244 2025] [:error] [pid 33336:tid 33365] [client 192.178.4.101:64841] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9tk11BwcDaKU65W1U1tgAAAVg"]
[Wed Dec 03 06:52:08.140274 2025] [:error] [pid 33559:tid 33565] [client 192.178.4.101:63361] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9tmBjwmvaY39XExDt1NgAAAsQ"]
[Wed Dec 03 06:52:10.796361 2025] [:error] [pid 36048:tid 36075] [client 192.178.4.101:37952] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9tmhATOC5ACZsH0EKHnwAAARc"]
[Wed Dec 03 06:52:14.076663 2025] [:error] [pid 46995:tid 47077] [client 192.178.4.101:49960] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9tni49R77DGA8IkDAy3AAAAJc"]
[Wed Dec 03 06:52:18.247392 2025] [:error] [pid 33412:tid 33458] [client 192.178.4.101:47473] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9tokcTQQQWx2_k4FdFaQAAAg4"]
[Wed Dec 03 06:52:21.059663 2025] [:error] [pid 33411:tid 33437] [client 192.178.4.101:38232] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9tpQaAszyHc_21rY8I1wAAAdQ"]
[Wed Dec 03 06:52:23.805879 2025] [:error] [pid 33336:tid 33355] [client 192.178.4.101:60206] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9tp11BwcDaKU65W1U15gAAAU4"]
[Wed Dec 03 06:52:28.164959 2025] [:error] [pid 33411:tid 33440] [client 192.178.4.101:37091] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9trAaAszyHc_21rY8I3wAAAdc"]
[Wed Dec 03 06:52:29.225686 2025] [:error] [pid 33526:tid 33534] [client 192.178.4.101:60767] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9trWkHVvyO7JLEhwYXTwAAAoY"]
[Wed Dec 03 06:52:31.549674 2025] [:error] [pid 46995:tid 47072] [client 192.178.4.101:61712] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9try49R77DGA8IkDAy7gAAAJI"]
[Wed Dec 03 06:52:34.439498 2025] [:error] [pid 33479:tid 33490] [client 192.178.4.101:52970] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9tsntPHKTrY8dx_x7RQAAAAkk"]
[Wed Dec 03 06:52:40.795541 2025] [:error] [pid 46994:tid 47037] [client 192.178.4.101:40507] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9tuAHTXie6yvgtpe53xAAAAEw"]
[Wed Dec 03 06:52:44.648716 2025] [:error] [pid 33412:tid 33461] [client 192.178.4.101:37904] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9tvEcTQQQWx2_k4FdFgQAAAhE"]
[Wed Dec 03 06:53:36.637833 2025] [:error] [pid 46995:tid 47063] [client 192.178.4.101:56341] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9t8C49R77DGA8IkDAzQQAAAIk"]
[Wed Dec 03 06:53:58.149541 2025] [:error] [pid 33559:tid 33576] [client 192.178.4.101:44033] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9uBhjwmvaY39XExDt1qgAAAs8"]
[Wed Dec 03 06:54:07.774084 2025] [:error] [pid 46995:tid 47070] [client 192.178.4.101:59376] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9uDy49R77DGA8IkDAzWgAAAJA"]
[Wed Dec 03 06:54:10.127375 2025] [:error] [pid 33559:tid 33575] [client 192.178.4.101:62384] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9uEhjwmvaY39XExDt1xQAAAs4"]
[Wed Dec 03 06:54:13.449604 2025] [:error] [pid 46994:tid 47033] [client 192.178.4.101:38201] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9uFQHTXie6yvgtpe54EwAAAEg"]
[Wed Dec 03 06:54:22.841453 2025] [:error] [pid 33559:tid 33577] [client 192.178.4.101:53082] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9uHhjwmvaY39XExDt1zwAAAtA"]
[Wed Dec 03 06:54:26.649711 2025] [:error] [pid 33559:tid 33565] [client 192.178.4.101:62130] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9uIhjwmvaY39XExDt10wAAAsQ"]
[Wed Dec 03 06:55:22.617511 2025] [:error] [pid 46995:tid 47066] [client 192.178.4.101:58643] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9uWi49R77DGA8IkDAztgAAAIw"]
[Wed Dec 03 06:55:26.721686 2025] [:error] [pid 46994:tid 47040] [client 192.178.4.101:55229] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9uXgHTXie6yvgtpe54WQAAAE8"]
[Wed Dec 03 06:55:28.830787 2025] [:error] [pid 33479:tid 33500] [client 192.178.4.101:64594] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9uYHtPHKTrY8dx_x7R8QAAAlI"]
[Wed Dec 03 06:55:31.014921 2025] [:error] [pid 46994:tid 47026] [client 192.178.4.101:53505] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9uYwHTXie6yvgtpe54WgAAAEE"]
[Wed Dec 03 06:55:35.994246 2025] [:error] [pid 33412:tid 33461] [client 192.178.4.101:39431] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9uZ0cTQQQWx2_k4FdF5wAAAhE"]
[Wed Dec 03 06:55:38.805934 2025] [:error] [pid 33336:tid 33351] [client 192.178.4.101:37811] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9ual1BwcDaKU65W1U2wQAAAUo"]
[Wed Dec 03 06:55:53.882496 2025] [:error] [pid 46995:tid 47069] [client 192.178.4.101:50247] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9ueS49R77DGA8IkDAzxwAAAI8"]
[Wed Dec 03 06:56:09.963236 2025] [:error] [pid 33479:tid 33506] [client 192.178.4.101:47526] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS9uiXtPHKTrY8dx_x7SJgAAAlg"]
[Wed Dec 03 10:18:03.166455 2025] [:error] [pid 24019:tid 24044] [client 182.42.111.213:36735] [client 182.42.111.213] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.paramountbaldivis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.paramountbaldivis.com"] [uri "/"] [unique_id "aS-d25kVRhF9Pu1FX0MgqAAAAJY"]
[Wed Dec 03 11:07:30.713403 2025] [:error] [pid 22013:tid 22019] [client 192.178.4.101:62859] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS-pcopUogO0aqsrpMWjQQAAAMA"]
[Wed Dec 03 11:07:32.396250 2025] [:error] [pid 22083:tid 22090] [client 192.178.4.101:54222] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS-pdPicvKZCy0M9-zzp9wAAAEU"]
[Wed Dec 03 11:07:34.174853 2025] [:error] [pid 24019:tid 24041] [client 192.178.4.101:42405] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS-pdpkVRhF9Pu1FX0M5LwAAAJM"]
[Wed Dec 03 11:07:34.997979 2025] [:error] [pid 11940:tid 11949] [client 192.178.4.101:46496] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS-pdjcDdx05OuLeesPefAAAAcc"]
[Wed Dec 03 11:07:35.641085 2025] [:error] [pid 64775:tid 64801] [client 192.178.4.101:39289] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS-pdzCfrfdP2K_u39dKvgAAAZg"]
[Wed Dec 03 11:07:39.969089 2025] [:error] [pid 24019:tid 24045] [client 192.178.4.101:43235] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS-pe5kVRhF9Pu1FX0M5NwAAAJc"]
[Wed Dec 03 11:07:40.660024 2025] [:error] [pid 21970:tid 21990] [client 192.178.4.101:63127] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS-pfGYwAeqEfyJIWdSiOAAAAA4"]
[Wed Dec 03 11:07:41.244899 2025] [:error] [pid 64775:tid 64799] [client 192.178.4.101:51858] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS-pfTCfrfdP2K_u39dKwwAAAZY"]
[Wed Dec 03 11:07:41.310970 2025] [:error] [pid 24019:tid 24033] [client 192.178.4.101:43597] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS-pfZkVRhF9Pu1FX0M5OwAAAIs"]
[Wed Dec 03 11:07:41.594709 2025] [:error] [pid 64775:tid 64796] [client 192.178.4.101:44748] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS-pfTCfrfdP2K_u39dKxAAAAZM"]
[Wed Dec 03 11:31:35.808414 2025] [:error] [pid 64775:tid 64801] [client 192.178.4.101:36122] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS-vFzCfrfdP2K_u39dQ4QAAAZg"]
[Wed Dec 03 11:31:37.169364 2025] [:error] [pid 54695:tid 54720] [client 192.178.4.101:46890] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS-vGWrRT4nTHsfUu076mwAAAVU"]
[Wed Dec 03 11:31:38.886705 2025] [:error] [pid 64775:tid 64787] [client 192.178.4.101:38135] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS-vGjCfrfdP2K_u39dQ4gAAAYo"]
[Wed Dec 03 11:31:40.979702 2025] [:error] [pid 21970:tid 21993] [client 192.178.4.101:48970] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS-vHGYwAeqEfyJIWdSnmAAAABE"]
[Wed Dec 03 11:31:43.629804 2025] [:error] [pid 22083:tid 22087] [client 192.178.4.101:48392] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS-vH_icvKZCy0M9-zzxIQAAAEI"]
[Wed Dec 03 11:31:45.712173 2025] [:error] [pid 64775:tid 64791] [client 192.178.4.101:42972] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS-vITCfrfdP2K_u39dQ7AAAAY4"]
[Wed Dec 03 11:31:46.523632 2025] [:error] [pid 24019:tid 24041] [client 192.178.4.101:46141] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS-vIpkVRhF9Pu1FX0NE_AAAAJM"]
[Wed Dec 03 11:31:47.645604 2025] [:error] [pid 54695:tid 54702] [client 192.178.4.101:63955] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS-vI2rRT4nTHsfUu076qQAAAUM"]
[Wed Dec 03 11:32:20.313787 2025] [:error] [pid 22083:tid 22098] [client 192.178.4.101:62139] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS-vRPicvKZCy0M9-zzxhgAAAE0"]
[Wed Dec 03 11:35:03.836626 2025] [:error] [pid 64775:tid 64779] [client 192.178.4.101:49825] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS-v5zCfrfdP2K_u39dSIwAAAYI"]
[Wed Dec 03 11:35:21.454251 2025] [:error] [pid 24019:tid 24043] [client 192.178.4.101:42724] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS-v-ZkVRhF9Pu1FX0NHCwAAAJU"]
[Wed Dec 03 11:35:31.925647 2025] [:error] [pid 54695:tid 54709] [client 192.178.4.101:41985] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS-wA2rRT4nTHsfUu077uQAAAUo"]
[Wed Dec 03 11:35:38.140681 2025] [:error] [pid 11940:tid 11959] [client 192.178.4.101:43693] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS-wCjcDdx05OuLeesPoJQAAAdE"]
[Wed Dec 03 11:35:47.600186 2025] [:error] [pid 22083:tid 22102] [client 192.178.4.101:60904] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS-wE_icvKZCy0M9-zzytgAAAFE"]
[Wed Dec 03 11:35:52.718721 2025] [:error] [pid 11940:tid 11964] [client 192.178.4.101:58913] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS-wGDcDdx05OuLeesPoMAAAAdY"]
[Wed Dec 03 11:37:58.830000 2025] [:error] [pid 22013:tid 22021] [client 192.178.4.101:62577] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS-wlopUogO0aqsrpMWptgAAAMI"]
[Wed Dec 03 11:38:28.445925 2025] [:error] [pid 11940:tid 11951] [client 192.178.4.101:50725] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS-wtDcDdx05OuLeesPo5AAAAck"]
[Wed Dec 03 11:38:33.364194 2025] [:error] [pid 24019:tid 24025] [client 192.178.4.101:54352] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS-wuZkVRhF9Pu1FX0NIIQAAAIM"]
[Wed Dec 03 11:40:03.864842 2025] [:error] [pid 22083:tid 22097] [client 192.178.4.101:62827] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS-xE_icvKZCy0M9-zzz3QAAAEw"]
[Wed Dec 03 11:40:13.126890 2025] [:error] [pid 22083:tid 22097] [client 192.178.4.101:58587] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS-xHficvKZCy0M9-zzz5AAAAEw"]
[Wed Dec 03 11:40:20.879650 2025] [:error] [pid 24019:tid 24034] [client 192.178.4.101:48996] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS-xJJkVRhF9Pu1FX0NIuwAAAIw"]
[Wed Dec 03 11:40:24.990463 2025] [:error] [pid 22083:tid 22091] [client 192.178.4.101:46550] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS-xKPicvKZCy0M9-zzz-gAAAEY"]
[Wed Dec 03 11:40:37.617177 2025] [:error] [pid 24019:tid 24027] [client 192.178.4.101:64428] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS-xNZkVRhF9Pu1FX0NI3QAAAIU"]
[Wed Dec 03 11:40:46.466522 2025] [:error] [pid 22013:tid 22019] [client 192.178.4.101:56627] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS-xPopUogO0aqsrpMWqcgAAAMA"]
[Wed Dec 03 11:40:57.289671 2025] [:error] [pid 64775:tid 64787] [client 192.178.4.101:46922] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS-xSTCfrfdP2K_u39dTYgAAAYo"]
[Wed Dec 03 11:42:31.470392 2025] [:error] [pid 22014:tid 22068] [client 192.178.4.101:47144] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS-xpwgpXEQej7y9Y6ZE9AAAARY"]
[Wed Dec 03 11:42:40.297365 2025] [:error] [pid 21970:tid 21989] [client 192.178.4.101:58373] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS-xsGYwAeqEfyJIWdSqfwAAAA0"]
[Wed Dec 03 11:42:43.672116 2025] [:error] [pid 24019:tid 24039] [client 192.178.4.101:64861] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS-xs5kVRhF9Pu1FX0NJtwAAAJE"]
[Wed Dec 03 11:42:48.101616 2025] [:error] [pid 22013:tid 22037] [client 192.178.4.101:49259] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS-xuIpUogO0aqsrpMWrDAAAANI"]
[Wed Dec 03 11:42:57.519869 2025] [:error] [pid 22083:tid 22101] [client 192.178.4.101:35436] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS-xwficvKZCy0M9-zz07QAAAFA"]
[Wed Dec 03 11:43:04.752935 2025] [:error] [pid 24019:tid 24039] [client 192.178.4.101:48488] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS-xyJkVRhF9Pu1FX0NJ5gAAAJE"]
[Wed Dec 03 11:43:12.384477 2025] [:error] [pid 22083:tid 22088] [client 192.178.4.101:37522] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS-x0PicvKZCy0M9-zz09gAAAEM"]
[Wed Dec 03 11:43:17.376386 2025] [:error] [pid 22083:tid 22098] [client 192.178.4.101:52664] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS-x1ficvKZCy0M9-zz0_AAAAE0"]
[Wed Dec 03 11:44:47.759686 2025] [:error] [pid 24019:tid 24036] [client 192.178.4.101:53859] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS-yL5kVRhF9Pu1FX0NKgQAAAI4"]
[Wed Dec 03 11:44:51.162621 2025] [:error] [pid 11940:tid 11966] [client 192.178.4.101:36263] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS-yMzcDdx05OuLeesPq8QAAAdg"]
[Wed Dec 03 11:44:57.584961 2025] [:error] [pid 24019:tid 24042] [client 192.178.4.101:60101] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS-yOZkVRhF9Pu1FX0NKiAAAAJQ"]
[Wed Dec 03 11:45:34.353648 2025] [:error] [pid 22013:tid 22033] [client 192.178.4.101:58590] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS-yXopUogO0aqsrpMWrdQAAAM4"]
[Wed Dec 03 11:47:41.157302 2025] [:error] [pid 11940:tid 11956] [client 192.178.4.101:47364] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS-y3TcDdx05OuLeesPrxQAAAc4"]
[Wed Dec 03 11:47:58.178769 2025] [:error] [pid 22013:tid 22024] [client 192.178.4.101:50224] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS-y7opUogO0aqsrpMWr-gAAAMU"]
[Wed Dec 03 11:48:01.765720 2025] [:error] [pid 22083:tid 22096] [client 192.178.4.101:47958] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS-y8ficvKZCy0M9-zz2JwAAAEs"]
[Wed Dec 03 11:48:06.633223 2025] [:error] [pid 64775:tid 64794] [client 192.178.4.101:39600] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS-y9jCfrfdP2K_u39dU8QAAAZE"]
[Wed Dec 03 11:48:13.617812 2025] [:error] [pid 64775:tid 64782] [client 192.178.4.101:36709] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS-y_TCfrfdP2K_u39dVCwAAAYU"]
[Wed Dec 03 11:48:19.436717 2025] [:error] [pid 11940:tid 11943] [client 192.178.4.101:53777] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS-zAzcDdx05OuLeesPr_wAAAcE"]
[Wed Dec 03 11:48:28.697008 2025] [:error] [pid 11940:tid 11942] [client 192.178.4.101:64186] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS-zDDcDdx05OuLeesPsEAAAAcA"]
[Wed Dec 03 11:49:52.299321 2025] [:error] [pid 22013:tid 22041] [client 192.178.4.101:60702] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS-zYIpUogO0aqsrpMWsUgAAANY"]
[Wed Dec 03 11:50:19.007779 2025] [:error] [pid 21970:tid 21980] [client 192.178.4.101:51042] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS-ze2YwAeqEfyJIWdSr4wAAAAQ"]
[Wed Dec 03 11:50:24.123792 2025] [:error] [pid 22013:tid 22041] [client 192.178.4.101:53492] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS-zgIpUogO0aqsrpMWsdQAAANY"]
[Wed Dec 03 11:50:31.260118 2025] [:error] [pid 22083:tid 22095] [client 192.178.4.101:62001] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS-zh_icvKZCy0M9-zz2pQAAAEo"]
[Wed Dec 03 11:51:56.818894 2025] [:error] [pid 54695:tid 54707] [client 192.178.4.101:46299] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS-z3GrRT4nTHsfUu07_GgAAAUg"]
[Wed Dec 03 11:52:06.595379 2025] [:error] [pid 22013:tid 22039] [client 192.178.4.101:56740] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS-z5opUogO0aqsrpMWs2wAAANQ"]
[Wed Dec 03 11:52:11.400112 2025] [:error] [pid 22013:tid 22022] [client 192.178.4.101:49608] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS-z64pUogO0aqsrpMWs4QAAAMM"]
[Wed Dec 03 11:52:26.751458 2025] [:error] [pid 22013:tid 22028] [client 192.178.4.101:64238] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS-z-opUogO0aqsrpMWs7AAAAMk"]
[Wed Dec 03 11:52:29.817150 2025] [:error] [pid 22014:tid 22046] [client 192.178.4.101:54645] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS-z_QgpXEQej7y9Y6ZG9gAAAQA"]
[Wed Dec 03 11:52:43.679653 2025] [:error] [pid 21970:tid 21979] [client 192.178.4.101:41421] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS-0C2YwAeqEfyJIWdSsVQAAAAM"]
[Wed Dec 03 12:04:40.457227 2025] [:error] [pid 24019:tid 24021] [client 192.178.4.101:51487] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS-22JkVRhF9Pu1FX0NULgAAAIA"]
[Wed Dec 03 12:05:01.275517 2025] [:error] [pid 24019:tid 24032] [client 192.178.4.101:37959] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS-27ZkVRhF9Pu1FX0NUdwAAAIo"]
[Wed Dec 03 12:05:20.287708 2025] [:error] [pid 24019:tid 24046] [client 192.178.4.101:38174] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS-3AJkVRhF9Pu1FX0NUlwAAAJg"]
[Wed Dec 03 12:05:30.005766 2025] [:error] [pid 24019:tid 24045] [client 192.178.4.101:61551] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS-3CpkVRhF9Pu1FX0NUqwAAAJc"]
[Wed Dec 03 12:05:36.078514 2025] [:error] [pid 64775:tid 64794] [client 192.178.4.101:38119] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS-3EDCfrfdP2K_u39daZAAAAZE"]
[Wed Dec 03 12:26:22.100161 2025] [:error] [pid 11940:tid 11963] [client 192.178.4.101:48090] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS-77jcDdx05OuLeesP8JAAAAdU"]
[Wed Dec 03 12:26:53.290288 2025] [:error] [pid 24019:tid 24046] [client 192.178.4.101:54589] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS-8DZkVRhF9Pu1FX0NhPAAAAJg"]
[Wed Dec 03 12:58:53.256251 2025] [:error] [pid 22014:tid 22053] [client 192.178.4.101:63002] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS_DjQgpXEQej7y9Y6ZewAAAAQc"]
[Wed Dec 03 12:59:46.690735 2025] [:error] [pid 22014:tid 22069] [client 192.178.4.101:57558] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS_DwggpXEQej7y9Y6ZfNwAAARc"]
[Wed Dec 03 13:01:30.876616 2025] [:error] [pid 22014:tid 22052] [client 192.178.4.101:51462] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS_EKggpXEQej7y9Y6ZgAwAAAQY"]
[Wed Dec 03 13:01:37.962865 2025] [:error] [pid 21970:tid 21990] [client 192.178.4.101:36921] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS_EMWYwAeqEfyJIWdS_WwAAAA4"]
[Wed Dec 03 13:01:45.569225 2025] [:error] [pid 54695:tid 54722] [client 192.178.4.101:57033] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS_EOWrRT4nTHsfUu04VHwAAAVc"]
[Wed Dec 03 13:01:48.786030 2025] [:error] [pid 22014:tid 22056] [client 192.178.4.101:34819] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS_EPAgpXEQej7y9Y6ZgGgAAAQo"]
[Wed Dec 03 13:01:52.388632 2025] [:error] [pid 64775:tid 64777] [client 192.178.4.101:63316] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS_EQDCfrfdP2K_u39dtJwAAAYA"]
[Wed Dec 03 13:01:57.157176 2025] [:error] [pid 24019:tid 24044] [client 192.178.4.101:61161] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS_ERZkVRhF9Pu1FX0Nw1QAAAJY"]
[Wed Dec 03 13:02:03.665818 2025] [:error] [pid 54695:tid 54721] [client 192.178.4.101:46705] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS_ES2rRT4nTHsfUu04VLgAAAVY"]
[Wed Dec 03 13:45:28.825850 2025] [:error] [pid 10558:tid 10586] [client 192.178.4.101:48701] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS_OeDzOvOZiO9KGYU6S3AAAABM"]
[Wed Dec 03 13:45:34.373019 2025] [:error] [pid 10559:tid 10597] [client 192.178.4.101:57051] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS_Ofr9PedrrNRd1_z2-NwAAAEM"]
[Wed Dec 03 13:46:57.372127 2025] [:error] [pid 10559:tid 10604] [client 192.178.4.101:50068] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS_O0b9PedrrNRd1_z2-0AAAAEo"]
[Wed Dec 03 13:47:24.673629 2025] [:error] [pid 10558:tid 10583] [client 192.178.4.101:59772] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS_O7DzOvOZiO9KGYU6TewAAABA"]
[Wed Dec 03 13:47:27.416447 2025] [:error] [pid 10560:tid 10634] [client 192.178.4.101:59994] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS_O71ICRUmwGLQBIWc_vAAAAI0"]
[Wed Dec 03 13:47:35.779625 2025] [:error] [pid 10559:tid 10598] [client 192.178.4.101:54007] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS_O979PedrrNRd1_z2-8gAAAEQ"]
[Wed Dec 03 13:47:41.248175 2025] [:error] [pid 10653:tid 10656] [client 192.178.4.101:63471] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS_O_fBLmUnB610vLpd8bgAAAME"]
[Wed Dec 03 13:47:45.948680 2025] [:error] [pid 10560:tid 10641] [client 192.178.4.101:52353] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS_PAVICRUmwGLQBIWc_1wAAAJQ"]
[Wed Dec 03 13:50:54.686291 2025] [:error] [pid 12089:tid 12115] [client 192.178.4.101:52758] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS_PvkbzcO5GLWwvn5qr-wAAARg"]
[Wed Dec 03 13:51:46.579716 2025] [:error] [pid 10558:tid 10578] [client 192.178.4.101:47274] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS_P8jzOvOZiO9KGYU6UigAAAAs"]
[Wed Dec 03 16:41:44.006955 2025] [:error] [pid 20707:tid 20711] [client 36.111.67.189:60175] [client 36.111.67.189] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||paramountbaldivis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aS_3yDObjEHgU5ngsxeaDwAAAQI"]
[Wed Dec 03 17:18:28.643790 2025] [:error] [pid 32437:tid 32441] [client 43.166.246.180:42530] [client 43.166.246.180] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.paramountbaldivis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.paramountbaldivis.com"] [uri "/"] [unique_id "aTAAZKBId4T5gQoDbCE92AAAAAE"]
[Wed Dec 03 17:39:48.303626 2025] [:error] [pid 47926:tid 47930] [client 134.209.104.13:56144] [client 134.209.104.13] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 134.209.104.13, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aTAFZGmj6HWCHJ9euRJi-QAAAYI"]
[Wed Dec 03 17:39:50.844110 2025] [:error] [pid 47926:tid 47948] [client 134.209.104.13:56144] [client 134.209.104.13] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||paramountbaldivis.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "paramountbaldivis.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aTAFZmmj6HWCHJ9euRJi_QAAAZQ"]
[Wed Dec 03 17:39:52.141073 2025] [:error] [pid 47926:tid 47936] [client 134.209.104.13:56144] [client 134.209.104.13] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 134.209.104.13, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aTAFaGmj6HWCHJ9euRJjAQAAAYg"]
[Wed Dec 03 19:20:47.610933 2025] [:error] [pid 20669:tid 20688] [client 103.158.108.3:56000] [client 103.158.108.3] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||paramountbaldivis.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "paramountbaldivis.com"] [uri "/wp-json/Wp/v2/users"] [unique_id "aTAdD5LWoJXGOhmabmuhLwAAAUw"]
[Wed Dec 03 19:22:34.993593 2025] [:error] [pid 32437:tid 32453] [client 118.139.177.62:21058] [client 118.139.177.62] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||paramountbaldivis.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "paramountbaldivis.com"] [uri "/wp-json/wp/v2/usErs"] [unique_id "aTAdeqBId4T5gQoDbCFbRgAAAA0"]
[Wed Dec 03 19:22:48.819510 2025] [:error] [pid 20608:tid 20653] [client 85.128.143.145:35858] [client 85.128.143.145] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||paramountbaldivis.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "paramountbaldivis.com"] [uri "/Wp-JsOn/Wp/V2/UsErS"] [unique_id "aTAdiE5WGptz5j0ZvYeIMAAAAJA"]
[Wed Dec 03 22:54:50.458762 2025] [:error] [pid 20669:tid 20678] [client 51.68.186.52:55174] [client 51.68.186.52] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/composer.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/cidaas-pro-master/composer.json"] [unique_id "aTBPOpLWoJXGOhmabmv4PAAAAUI"]
[Thu Dec 04 01:38:29.519649 2025] [:error] [pid 3938:tid 3944] [client 192.178.4.101:46697] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTB1lSAHKAmSjlzEts4Q4AAAAgQ"]
[Thu Dec 04 01:38:32.272459 2025] [:error] [pid 3841:tid 3885] [client 192.178.4.101:54099] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTB1mBqrnhYwq_3H8CQSIwAAAUk"]
[Thu Dec 04 01:38:34.616793 2025] [:error] [pid 3842:tid 3907] [client 192.178.4.101:50793] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTB1miaILLkuuVMSmjsPVAAAAYQ"]
[Thu Dec 04 01:38:40.121497 2025] [:error] [pid 63344:tid 63355] [client 192.178.4.101:43146] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTB1oLFn6Z8FbZz0IjlfegAAAAY"]
[Thu Dec 04 01:38:43.172659 2025] [:error] [pid 3840:tid 3856] [client 192.178.4.101:45899] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTB1o5F_IDAg4wPRjg69tgAAAEg"]
[Thu Dec 04 01:38:44.062200 2025] [:error] [pid 3841:tid 3900] [client 192.178.4.101:58340] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTB1pBqrnhYwq_3H8CQSQgAAAVg"]
[Thu Dec 04 01:38:45.000199 2025] [:error] [pid 3938:tid 3946] [client 192.178.4.101:45224] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTB1pCAHKAmSjlzEts4Q8wAAAgY"]
[Thu Dec 04 01:38:46.424832 2025] [:error] [pid 3938:tid 3943] [client 192.178.4.101:47684] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTB1piAHKAmSjlzEts4Q-QAAAgM"]
[Thu Dec 04 01:38:56.313217 2025] [:error] [pid 3938:tid 3952] [client 192.178.4.101:43206] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTB1sCAHKAmSjlzEts4RHwAAAgw"]
[Thu Dec 04 01:39:00.246023 2025] [:error] [pid 3841:tid 3898] [client 192.178.4.101:65198] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTB1tBqrnhYwq_3H8CQSUAAAAVY"]
[Thu Dec 04 01:39:01.536660 2025] [:error] [pid 3841:tid 3892] [client 192.178.4.101:53668] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTB1tRqrnhYwq_3H8CQSUwAAAVA"]
[Thu Dec 04 01:39:05.005586 2025] [:error] [pid 3842:tid 3921] [client 192.178.4.101:36547] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTB1uSaILLkuuVMSmjsPfAAAAZI"]
[Thu Dec 04 01:39:06.889723 2025] [:error] [pid 3841:tid 3879] [client 192.178.4.101:48929] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTB1uhqrnhYwq_3H8CQSXwAAAUM"]
[Thu Dec 04 01:39:07.825749 2025] [:error] [pid 3841:tid 3883] [client 192.178.4.101:64457] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTB1uxqrnhYwq_3H8CQSZAAAAUc"]
[Thu Dec 04 01:39:12.211714 2025] [:error] [pid 3841:tid 3883] [client 192.178.4.101:42166] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTB1wBqrnhYwq_3H8CQScgAAAUc"]
[Thu Dec 04 01:39:14.145653 2025] [:error] [pid 3938:tid 3960] [client 192.178.4.101:41846] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTB1wiAHKAmSjlzEts4ROgAAAhQ"]
[Thu Dec 04 01:39:20.874677 2025] [:error] [pid 63344:tid 63372] [client 192.178.4.101:61330] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTB1yLFn6Z8FbZz0Ijlf5QAAABc"]
[Thu Dec 04 01:40:22.604670 2025] [:error] [pid 3842:tid 3908] [client 192.178.4.101:60204] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTB2BiaILLkuuVMSmjsPxwAAAYU"]
[Thu Dec 04 01:40:32.362777 2025] [:error] [pid 3841:tid 3890] [client 192.178.4.101:61336] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTB2EBqrnhYwq_3H8CQSwwAAAU4"]
[Thu Dec 04 01:40:36.539558 2025] [:error] [pid 63344:tid 63365] [client 192.178.4.101:49643] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTB2FLFn6Z8FbZz0IjlgcQAAABA"]
[Thu Dec 04 01:40:40.462732 2025] [:error] [pid 3840:tid 3855] [client 192.178.4.101:36228] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTB2GJF_IDAg4wPRjg6-JQAAAEc"]
[Thu Dec 04 01:40:43.828925 2025] [:error] [pid 3840:tid 3848] [client 192.178.4.101:64554] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTB2G5F_IDAg4wPRjg6-JgAAAEA"]
[Thu Dec 04 01:40:52.162031 2025] [:error] [pid 3840:tid 3869] [client 192.178.4.101:49057] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTB2JJF_IDAg4wPRjg6-KwAAAFU"]
[Thu Dec 04 01:40:53.097881 2025] [:error] [pid 3938:tid 3955] [client 192.178.4.101:44759] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTB2JSAHKAmSjlzEts4RmgAAAg8"]
[Thu Dec 04 01:40:54.123223 2025] [:error] [pid 3842:tid 3908] [client 192.178.4.101:42310] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTB2JiaILLkuuVMSmjsP4QAAAYU"]
[Thu Dec 04 01:40:56.668974 2025] [:error] [pid 3841:tid 3895] [client 192.178.4.101:46866] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTB2KBqrnhYwq_3H8CQS1QAAAVM"]
[Thu Dec 04 01:41:05.021357 2025] [:error] [pid 63344:tid 63355] [client 192.178.4.101:60650] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTB2MbFn6Z8FbZz0IjlglQAAAAY"]
[Thu Dec 04 01:41:13.304546 2025] [:error] [pid 63344:tid 63356] [client 192.178.4.101:44512] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTB2ObFn6Z8FbZz0IjlgoAAAAAc"]
[Thu Dec 04 01:41:18.920414 2025] [:error] [pid 3842:tid 3921] [client 192.178.4.101:42088] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTB2PiaILLkuuVMSmjsP7QAAAZI"]
[Thu Dec 04 01:42:22.157067 2025] [:error] [pid 3938:tid 3953] [client 192.178.4.101:62774] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTB2fiAHKAmSjlzEts4SCQAAAg0"]
[Thu Dec 04 01:42:23.781619 2025] [:error] [pid 3841:tid 3889] [client 192.178.4.101:64183] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTB2fxqrnhYwq_3H8CQTIAAAAU0"]
[Thu Dec 04 01:42:26.301881 2025] [:error] [pid 3938:tid 3963] [client 192.178.4.101:54991] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTB2giAHKAmSjlzEts4SEQAAAhc"]
[Thu Dec 04 01:42:27.974621 2025] [:error] [pid 63344:tid 63350] [client 192.178.4.101:44028] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTB2g7Fn6Z8FbZz0IjlhFAAAAAE"]
[Thu Dec 04 01:42:33.663810 2025] [:error] [pid 3841:tid 3895] [client 192.178.4.101:49818] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTB2iRqrnhYwq_3H8CQTUwAAAVM"]
[Thu Dec 04 01:42:38.495455 2025] [:error] [pid 3938:tid 3964] [client 192.178.4.101:54314] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTB2jiAHKAmSjlzEts4SHwAAAhg"]
[Thu Dec 04 01:42:47.378795 2025] [:error] [pid 63344:tid 63361] [client 192.178.4.101:54326] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTB2l7Fn6Z8FbZz0IjlhNwAAAAw"]
[Thu Dec 04 01:42:47.773708 2025] [:error] [pid 63344:tid 63359] [client 192.178.4.101:44163] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTB2l7Fn6Z8FbZz0IjlhOAAAAAo"]
[Thu Dec 04 01:43:02.369728 2025] [:error] [pid 3938:tid 3957] [client 192.178.4.101:50988] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTB2piAHKAmSjlzEts4SOgAAAhE"]
[Thu Dec 04 01:43:09.778083 2025] [:error] [pid 3840:tid 3863] [client 192.178.4.101:60505] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTB2rZF_IDAg4wPRjg6-lQAAAE8"]
[Thu Dec 04 01:43:13.694506 2025] [:error] [pid 3840:tid 3866] [client 192.178.4.101:49680] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTB2sZF_IDAg4wPRjg6-mwAAAFI"]
[Thu Dec 04 01:44:44.314308 2025] [:error] [pid 63344:tid 63353] [client 192.178.4.101:45338] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTB3DLFn6Z8FbZz0Ijlh-AAAAAQ"]
[Thu Dec 04 01:44:53.748729 2025] [:error] [pid 3841:tid 3886] [client 192.178.4.101:54675] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTB3FRqrnhYwq_3H8CQT9gAAAUo"]
[Thu Dec 04 01:45:24.016628 2025] [:error] [pid 63344:tid 63371] [client 192.178.4.101:62998] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTB3NLFn6Z8FbZz0IjliLgAAABY"]
[Thu Dec 04 01:47:57.789098 2025] [:error] [pid 3842:tid 3912] [client 192.178.4.101:36844] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTB3zSaILLkuuVMSmjsR-AAAAYk"]
[Thu Dec 04 01:48:01.908100 2025] [:error] [pid 3938:tid 3963] [client 192.178.4.101:39722] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTB30SAHKAmSjlzEts4T0gAAAhc"]
[Thu Dec 04 01:48:07.613962 2025] [:error] [pid 3842:tid 3911] [client 192.178.4.101:36202] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTB31yaILLkuuVMSmjsR_QAAAYg"]
[Thu Dec 04 01:48:14.084889 2025] [:error] [pid 3840:tid 3863] [client 192.178.4.101:57136] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTB33pF_IDAg4wPRjg6_wQAAAE8"]
[Thu Dec 04 01:48:35.045125 2025] [:error] [pid 3938:tid 3956] [client 192.178.4.101:53005] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTB38yAHKAmSjlzEts4UCAAAAhA"]
[Thu Dec 04 01:48:38.543703 2025] [:error] [pid 3841:tid 3896] [client 192.178.4.101:62890] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTB39hqrnhYwq_3H8CQVJQAAAVQ"]
[Thu Dec 04 01:48:47.904590 2025] [:error] [pid 3938:tid 3961] [client 192.178.4.101:47158] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTB3_yAHKAmSjlzEts4UDwAAAhU"]
[Thu Dec 04 04:12:10.295742 2025] [:error] [pid 23584:tid 23610] [client 34.26.227.47:45578] [client 34.26.227.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.paramountbaldivis.com"] [uri "/.git/config"] [unique_id "aTCZmvLIbbVIasimSNeVywAAANg"]
[Thu Dec 04 04:13:54.520774 2025] [:error] [pid 23481:tid 23567] [client 192.178.4.101:39374] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCaAnDA0SYGCTRRWDhlrQAAAJM"]
[Thu Dec 04 04:13:55.578661 2025] [:error] [pid 23481:tid 23570] [client 192.178.4.101:62838] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCaA3DA0SYGCTRRWDhlsQAAAJY"]
[Thu Dec 04 04:13:59.969856 2025] [:error] [pid 23479:tid 23503] [client 192.178.4.101:51560] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCaBwrhBYgRXjJgZz-eLAAAAAo"]
[Thu Dec 04 04:14:00.902643 2025] [:error] [pid 23479:tid 23504] [client 192.178.4.101:54140] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCaCArhBYgRXjJgZz-eMAAAAAs"]
[Thu Dec 04 04:14:01.776304 2025] [:error] [pid 23479:tid 23515] [client 192.178.4.101:35784] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCaCQrhBYgRXjJgZz-eMQAAABY"]
[Thu Dec 04 04:14:03.494926 2025] [:error] [pid 23480:tid 23525] [client 192.178.4.101:35335] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCaC68MAm6rARQNkOy75gAAAEQ"]
[Thu Dec 04 04:14:04.915516 2025] [:error] [pid 23480:tid 23539] [client 192.178.4.101:39166] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCaDK8MAm6rARQNkOy79gAAAFI"]
[Thu Dec 04 04:14:06.134396 2025] [:error] [pid 23584:tid 23586] [client 192.178.4.101:52849] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCaDvLIbbVIasimSNeW0QAAAMA"]
[Thu Dec 04 04:14:07.962854 2025] [:error] [pid 23480:tid 23541] [client 192.178.4.101:59779] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCaD68MAm6rARQNkOy8AQAAAFQ"]
[Thu Dec 04 04:14:09.805298 2025] [:error] [pid 23480:tid 23532] [client 192.178.4.101:61220] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCaEa8MAm6rARQNkOy8DwAAAEs"]
[Thu Dec 04 04:14:11.646729 2025] [:error] [pid 23584:tid 23590] [client 192.178.4.101:45930] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCaE_LIbbVIasimSNeW6wAAAMQ"]
[Thu Dec 04 04:14:12.859808 2025] [:error] [pid 23481:tid 23564] [client 192.178.4.101:61768] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCaFHDA0SYGCTRRWDhl7QAAAJA"]
[Thu Dec 04 04:14:15.340164 2025] [:error] [pid 23480:tid 23532] [client 192.178.4.101:35257] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCaF68MAm6rARQNkOy8HAAAAEs"]
[Thu Dec 04 04:14:16.991984 2025] [:error] [pid 23481:tid 23567] [client 192.178.4.101:36717] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCaGHDA0SYGCTRRWDhl8wAAAJM"]
[Thu Dec 04 04:14:17.754404 2025] [:error] [pid 23479:tid 23500] [client 192.178.4.101:61497] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCaGQrhBYgRXjJgZz-eRQAAAAc"]
[Thu Dec 04 04:14:19.586107 2025] [:error] [pid 23480:tid 23543] [client 192.178.4.101:51870] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCaG68MAm6rARQNkOy8IAAAAFY"]
[Thu Dec 04 04:14:21.421796 2025] [:error] [pid 23584:tid 23595] [client 192.178.4.101:39069] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCaHfLIbbVIasimSNeW_gAAAMk"]
[Thu Dec 04 04:14:23.247298 2025] [:error] [pid 23584:tid 23606] [client 192.178.4.101:39318] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCaH_LIbbVIasimSNeXKwAAANQ"]
[Thu Dec 04 04:14:24.475070 2025] [:error] [pid 23584:tid 23608] [client 192.178.4.101:48926] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCaIPLIbbVIasimSNeXLgAAANY"]
[Thu Dec 04 04:14:26.307918 2025] [:error] [pid 23479:tid 23514] [client 192.178.4.101:55048] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCaIgrhBYgRXjJgZz-eYwAAABU"]
[Thu Dec 04 04:14:28.141025 2025] [:error] [pid 23481:tid 23560] [client 192.178.4.101:59123] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCaJHDA0SYGCTRRWDhmJgAAAIw"]
[Thu Dec 04 04:14:30.905630 2025] [:error] [pid 23584:tid 23593] [client 192.178.4.101:48041] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCaJvLIbbVIasimSNeXOQAAAMc"]
[Thu Dec 04 04:14:32.223255 2025] [:error] [pid 23480:tid 23537] [client 192.178.4.101:54181] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCaKK8MAm6rARQNkOy8SQAAAFA"]
[Thu Dec 04 04:14:33.696187 2025] [:error] [pid 23479:tid 23503] [client 192.178.4.101:41119] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCaKQrhBYgRXjJgZz-eZwAAAAo"]
[Thu Dec 04 04:14:35.451089 2025] [:error] [pid 23481:tid 23552] [client 192.178.4.101:38475] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCaK3DA0SYGCTRRWDhmMwAAAIQ"]
[Thu Dec 04 04:14:37.181820 2025] [:error] [pid 23479:tid 23496] [client 192.178.4.101:46939] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCaLQrhBYgRXjJgZz-eagAAAAM"]
[Thu Dec 04 04:14:37.936086 2025] [:error] [pid 23480:tid 23530] [client 192.178.4.101:40006] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCaLa8MAm6rARQNkOy8UAAAAEk"]
[Thu Dec 04 04:14:39.763789 2025] [:error] [pid 23481:tid 23549] [client 192.178.4.101:55625] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCaL3DA0SYGCTRRWDhmOwAAAIE"]
[Thu Dec 04 04:14:41.599663 2025] [:error] [pid 23481:tid 23556] [client 192.178.4.101:43545] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCaMXDA0SYGCTRRWDhmPQAAAIg"]
[Thu Dec 04 04:14:43.427102 2025] [:error] [pid 23584:tid 23595] [client 192.178.4.101:53119] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCaM_LIbbVIasimSNeXSwAAAMk"]
[Thu Dec 04 04:14:44.654123 2025] [:error] [pid 23480:tid 23536] [client 192.178.4.101:52227] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCaNK8MAm6rARQNkOy8YAAAAE8"]
[Thu Dec 04 04:14:46.490909 2025] [:error] [pid 23480:tid 23539] [client 192.178.4.101:60024] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCaNq8MAm6rARQNkOy8ZAAAAFI"]
[Thu Dec 04 04:14:48.325879 2025] [:error] [pid 23480:tid 23523] [client 192.178.4.101:52632] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCaOK8MAm6rARQNkOy8bAAAAEI"]
[Thu Dec 04 04:14:50.929672 2025] [:error] [pid 23480:tid 23535] [client 192.178.4.101:35415] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCaOq8MAm6rARQNkOy8cQAAAE4"]
[Thu Dec 04 04:15:19.360769 2025] [:error] [pid 23479:tid 23510] [client 192.178.4.101:54427] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCaVwrhBYgRXjJgZz-euwAAABE"]
[Thu Dec 04 04:15:21.908341 2025] [:error] [pid 23584:tid 23598] [client 192.178.4.101:53743] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCaWfLIbbVIasimSNeXowAAAMw"]
[Thu Dec 04 04:15:25.388996 2025] [:error] [pid 23479:tid 23496] [client 192.178.4.101:64059] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCaXQrhBYgRXjJgZz-ewQAAAAM"]
[Thu Dec 04 04:15:27.564927 2025] [:error] [pid 23584:tid 23591] [client 192.178.4.101:60749] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCaX_LIbbVIasimSNeXrgAAAMU"]
[Thu Dec 04 04:15:29.272957 2025] [:error] [pid 23479:tid 23500] [client 192.178.4.101:41823] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCaYQrhBYgRXjJgZz-exQAAAAc"]
[Thu Dec 04 04:15:30.159668 2025] [:error] [pid 23584:tid 23592] [client 192.178.4.101:50941] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCaYvLIbbVIasimSNeXsQAAAMY"]
[Thu Dec 04 04:15:31.952836 2025] [:error] [pid 23481:tid 23571] [client 192.178.4.101:39997] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCaY3DA0SYGCTRRWDhmjAAAAJc"]
[Thu Dec 04 04:15:33.349324 2025] [:error] [pid 23584:tid 23595] [client 192.178.4.101:47947] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCaZfLIbbVIasimSNeXuAAAAMk"]
[Thu Dec 04 04:15:35.309701 2025] [:error] [pid 23481:tid 23558] [client 192.178.4.101:46965] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCaZ3DA0SYGCTRRWDhmlQAAAIo"]
[Thu Dec 04 04:15:37.393003 2025] [:error] [pid 23479:tid 23510] [client 192.178.4.101:49774] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCaaQrhBYgRXjJgZz-eywAAABE"]
[Thu Dec 04 04:15:39.116737 2025] [:error] [pid 23584:tid 23603] [client 192.178.4.101:45056] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCaa_LIbbVIasimSNeX0wAAANE"]
[Thu Dec 04 04:15:40.904765 2025] [:error] [pid 23479:tid 23506] [client 192.178.4.101:62733] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCabArhBYgRXjJgZz-ezQAAAA0"]
[Thu Dec 04 04:15:42.601675 2025] [:error] [pid 23479:tid 23497] [client 192.178.4.101:52387] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCabgrhBYgRXjJgZz-ezgAAAAQ"]
[Thu Dec 04 04:15:43.919876 2025] [:error] [pid 23480:tid 23521] [client 192.178.4.101:35249] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCab68MAm6rARQNkOy86AAAAEA"]
[Thu Dec 04 04:15:45.554546 2025] [:error] [pid 23584:tid 23610] [client 192.178.4.101:54573] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCacfLIbbVIasimSNeX3QAAANg"]
[Thu Dec 04 04:15:47.698712 2025] [:error] [pid 23481:tid 23567] [client 192.178.4.101:35726] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCac3DA0SYGCTRRWDhmuAAAAJM"]
[Thu Dec 04 04:15:48.488705 2025] [:error] [pid 23480:tid 23530] [client 192.178.4.101:56228] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCadK8MAm6rARQNkOy87wAAAEk"]
[Thu Dec 04 04:15:50.891085 2025] [:error] [pid 23479:tid 23515] [client 192.178.4.101:56986] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCadgrhBYgRXjJgZz-e0QAAABY"]
[Thu Dec 04 04:15:52.613446 2025] [:error] [pid 23480:tid 23545] [client 192.178.4.101:37139] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCaeK8MAm6rARQNkOy89wAAAFg"]
[Thu Dec 04 04:15:54.129515 2025] [:error] [pid 23481:tid 23564] [client 192.178.4.101:40395] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCaenDA0SYGCTRRWDhmyQAAAJA"]
[Thu Dec 04 04:16:00.408494 2025] [:error] [pid 23481:tid 23549] [client 192.178.4.101:37193] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCagHDA0SYGCTRRWDhm0gAAAIE"]
[Thu Dec 04 04:16:03.438109 2025] [:error] [pid 23584:tid 23609] [client 192.178.4.101:42652] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCag_LIbbVIasimSNeX7gAAANc"]
[Thu Dec 04 04:16:07.100396 2025] [:error] [pid 23479:tid 23501] [client 192.178.4.101:46706] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCahwrhBYgRXjJgZz-e3AAAAAg"]
[Thu Dec 04 04:16:10.178951 2025] [:error] [pid 23584:tid 23587] [client 192.178.4.101:43815] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCaivLIbbVIasimSNeX_wAAAME"]
[Thu Dec 04 04:16:15.052242 2025] [:error] [pid 23479:tid 23496] [client 192.178.4.101:47760] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCajwrhBYgRXjJgZz-fAgAAAAM"]
[Thu Dec 04 04:16:16.784693 2025] [:error] [pid 23479:tid 23506] [client 192.178.4.101:35617] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCakArhBYgRXjJgZz-fAwAAAA0"]
[Thu Dec 04 04:16:49.306438 2025] [:error] [pid 23584:tid 23606] [client 192.178.4.101:63690] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCasfLIbbVIasimSNeYQgAAANQ"]
[Thu Dec 04 04:16:52.015763 2025] [:error] [pid 23479:tid 23502] [client 192.178.4.101:36217] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCatArhBYgRXjJgZz-fMAAAAAk"]
[Thu Dec 04 04:16:54.860978 2025] [:error] [pid 23480:tid 23536] [client 192.178.4.101:48059] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCatq8MAm6rARQNkOy9aAAAAE8"]
[Thu Dec 04 04:16:57.787188 2025] [:error] [pid 23480:tid 23537] [client 192.178.4.101:35154] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCaua8MAm6rARQNkOy9bwAAAFA"]
[Thu Dec 04 04:16:59.165962 2025] [:error] [pid 23479:tid 23510] [client 192.178.4.101:38583] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCauwrhBYgRXjJgZz-fOQAAABE"]
[Thu Dec 04 04:17:01.382036 2025] [:error] [pid 23481:tid 23560] [client 192.178.4.101:56657] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCavXDA0SYGCTRRWDhnKgAAAIw"]
[Thu Dec 04 04:17:03.126573 2025] [:error] [pid 23481:tid 23567] [client 192.178.4.101:37603] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCav3DA0SYGCTRRWDhnKwAAAJM"]
[Thu Dec 04 04:17:04.578756 2025] [:error] [pid 23584:tid 23600] [client 192.178.4.101:46190] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCawPLIbbVIasimSNeYVQAAAM4"]
[Thu Dec 04 04:17:05.809408 2025] [:error] [pid 23481:tid 23563] [client 192.178.4.101:51528] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCawXDA0SYGCTRRWDhnLQAAAI8"]
[Thu Dec 04 04:17:08.106113 2025] [:error] [pid 23479:tid 23495] [client 192.178.4.101:63393] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCaxArhBYgRXjJgZz-fQAAAAAI"]
[Thu Dec 04 04:17:09.657428 2025] [:error] [pid 23480:tid 23526] [client 192.178.4.101:49772] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCaxa8MAm6rARQNkOy9dwAAAEU"]
[Thu Dec 04 04:17:15.692132 2025] [:error] [pid 23480:tid 23533] [client 192.178.4.101:47762] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCay68MAm6rARQNkOy9fgAAAEw"]
[Thu Dec 04 04:17:15.733664 2025] [:error] [pid 23479:tid 23503] [client 192.178.4.101:54743] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCaywrhBYgRXjJgZz-fTAAAAAo"]
[Thu Dec 04 04:17:18.057343 2025] [:error] [pid 23584:tid 23592] [client 192.178.4.101:54184] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCazvLIbbVIasimSNeYbwAAAMY"]
[Thu Dec 04 04:17:19.019322 2025] [:error] [pid 23481:tid 23551] [client 192.178.4.101:35937] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCaz3DA0SYGCTRRWDhnQQAAAIM"]
[Thu Dec 04 04:17:20.207798 2025] [:error] [pid 23480:tid 23531] [client 192.178.4.101:56515] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCa0K8MAm6rARQNkOy9hgAAAEo"]
[Thu Dec 04 04:17:21.421399 2025] [:error] [pid 23584:tid 23594] [client 192.178.4.101:40135] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCa0fLIbbVIasimSNeYgQAAAMg"]
[Thu Dec 04 04:17:23.258998 2025] [:error] [pid 23481:tid 23556] [client 192.178.4.101:38119] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCa03DA0SYGCTRRWDhnRgAAAIg"]
[Thu Dec 04 04:17:25.030996 2025] [:error] [pid 23584:tid 23609] [client 192.178.4.101:55876] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCa1fLIbbVIasimSNeYigAAANc"]
[Thu Dec 04 04:17:26.916156 2025] [:error] [pid 23584:tid 23599] [client 192.178.4.101:51018] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCa1vLIbbVIasimSNeYjgAAAM0"]
[Thu Dec 04 04:17:28.145762 2025] [:error] [pid 23584:tid 23586] [client 192.178.4.101:61642] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCa2PLIbbVIasimSNeYkQAAAMA"]
[Thu Dec 04 04:17:29.974612 2025] [:error] [pid 23481:tid 23561] [client 192.178.4.101:55912] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCa2XDA0SYGCTRRWDhnSwAAAI0"]
[Thu Dec 04 04:17:31.802489 2025] [:error] [pid 23481:tid 23553] [client 192.178.4.101:45322] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCa23DA0SYGCTRRWDhnTQAAAIU"]
[Thu Dec 04 04:17:36.821879 2025] [:error] [pid 23584:tid 23591] [client 192.178.4.101:54540] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCa4PLIbbVIasimSNeYsAAAAMU"]
[Thu Dec 04 04:17:39.418119 2025] [:error] [pid 23584:tid 23609] [client 192.178.4.101:41620] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCa4_LIbbVIasimSNeYuQAAANc"]
[Thu Dec 04 04:17:40.165658 2025] [:error] [pid 23480:tid 23524] [client 192.178.4.101:49524] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCa5K8MAm6rARQNkOy9mwAAAEM"]
[Thu Dec 04 04:17:41.613887 2025] [:error] [pid 23584:tid 23599] [client 192.178.4.101:51142] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCa5fLIbbVIasimSNeYwgAAAM0"]
[Thu Dec 04 04:17:43.945357 2025] [:error] [pid 23481:tid 23548] [client 192.178.4.101:51720] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCa53DA0SYGCTRRWDhnZgAAAIA"]
[Thu Dec 04 04:17:45.256467 2025] [:error] [pid 23480:tid 23531] [client 192.178.4.101:37622] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCa6a8MAm6rARQNkOy9pAAAAEo"]
[Thu Dec 04 04:18:08.364780 2025] [:error] [pid 23479:tid 23505] [client 192.178.4.101:41782] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCbAArhBYgRXjJgZz-fkAAAAAw"]
[Thu Dec 04 04:18:21.265885 2025] [:error] [pid 2159:tid 2164] [client 192.178.4.101:43483] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCbDT3GVdXg3ORUAG18CAAAAAE"]
[Thu Dec 04 04:18:23.493421 2025] [:error] [pid 2159:tid 2176] [client 192.178.4.101:54167] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCbDz3GVdXg3ORUAG18EwAAAA0"]
[Thu Dec 04 04:18:24.465921 2025] [:error] [pid 2160:tid 2200] [client 192.178.4.101:47527] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCbEENDGjl4u2feUD-pEAAAAEo"]
[Thu Dec 04 04:18:27.006605 2025] [:error] [pid 2160:tid 2206] [client 192.178.4.101:54997] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCbE0NDGjl4u2feUD-pFAAAAFA"]
[Thu Dec 04 04:18:29.661116 2025] [:error] [pid 2244:tid 2267] [client 192.178.4.101:51021] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCbFZm00CCLpKa0F735KwAAANQ"]
[Thu Dec 04 04:18:31.273864 2025] [:error] [pid 2244:tid 2250] [client 192.178.4.101:41523] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCbF5m00CCLpKa0F735MgAAAMQ"]
[Thu Dec 04 04:18:35.459106 2025] [:error] [pid 2159:tid 2176] [client 192.178.4.101:45690] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCbGz3GVdXg3ORUAG18IQAAAA0"]
[Thu Dec 04 04:18:39.794930 2025] [:error] [pid 2160:tid 2200] [client 192.178.4.101:53726] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCbH0NDGjl4u2feUD-pHQAAAEo"]
[Thu Dec 04 04:18:41.091385 2025] [:error] [pid 2244:tid 2266] [client 192.178.4.101:35752] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCbIZm00CCLpKa0F735bwAAANM"]
[Thu Dec 04 04:18:46.493143 2025] [:error] [pid 2159:tid 2168] [client 192.178.4.101:57796] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCbJj3GVdXg3ORUAG18JwAAAAU"]
[Thu Dec 04 04:18:47.794363 2025] [:error] [pid 2160:tid 2206] [client 192.178.4.101:49832] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCbJ0NDGjl4u2feUD-pIAAAAFA"]
[Thu Dec 04 04:18:49.623494 2025] [:error] [pid 2160:tid 2211] [client 192.178.4.101:45221] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCbKUNDGjl4u2feUD-pIgAAAFU"]
[Thu Dec 04 04:18:52.329857 2025] [:error] [pid 2159:tid 2176] [client 192.178.4.101:42064] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCbLD3GVdXg3ORUAG18LQAAAA0"]
[Thu Dec 04 04:18:53.637681 2025] [:error] [pid 2244:tid 2256] [client 192.178.4.101:47324] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCbLZm00CCLpKa0F735iQAAAMo"]
[Thu Dec 04 04:18:55.100900 2025] [:error] [pid 2160:tid 2192] [client 192.178.4.101:64872] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCbL0NDGjl4u2feUD-pJQAAAEI"]
[Thu Dec 04 04:19:28.495613 2025] [:error] [pid 2244:tid 2271] [client 192.178.4.101:52457] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCbUJm00CCLpKa0F7354QAAANg"]
[Thu Dec 04 04:19:30.828970 2025] [:error] [pid 2244:tid 2249] [client 192.178.4.101:48373] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCbUpm00CCLpKa0F7355wAAAMM"]
[Thu Dec 04 04:19:31.905144 2025] [:error] [pid 2244:tid 2252] [client 192.178.4.101:49264] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCbU5m00CCLpKa0F7356AAAAMY"]
[Thu Dec 04 04:19:33.672051 2025] [:error] [pid 2244:tid 2261] [client 192.178.4.101:61720] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCbVZm00CCLpKa0F7357AAAAM8"]
[Thu Dec 04 04:19:36.333742 2025] [:error] [pid 2159:tid 2174] [client 192.178.4.101:35245] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCbWD3GVdXg3ORUAG18TAAAAAs"]
[Thu Dec 04 04:19:38.068007 2025] [:error] [pid 2159:tid 2167] [client 192.178.4.101:60340] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCbWj3GVdXg3ORUAG18TwAAAAQ"]
[Thu Dec 04 04:19:40.445933 2025] [:error] [pid 2159:tid 2180] [client 192.178.4.101:65137] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCbXD3GVdXg3ORUAG18YAAAABE"]
[Thu Dec 04 04:19:44.069566 2025] [:error] [pid 2244:tid 2251] [client 192.178.4.101:42301] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCbYJm00CCLpKa0F736CAAAAMU"]
[Thu Dec 04 04:19:46.788682 2025] [:error] [pid 2159:tid 2164] [client 192.178.4.101:39295] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCbYj3GVdXg3ORUAG18YwAAAAE"]
[Thu Dec 04 04:19:48.094812 2025] [:error] [pid 2244:tid 2271] [client 192.178.4.101:51286] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCbZJm00CCLpKa0F736FAAAANg"]
[Thu Dec 04 04:19:49.025361 2025] [:error] [pid 2244:tid 2249] [client 192.178.4.101:46798] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCbZZm00CCLpKa0F736FwAAAMM"]
[Thu Dec 04 04:19:51.422369 2025] [:error] [pid 2159:tid 2166] [client 192.178.4.101:35581] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCbZz3GVdXg3ORUAG18ZQAAAAM"]
[Thu Dec 04 04:19:52.725692 2025] [:error] [pid 2159:tid 2184] [client 192.178.4.101:35557] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCbaD3GVdXg3ORUAG18aAAAABU"]
[Thu Dec 04 04:19:53.865450 2025] [:error] [pid 2161:tid 2229] [client 192.178.4.101:50696] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCbaSjiGdnP9Am2woVBywAAAIw"]
[Thu Dec 04 04:19:55.690129 2025] [:error] [pid 2244:tid 2246] [client 192.178.4.101:63464] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCba5m00CCLpKa0F736LAAAAMA"]
[Thu Dec 04 04:19:58.809482 2025] [:error] [pid 2159:tid 2165] [client 192.178.4.101:44017] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCbbj3GVdXg3ORUAG18cgAAAAI"]
[Thu Dec 04 04:20:00.583351 2025] [:error] [pid 2244:tid 2249] [client 192.178.4.101:57496] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCbcJm00CCLpKa0F736NQAAAMM"]
[Thu Dec 04 04:20:02.410401 2025] [:error] [pid 2160:tid 2205] [client 192.178.4.101:48074] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCbckNDGjl4u2feUD-pUQAAAE8"]
[Thu Dec 04 04:20:04.260874 2025] [:error] [pid 2160:tid 2209] [client 192.178.4.101:35803] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCbdENDGjl4u2feUD-pVAAAAFM"]
[Thu Dec 04 04:20:05.469922 2025] [:error] [pid 2161:tid 2233] [client 192.178.4.101:53041] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCbdSjiGdnP9Am2woVB1AAAAJA"]
[Thu Dec 04 04:20:07.328459 2025] [:error] [pid 2159:tid 2186] [client 192.178.4.101:56602] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCbdz3GVdXg3ORUAG18hwAAABc"]
[Thu Dec 04 04:20:09.973058 2025] [:error] [pid 2244:tid 2257] [client 192.178.4.101:46147] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCbeZm00CCLpKa0F736QAAAAMs"]
[Thu Dec 04 04:20:10.976129 2025] [:error] [pid 2244:tid 2269] [client 192.178.4.101:45433] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCbepm00CCLpKa0F736RQAAANY"]
[Thu Dec 04 04:20:16.331596 2025] [:error] [pid 2159:tid 2184] [client 192.178.4.101:45662] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCbgD3GVdXg3ORUAG18kwAAABU"]
[Thu Dec 04 04:20:17.701708 2025] [:error] [pid 2160:tid 2205] [client 192.178.4.101:47138] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCbgUNDGjl4u2feUD-pXgAAAE8"]
[Thu Dec 04 04:20:18.891685 2025] [:error] [pid 2160:tid 2210] [client 192.178.4.101:35590] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCbgkNDGjl4u2feUD-pXwAAAFQ"]
[Thu Dec 04 04:20:21.425449 2025] [:error] [pid 2160:tid 2198] [client 192.178.4.101:48231] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCbhUNDGjl4u2feUD-pZgAAAEg"]
[Thu Dec 04 04:20:23.058465 2025] [:error] [pid 2161:tid 2221] [client 192.178.4.101:36039] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCbhyjiGdnP9Am2woVB8AAAAIQ"]
[Thu Dec 04 04:20:48.482821 2025] [:error] [pid 2244:tid 2257] [client 192.178.4.101:62560] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCboJm00CCLpKa0F736jwAAAMs"]
[Thu Dec 04 04:20:54.040127 2025] [:error] [pid 2244:tid 2260] [client 192.178.4.101:51070] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCbppm00CCLpKa0F736lAAAAM4"]
[Thu Dec 04 04:20:57.083460 2025] [:error] [pid 2160:tid 2213] [client 192.178.4.101:42816] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCbqUNDGjl4u2feUD-pgwAAAFc"]
[Thu Dec 04 04:20:58.769947 2025] [:error] [pid 2159:tid 2169] [client 192.178.4.101:64835] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCbqj3GVdXg3ORUAG18uAAAAAY"]
[Thu Dec 04 04:21:00.167470 2025] [:error] [pid 2160:tid 2203] [client 192.178.4.101:36927] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCbrENDGjl4u2feUD-piAAAAE0"]
[Thu Dec 04 04:21:02.151222 2025] [:error] [pid 2244:tid 2258] [client 192.178.4.101:61561] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCbrpm00CCLpKa0F736mgAAAMw"]
[Thu Dec 04 04:21:04.819479 2025] [:error] [pid 2159:tid 2165] [client 192.178.4.101:41430] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCbsD3GVdXg3ORUAG18xgAAAAI"]
[Thu Dec 04 04:21:07.383273 2025] [:error] [pid 2160:tid 2197] [client 192.178.4.101:49155] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCbs0NDGjl4u2feUD-pjQAAAEc"]
[Thu Dec 04 04:21:09.852726 2025] [:error] [pid 2160:tid 2211] [client 192.178.4.101:39604] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCbtUNDGjl4u2feUD-plAAAAFU"]
[Thu Dec 04 04:21:15.216680 2025] [:error] [pid 2159:tid 2179] [client 192.178.4.101:38794] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCbuz3GVdXg3ORUAG18ywAAABA"]
[Thu Dec 04 04:21:19.009388 2025] [:error] [pid 2160:tid 2211] [client 192.178.4.101:44659] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCbv0NDGjl4u2feUD-ppgAAAFU"]
[Thu Dec 04 04:21:20.744446 2025] [:error] [pid 2244:tid 2261] [client 192.178.4.101:53424] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCbwJm00CCLpKa0F736tgAAAM8"]
[Thu Dec 04 04:21:22.549055 2025] [:error] [pid 2244:tid 2248] [client 192.178.4.101:58585] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCbwpm00CCLpKa0F736vAAAAMI"]
[Thu Dec 04 04:21:25.605134 2025] [:error] [pid 2161:tid 2221] [client 192.178.4.101:59461] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCbxSjiGdnP9Am2woVCdAAAAIQ"]
[Thu Dec 04 04:21:33.125611 2025] [:error] [pid 2244:tid 2260] [client 192.178.4.101:47479] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCbzZm00CCLpKa0F736xAAAAM4"]
[Thu Dec 04 04:21:34.331639 2025] [:error] [pid 2244:tid 2255] [client 192.178.4.101:44206] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCbzpm00CCLpKa0F736yAAAAMk"]
[Thu Dec 04 04:21:36.100881 2025] [:error] [pid 2161:tid 2217] [client 192.178.4.101:58863] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCb0CjiGdnP9Am2woVCfAAAAIA"]
[Thu Dec 04 04:21:40.452988 2025] [:error] [pid 2160:tid 2212] [client 192.178.4.101:34990] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCb1ENDGjl4u2feUD-pzAAAAFY"]
[Thu Dec 04 04:21:42.809677 2025] [:error] [pid 2160:tid 2198] [client 192.178.4.101:35137] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCb1kNDGjl4u2feUD-p0QAAAEg"]
[Thu Dec 04 04:23:29.956521 2025] [:error] [pid 2159:tid 2165] [client 192.178.4.101:55663] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCcQT3GVdXg3ORUAG19uAAAAAI"]
[Thu Dec 04 04:23:31.026150 2025] [:error] [pid 2161:tid 2225] [client 192.178.4.101:65487] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCcQyjiGdnP9Am2woVDPwAAAIg"]
[Thu Dec 04 04:23:33.625819 2025] [:error] [pid 2161:tid 2229] [client 192.178.4.101:35010] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCcRSjiGdnP9Am2woVDQwAAAIw"]
[Thu Dec 04 04:23:35.469925 2025] [:error] [pid 2160:tid 2192] [client 192.178.4.101:35142] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCcR0NDGjl4u2feUD-qdgAAAEI"]
[Thu Dec 04 04:23:36.688407 2025] [:error] [pid 2244:tid 2252] [client 192.178.4.101:60856] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCcSJm00CCLpKa0F7370gAAAMY"]
[Thu Dec 04 04:23:41.343043 2025] [:error] [pid 2161:tid 2241] [client 192.178.4.101:58295] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCcTSjiGdnP9Am2woVDUQAAAJg"]
[Thu Dec 04 04:23:44.389251 2025] [:error] [pid 2244:tid 2261] [client 192.178.4.101:50304] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCcUJm00CCLpKa0F7377QAAAM8"]
[Thu Dec 04 04:23:46.104105 2025] [:error] [pid 2161:tid 2226] [client 192.178.4.101:48714] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCcUijiGdnP9Am2woVDWAAAAIk"]
[Thu Dec 04 04:23:47.641378 2025] [:error] [pid 2244:tid 2267] [client 192.178.4.101:49840] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCcU5m00CCLpKa0F737-QAAANQ"]
[Thu Dec 04 04:23:51.202336 2025] [:error] [pid 2244:tid 2250] [client 192.178.4.101:46497] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCcV5m00CCLpKa0F738EAAAAMQ"]
[Thu Dec 04 04:23:52.839458 2025] [:error] [pid 2244:tid 2255] [client 192.178.4.101:57287] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCcWJm00CCLpKa0F738GgAAAMk"]
[Thu Dec 04 04:23:56.238825 2025] [:error] [pid 2244:tid 2268] [client 192.178.4.101:47328] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCcXJm00CCLpKa0F738KwAAANU"]
[Thu Dec 04 04:23:57.863928 2025] [:error] [pid 2244:tid 2253] [client 192.178.4.101:56611] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCcXZm00CCLpKa0F738OQAAAMc"]
[Thu Dec 04 04:23:59.337911 2025] [:error] [pid 2244:tid 2247] [client 192.178.4.101:47684] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCcX5m00CCLpKa0F738QQAAAME"]
[Thu Dec 04 04:24:03.910758 2025] [:error] [pid 2244:tid 2270] [client 192.178.4.101:60738] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCcY5m00CCLpKa0F738XAAAANc"]
[Thu Dec 04 04:24:05.959621 2025] [:error] [pid 2161:tid 2239] [client 192.178.4.101:49670] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCcZSjiGdnP9Am2woVDhwAAAJY"]
[Thu Dec 04 04:24:07.896476 2025] [:error] [pid 2161:tid 2240] [client 192.178.4.101:50132] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCcZyjiGdnP9Am2woVDjgAAAJc"]
[Thu Dec 04 04:24:11.736393 2025] [:error] [pid 2159:tid 2169] [client 192.178.4.101:63582] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCcaz3GVdXg3ORUAG1-FgAAAAY"]
[Thu Dec 04 04:24:13.293791 2025] [:error] [pid 2244:tid 2260] [client 192.178.4.101:54365] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCcbZm00CCLpKa0F738pwAAAM4"]
[Thu Dec 04 04:24:15.714849 2025] [:error] [pid 2161:tid 2236] [client 192.178.4.101:44920] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCcbyjiGdnP9Am2woVDlQAAAJM"]
[Thu Dec 04 04:24:17.089718 2025] [:error] [pid 2160:tid 2208] [client 192.178.4.101:48889] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCccUNDGjl4u2feUD-qpgAAAFI"]
[Thu Dec 04 04:24:18.729021 2025] [:error] [pid 2160:tid 2197] [client 192.178.4.101:60962] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCcckNDGjl4u2feUD-qqAAAAEc"]
[Thu Dec 04 04:24:21.741367 2025] [:error] [pid 2159:tid 2184] [client 192.178.4.101:53244] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCcdT3GVdXg3ORUAG1-IgAAABU"]
[Thu Dec 04 04:24:23.561762 2025] [:error] [pid 2159:tid 2171] [client 192.178.4.101:49111] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCcdz3GVdXg3ORUAG1-KAAAAAg"]
[Thu Dec 04 04:24:25.968920 2025] [:error] [pid 2159:tid 2173] [client 192.178.4.101:38633] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCceT3GVdXg3ORUAG1-KgAAAAo"]
[Thu Dec 04 04:24:26.908716 2025] [:error] [pid 2244:tid 2258] [client 192.178.4.101:35983] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCcepm00CCLpKa0F738wQAAAMw"]
[Thu Dec 04 04:24:52.960298 2025] [:error] [pid 2160:tid 2209] [client 192.178.4.101:64852] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCclENDGjl4u2feUD-q4QAAAFM"]
[Thu Dec 04 04:24:56.265079 2025] [:error] [pid 2244:tid 2257] [client 192.178.4.101:60857] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCcmJm00CCLpKa0F7385wAAAMs"]
[Thu Dec 04 04:24:57.549974 2025] [:error] [pid 2161:tid 2218] [client 192.178.4.101:41286] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCcmSjiGdnP9Am2woVEKgAAAIE"]
[Thu Dec 04 04:24:58.635872 2025] [:error] [pid 2161:tid 2219] [client 192.178.4.101:51740] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCcmijiGdnP9Am2woVEKwAAAII"]
[Thu Dec 04 04:25:02.300811 2025] [:error] [pid 2161:tid 2236] [client 192.178.4.101:62441] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCcnijiGdnP9Am2woVEMAAAAJM"]
[Thu Dec 04 04:25:03.450910 2025] [:error] [pid 2161:tid 2226] [client 192.178.4.101:53230] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCcnyjiGdnP9Am2woVENAAAAIk"]
[Thu Dec 04 04:25:05.726622 2025] [:error] [pid 2244:tid 2249] [client 192.178.4.101:64598] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCcoZm00CCLpKa0F739BQAAAMM"]
[Thu Dec 04 04:25:07.184903 2025] [:error] [pid 2159:tid 2182] [client 192.178.4.101:52087] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCcoz3GVdXg3ORUAG1-fwAAABM"]
[Thu Dec 04 04:25:08.925437 2025] [:error] [pid 2160:tid 2200] [client 192.178.4.101:47655] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCcpENDGjl4u2feUD-q8AAAAEo"]
[Thu Dec 04 04:25:10.190255 2025] [:error] [pid 2160:tid 2212] [client 192.178.4.101:58583] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCcpkNDGjl4u2feUD-q9AAAAFY"]
[Thu Dec 04 04:25:14.227036 2025] [:error] [pid 2244:tid 2267] [client 192.178.4.101:59780] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCcqpm00CCLpKa0F739DgAAANQ"]
[Thu Dec 04 04:25:15.681959 2025] [:error] [pid 2161:tid 2234] [client 192.178.4.101:62254] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCcqyjiGdnP9Am2woVETQAAAJE"]
[Thu Dec 04 04:25:16.971467 2025] [:error] [pid 2159:tid 2168] [client 192.178.4.101:50518] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCcrD3GVdXg3ORUAG1-iQAAAAU"]
[Thu Dec 04 04:25:19.653826 2025] [:error] [pid 2161:tid 2223] [client 192.178.4.101:54221] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCcryjiGdnP9Am2woVEUwAAAIY"]
[Thu Dec 04 04:25:22.919547 2025] [:error] [pid 2161:tid 2218] [client 192.178.4.101:62595] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCcsijiGdnP9Am2woVEXwAAAIE"]
[Thu Dec 04 04:25:24.205625 2025] [:error] [pid 2160:tid 2202] [client 192.178.4.101:46378] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCctENDGjl4u2feUD-rAAAAAEw"]
[Thu Dec 04 04:25:26.143177 2025] [:error] [pid 2244:tid 2251] [client 192.178.4.101:45466] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCctpm00CCLpKa0F739GAAAAMU"]
[Thu Dec 04 04:25:27.373013 2025] [:error] [pid 2244:tid 2270] [client 192.178.4.101:54105] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCct5m00CCLpKa0F739GgAAANc"]
[Thu Dec 04 04:25:29.105078 2025] [:error] [pid 2161:tid 2241] [client 192.178.4.101:40034] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCcuSjiGdnP9Am2woVEagAAAJg"]
[Thu Dec 04 04:25:30.969727 2025] [:error] [pid 2160:tid 2207] [client 192.178.4.101:64412] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCcukNDGjl4u2feUD-rCAAAAFE"]
[Thu Dec 04 04:25:35.039696 2025] [:error] [pid 2161:tid 2236] [client 192.178.4.101:52769] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCcvyjiGdnP9Am2woVEcwAAAJM"]
[Thu Dec 04 04:25:38.313186 2025] [:error] [pid 2161:tid 2227] [client 192.178.4.101:42893] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCcwijiGdnP9Am2woVEjQAAAIo"]
[Thu Dec 04 04:25:43.871949 2025] [:error] [pid 2244:tid 2246] [client 192.178.4.101:57393] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCcx5m00CCLpKa0F739aQAAAMA"]
[Thu Dec 04 04:25:45.999059 2025] [:error] [pid 2161:tid 2223] [client 192.178.4.101:47677] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCcySjiGdnP9Am2woVErgAAAIY"]
[Thu Dec 04 04:25:46.994685 2025] [:error] [pid 2159:tid 2172] [client 192.178.4.101:58786] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCcyj3GVdXg3ORUAG1-ugAAAAk"]
[Thu Dec 04 04:26:30.048508 2025] [:error] [pid 2159:tid 2180] [client 192.178.4.101:56593] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCc9j3GVdXg3ORUAG1-_AAAABE"]
[Thu Dec 04 04:26:32.644988 2025] [:error] [pid 2160:tid 2203] [client 192.178.4.101:48672] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCc-ENDGjl4u2feUD-rZwAAAE0"]
[Thu Dec 04 04:26:35.623807 2025] [:error] [pid 2161:tid 2239] [client 192.178.4.101:38349] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCc-yjiGdnP9Am2woVE_AAAAJY"]
[Thu Dec 04 04:26:38.546093 2025] [:error] [pid 2160:tid 2198] [client 192.178.4.101:58107] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCc_kNDGjl4u2feUD-rcAAAAEg"]
[Thu Dec 04 04:26:40.859399 2025] [:error] [pid 2161:tid 2239] [client 192.178.4.101:37476] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCdACjiGdnP9Am2woVFAwAAAJY"]
[Thu Dec 04 04:26:43.423379 2025] [:error] [pid 2160:tid 2201] [client 192.178.4.101:52392] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCdA0NDGjl4u2feUD-rfgAAAEs"]
[Thu Dec 04 04:26:44.884758 2025] [:error] [pid 2244:tid 2268] [client 192.178.4.101:39871] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCdBJm00CCLpKa0F73-gQAAANU"]
[Thu Dec 04 04:26:50.431454 2025] [:error] [pid 2160:tid 2197] [client 192.178.4.101:39282] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCdCkNDGjl4u2feUD-rgAAAAEc"]
[Thu Dec 04 04:26:55.355753 2025] [:error] [pid 2244:tid 2271] [client 192.178.4.101:60561] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCdD5m00CCLpKa0F73-hgAAANg"]
[Thu Dec 04 04:26:57.880942 2025] [:error] [pid 2159:tid 2169] [client 192.178.4.101:54237] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCdET3GVdXg3ORUAG1_GgAAAAY"]
[Thu Dec 04 04:27:04.209500 2025] [:error] [pid 2244:tid 2248] [client 192.178.4.101:37297] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCdGJm00CCLpKa0F73-kQAAAMI"]
[Thu Dec 04 04:27:09.108347 2025] [:error] [pid 2161:tid 2240] [client 192.178.4.101:62919] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCdHSjiGdnP9Am2woVFOQAAAJc"]
[Thu Dec 04 04:27:12.484355 2025] [:error] [pid 2160:tid 2190] [client 192.178.4.101:52709] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCdIENDGjl4u2feUD-rlQAAAEA"]
[Thu Dec 04 04:27:14.392577 2025] [:error] [pid 2160:tid 2198] [client 192.178.4.101:52928] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCdIkNDGjl4u2feUD-rmQAAAEg"]
[Thu Dec 04 04:27:15.600332 2025] [:error] [pid 2160:tid 2212] [client 192.178.4.101:58188] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCdI0NDGjl4u2feUD-rmgAAAFY"]
[Thu Dec 04 04:27:17.345486 2025] [:error] [pid 2244:tid 2253] [client 192.178.4.101:63315] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCdJZm00CCLpKa0F73-rAAAAMc"]
[Thu Dec 04 04:27:19.269787 2025] [:error] [pid 2244:tid 2268] [client 192.178.4.101:61219] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCdJ5m00CCLpKa0F73-rgAAANU"]
[Thu Dec 04 04:27:21.123048 2025] [:error] [pid 2244:tid 2256] [client 192.178.4.101:60640] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCdKZm00CCLpKa0F73-sAAAAMo"]
[Thu Dec 04 04:27:22.370902 2025] [:error] [pid 2244:tid 2260] [client 192.178.4.101:44513] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCdKpm00CCLpKa0F73-sgAAAM4"]
[Thu Dec 04 04:27:24.148751 2025] [:error] [pid 2244:tid 2246] [client 192.178.4.101:44933] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCdLJm00CCLpKa0F73-tAAAAMA"]
[Thu Dec 04 04:27:25.999611 2025] [:error] [pid 2161:tid 2234] [client 192.178.4.101:37097] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCdLSjiGdnP9Am2woVFUAAAAJE"]
[Thu Dec 04 04:27:46.003772 2025] [:error] [pid 2244:tid 2270] [client 192.178.4.101:51865] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCdQpm00CCLpKa0F73-1gAAANc"]
[Thu Dec 04 04:27:47.912609 2025] [:error] [pid 2244:tid 2262] [client 192.178.4.101:47933] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCdQ5m00CCLpKa0F73-1wAAANA"]
[Thu Dec 04 04:27:49.887016 2025] [:error] [pid 2159:tid 2172] [client 192.178.4.101:47590] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCdRT3GVdXg3ORUAG1_bQAAAAk"]
[Thu Dec 04 04:27:51.581153 2025] [:error] [pid 2159:tid 2169] [client 192.178.4.101:37028] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCdRz3GVdXg3ORUAG1_cQAAAAY"]
[Thu Dec 04 04:27:53.509686 2025] [:error] [pid 2161:tid 2227] [client 192.178.4.101:48878] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCdSSjiGdnP9Am2woVFegAAAIo"]
[Thu Dec 04 04:28:04.642918 2025] [:error] [pid 2244:tid 2260] [client 192.178.4.101:42751] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCdVJm00CCLpKa0F73--QAAAM4"]
[Thu Dec 04 04:28:26.428643 2025] [:error] [pid 2159:tid 2179] [client 192.178.4.101:46514] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCdaj3GVdXg3ORUAG1_qAAAABA"]
[Thu Dec 04 04:28:28.465283 2025] [:error] [pid 2160:tid 2192] [client 192.178.4.101:39648] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCdbENDGjl4u2feUD-sVgAAAEI"]
[Thu Dec 04 04:28:30.063807 2025] [:error] [pid 2160:tid 2197] [client 192.178.4.101:40821] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCdbkNDGjl4u2feUD-sXAAAAEc"]
[Thu Dec 04 04:28:30.969244 2025] [:error] [pid 2244:tid 2256] [client 192.178.4.101:42802] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCdbpm00CCLpKa0F73_KAAAAMo"]
[Thu Dec 04 04:28:32.691672 2025] [:error] [pid 2244:tid 2266] [client 192.178.4.101:57125] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCdcJm00CCLpKa0F73_LwAAANM"]
[Thu Dec 04 04:28:34.461589 2025] [:error] [pid 2244:tid 2250] [client 192.178.4.101:57153] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCdcpm00CCLpKa0F73_MAAAAMQ"]
[Thu Dec 04 04:28:39.505157 2025] [:error] [pid 2160:tid 2212] [client 192.178.4.101:53943] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCdd0NDGjl4u2feUD-scgAAAFY"]
[Thu Dec 04 04:28:42.814499 2025] [:error] [pid 2244:tid 2266] [client 192.178.4.101:41493] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCdepm00CCLpKa0F73_PgAAANM"]
[Thu Dec 04 04:29:06.356293 2025] [:error] [pid 2159:tid 2168] [client 192.178.4.101:53684] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCdkj3GVdXg3ORUAG1_8gAAAAU"]
[Thu Dec 04 04:29:08.443341 2025] [:error] [pid 2161:tid 2219] [client 192.178.4.101:47449] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCdlCjiGdnP9Am2woVF7QAAAII"]
[Thu Dec 04 04:29:10.353011 2025] [:error] [pid 2161:tid 2236] [client 192.178.4.101:60213] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCdlijiGdnP9Am2woVF7gAAAJM"]
[Thu Dec 04 04:29:11.373624 2025] [:error] [pid 2160:tid 2210] [client 192.178.4.101:50597] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCdl0NDGjl4u2feUD-syAAAAFQ"]
[Thu Dec 04 04:29:13.814975 2025] [:error] [pid 2244:tid 2252] [client 192.178.4.101:47869] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCdmZm00CCLpKa0F73_ZgAAAMY"]
[Thu Dec 04 04:29:16.573095 2025] [:error] [pid 2244:tid 2263] [client 192.178.4.101:60674] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCdnJm00CCLpKa0F73_aAAAANE"]
[Thu Dec 04 04:29:17.660213 2025] [:error] [pid 2159:tid 2174] [client 192.178.4.101:51332] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCdnT3GVdXg3ORUAG1__QAAAAs"]
[Thu Dec 04 04:29:19.221259 2025] [:error] [pid 2160:tid 2199] [client 192.178.4.101:48709] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCdn0NDGjl4u2feUD-s1gAAAEk"]
[Thu Dec 04 04:29:21.851731 2025] [:error] [pid 2244:tid 2270] [client 192.178.4.101:53196] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCdoZm00CCLpKa0F73_agAAANc"]
[Thu Dec 04 04:29:23.755838 2025] [:error] [pid 2160:tid 2196] [client 192.178.4.101:56004] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCdo0NDGjl4u2feUD-s2wAAAEY"]
[Thu Dec 04 04:29:24.496341 2025] [:error] [pid 2159:tid 2187] [client 192.178.4.101:43445] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCdpD3GVdXg3ORUAG2ADAAAABg"]
[Thu Dec 04 04:29:27.317966 2025] [:error] [pid 2244:tid 2246] [client 192.178.4.101:43418] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCdp5m00CCLpKa0F73_bgAAAMA"]
[Thu Dec 04 04:29:30.265064 2025] [:error] [pid 2160:tid 2206] [client 192.178.4.101:61195] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCdqkNDGjl4u2feUD-s5gAAAFA"]
[Thu Dec 04 04:29:30.365844 2025] [:error] [pid 2160:tid 2200] [client 192.178.4.101:38786] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCdqkNDGjl4u2feUD-s5wAAAEo"]
[Thu Dec 04 04:29:31.547395 2025] [:error] [pid 2244:tid 2266] [client 192.178.4.101:60244] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCdq5m00CCLpKa0F73_cQAAANM"]
[Thu Dec 04 04:29:33.279000 2025] [:error] [pid 2161:tid 2238] [client 192.178.4.101:63650] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCdrSjiGdnP9Am2woVGCQAAAJU"]
[Thu Dec 04 04:29:36.665758 2025] [:error] [pid 2159:tid 2169] [client 192.178.4.101:46497] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCdsD3GVdXg3ORUAG2AHQAAAAY"]
[Thu Dec 04 04:29:38.365417 2025] [:error] [pid 2160:tid 2208] [client 192.178.4.101:50165] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCdskNDGjl4u2feUD-s7gAAAFI"]
[Thu Dec 04 04:29:39.730736 2025] [:error] [pid 2159:tid 2173] [client 192.178.4.101:55801] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCdsz3GVdXg3ORUAG2AIQAAAAo"]
[Thu Dec 04 04:29:40.717312 2025] [:error] [pid 2160:tid 2209] [client 192.178.4.101:51167] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCdtENDGjl4u2feUD-s7wAAAFM"]
[Thu Dec 04 04:29:44.125967 2025] [:error] [pid 2160:tid 2192] [client 192.178.4.101:36136] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCduENDGjl4u2feUD-s-QAAAEI"]
[Thu Dec 04 04:29:45.734655 2025] [:error] [pid 2159:tid 2175] [client 192.178.4.101:57471] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCduT3GVdXg3ORUAG2ALgAAAAw"]
[Thu Dec 04 04:29:46.198827 2025] [:error] [pid 2160:tid 2191] [client 192.178.4.101:57791] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCdukNDGjl4u2feUD-s_QAAAEE"]
[Thu Dec 04 04:29:46.284343 2025] [:error] [pid 2160:tid 2206] [client 192.178.4.101:48546] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCdukNDGjl4u2feUD-s_gAAAFA"]
[Thu Dec 04 04:29:47.319475 2025] [:error] [pid 2159:tid 2164] [client 192.178.4.101:36428] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCduz3GVdXg3ORUAG2AMAAAAAE"]
[Thu Dec 04 04:29:48.189936 2025] [:error] [pid 2161:tid 2230] [client 192.178.4.101:65185] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCdvCjiGdnP9Am2woVGMwAAAI0"]
[Thu Dec 04 04:29:50.018296 2025] [:error] [pid 2161:tid 2228] [client 192.178.4.101:62691] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCdvijiGdnP9Am2woVGNgAAAIs"]
[Thu Dec 04 04:29:51.232939 2025] [:error] [pid 2160:tid 2214] [client 192.178.4.101:63941] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCdv0NDGjl4u2feUD-tAgAAAFg"]
[Thu Dec 04 04:29:53.072319 2025] [:error] [pid 2244:tid 2259] [client 192.178.4.101:62526] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCdwZm00CCLpKa0F73_ewAAAM0"]
[Thu Dec 04 04:29:56.127556 2025] [:error] [pid 2244:tid 2257] [client 192.178.4.101:35424] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCdxJm00CCLpKa0F73_gAAAAMs"]
[Thu Dec 04 04:29:59.266759 2025] [:error] [pid 2161:tid 2223] [client 192.178.4.101:53884] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCdxyjiGdnP9Am2woVGPgAAAIY"]
[Thu Dec 04 04:30:00.313331 2025] [:error] [pid 2160:tid 2199] [client 192.178.4.101:51825] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCdyENDGjl4u2feUD-tCQAAAEk"]
[Thu Dec 04 04:30:02.270347 2025] [:error] [pid 2159:tid 2175] [client 192.178.4.101:43176] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCdyj3GVdXg3ORUAG2AOgAAAAw"]
[Thu Dec 04 04:30:26.760062 2025] [:error] [pid 2160:tid 2203] [client 192.178.4.101:39591] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCd4kNDGjl4u2feUD-tHAAAAE0"]
[Thu Dec 04 04:30:26.793581 2025] [:error] [pid 2244:tid 2261] [client 192.178.4.101:54900] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCd4pm00CCLpKa0F73_yAAAAM8"]
[Thu Dec 04 04:30:28.126856 2025] [:error] [pid 2159:tid 2183] [client 192.178.4.101:38719] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCd5D3GVdXg3ORUAG2AUQAAABQ"]
[Thu Dec 04 04:30:30.258606 2025] [:error] [pid 2161:tid 2220] [client 192.178.4.101:46506] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCd5ijiGdnP9Am2woVGWgAAAIM"]
[Thu Dec 04 04:30:31.577316 2025] [:error] [pid 2161:tid 2237] [client 192.178.4.101:56550] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCd5yjiGdnP9Am2woVGXAAAAJQ"]
[Thu Dec 04 04:30:33.303475 2025] [:error] [pid 2159:tid 2167] [client 192.178.4.101:56740] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCd6T3GVdXg3ORUAG2AVgAAAAQ"]
[Thu Dec 04 04:30:35.175134 2025] [:error] [pid 2244:tid 2256] [client 192.178.4.101:50461] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCd65m00CCLpKa0F73_0gAAAMo"]
[Thu Dec 04 04:30:36.361822 2025] [:error] [pid 2161:tid 2223] [client 192.178.4.101:45494] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCd7CjiGdnP9Am2woVGYwAAAIY"]
[Thu Dec 04 04:30:38.290359 2025] [:error] [pid 2244:tid 2260] [client 192.178.4.101:39777] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCd7pm00CCLpKa0F73_1AAAAM4"]
[Thu Dec 04 04:30:40.040572 2025] [:error] [pid 2161:tid 2229] [client 192.178.4.101:64404] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCd8CjiGdnP9Am2woVGZQAAAIw"]
[Thu Dec 04 04:30:47.332395 2025] [:error] [pid 2161:tid 2220] [client 192.178.4.101:58863] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCd9yjiGdnP9Am2woVGawAAAIM"]
[Thu Dec 04 04:30:52.776401 2025] [:error] [pid 2244:tid 2268] [client 192.178.4.101:41582] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCd_Jm00CCLpKa0F73_7wAAANU"]
[Thu Dec 04 04:31:11.851680 2025] [:error] [pid 2159:tid 2172] [client 192.178.4.101:48040] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCeDz3GVdXg3ORUAG2AeQAAAAk"]
[Thu Dec 04 04:31:13.586764 2025] [:error] [pid 2161:tid 2223] [client 192.178.4.101:45140] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCeESjiGdnP9Am2woVGjQAAAIY"]
[Thu Dec 04 04:31:13.758715 2025] [:error] [pid 2244:tid 2265] [client 192.178.4.101:40131] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCeEZm00CCLpKa0F70AQAAAANI"]
[Thu Dec 04 04:31:15.423735 2025] [:error] [pid 2161:tid 2218] [client 192.178.4.101:61413] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCeEyjiGdnP9Am2woVGjgAAAIE"]
[Thu Dec 04 04:31:17.343998 2025] [:error] [pid 2161:tid 2235] [client 192.178.4.101:50802] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCeFSjiGdnP9Am2woVGjwAAAJI"]
[Thu Dec 04 04:31:19.185039 2025] [:error] [pid 2244:tid 2265] [client 192.178.4.101:51740] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCeF5m00CCLpKa0F70ATAAAANI"]
[Thu Dec 04 04:31:20.910496 2025] [:error] [pid 2161:tid 2226] [client 192.178.4.101:46358] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCeGCjiGdnP9Am2woVGkAAAAIk"]
[Thu Dec 04 04:31:42.196649 2025] [:error] [pid 2161:tid 2222] [client 192.178.4.101:53153] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCeLijiGdnP9Am2woVGrwAAAIU"]
[Thu Dec 04 04:31:43.860636 2025] [:error] [pid 2159:tid 2171] [client 192.178.4.101:59142] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCeLz3GVdXg3ORUAG2AlwAAAAg"]
[Thu Dec 04 04:31:45.356073 2025] [:error] [pid 2160:tid 2195] [client 192.178.4.101:42023] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCeMUNDGjl4u2feUD-thAAAAEU"]
[Thu Dec 04 04:31:46.614596 2025] [:error] [pid 2244:tid 2255] [client 192.178.4.101:60482] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCeMpm00CCLpKa0F70AlgAAAMk"]
[Thu Dec 04 04:31:48.970652 2025] [:error] [pid 2159:tid 2187] [client 192.178.4.101:39516] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCeND3GVdXg3ORUAG2AngAAABg"]
[Thu Dec 04 04:31:50.191531 2025] [:error] [pid 2159:tid 2179] [client 192.178.4.101:53129] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCeNj3GVdXg3ORUAG2AoAAAABA"]
[Thu Dec 04 04:31:52.993420 2025] [:error] [pid 2160:tid 2202] [client 192.178.4.101:50030] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCeOENDGjl4u2feUD-tigAAAEw"]
[Thu Dec 04 04:31:54.484371 2025] [:error] [pid 2244:tid 2257] [client 192.178.4.101:42347] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCeOpm00CCLpKa0F70ArwAAAMs"]
[Thu Dec 04 04:31:56.309834 2025] [:error] [pid 2160:tid 2197] [client 192.178.4.101:41541] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCePENDGjl4u2feUD-tkAAAAEc"]
[Thu Dec 04 04:31:58.140003 2025] [:error] [pid 2160:tid 2196] [client 192.178.4.101:48907] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCePkNDGjl4u2feUD-tkQAAAEY"]
[Thu Dec 04 04:32:06.429130 2025] [:error] [pid 2160:tid 2204] [client 192.178.4.101:42556] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCeRkNDGjl4u2feUD-tlQAAAE4"]
[Thu Dec 04 04:32:07.511913 2025] [:error] [pid 2161:tid 2241] [client 192.178.4.101:40985] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCeRyjiGdnP9Am2woVGyAAAAJg"]
[Thu Dec 04 04:32:09.618807 2025] [:error] [pid 2161:tid 2229] [client 192.178.4.101:52385] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCeSSjiGdnP9Am2woVGyQAAAIw"]
[Thu Dec 04 04:32:13.247833 2025] [:error] [pid 2160:tid 2197] [client 192.178.4.101:59675] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCeTUNDGjl4u2feUD-tnwAAAEc"]
[Thu Dec 04 04:32:16.964771 2025] [:error] [pid 2161:tid 2236] [client 192.178.4.101:40699] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCeUCjiGdnP9Am2woVG0AAAAJM"]
[Thu Dec 04 04:32:18.261961 2025] [:error] [pid 2244:tid 2253] [client 192.178.4.101:52339] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCeUpm00CCLpKa0F70A4AAAAMc"]
[Thu Dec 04 04:32:21.074477 2025] [:error] [pid 2244:tid 2258] [client 192.178.4.101:53301] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCeVZm00CCLpKa0F70A5QAAAMw"]
[Thu Dec 04 04:32:21.312491 2025] [:error] [pid 2159:tid 2177] [client 192.178.4.101:45600] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCeVT3GVdXg3ORUAG2AtQAAAA4"]
[Thu Dec 04 04:32:22.728791 2025] [:error] [pid 2159:tid 2173] [client 192.178.4.101:37683] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCeVj3GVdXg3ORUAG2AtgAAAAo"]
[Thu Dec 04 04:32:25.380863 2025] [:error] [pid 2159:tid 2186] [client 192.178.4.101:50857] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCeWT3GVdXg3ORUAG2AuAAAABc"]
[Thu Dec 04 04:32:26.396332 2025] [:error] [pid 2161:tid 2227] [client 192.178.4.101:52018] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCeWijiGdnP9Am2woVG4QAAAIo"]
[Thu Dec 04 04:32:29.908835 2025] [:error] [pid 2161:tid 2232] [client 192.178.4.101:45230] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCeXSjiGdnP9Am2woVHAwAAAI8"]
[Thu Dec 04 04:32:31.296040 2025] [:error] [pid 2244:tid 2268] [client 192.178.4.101:48290] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCeX5m00CCLpKa0F70BKgAAANU"]
[Thu Dec 04 04:32:33.123870 2025] [:error] [pid 2161:tid 2231] [client 192.178.4.101:64151] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCeYSjiGdnP9Am2woVHDQAAAI4"]
[Thu Dec 04 04:32:34.468275 2025] [:error] [pid 2159:tid 2179] [client 192.178.4.101:35249] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCeYj3GVdXg3ORUAG2A3QAAABA"]
[Thu Dec 04 04:32:36.184661 2025] [:error] [pid 2159:tid 2167] [client 192.178.4.101:56363] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCeZD3GVdXg3ORUAG2A4AAAAAQ"]
[Thu Dec 04 04:33:32.622122 2025] [:error] [pid 2161:tid 2222] [client 192.178.4.101:44654] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCenCjiGdnP9Am2woVHTAAAAIU"]
[Thu Dec 04 04:33:35.256316 2025] [:error] [pid 2161:tid 2230] [client 192.178.4.101:41348] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCenyjiGdnP9Am2woVHUAAAAI0"]
[Thu Dec 04 04:33:38.406631 2025] [:error] [pid 2161:tid 2224] [client 192.178.4.101:53726] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCeoijiGdnP9Am2woVHUwAAAIc"]
[Thu Dec 04 04:33:39.021097 2025] [:error] [pid 2161:tid 2223] [client 192.178.4.101:39087] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCeoyjiGdnP9Am2woVHVgAAAIY"]
[Thu Dec 04 04:33:42.146078 2025] [:error] [pid 2244:tid 2268] [client 192.178.4.101:48697] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCeppm00CCLpKa0F70B3gAAANU"]
[Thu Dec 04 04:33:48.107748 2025] [:error] [pid 2159:tid 2164] [client 192.178.4.101:45891] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCerD3GVdXg3ORUAG2BZAAAAAE"]
[Thu Dec 04 04:33:49.403732 2025] [:error] [pid 2161:tid 2219] [client 192.178.4.101:44174] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCerSjiGdnP9Am2woVHZwAAAII"]
[Thu Dec 04 04:33:49.931164 2025] [:error] [pid 2161:tid 2234] [client 192.178.4.101:52807] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCerSjiGdnP9Am2woVHaQAAAJE"]
[Thu Dec 04 04:33:52.490861 2025] [:error] [pid 2161:tid 2218] [client 192.178.4.101:36906] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCesCjiGdnP9Am2woVHawAAAIE"]
[Thu Dec 04 04:33:57.116558 2025] [:error] [pid 2161:tid 2240] [client 192.178.4.101:38068] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCetSjiGdnP9Am2woVHcQAAAJc"]
[Thu Dec 04 04:34:00.189940 2025] [:error] [pid 2244:tid 2266] [client 192.178.4.101:42032] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCeuJm00CCLpKa0F70B_QAAANM"]
[Thu Dec 04 04:34:05.210221 2025] [:error] [pid 2161:tid 2222] [client 192.178.4.101:45574] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCevSjiGdnP9Am2woVHewAAAIU"]
[Thu Dec 04 04:34:08.053679 2025] [:error] [pid 2160:tid 2196] [client 192.178.4.101:39291] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCewENDGjl4u2feUD-uHgAAAEY"]
[Thu Dec 04 04:34:11.141664 2025] [:error] [pid 2160:tid 2197] [client 192.178.4.101:37994] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCew0NDGjl4u2feUD-uJAAAAEc"]
[Thu Dec 04 04:34:12.452019 2025] [:error] [pid 2160:tid 2194] [client 192.178.4.101:52830] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCexENDGjl4u2feUD-uJwAAAEQ"]
[Thu Dec 04 04:34:16.982288 2025] [:error] [pid 2161:tid 2226] [client 192.178.4.101:59157] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCeyCjiGdnP9Am2woVHjgAAAIk"]
[Thu Dec 04 04:34:20.433534 2025] [:error] [pid 2244:tid 2256] [client 192.178.4.101:47810] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCezJm00CCLpKa0F70COgAAAMo"]
[Thu Dec 04 04:34:21.767696 2025] [:error] [pid 2161:tid 2227] [client 192.178.4.101:58977] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCezSjiGdnP9Am2woVHnAAAAIo"]
[Thu Dec 04 04:34:26.659606 2025] [:error] [pid 2159:tid 2186] [client 192.178.4.101:49411] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCe0j3GVdXg3ORUAG2BogAAABc"]
[Thu Dec 04 04:34:27.143923 2025] [:error] [pid 2244:tid 2266] [client 192.178.4.101:65347] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCe05m00CCLpKa0F70CRQAAANM"]
[Thu Dec 04 04:34:44.783405 2025] [:error] [pid 2160:tid 2214] [client 192.178.4.101:64671] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCe5ENDGjl4u2feUD-uTAAAAFg"]
[Thu Dec 04 04:34:47.766865 2025] [:error] [pid 2161:tid 2239] [client 192.178.4.101:58186] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCe5yjiGdnP9Am2woVHtgAAAJY"]
[Thu Dec 04 04:34:48.689904 2025] [:error] [pid 2244:tid 2253] [client 192.178.4.101:57361] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCe6Jm00CCLpKa0F70CaQAAAMc"]
[Thu Dec 04 04:34:50.367824 2025] [:error] [pid 2244:tid 2258] [client 192.178.4.101:58669] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCe6pm00CCLpKa0F70CbgAAAMw"]
[Thu Dec 04 04:34:56.478044 2025] [:error] [pid 2160:tid 2199] [client 192.178.4.101:61717] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCe8ENDGjl4u2feUD-uWwAAAEk"]
[Thu Dec 04 04:34:57.789494 2025] [:error] [pid 2244:tid 2256] [client 192.178.4.101:61803] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCe8Zm00CCLpKa0F70CggAAAMo"]
[Thu Dec 04 04:35:01.596272 2025] [:error] [pid 2244:tid 2252] [client 192.178.4.101:41197] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCe9Zm00CCLpKa0F70CjgAAAMY"]
[Thu Dec 04 04:35:10.515355 2025] [:error] [pid 2159:tid 2186] [client 192.178.4.101:50049] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCe_j3GVdXg3ORUAG2B4gAAABc"]
[Thu Dec 04 04:35:12.373592 2025] [:error] [pid 2159:tid 2181] [client 192.178.4.101:56569] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCfAD3GVdXg3ORUAG2B5QAAABI"]
[Thu Dec 04 04:35:15.451473 2025] [:error] [pid 2161:tid 2227] [client 192.178.4.101:40021] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCfAyjiGdnP9Am2woVIBAAAAIo"]
[Thu Dec 04 04:35:16.867451 2025] [:error] [pid 2160:tid 2204] [client 192.178.4.101:49621] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCfBENDGjl4u2feUD-ufgAAAE4"]
[Thu Dec 04 04:35:19.725736 2025] [:error] [pid 2160:tid 2207] [client 192.178.4.101:41066] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCfB0NDGjl4u2feUD-uhwAAAFE"]
[Thu Dec 04 04:35:20.868199 2025] [:error] [pid 2244:tid 2263] [client 192.178.4.101:52796] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCfCJm00CCLpKa0F70CqgAAANE"]
[Thu Dec 04 04:35:23.871324 2025] [:error] [pid 2159:tid 2164] [client 192.178.4.101:51784] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCfCz3GVdXg3ORUAG2B7gAAAAE"]
[Thu Dec 04 04:35:24.610668 2025] [:error] [pid 2160:tid 2190] [client 192.178.4.101:64683] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCfDENDGjl4u2feUD-ukgAAAEA"]
[Thu Dec 04 04:35:27.300719 2025] [:error] [pid 2244:tid 2270] [client 192.178.4.101:64687] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCfD5m00CCLpKa0F70CtwAAANc"]
[Thu Dec 04 04:35:28.272578 2025] [:error] [pid 2159:tid 2170] [client 192.178.4.101:44329] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCfED3GVdXg3ORUAG2B8QAAAAc"]
[Thu Dec 04 04:35:30.105789 2025] [:error] [pid 2160:tid 2207] [client 192.178.4.101:38942] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCfEkNDGjl4u2feUD-upQAAAFE"]
[Thu Dec 04 04:35:35.706605 2025] [:error] [pid 2160:tid 2194] [client 192.178.4.101:59532] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCfF0NDGjl4u2feUD-utwAAAEQ"]
[Thu Dec 04 04:35:36.947071 2025] [:error] [pid 2244:tid 2262] [client 192.178.4.101:65027] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCfGJm00CCLpKa0F70C7gAAANA"]
[Thu Dec 04 04:35:38.760970 2025] [:error] [pid 2161:tid 2224] [client 192.178.4.101:44944] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCfGijiGdnP9Am2woVILwAAAIc"]
[Thu Dec 04 04:35:41.207832 2025] [:error] [pid 2160:tid 2204] [client 192.178.4.101:65349] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCfHUNDGjl4u2feUD-uwwAAAE4"]
[Thu Dec 04 04:36:32.104151 2025] [:error] [pid 2244:tid 2253] [client 192.178.4.101:39472] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCfUJm00CCLpKa0F70DrQAAAMc"]
[Thu Dec 04 04:36:36.545277 2025] [:error] [pid 2160:tid 2207] [client 192.178.4.101:35245] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCfVENDGjl4u2feUD-vAAAAAFE"]
[Thu Dec 04 04:36:38.835211 2025] [:error] [pid 2159:tid 2173] [client 192.178.4.101:34893] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCfVj3GVdXg3ORUAG2CTwAAAAo"]
[Thu Dec 04 04:36:42.740103 2025] [:error] [pid 2159:tid 2168] [client 192.178.4.101:48502] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCfWj3GVdXg3ORUAG2CVQAAAAU"]
[Thu Dec 04 04:36:49.057640 2025] [:error] [pid 2161:tid 2217] [client 192.178.4.101:45022] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCfYSjiGdnP9Am2woVIvQAAAIA"]
[Thu Dec 04 04:36:58.471376 2025] [:error] [pid 2159:tid 2178] [client 192.178.4.101:48468] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCfaj3GVdXg3ORUAG2CmgAAAA8"]
[Thu Dec 04 04:37:01.616526 2025] [:error] [pid 2159:tid 2167] [client 192.178.4.101:60604] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCfbT3GVdXg3ORUAG2CogAAAAQ"]
[Thu Dec 04 04:37:03.452058 2025] [:error] [pid 2244:tid 2267] [client 192.178.4.101:44917] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCfb5m00CCLpKa0F70ECQAAANQ"]
[Thu Dec 04 04:37:04.513521 2025] [:error] [pid 2161:tid 2233] [client 192.178.4.101:40221] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCfcCjiGdnP9Am2woVJCgAAAJA"]
[Thu Dec 04 04:37:06.505760 2025] [:error] [pid 2161:tid 2230] [client 192.178.4.101:64422] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCfcijiGdnP9Am2woVJFwAAAI0"]
[Thu Dec 04 04:37:08.977925 2025] [:error] [pid 2244:tid 2270] [client 192.178.4.101:55724] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCfdJm00CCLpKa0F70EEgAAANc"]
[Thu Dec 04 04:37:10.170393 2025] [:error] [pid 2244:tid 2256] [client 192.178.4.101:57877] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCfdpm00CCLpKa0F70EGgAAAMo"]
[Thu Dec 04 04:37:12.809033 2025] [:error] [pid 2244:tid 2266] [client 192.178.4.101:43567] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCfeJm00CCLpKa0F70EIwAAANM"]
[Thu Dec 04 04:37:13.845516 2025] [:error] [pid 2161:tid 2222] [client 192.178.4.101:57644] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCfeSjiGdnP9Am2woVJJgAAAIU"]
[Thu Dec 04 04:37:17.412814 2025] [:error] [pid 2244:tid 2251] [client 192.178.4.101:53308] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCffZm00CCLpKa0F70EKgAAAMU"]
[Thu Dec 04 04:37:18.631870 2025] [:error] [pid 2244:tid 2266] [client 192.178.4.101:52437] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCffpm00CCLpKa0F70ELAAAANM"]
[Thu Dec 04 04:38:08.857462 2025] [:error] [pid 2244:tid 2260] [client 192.178.4.101:48315] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCfsJm00CCLpKa0F70EvQAAAM4"]
[Thu Dec 04 04:38:14.190644 2025] [:error] [pid 2159:tid 2176] [client 192.178.4.101:51569] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCftj3GVdXg3ORUAG2DIAAAAA0"]
[Thu Dec 04 04:38:17.142919 2025] [:error] [pid 2244:tid 2249] [client 192.178.4.101:44952] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCfuZm00CCLpKa0F70E6gAAAMM"]
[Thu Dec 04 04:38:19.342262 2025] [:error] [pid 2160:tid 2197] [client 192.178.4.101:34811] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCfu0NDGjl4u2feUD-v4QAAAEc"]
[Thu Dec 04 04:38:19.958695 2025] [:error] [pid 2161:tid 2237] [client 192.178.4.101:55341] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCfuyjiGdnP9Am2woVJ-AAAAJQ"]
[Thu Dec 04 04:38:28.898068 2025] [:error] [pid 2161:tid 2228] [client 192.178.4.101:49884] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCfxCjiGdnP9Am2woVJ_wAAAIs"]
[Thu Dec 04 04:38:30.288564 2025] [:error] [pid 2160:tid 2207] [client 192.178.4.101:42052] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCfxkNDGjl4u2feUD-v6wAAAFE"]
[Thu Dec 04 04:38:31.089379 2025] [:error] [pid 2160:tid 2192] [client 192.178.4.101:65427] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCfx0NDGjl4u2feUD-v7gAAAEI"]
[Thu Dec 04 04:38:32.991880 2025] [:error] [pid 2244:tid 2248] [client 192.178.4.101:60429] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCfyJm00CCLpKa0F70FBQAAAMI"]
[Thu Dec 04 04:38:34.809512 2025] [:error] [pid 2160:tid 2208] [client 192.178.4.101:61203] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCfykNDGjl4u2feUD-v8gAAAFI"]
[Thu Dec 04 04:38:36.493334 2025] [:error] [pid 2244:tid 2250] [client 192.178.4.101:43304] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCfzJm00CCLpKa0F70FDAAAAMQ"]
[Thu Dec 04 04:38:37.091246 2025] [:error] [pid 2161:tid 2219] [client 192.178.4.101:61621] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCfzSjiGdnP9Am2woVKEAAAAII"]
[Thu Dec 04 04:38:37.811593 2025] [:error] [pid 2160:tid 2198] [client 192.178.4.101:56717] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCfzUNDGjl4u2feUD-v9QAAAEg"]
[Thu Dec 04 04:38:41.128215 2025] [:error] [pid 2160:tid 2203] [client 192.178.4.101:47623] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCf0UNDGjl4u2feUD-wAQAAAE0"]
[Thu Dec 04 04:38:45.230653 2025] [:error] [pid 2159:tid 2177] [client 192.178.4.101:52747] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCf1T3GVdXg3ORUAG2DdAAAAA4"]
[Thu Dec 04 04:38:49.195507 2025] [:error] [pid 2244:tid 2248] [client 192.178.4.101:63781] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCf2Zm00CCLpKa0F70FPgAAAMI"]
[Thu Dec 04 04:38:58.386813 2025] [:error] [pid 2244:tid 2247] [client 192.178.4.101:51955] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCf4pm00CCLpKa0F70FWQAAAME"]
[Thu Dec 04 04:39:03.893749 2025] [:error] [pid 2244:tid 2270] [client 192.178.4.101:46737] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCf55m00CCLpKa0F70FaQAAANc"]
[Thu Dec 04 04:39:05.080743 2025] [:error] [pid 2159:tid 2179] [client 192.178.4.101:39408] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCf6T3GVdXg3ORUAG2DhQAAABA"]
[Thu Dec 04 04:39:34.277840 2025] [:error] [pid 2159:tid 2169] [client 192.178.4.101:45217] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCgBj3GVdXg3ORUAG2DpgAAAAY"]
[Thu Dec 04 04:39:37.297172 2025] [:error] [pid 2159:tid 2163] [client 192.178.4.101:50137] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCgCT3GVdXg3ORUAG2DqgAAAAA"]
[Thu Dec 04 04:39:38.036598 2025] [:error] [pid 2244:tid 2266] [client 192.178.4.101:54401] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCgCpm00CCLpKa0F70F4AAAANM"]
[Thu Dec 04 04:39:39.981735 2025] [:error] [pid 2159:tid 2175] [client 192.178.4.101:55831] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCgCz3GVdXg3ORUAG2DsQAAAAw"]
[Thu Dec 04 04:39:41.733406 2025] [:error] [pid 2244:tid 2269] [client 192.178.4.101:46718] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCgDZm00CCLpKa0F70F5QAAANY"]
[Thu Dec 04 04:39:43.474743 2025] [:error] [pid 2159:tid 2165] [client 192.178.4.101:63105] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCgDz3GVdXg3ORUAG2DuAAAAAI"]
[Thu Dec 04 04:39:48.972889 2025] [:error] [pid 2244:tid 2263] [client 192.178.4.101:56012] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCgFJm00CCLpKa0F70F7gAAANE"]
[Thu Dec 04 04:39:51.099458 2025] [:error] [pid 2159:tid 2174] [client 192.178.4.101:42062] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCgFz3GVdXg3ORUAG2DvwAAAAs"]
[Thu Dec 04 04:39:52.634756 2025] [:error] [pid 2160:tid 2205] [client 192.178.4.101:64614] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCgGENDGjl4u2feUD-wfwAAAE8"]
[Thu Dec 04 04:39:53.726353 2025] [:error] [pid 2161:tid 2226] [client 192.178.4.101:62965] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCgGSjiGdnP9Am2woVKoAAAAIk"]
[Thu Dec 04 04:39:56.779640 2025] [:error] [pid 2159:tid 2182] [client 192.178.4.101:42230] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCgHD3GVdXg3ORUAG2DxAAAABM"]
[Thu Dec 04 04:39:58.171764 2025] [:error] [pid 2159:tid 2169] [client 192.178.4.101:51962] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCgHj3GVdXg3ORUAG2DxgAAAAY"]
[Thu Dec 04 04:40:00.450802 2025] [:error] [pid 2160:tid 2210] [client 192.178.4.101:55766] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCgIENDGjl4u2feUD-wigAAAFQ"]
[Thu Dec 04 04:40:03.508274 2025] [:error] [pid 2160:tid 2197] [client 192.178.4.101:53255] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCgI0NDGjl4u2feUD-wjgAAAEc"]
[Thu Dec 04 04:40:07.101617 2025] [:error] [pid 2244:tid 2266] [client 192.178.4.101:47815] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCgJ5m00CCLpKa0F70GCAAAANM"]
[Thu Dec 04 04:40:09.009231 2025] [:error] [pid 2244:tid 2250] [client 192.178.4.101:59905] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCgKZm00CCLpKa0F70GDQAAAMQ"]
[Thu Dec 04 04:40:10.121812 2025] [:error] [pid 2160:tid 2208] [client 192.178.4.101:64723] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCgKkNDGjl4u2feUD-wlwAAAFI"]
[Thu Dec 04 04:40:12.060233 2025] [:error] [pid 2161:tid 2223] [client 192.178.4.101:45168] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCgLCjiGdnP9Am2woVKwAAAAIY"]
[Thu Dec 04 04:40:13.880789 2025] [:error] [pid 2161:tid 2221] [client 192.178.4.101:37803] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCgLSjiGdnP9Am2woVKxQAAAIQ"]
[Thu Dec 04 04:40:16.418467 2025] [:error] [pid 2244:tid 2259] [client 192.178.4.101:47545] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCgMJm00CCLpKa0F70GMQAAAM0"]
[Thu Dec 04 04:40:17.479262 2025] [:error] [pid 2244:tid 2267] [client 192.178.4.101:43255] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCgMZm00CCLpKa0F70GOQAAANQ"]
[Thu Dec 04 04:40:18.783971 2025] [:error] [pid 2161:tid 2219] [client 192.178.4.101:61135] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCgMijiGdnP9Am2woVK2QAAAII"]
[Thu Dec 04 04:40:24.031102 2025] [:error] [pid 2244:tid 2251] [client 192.178.4.101:63396] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCgOJm00CCLpKa0F70GYgAAAMU"]
[Thu Dec 04 04:40:27.346160 2025] [:error] [pid 2161:tid 2238] [client 192.178.4.101:58325] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCgOyjiGdnP9Am2woVK6QAAAJU"]
[Thu Dec 04 04:40:29.868629 2025] [:error] [pid 2160:tid 2211] [client 192.178.4.101:48740] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCgPUNDGjl4u2feUD-wvQAAAFU"]
[Thu Dec 04 04:40:30.523245 2025] [:error] [pid 2244:tid 2268] [client 192.178.4.101:48456] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCgPpm00CCLpKa0F70GewAAANU"]
[Thu Dec 04 04:41:16.940459 2025] [:error] [pid 2161:tid 2218] [client 192.178.4.101:49737] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCgbCjiGdnP9Am2woVLQQAAAIE"]
[Thu Dec 04 04:41:19.262107 2025] [:error] [pid 2244:tid 2262] [client 192.178.4.101:46009] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCgb5m00CCLpKa0F70HGwAAANA"]
[Thu Dec 04 04:41:21.940657 2025] [:error] [pid 2159:tid 2165] [client 192.178.4.101:40245] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCgcT3GVdXg3ORUAG2EdAAAAAI"]
[Thu Dec 04 04:41:22.640086 2025] [:error] [pid 2244:tid 2262] [client 192.178.4.101:36039] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCgcpm00CCLpKa0F70HKAAAANA"]
[Thu Dec 04 04:41:24.403843 2025] [:error] [pid 2159:tid 2175] [client 192.178.4.101:42732] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCgdD3GVdXg3ORUAG2EegAAAAw"]
[Thu Dec 04 04:41:26.235166 2025] [:error] [pid 2161:tid 2217] [client 192.178.4.101:48727] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCgdijiGdnP9Am2woVLSgAAAIA"]
[Thu Dec 04 04:41:29.814753 2025] [:error] [pid 2160:tid 2212] [client 192.178.4.101:50790] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCgeUNDGjl4u2feUD-xGwAAAFY"]
[Thu Dec 04 04:41:31.734668 2025] [:error] [pid 2159:tid 2167] [client 192.178.4.101:55132] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCgez3GVdXg3ORUAG2EkAAAAAQ"]
[Thu Dec 04 04:41:32.872613 2025] [:error] [pid 2244:tid 2271] [client 192.178.4.101:65051] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCgfJm00CCLpKa0F70HOwAAANg"]
[Thu Dec 04 04:41:34.798624 2025] [:error] [pid 2244:tid 2268] [client 192.178.4.101:64897] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCgfpm00CCLpKa0F70HQQAAANU"]
[Thu Dec 04 04:41:36.628721 2025] [:error] [pid 2161:tid 2236] [client 192.178.4.101:44142] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCggCjiGdnP9Am2woVLUgAAAJM"]
[Thu Dec 04 04:41:38.456300 2025] [:error] [pid 2244:tid 2256] [client 192.178.4.101:57572] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCggpm00CCLpKa0F70HSgAAAMo"]
[Thu Dec 04 04:41:39.600321 2025] [:error] [pid 2161:tid 2241] [client 192.178.4.101:50651] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCggyjiGdnP9Am2woVLWAAAAJg"]
[Thu Dec 04 04:41:42.516733 2025] [:error] [pid 2161:tid 2241] [client 192.178.4.101:58361] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCghijiGdnP9Am2woVLYgAAAJg"]
[Thu Dec 04 04:41:44.234728 2025] [:error] [pid 2160:tid 2214] [client 192.178.4.101:38305] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCgiENDGjl4u2feUD-xNAAAAFg"]
[Thu Dec 04 04:41:45.835593 2025] [:error] [pid 2161:tid 2228] [client 192.178.4.101:50910] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCgiSjiGdnP9Am2woVLcQAAAIs"]
[Thu Dec 04 04:41:49.333129 2025] [:error] [pid 2159:tid 2185] [client 192.178.4.101:63983] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCgjT3GVdXg3ORUAG2EwQAAABY"]
[Thu Dec 04 04:41:50.323813 2025] [:error] [pid 2159:tid 2163] [client 192.178.4.101:56421] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCgjj3GVdXg3ORUAG2ExAAAAAA"]
[Thu Dec 04 04:41:52.064064 2025] [:error] [pid 2159:tid 2173] [client 192.178.4.101:42277] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCgkD3GVdXg3ORUAG2ExwAAAAo"]
[Thu Dec 04 04:41:53.440688 2025] [:error] [pid 2160:tid 2195] [client 192.178.4.101:55410] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCgkUNDGjl4u2feUD-xTAAAAEU"]
[Thu Dec 04 04:41:55.210960 2025] [:error] [pid 2160:tid 2212] [client 192.178.4.101:58377] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCgk0NDGjl4u2feUD-xVAAAAFY"]
[Thu Dec 04 04:41:57.046660 2025] [:error] [pid 2244:tid 2253] [client 192.178.4.101:37899] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCglZm00CCLpKa0F70HmAAAAMc"]
[Thu Dec 04 04:42:00.100872 2025] [:error] [pid 2160:tid 2196] [client 192.178.4.101:49100] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCgmENDGjl4u2feUD-xYgAAAEY"]
[Thu Dec 04 04:42:01.833122 2025] [:error] [pid 2244:tid 2263] [client 192.178.4.101:47320] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCgmZm00CCLpKa0F70HrgAAANE"]
[Thu Dec 04 04:42:03.757083 2025] [:error] [pid 2160:tid 2206] [client 192.178.4.101:42646] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCgm0NDGjl4u2feUD-xagAAAFA"]
[Thu Dec 04 04:42:06.354016 2025] [:error] [pid 2161:tid 2223] [client 192.178.4.101:45141] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCgnijiGdnP9Am2woVLpQAAAIY"]
[Thu Dec 04 04:42:07.741839 2025] [:error] [pid 2244:tid 2255] [client 192.178.4.101:43082] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCgn5m00CCLpKa0F70HxwAAAMk"]
[Thu Dec 04 04:42:08.559325 2025] [:error] [pid 2160:tid 2195] [client 192.178.4.101:62239] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCgoENDGjl4u2feUD-xeAAAAEU"]
[Thu Dec 04 04:42:12.243508 2025] [:error] [pid 2244:tid 2256] [client 192.178.4.101:65180] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCgpJm00CCLpKa0F70HzQAAAMo"]
[Thu Dec 04 04:42:36.097482 2025] [:error] [pid 2160:tid 2209] [client 192.178.4.101:44356] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCgvENDGjl4u2feUD-xsgAAAFM"]
[Thu Dec 04 04:42:37.822671 2025] [:error] [pid 2161:tid 2238] [client 192.178.4.101:45557] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCgvSjiGdnP9Am2woVL4gAAAJU"]
[Thu Dec 04 04:42:39.830360 2025] [:error] [pid 2161:tid 2231] [client 192.178.4.101:59499] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCgvyjiGdnP9Am2woVL5wAAAI4"]
[Thu Dec 04 04:42:42.966284 2025] [:error] [pid 2161:tid 2241] [client 192.178.4.101:50871] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCgwijiGdnP9Am2woVL7gAAAJg"]
[Thu Dec 04 04:42:47.994735 2025] [:error] [pid 2159:tid 2165] [client 192.178.4.101:63767] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCgxz3GVdXg3ORUAG2FFQAAAAI"]
[Thu Dec 04 04:42:48.939519 2025] [:error] [pid 2244:tid 2260] [client 192.178.4.101:36618] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCgyJm00CCLpKa0F70IPQAAAM4"]
[Thu Dec 04 04:42:51.048623 2025] [:error] [pid 2244:tid 2262] [client 192.178.4.101:43466] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCgy5m00CCLpKa0F70IQgAAANA"]
[Thu Dec 04 04:42:54.804745 2025] [:error] [pid 2244:tid 2253] [client 192.178.4.101:43264] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCgzpm00CCLpKa0F70ISAAAAMc"]
[Thu Dec 04 04:42:55.661767 2025] [:error] [pid 2160:tid 2214] [client 192.178.4.101:50388] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCgz0NDGjl4u2feUD-x2wAAAFg"]
[Thu Dec 04 04:42:57.200107 2025] [:error] [pid 2244:tid 2256] [client 192.178.4.101:35280] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCg0Zm00CCLpKa0F70IWQAAAMo"]
[Thu Dec 04 04:43:00.163067 2025] [:error] [pid 2159:tid 2163] [client 192.178.4.101:50040] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCg1D3GVdXg3ORUAG2FIQAAAAA"]
[Thu Dec 04 04:43:02.090024 2025] [:error] [pid 2161:tid 2222] [client 192.178.4.101:56524] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCg1ijiGdnP9Am2woVMHwAAAIU"]
[Thu Dec 04 04:43:03.919967 2025] [:error] [pid 2159:tid 2176] [client 192.178.4.101:52094] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCg1z3GVdXg3ORUAG2FKwAAAA0"]
[Thu Dec 04 04:43:05.752669 2025] [:error] [pid 2161:tid 2225] [client 192.178.4.101:49009] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCg2SjiGdnP9Am2woVMJgAAAIg"]
[Thu Dec 04 04:43:06.972992 2025] [:error] [pid 2159:tid 2164] [client 192.178.4.101:53404] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCg2j3GVdXg3ORUAG2FNAAAAAE"]
[Thu Dec 04 04:43:10.639061 2025] [:error] [pid 2244:tid 2265] [client 192.178.4.101:46308] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCg3pm00CCLpKa0F70IgwAAANI"]
[Thu Dec 04 04:43:12.466655 2025] [:error] [pid 2161:tid 2235] [client 192.178.4.101:56384] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCg4CjiGdnP9Am2woVMLQAAAJI"]
[Thu Dec 04 04:43:14.304742 2025] [:error] [pid 2244:tid 2258] [client 192.178.4.101:53675] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCg4pm00CCLpKa0F70IlAAAAMw"]
[Thu Dec 04 04:43:18.824066 2025] [:error] [pid 2244:tid 2262] [client 192.178.4.101:63068] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCg5pm00CCLpKa0F70IpwAAANA"]
[Thu Dec 04 04:43:23.590962 2025] [:error] [pid 2161:tid 2240] [client 192.178.4.101:49919] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCg6yjiGdnP9Am2woVMOwAAAJc"]
[Thu Dec 04 04:43:27.462037 2025] [:error] [pid 2244:tid 2262] [client 192.178.4.101:58594] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCg75m00CCLpKa0F70IwQAAANA"]
[Thu Dec 04 04:43:28.398925 2025] [:error] [pid 2244:tid 2260] [client 192.178.4.101:41722] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCg8Jm00CCLpKa0F70IxQAAAM4"]
[Thu Dec 04 04:43:30.433257 2025] [:error] [pid 2161:tid 2225] [client 192.178.4.101:56421] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCg8ijiGdnP9Am2woVMSgAAAIg"]
[Thu Dec 04 04:43:31.428848 2025] [:error] [pid 2161:tid 2227] [client 192.178.4.101:56181] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCg8yjiGdnP9Am2woVMUQAAAIo"]
[Thu Dec 04 04:43:56.549103 2025] [:error] [pid 2244:tid 2269] [client 192.178.4.101:38941] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTChDJm00CCLpKa0F70JGgAAANY"]
[Thu Dec 04 04:43:58.260936 2025] [:error] [pid 2160:tid 2210] [client 192.178.4.101:41701] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTChDkNDGjl4u2feUD-ylAAAAFQ"]
[Thu Dec 04 04:44:00.067905 2025] [:error] [pid 2244:tid 2246] [client 192.178.4.101:60274] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTChEJm00CCLpKa0F70JJQAAAMA"]
[Thu Dec 04 04:44:01.825721 2025] [:error] [pid 2244:tid 2252] [client 192.178.4.101:39795] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTChEZm00CCLpKa0F70JKwAAAMY"]
[Thu Dec 04 04:44:03.735136 2025] [:error] [pid 2159:tid 2166] [client 192.178.4.101:56149] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTChEz3GVdXg3ORUAG2FiwAAAAM"]
[Thu Dec 04 04:44:06.561636 2025] [:error] [pid 2161:tid 2236] [client 192.178.4.101:60020] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTChFijiGdnP9Am2woVMkwAAAJM"]
[Thu Dec 04 04:44:07.486969 2025] [:error] [pid 2244:tid 2265] [client 192.178.4.101:52908] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTChF5m00CCLpKa0F70JOgAAANI"]
[Thu Dec 04 04:44:09.249287 2025] [:error] [pid 2160:tid 2208] [client 192.178.4.101:48498] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTChGUNDGjl4u2feUD-yrQAAAFI"]
[Thu Dec 04 04:44:12.285605 2025] [:error] [pid 2244:tid 2267] [client 192.178.4.101:61966] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTChHJm00CCLpKa0F70JTwAAANQ"]
[Thu Dec 04 04:44:15.302682 2025] [:error] [pid 2160:tid 2210] [client 192.178.4.101:58123] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTChH0NDGjl4u2feUD-yswAAAFQ"]
[Thu Dec 04 04:44:16.568801 2025] [:error] [pid 2161:tid 2217] [client 192.178.4.101:54629] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTChICjiGdnP9Am2woVMnwAAAIA"]
[Thu Dec 04 04:44:19.299093 2025] [:error] [pid 2160:tid 2198] [client 192.178.4.101:47139] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTChI0NDGjl4u2feUD-yvgAAAEg"]
[Thu Dec 04 04:44:24.241480 2025] [:error] [pid 2159:tid 2179] [client 192.178.4.101:51549] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTChKD3GVdXg3ORUAG2FtwAAABA"]
[Thu Dec 04 04:44:28.706717 2025] [:error] [pid 2159:tid 2177] [client 192.178.4.101:51068] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTChLD3GVdXg3ORUAG2FvQAAAA4"]
[Thu Dec 04 04:44:30.236751 2025] [:error] [pid 2244:tid 2246] [client 192.178.4.101:42019] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTChLpm00CCLpKa0F70JywAAAMA"]
[Thu Dec 04 04:44:32.068980 2025] [:error] [pid 2159:tid 2184] [client 192.178.4.101:36458] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTChMD3GVdXg3ORUAG2FygAAABU"]
[Thu Dec 04 04:44:33.288786 2025] [:error] [pid 2244:tid 2267] [client 192.178.4.101:40519] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTChMZm00CCLpKa0F70J2AAAANQ"]
[Thu Dec 04 04:44:35.110138 2025] [:error] [pid 2244:tid 2269] [client 192.178.4.101:50971] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTChM5m00CCLpKa0F70J3wAAANY"]
[Thu Dec 04 04:44:36.958869 2025] [:error] [pid 2159:tid 2176] [client 192.178.4.101:47171] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTChND3GVdXg3ORUAG2F0QAAAA0"]
[Thu Dec 04 04:44:38.782147 2025] [:error] [pid 2244:tid 2269] [client 192.178.4.101:52127] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTChNpm00CCLpKa0F70J7QAAANY"]
[Thu Dec 04 04:44:40.001688 2025] [:error] [pid 2244:tid 2256] [client 192.178.4.101:58519] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTChOJm00CCLpKa0F70J9QAAAMo"]
[Thu Dec 04 04:44:47.343308 2025] [:error] [pid 2159:tid 2177] [client 192.178.4.101:52301] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTChPz3GVdXg3ORUAG2F5gAAAA4"]
[Thu Dec 04 04:45:31.872458 2025] [:error] [pid 2161:tid 2235] [client 192.178.4.101:51885] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTChayjiGdnP9Am2woVNNAAAAJI"]
[Thu Dec 04 04:45:32.360378 2025] [:error] [pid 2160:tid 2203] [client 192.178.4.101:54002] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTChbENDGjl4u2feUD-zhwAAAE0"]
[Thu Dec 04 04:45:36.768388 2025] [:error] [pid 2244:tid 2262] [client 192.178.4.101:57732] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTChcJm00CCLpKa0F70KZQAAANA"]
[Thu Dec 04 04:45:38.597203 2025] [:error] [pid 2160:tid 2207] [client 192.178.4.101:53924] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTChckNDGjl4u2feUD-zlwAAAFE"]
[Thu Dec 04 04:45:41.430724 2025] [:error] [pid 2161:tid 2218] [client 192.178.4.101:63301] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTChdSjiGdnP9Am2woVNQAAAAIE"]
[Thu Dec 04 04:45:42.514281 2025] [:error] [pid 2160:tid 2192] [client 192.178.4.101:55786] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTChdkNDGjl4u2feUD-zmwAAAEI"]
[Thu Dec 04 04:45:46.551886 2025] [:error] [pid 2244:tid 2246] [client 192.178.4.101:51344] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTChepm00CCLpKa0F70KhAAAAMA"]
[Thu Dec 04 04:45:50.835241 2025] [:error] [pid 2160:tid 2208] [client 192.178.4.101:55151] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTChfkNDGjl4u2feUD-zpgAAAFI"]
[Thu Dec 04 04:45:53.895638 2025] [:error] [pid 2244:tid 2259] [client 192.178.4.101:36773] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTChgZm00CCLpKa0F70KlQAAAM0"]
[Thu Dec 04 04:45:57.524283 2025] [:error] [pid 2244:tid 2256] [client 192.178.4.101:47813] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTChhZm00CCLpKa0F70KoQAAAMo"]
[Thu Dec 04 04:45:59.400032 2025] [:error] [pid 2244:tid 2246] [client 192.178.4.101:61946] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTChh5m00CCLpKa0F70KqQAAAMA"]
[Thu Dec 04 04:46:06.637718 2025] [:error] [pid 2244:tid 2269] [client 192.178.4.101:43192] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTChjpm00CCLpKa0F70KwwAAANY"]
[Thu Dec 04 04:46:09.780381 2025] [:error] [pid 2244:tid 2255] [client 192.178.4.101:52159] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTChkZm00CCLpKa0F70K3QAAAMk"]
[Thu Dec 04 04:47:26.435754 2025] [:error] [pid 2161:tid 2225] [client 192.178.4.101:57538] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCh3ijiGdnP9Am2woVO_AAAAIg"]
[Thu Dec 04 04:47:28.709963 2025] [:error] [pid 2159:tid 2171] [client 192.178.4.101:39837] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCh4D3GVdXg3ORUAG2ILwAAAAg"]
[Thu Dec 04 04:47:35.056436 2025] [:error] [pid 2159:tid 2166] [client 192.178.4.101:57453] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCh5z3GVdXg3ORUAG2IPQAAAAM"]
[Thu Dec 04 04:47:42.256044 2025] [:error] [pid 2161:tid 2218] [client 192.178.4.101:34941] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCh7ijiGdnP9Am2woVPFAAAAIE"]
[Thu Dec 04 04:47:51.173279 2025] [:error] [pid 2161:tid 2239] [client 192.178.4.101:49372] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCh9yjiGdnP9Am2woVPIAAAAJY"]
[Thu Dec 04 04:47:55.602859 2025] [:error] [pid 2161:tid 2229] [client 192.178.4.101:55342] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCh-yjiGdnP9Am2woVPJQAAAIw"]
[Thu Dec 04 04:48:13.421097 2025] [:error] [pid 2244:tid 2263] [client 192.178.4.101:51993] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCiDZm00CCLpKa0F70MqwAAANE"]
[Thu Dec 04 04:48:18.322226 2025] [:error] [pid 2244:tid 2259] [client 192.178.4.101:61668] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCiEpm00CCLpKa0F70MvAAAAM0"]
[Thu Dec 04 04:48:21.763782 2025] [:error] [pid 2161:tid 2225] [client 192.178.4.101:45206] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCiFSjiGdnP9Am2woVPggAAAIg"]
[Thu Dec 04 04:49:28.707225 2025] [:error] [pid 2161:tid 2220] [client 192.178.4.101:55245] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCiWCjiGdnP9Am2woVQFAAAAIM"]
[Thu Dec 04 04:49:36.023477 2025] [:error] [pid 2244:tid 2263] [client 192.178.4.101:43203] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCiYJm00CCLpKa0F70NJwAAANE"]
[Thu Dec 04 04:49:37.862791 2025] [:error] [pid 2244:tid 2268] [client 192.178.4.101:47620] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCiYZm00CCLpKa0F70NKAAAANU"]
[Thu Dec 04 04:49:46.114748 2025] [:error] [pid 2161:tid 2237] [client 192.178.4.101:61462] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCiaijiGdnP9Am2woVQMgAAAJQ"]
[Thu Dec 04 04:49:56.294748 2025] [:error] [pid 2159:tid 2169] [client 192.178.4.101:46923] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCidD3GVdXg3ORUAG2JSwAAAAY"]
[Thu Dec 04 04:49:57.515507 2025] [:error] [pid 38403:tid 38423] [client 192.178.4.101:51662] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCidQBCL4g8TXcskwnJSQAAAQ8"]
[Thu Dec 04 04:49:59.355071 2025] [:error] [pid 2161:tid 2240] [client 192.178.4.101:54459] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCidyjiGdnP9Am2woVQPgAAAJc"]
[Thu Dec 04 04:50:03.421349 2025] [:error] [pid 38403:tid 38416] [client 192.178.4.101:43065] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCiewBCL4g8TXcskwnJVwAAAQg"]
[Thu Dec 04 04:50:09.657930 2025] [:error] [pid 2161:tid 2232] [client 192.178.4.101:57991] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCigSjiGdnP9Am2woVQSQAAAI8"]
[Thu Dec 04 04:50:12.190690 2025] [:error] [pid 38403:tid 38414] [client 192.178.4.101:55993] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCihABCL4g8TXcskwnJZwAAAQY"]
[Thu Dec 04 04:50:22.500885 2025] [:error] [pid 38403:tid 38424] [client 192.178.4.101:53889] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCijgBCL4g8TXcskwnJegAAARA"]
[Thu Dec 04 04:51:02.148689 2025] [:error] [pid 2244:tid 2266] [client 192.178.4.101:62504] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCitpm00CCLpKa0F70NnAAAANM"]
[Thu Dec 04 04:51:05.566602 2025] [:error] [pid 38403:tid 38419] [client 192.178.4.101:37853] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCiuQBCL4g8TXcskwnJqwAAAQs"]
[Thu Dec 04 04:51:06.774604 2025] [:error] [pid 2160:tid 2193] [client 192.178.4.101:57525] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCiukNDGjl4u2feUD-15QAAAEM"]
[Thu Dec 04 04:51:08.607923 2025] [:error] [pid 2244:tid 2255] [client 192.178.4.101:56035] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCivJm00CCLpKa0F70NqgAAAMk"]
[Thu Dec 04 04:51:10.440845 2025] [:error] [pid 2161:tid 2224] [client 192.178.4.101:43141] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCivijiGdnP9Am2woVQswAAAIc"]
[Thu Dec 04 04:51:12.266669 2025] [:error] [pid 38403:tid 38422] [client 192.178.4.101:41177] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCiwABCL4g8TXcskwnJwgAAAQ4"]
[Thu Dec 04 04:51:22.742007 2025] [:error] [pid 2159:tid 2168] [client 192.178.4.101:50838] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCiyj3GVdXg3ORUAG2JrwAAAAU"]
[Thu Dec 04 04:51:53.222043 2025] [:error] [pid 2161:tid 2241] [client 192.178.4.101:50989] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCi6SjiGdnP9Am2woVQ5AAAAJg"]
[Thu Dec 04 04:53:00.934897 2025] [:error] [pid 2159:tid 2163] [client 192.178.4.101:46014] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCjLD3GVdXg3ORUAG2KFgAAAAA"]
[Thu Dec 04 04:53:08.336673 2025] [:error] [pid 2244:tid 2260] [client 192.178.4.101:43253] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCjNJm00CCLpKa0F70OywAAAM4"]
[Thu Dec 04 04:53:13.171041 2025] [:error] [pid 2244:tid 2246] [client 192.178.4.101:42522] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCjOZm00CCLpKa0F70O0wAAAMA"]
[Thu Dec 04 04:53:13.949209 2025] [:error] [pid 38403:tid 38421] [client 192.178.4.101:37762] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCjOQBCL4g8TXcskwnLSwAAAQ0"]
[Thu Dec 04 04:53:15.764687 2025] [:error] [pid 2160:tid 2194] [client 192.178.4.101:40019] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCjO0NDGjl4u2feUD-21gAAAEQ"]
[Thu Dec 04 04:53:17.593912 2025] [:error] [pid 2161:tid 2220] [client 192.178.4.101:41826] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCjPSjiGdnP9Am2woVRXQAAAIM"]
[Thu Dec 04 04:53:27.294489 2025] [:error] [pid 38403:tid 38425] [client 192.178.4.101:38979] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCjRwBCL4g8TXcskwnLZQAAARE"]
[Thu Dec 04 04:53:27.909643 2025] [:error] [pid 2161:tid 2230] [client 192.178.4.101:59641] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCjRyjiGdnP9Am2woVRcAAAAI0"]
[Thu Dec 04 04:53:30.352644 2025] [:error] [pid 38403:tid 38422] [client 192.178.4.101:36061] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCjSgBCL4g8TXcskwnLagAAAQ4"]
[Thu Dec 04 04:53:31.564356 2025] [:error] [pid 2244:tid 2261] [client 192.178.4.101:61780] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCjS5m00CCLpKa0F70O5QAAAM8"]
[Thu Dec 04 04:53:36.451316 2025] [:error] [pid 2244:tid 2256] [client 192.178.4.101:38517] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCjUJm00CCLpKa0F70O8gAAAMo"]
[Thu Dec 04 04:53:39.771830 2025] [:error] [pid 2160:tid 2194] [client 192.178.4.101:47152] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCjU0NDGjl4u2feUD-3BgAAAEQ"]
[Thu Dec 04 04:53:41.280792 2025] [:error] [pid 38403:tid 38412] [client 192.178.4.101:57188] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCjVQBCL4g8TXcskwnLcgAAAQQ"]
[Thu Dec 04 04:53:45.529917 2025] [:error] [pid 2161:tid 2226] [client 192.178.4.101:45079] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCjWSjiGdnP9Am2woVRiQAAAIk"]
[Thu Dec 04 04:54:41.777917 2025] [:error] [pid 2244:tid 2258] [client 192.178.4.101:49311] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCjkZm00CCLpKa0F70PRQAAAMw"]
[Thu Dec 04 04:54:43.603850 2025] [:error] [pid 2244:tid 2254] [client 192.178.4.101:46152] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCjk5m00CCLpKa0F70PSQAAAMg"]
[Thu Dec 04 04:54:46.607764 2025] [:error] [pid 2160:tid 2196] [client 192.178.4.101:47978] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCjlkNDGjl4u2feUD-3aQAAAEY"]
[Thu Dec 04 04:54:49.922085 2025] [:error] [pid 2161:tid 2222] [client 192.178.4.101:49250] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCjmSjiGdnP9Am2woVR0AAAAIU"]
[Thu Dec 04 04:54:51.551510 2025] [:error] [pid 2160:tid 2200] [client 192.178.4.101:62899] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCjm0NDGjl4u2feUD-3awAAAEo"]
[Thu Dec 04 04:54:53.382086 2025] [:error] [pid 2244:tid 2263] [client 192.178.4.101:50508] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCjnZm00CCLpKa0F70PUgAAANE"]
[Thu Dec 04 04:54:55.222637 2025] [:error] [pid 2244:tid 2253] [client 192.178.4.101:61287] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCjn5m00CCLpKa0F70PVwAAAMc"]
[Thu Dec 04 04:54:56.435224 2025] [:error] [pid 2161:tid 2239] [client 192.178.4.101:58181] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCjoCjiGdnP9Am2woVR3wAAAJY"]
[Thu Dec 04 04:54:58.265519 2025] [:error] [pid 2160:tid 2202] [client 192.178.4.101:46709] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCjokNDGjl4u2feUD-3bgAAAEw"]
[Thu Dec 04 04:55:00.104247 2025] [:error] [pid 38403:tid 38420] [client 192.178.4.101:49613] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCjpABCL4g8TXcskwnMBwAAAQw"]
[Thu Dec 04 04:55:03.151779 2025] [:error] [pid 38403:tid 38426] [client 192.178.4.101:48522] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCjpwBCL4g8TXcskwnMDQAAARI"]
[Thu Dec 04 04:55:05.038293 2025] [:error] [pid 2161:tid 2220] [client 192.178.4.101:40842] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCjqSjiGdnP9Am2woVR6wAAAIM"]
[Thu Dec 04 04:55:06.760204 2025] [:error] [pid 38403:tid 38413] [client 192.178.4.101:50415] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCjqgBCL4g8TXcskwnMFgAAAQU"]
[Thu Dec 04 04:55:08.652023 2025] [:error] [pid 2159:tid 2168] [client 192.178.4.101:38552] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCjrD3GVdXg3ORUAG2KdQAAAAU"]
[Thu Dec 04 04:55:13.444750 2025] [:error] [pid 2161:tid 2220] [client 192.178.4.101:55246] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCjsSjiGdnP9Am2woVR-AAAAIM"]
[Thu Dec 04 04:55:15.371009 2025] [:error] [pid 2159:tid 2181] [client 192.178.4.101:38097] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCjsz3GVdXg3ORUAG2KegAAABI"]
[Thu Dec 04 04:55:21.193664 2025] [:error] [pid 2244:tid 2251] [client 192.178.4.101:35849] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCjuZm00CCLpKa0F70PaQAAAMU"]
[Thu Dec 04 04:55:22.703778 2025] [:error] [pid 2161:tid 2234] [client 192.178.4.101:48157] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCjuijiGdnP9Am2woVSAAAAAJE"]
[Thu Dec 04 04:55:27.469011 2025] [:error] [pid 2159:tid 2181] [client 192.178.4.101:42612] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCjvz3GVdXg3ORUAG2KkAAAABI"]
[Thu Dec 04 04:55:30.203586 2025] [:error] [pid 38403:tid 38430] [client 192.178.4.101:56481] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCjwgBCL4g8TXcskwnMVAAAARY"]
[Thu Dec 04 04:56:19.572537 2025] [:error] [pid 38403:tid 38422] [client 192.178.4.101:44122] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCj8wBCL4g8TXcskwnMrgAAAQ4"]
[Thu Dec 04 04:56:21.407714 2025] [:error] [pid 38403:tid 38424] [client 192.178.4.101:44108] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCj9QBCL4g8TXcskwnMwAAAARA"]
[Thu Dec 04 04:56:23.235664 2025] [:error] [pid 2159:tid 2171] [client 192.178.4.101:48357] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCj9z3GVdXg3ORUAG2K1QAAAAg"]
[Thu Dec 04 04:56:25.073497 2025] [:error] [pid 38403:tid 38423] [client 192.178.4.101:54919] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCj-QBCL4g8TXcskwnM0AAAAQ8"]
[Thu Dec 04 04:56:26.286871 2025] [:error] [pid 2161:tid 2232] [client 192.178.4.101:64274] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCj-ijiGdnP9Am2woVSVQAAAI8"]
[Thu Dec 04 04:56:28.122725 2025] [:error] [pid 38403:tid 38420] [client 192.178.4.101:51432] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCj_ABCL4g8TXcskwnM2gAAAQw"]
[Thu Dec 04 04:56:29.958544 2025] [:error] [pid 38403:tid 38425] [client 192.178.4.101:48392] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCj_QBCL4g8TXcskwnM3QAAARE"]
[Thu Dec 04 04:56:33.002216 2025] [:error] [pid 2159:tid 2182] [client 192.178.4.101:38401] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCkAT3GVdXg3ORUAG2K3QAAABM"]
[Thu Dec 04 04:56:36.666621 2025] [:error] [pid 2244:tid 2266] [client 192.178.4.101:52870] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCkBJm00CCLpKa0F70P0QAAANM"]
[Thu Dec 04 04:56:38.497305 2025] [:error] [pid 2244:tid 2263] [client 192.178.4.101:46983] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCkBpm00CCLpKa0F70P2wAAANE"]
[Thu Dec 04 04:56:40.378867 2025] [:error] [pid 2159:tid 2182] [client 192.178.4.101:64919] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCkCD3GVdXg3ORUAG2K6wAAABM"]
[Thu Dec 04 04:56:48.791198 2025] [:error] [pid 2161:tid 2240] [client 192.178.4.101:37849] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCkECjiGdnP9Am2woVSogAAAJc"]
[Thu Dec 04 04:56:50.737903 2025] [:error] [pid 2161:tid 2225] [client 192.178.4.101:34829] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCkEijiGdnP9Am2woVSpgAAAIg"]
[Thu Dec 04 04:56:54.773707 2025] [:error] [pid 38403:tid 38432] [client 192.178.4.101:36113] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCkFgBCL4g8TXcskwnNNwAAARg"]
[Thu Dec 04 04:57:59.232509 2025] [:error] [pid 2159:tid 2179] [client 192.178.4.101:55620] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCkVz3GVdXg3ORUAG2LmgAAABA"]
[Thu Dec 04 04:58:01.843470 2025] [:error] [pid 38403:tid 38421] [client 192.178.4.101:48241] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCkWQBCL4g8TXcskwnOHgAAAQ0"]
[Thu Dec 04 04:58:31.223292 2025] [:error] [pid 2161:tid 2232] [client 192.178.4.101:53612] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCkdyjiGdnP9Am2woVTHAAAAI8"]
[Thu Dec 04 04:58:32.448701 2025] [:error] [pid 2244:tid 2259] [client 192.178.4.101:58899] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCkeJm00CCLpKa0F70QpQAAAM0"]
[Thu Dec 04 04:58:34.275926 2025] [:error] [pid 2244:tid 2269] [client 192.178.4.101:65433] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCkepm00CCLpKa0F70QqAAAANY"]
[Thu Dec 04 04:58:37.113174 2025] [:error] [pid 2159:tid 2172] [client 192.178.4.101:42921] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCkfT3GVdXg3ORUAG2L3AAAAAk"]
[Thu Dec 04 04:58:38.033412 2025] [:error] [pid 2244:tid 2251] [client 192.178.4.101:35521] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCkfpm00CCLpKa0F70QrAAAAMU"]
[Thu Dec 04 04:58:42.304289 2025] [:error] [pid 2244:tid 2263] [client 192.178.4.101:38570] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCkgpm00CCLpKa0F70QuQAAANE"]
[Thu Dec 04 04:58:43.450460 2025] [:error] [pid 2161:tid 2236] [client 192.178.4.101:58664] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCkgyjiGdnP9Am2woVTJwAAAJM"]
[Thu Dec 04 04:58:44.674920 2025] [:error] [pid 2161:tid 2227] [client 192.178.4.101:46898] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCkhCjiGdnP9Am2woVTKwAAAIo"]
[Thu Dec 04 04:58:46.506983 2025] [:error] [pid 2161:tid 2231] [client 192.178.4.101:63496] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCkhijiGdnP9Am2woVTLQAAAI4"]
[Thu Dec 04 04:58:49.965339 2025] [:error] [pid 2159:tid 2182] [client 192.178.4.101:61908] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCkiT3GVdXg3ORUAG2L-gAAABM"]
[Thu Dec 04 04:58:52.881211 2025] [:error] [pid 2159:tid 2181] [client 192.178.4.101:45150] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCkjD3GVdXg3ORUAG2MBAAAABI"]
[Thu Dec 04 04:58:54.457695 2025] [:error] [pid 2160:tid 2214] [client 192.178.4.101:44932] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCkjkNDGjl4u2feUD-4VwAAAFg"]
[Thu Dec 04 04:58:55.673126 2025] [:error] [pid 2161:tid 2238] [client 192.178.4.101:52621] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCkjyjiGdnP9Am2woVTMQAAAJU"]
[Thu Dec 04 04:59:40.269987 2025] [:error] [pid 2159:tid 2171] [client 192.178.4.101:45657] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCkvD3GVdXg3ORUAG2MNwAAAAg"]
[Thu Dec 04 04:59:42.803903 2025] [:error] [pid 2161:tid 2228] [client 192.178.4.101:54582] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCkvijiGdnP9Am2woVTWQAAAIs"]
[Thu Dec 04 04:59:44.636087 2025] [:error] [pid 2159:tid 2183] [client 192.178.4.101:53209] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCkwD3GVdXg3ORUAG2MOwAAABQ"]
[Thu Dec 04 04:59:46.471654 2025] [:error] [pid 2159:tid 2184] [client 192.178.4.101:52136] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCkwj3GVdXg3ORUAG2MPQAAABU"]
[Thu Dec 04 04:59:46.742508 2025] [:error] [pid 2244:tid 2261] [client 192.178.4.101:34881] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCkwpm00CCLpKa0F70RIwAAAM8"]
[Thu Dec 04 04:59:49.527384 2025] [:error] [pid 38403:tid 38420] [client 192.178.4.101:47944] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCkxQBCL4g8TXcskwnPDgAAAQw"]
[Thu Dec 04 04:59:51.365615 2025] [:error] [pid 2159:tid 2186] [client 192.178.4.101:64352] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCkxz3GVdXg3ORUAG2MRwAAABc"]
[Thu Dec 04 04:59:55.027692 2025] [:error] [pid 2161:tid 2224] [client 192.178.4.101:59055] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCkyyjiGdnP9Am2woVTcgAAAIc"]
[Thu Dec 04 05:00:09.171197 2025] [:error] [pid 2244:tid 2250] [client 192.178.4.101:41396] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCk2Zm00CCLpKa0F70RRgAAAMQ"]
[Thu Dec 04 05:00:17.026012 2025] [:error] [pid 2159:tid 2168] [client 192.178.4.101:41401] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCk4T3GVdXg3ORUAG2MXAAAAAU"]
[Thu Dec 04 05:00:20.699588 2025] [:error] [pid 2160:tid 2195] [client 192.178.4.101:45069] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCk5ENDGjl4u2feUD-4rQAAAEU"]
[Thu Dec 04 05:00:24.367121 2025] [:error] [pid 2159:tid 2167] [client 192.178.4.101:41361] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCk6D3GVdXg3ORUAG2MZAAAAAQ"]
[Thu Dec 04 05:00:26.202226 2025] [:error] [pid 2244:tid 2246] [client 192.178.4.101:58111] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCk6pm00CCLpKa0F70RZQAAAMA"]
[Thu Dec 04 05:00:28.095023 2025] [:error] [pid 2160:tid 2205] [client 192.178.4.101:60087] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCk7ENDGjl4u2feUD-4uQAAAE8"]
[Thu Dec 04 05:00:29.994961 2025] [:error] [pid 2159:tid 2175] [client 192.178.4.101:64927] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCk7T3GVdXg3ORUAG2MZgAAAAw"]
[Thu Dec 04 05:00:31.700848 2025] [:error] [pid 2161:tid 2223] [client 192.178.4.101:36671] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCk7yjiGdnP9Am2woVTswAAAIY"]
[Thu Dec 04 05:02:20.981994 2025] [:error] [pid 2244:tid 2269] [client 192.178.4.101:40080] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTClXJm00CCLpKa0F70SWQAAANY"]
[Thu Dec 04 05:02:23.967286 2025] [:error] [pid 2160:tid 2211] [client 192.178.4.101:64147] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTClX0NDGjl4u2feUD-5YAAAAFU"]
[Thu Dec 04 05:02:31.680816 2025] [:error] [pid 2161:tid 2219] [client 192.178.4.101:56347] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTClZyjiGdnP9Am2woVUcwAAAII"]
[Thu Dec 04 05:02:33.511210 2025] [:error] [pid 2244:tid 2253] [client 192.178.4.101:41873] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTClaZm00CCLpKa0F70ShwAAAMc"]
[Thu Dec 04 05:02:34.729112 2025] [:error] [pid 2244:tid 2252] [client 192.178.4.101:51283] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTClapm00CCLpKa0F70SjAAAAMY"]
[Thu Dec 04 05:02:38.407432 2025] [:error] [pid 2244:tid 2261] [client 192.178.4.101:53146] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTClbpm00CCLpKa0F70SlQAAAM8"]
[Thu Dec 04 05:02:46.956240 2025] [:error] [pid 2244:tid 2250] [client 192.178.4.101:44643] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCldpm00CCLpKa0F70SpwAAAMQ"]
[Thu Dec 04 05:02:48.781783 2025] [:error] [pid 2160:tid 2208] [client 192.178.4.101:60474] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCleENDGjl4u2feUD-5pQAAAFI"]
[Thu Dec 04 05:02:59.181043 2025] [:error] [pid 2159:tid 2175] [client 192.178.4.101:56631] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTClgz3GVdXg3ORUAG2NNQAAAAw"]
[Thu Dec 04 05:03:04.035628 2025] [:error] [pid 2160:tid 2197] [client 192.178.4.101:53983] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCliENDGjl4u2feUD-5yAAAAEc"]
[Thu Dec 04 05:03:04.681173 2025] [:error] [pid 2159:tid 2165] [client 192.178.4.101:62991] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCliD3GVdXg3ORUAG2NPAAAAAI"]
[Thu Dec 04 05:03:12.696902 2025] [:error] [pid 2161:tid 2226] [client 192.178.4.101:40330] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTClkCjiGdnP9Am2woVUsQAAAIk"]
[Thu Dec 04 05:03:54.469024 2025] [:error] [pid 2159:tid 2177] [client 192.178.4.101:58337] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCluj3GVdXg3ORUAG2NhwAAAA4"]
[Thu Dec 04 05:03:58.336314 2025] [:error] [pid 2244:tid 2256] [client 192.178.4.101:62512] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTClvpm00CCLpKa0F70TtAAAAMo"]
[Thu Dec 04 05:04:00.041696 2025] [:error] [pid 38403:tid 38427] [client 192.178.4.101:51203] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTClwABCL4g8TXcskwnRfwAAARM"]
[Thu Dec 04 05:04:04.665413 2025] [:error] [pid 2159:tid 2179] [client 192.178.4.101:49697] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTClxD3GVdXg3ORUAG2NkwAAABA"]
[Thu Dec 04 05:04:05.015237 2025] [:error] [pid 2159:tid 2183] [client 192.178.4.101:41244] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTClxT3GVdXg3ORUAG2NlAAAABQ"]
[Thu Dec 04 05:04:06.845979 2025] [:error] [pid 2160:tid 2192] [client 192.178.4.101:57876] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTClxkNDGjl4u2feUD-6LAAAAEI"]
[Thu Dec 04 05:04:08.074966 2025] [:error] [pid 38403:tid 38410] [client 192.178.4.101:64434] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTClyABCL4g8TXcskwnRjQAAAQI"]
[Thu Dec 04 05:04:10.159642 2025] [:error] [pid 2161:tid 2235] [client 192.178.4.101:55892] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTClyijiGdnP9Am2woVVkQAAAJI"]
[Thu Dec 04 05:04:11.326591 2025] [:error] [pid 2244:tid 2263] [client 192.178.4.101:49108] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCly5m00CCLpKa0F70T0AAAANE"]
[Thu Dec 04 05:04:13.761059 2025] [:error] [pid 2160:tid 2212] [client 192.178.4.101:41595] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTClzUNDGjl4u2feUD-6MwAAAFY"]
[Thu Dec 04 05:04:14.800601 2025] [:error] [pid 2244:tid 2269] [client 192.178.4.101:56809] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTClzpm00CCLpKa0F70T2AAAANY"]
[Thu Dec 04 05:04:16.015029 2025] [:error] [pid 2159:tid 2166] [client 192.178.4.101:42561] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCl0D3GVdXg3ORUAG2NoQAAAAM"]
[Thu Dec 04 05:04:18.153723 2025] [:error] [pid 38403:tid 38425] [client 192.178.4.101:37608] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCl0gBCL4g8TXcskwnRmQAAARE"]
[Thu Dec 04 05:04:19.683816 2025] [:error] [pid 2244:tid 2255] [client 192.178.4.101:53173] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCl05m00CCLpKa0F70T4AAAAMk"]
[Thu Dec 04 05:04:22.636889 2025] [:error] [pid 38403:tid 38417] [client 192.178.4.101:63675] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCl1gBCL4g8TXcskwnRqAAAAQk"]
[Thu Dec 04 05:04:33.135688 2025] [:error] [pid 38403:tid 38427] [client 192.178.4.101:64198] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCl4QBCL4g8TXcskwnRwgAAARM"]
[Thu Dec 04 05:04:35.446805 2025] [:error] [pid 38403:tid 38430] [client 192.178.4.101:56629] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCl4wBCL4g8TXcskwnR0gAAARY"]
[Thu Dec 04 05:04:39.926195 2025] [:error] [pid 2161:tid 2228] [client 192.178.4.101:63352] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCl5yjiGdnP9Am2woVV0gAAAIs"]
[Thu Dec 04 05:04:49.118769 2025] [:error] [pid 2244:tid 2253] [client 192.178.4.101:61523] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCl8Zm00CCLpKa0F70UIAAAAMc"]
[Thu Dec 04 05:06:07.018721 2025] [:error] [pid 2160:tid 2201] [client 192.178.4.101:54574] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCmP0NDGjl4u2feUD-6vQAAAEs"]
[Thu Dec 04 05:06:07.876376 2025] [:error] [pid 38403:tid 38411] [client 192.178.4.101:65030] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCmPwBCL4g8TXcskwnSwQAAAQM"]
[Thu Dec 04 05:06:09.555398 2025] [:error] [pid 2244:tid 2265] [client 192.178.4.101:45756] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCmQZm00CCLpKa0F70UsgAAANI"]
[Thu Dec 04 05:06:14.533719 2025] [:error] [pid 2244:tid 2270] [client 192.178.4.101:60825] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCmRpm00CCLpKa0F70UvQAAANc"]
[Thu Dec 04 05:06:18.200567 2025] [:error] [pid 2160:tid 2194] [client 192.178.4.101:62712] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCmSkNDGjl4u2feUD-6zQAAAEQ"]
[Thu Dec 04 05:06:19.514696 2025] [:error] [pid 38403:tid 38415] [client 192.178.4.101:57106] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCmSwBCL4g8TXcskwnS1QAAAQc"]
[Thu Dec 04 05:06:22.297165 2025] [:error] [pid 38403:tid 38420] [client 192.178.4.101:46725] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCmTgBCL4g8TXcskwnS2wAAAQw"]
[Thu Dec 04 05:06:37.162272 2025] [:error] [pid 38403:tid 38429] [client 192.178.4.101:36125] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCmXQBCL4g8TXcskwnS8gAAARU"]
[Thu Dec 04 05:06:38.980663 2025] [:error] [pid 38403:tid 38424] [client 192.178.4.101:53677] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCmXgBCL4g8TXcskwnS8wAAARA"]
[Thu Dec 04 05:06:42.638744 2025] [:error] [pid 38403:tid 38422] [client 192.178.4.101:49225] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCmYgBCL4g8TXcskwnS-QAAAQ4"]
[Thu Dec 04 05:06:44.503743 2025] [:error] [pid 2159:tid 2182] [client 192.178.4.101:62908] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCmZD3GVdXg3ORUAG2OjAAAABM"]
[Thu Dec 04 05:06:47.456225 2025] [:error] [pid 38403:tid 38411] [client 192.178.4.101:37572] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCmZwBCL4g8TXcskwnTAgAAAQM"]
[Thu Dec 04 05:06:51.811302 2025] [:error] [pid 38403:tid 38428] [client 192.178.4.101:47822] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCmawBCL4g8TXcskwnTCQAAARQ"]
[Thu Dec 04 05:06:56.695870 2025] [:error] [pid 2244:tid 2260] [client 192.178.4.101:62275] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCmcJm00CCLpKa0F70U8wAAAM4"]
[Thu Dec 04 05:06:57.966598 2025] [:error] [pid 2244:tid 2254] [client 192.178.4.101:44419] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCmcZm00CCLpKa0F70U-AAAAMg"]
[Thu Dec 04 05:08:14.327696 2025] [:error] [pid 2244:tid 2268] [client 192.178.4.101:42270] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCmvpm00CCLpKa0F70VcgAAANU"]
[Thu Dec 04 05:08:17.919038 2025] [:error] [pid 38403:tid 38424] [client 192.178.4.101:61652] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCmwQBCL4g8TXcskwnTywAAARA"]
[Thu Dec 04 05:08:20.808116 2025] [:error] [pid 2244:tid 2263] [client 192.178.4.101:60048] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCmxJm00CCLpKa0F70VfAAAANE"]
[Thu Dec 04 05:08:20.866349 2025] [:error] [pid 2159:tid 2177] [client 192.178.4.101:57195] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCmxD3GVdXg3ORUAG2PRQAAAA4"]
[Thu Dec 04 05:08:27.457651 2025] [:error] [pid 38403:tid 38432] [client 192.178.4.101:43937] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCmywBCL4g8TXcskwnT5AAAARg"]
[Thu Dec 04 05:08:29.895166 2025] [:error] [pid 2244:tid 2254] [client 192.178.4.101:54970] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCmzZm00CCLpKa0F70VjAAAAMg"]
[Thu Dec 04 05:08:36.620837 2025] [:error] [pid 2160:tid 2194] [client 192.178.4.101:64243] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCm1ENDGjl4u2feUD-7kgAAAEQ"]
[Thu Dec 04 05:08:46.292221 2025] [:error] [pid 2160:tid 2200] [client 192.178.4.101:55302] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCm3kNDGjl4u2feUD-7mgAAAEo"]
[Thu Dec 04 05:08:48.206775 2025] [:error] [pid 2161:tid 2227] [client 192.178.4.101:52170] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCm4CjiGdnP9Am2woVXWQAAAIo"]
[Thu Dec 04 05:08:50.208711 2025] [:error] [pid 2244:tid 2254] [client 192.178.4.101:42757] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCm4pm00CCLpKa0F70VsQAAAMg"]
[Thu Dec 04 05:08:56.759425 2025] [:error] [pid 38403:tid 38413] [client 192.178.4.101:44604] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCm6ABCL4g8TXcskwnUJgAAAQU"]
[Thu Dec 04 05:08:57.886741 2025] [:error] [pid 2244:tid 2250] [client 192.178.4.101:46430] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCm6Zm00CCLpKa0F70VuQAAAMQ"]
[Thu Dec 04 05:09:50.010294 2025] [:error] [pid 38403:tid 38418] [client 192.178.4.101:39935] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCnHgBCL4g8TXcskwnUkwAAAQo"]
[Thu Dec 04 05:09:52.378834 2025] [:error] [pid 2160:tid 2192] [client 192.178.4.101:51387] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCnIENDGjl4u2feUD-79AAAAEI"]
[Thu Dec 04 05:10:14.514651 2025] [:error] [pid 38403:tid 38429] [client 192.178.4.101:34908] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCnNgBCL4g8TXcskwnU0AAAARU"]
[Thu Dec 04 05:10:19.497641 2025] [:error] [pid 2244:tid 2251] [client 192.178.4.101:44886] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCnO5m00CCLpKa0F70WQwAAAMU"]
[Thu Dec 04 05:10:23.052905 2025] [:error] [pid 2244:tid 2247] [client 192.178.4.101:63029] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCnP5m00CCLpKa0F70WTwAAAME"]
[Thu Dec 04 05:10:25.675203 2025] [:error] [pid 38403:tid 38430] [client 192.178.4.101:45082] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCnQQBCL4g8TXcskwnU2wAAARY"]
[Thu Dec 04 05:10:26.727742 2025] [:error] [pid 2159:tid 2187] [client 192.178.4.101:56977] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCnQj3GVdXg3ORUAG2QHAAAABg"]
[Thu Dec 04 05:10:29.553343 2025] [:error] [pid 2244:tid 2259] [client 192.178.4.101:49667] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCnRZm00CCLpKa0F70WeAAAAM0"]
[Thu Dec 04 05:10:30.589239 2025] [:error] [pid 2244:tid 2255] [client 192.178.4.101:63651] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCnRpm00CCLpKa0F70WfwAAAMk"]
[Thu Dec 04 05:10:32.329034 2025] [:error] [pid 38403:tid 38410] [client 192.178.4.101:57668] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCnSABCL4g8TXcskwnU8QAAAQI"]
[Thu Dec 04 05:10:35.283805 2025] [:error] [pid 2159:tid 2173] [client 192.178.4.101:62260] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCnSz3GVdXg3ORUAG2QKQAAAAo"]
[Thu Dec 04 05:10:39.045715 2025] [:error] [pid 2160:tid 2197] [client 192.178.4.101:44144] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCnT0NDGjl4u2feUD-8QAAAAEc"]
[Thu Dec 04 05:10:40.779241 2025] [:error] [pid 38403:tid 38432] [client 192.178.4.101:41440] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCnUABCL4g8TXcskwnVAgAAARg"]
[Thu Dec 04 05:11:15.056097 2025] [:error] [pid 38403:tid 38429] [client 192.178.4.101:41504] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCncwBCL4g8TXcskwnVbAAAARU"]
[Thu Dec 04 05:11:24.793496 2025] [:error] [pid 2160:tid 2197] [client 192.178.4.101:56085] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCnfENDGjl4u2feUD-8hAAAAEc"]
[Thu Dec 04 05:11:38.327662 2025] [:error] [pid 2244:tid 2271] [client 192.178.4.101:53456] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCnipm00CCLpKa0F70XJgAAANg"]
[Thu Dec 04 05:11:45.563655 2025] [:error] [pid 2244:tid 2270] [client 192.178.4.101:47669] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCnkZm00CCLpKa0F70XNAAAANc"]
[Thu Dec 04 05:11:54.293919 2025] [:error] [pid 2161:tid 2233] [client 192.178.4.101:48291] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCnmijiGdnP9Am2woVYmgAAAJA"]
[Thu Dec 04 05:11:59.109260 2025] [:error] [pid 2160:tid 2200] [client 192.178.4.101:41229] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCnn0NDGjl4u2feUD-8xQAAAEo"]
[Thu Dec 04 05:12:06.435518 2025] [:error] [pid 2161:tid 2227] [client 192.178.4.101:60034] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCnpijiGdnP9Am2woVYvAAAAIo"]
[Thu Dec 04 05:13:11.748838 2025] [:error] [pid 38403:tid 38414] [client 192.178.4.101:57918] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCn5wBCL4g8TXcskwnWyQAAAQY"]
[Thu Dec 04 05:13:15.185837 2025] [:error] [pid 2159:tid 2182] [client 192.178.4.101:64408] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCn6z3GVdXg3ORUAG2RJAAAABM"]
[Thu Dec 04 05:13:36.231348 2025] [:error] [pid 38403:tid 38428] [client 192.178.4.101:44132] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCoAABCL4g8TXcskwnXCAAAARQ"]
[Thu Dec 04 05:14:07.548597 2025] [:error] [pid 2161:tid 2238] [client 192.178.4.101:46959] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCoHyjiGdnP9Am2woVZcQAAAJU"]
[Thu Dec 04 05:18:28.271176 2025] [:error] [pid 2244:tid 2255] [client 192.178.4.101:56145] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCpJJm00CCLpKa0F70Z4AAAAMk"]
[Thu Dec 04 05:18:31.321775 2025] [:error] [pid 2160:tid 2198] [client 192.178.4.101:41751] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCpJ0NDGjl4u2feUD--zQAAAEg"]
[Thu Dec 04 05:18:39.901040 2025] [:error] [pid 38403:tid 38413] [client 192.178.4.101:51484] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCpLwBCL4g8TXcskwnaJQAAAQU"]
[Thu Dec 04 05:18:41.707123 2025] [:error] [pid 2161:tid 2235] [client 192.178.4.101:51750] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCpMSjiGdnP9Am2woVbpAAAAJI"]
[Thu Dec 04 05:18:46.491619 2025] [:error] [pid 2159:tid 2177] [client 192.178.4.101:55813] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCpNj3GVdXg3ORUAG2TWAAAAA4"]
[Thu Dec 04 05:18:50.164392 2025] [:error] [pid 2160:tid 2211] [client 192.178.4.101:54518] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCpOkNDGjl4u2feUD--4QAAAFU"]
[Thu Dec 04 05:18:55.324899 2025] [:error] [pid 2244:tid 2251] [client 192.178.4.101:38264] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCpP5m00CCLpKa0F70Z-wAAAMU"]
[Thu Dec 04 05:18:56.880985 2025] [:error] [pid 2244:tid 2266] [client 192.178.4.101:36177] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCpQJm00CCLpKa0F70Z_wAAANM"]
[Thu Dec 04 05:19:00.649365 2025] [:error] [pid 2160:tid 2190] [client 192.178.4.101:35741] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCpRENDGjl4u2feUD--7QAAAEA"]
[Thu Dec 04 05:19:02.478245 2025] [:error] [pid 2161:tid 2240] [client 192.178.4.101:46951] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCpRijiGdnP9Am2woVbywAAAJc"]
[Thu Dec 04 05:19:06.155903 2025] [:error] [pid 38403:tid 38410] [client 192.178.4.101:55048] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCpSgBCL4g8TXcskwnaTgAAAQI"]
[Thu Dec 04 05:19:07.978595 2025] [:error] [pid 38403:tid 38417] [client 192.178.4.101:47306] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCpSwBCL4g8TXcskwnaUgAAAQk"]
[Thu Dec 04 05:24:23.410127 2025] [:error] [pid 38403:tid 38420] [client 192.178.4.101:53274] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCqhwBCL4g8TXcskwndoQAAAQw"]
[Thu Dec 04 05:24:43.213527 2025] [:error] [pid 38403:tid 38410] [client 192.178.4.101:37041] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCqmwBCL4g8TXcskwnd4AAAAQI"]
[Thu Dec 04 05:24:45.665255 2025] [:error] [pid 2244:tid 2263] [client 192.178.4.101:59841] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCqnZm00CCLpKa0F70dIAAAANE"]
[Thu Dec 04 05:24:50.453857 2025] [:error] [pid 38403:tid 38424] [client 192.178.4.101:56783] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCqogBCL4g8TXcskwnd6QAAARA"]
[Thu Dec 04 05:24:52.379845 2025] [:error] [pid 2244:tid 2265] [client 192.178.4.101:58697] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCqpJm00CCLpKa0F70dLgAAANI"]
[Thu Dec 04 05:25:10.113313 2025] [:error] [pid 2159:tid 2181] [client 192.178.4.101:39581] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCqtj3GVdXg3ORUAG2VygAAABI"]
[Thu Dec 04 05:27:45.361139 2025] [:error] [pid 2159:tid 2164] [client 192.178.4.101:44910] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCrUT3GVdXg3ORUAG2W0wAAAAE"]
[Thu Dec 04 05:29:33.594647 2025] [:error] [pid 2161:tid 2225] [client 192.178.4.101:37804] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCrvSjiGdnP9Am2woVgzwAAAIg"]
[Thu Dec 04 05:29:34.187880 2025] [:error] [pid 2244:tid 2269] [client 192.178.4.101:50609] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCrvpm00CCLpKa0F70fLQAAANY"]
[Thu Dec 04 05:29:45.186806 2025] [:error] [pid 2244:tid 2249] [client 192.178.4.101:57915] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCryZm00CCLpKa0F70fPQAAAMM"]
[Thu Dec 04 05:29:47.324671 2025] [:error] [pid 2159:tid 2177] [client 192.178.4.101:62860] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCryz3GVdXg3ORUAG2XtQAAAA4"]
[Thu Dec 04 05:29:50.557531 2025] [:error] [pid 2244:tid 2247] [client 192.178.4.101:41177] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCrzpm00CCLpKa0F70fTAAAAME"]
[Thu Dec 04 05:29:51.308233 2025] [:error] [pid 2160:tid 2214] [client 192.178.4.101:58369] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCrz0NDGjl4u2feUD_DcwAAAFg"]
[Thu Dec 04 05:29:54.741878 2025] [:error] [pid 2159:tid 2181] [client 192.178.4.101:36071] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCr0j3GVdXg3ORUAG2XxQAAABI"]
[Thu Dec 04 05:29:58.085065 2025] [:error] [pid 2159:tid 2173] [client 192.178.4.101:36213] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCr1j3GVdXg3ORUAG2X1gAAAAo"]
[Thu Dec 04 05:30:09.096973 2025] [:error] [pid 2161:tid 2223] [client 192.178.4.101:57712] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCr4SjiGdnP9Am2woVhBQAAAIY"]
[Thu Dec 04 05:30:15.382731 2025] [:error] [pid 2244:tid 2268] [client 192.178.4.101:62847] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCr55m00CCLpKa0F70fnwAAANU"]
[Thu Dec 04 05:30:19.138719 2025] [:error] [pid 2159:tid 2171] [client 192.178.4.101:49764] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCr6z3GVdXg3ORUAG2X8wAAAAg"]
[Thu Dec 04 05:30:26.283495 2025] [:error] [pid 38403:tid 38421] [client 192.178.4.101:50468] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCr8gBCL4g8TXcskwnhdAAAAQ0"]
[Thu Dec 04 05:30:27.353526 2025] [:error] [pid 2159:tid 2186] [client 192.178.4.101:63941] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCr8z3GVdXg3ORUAG2X-wAAABc"]
[Thu Dec 04 05:31:38.818794 2025] [:error] [pid 2159:tid 2183] [client 192.178.4.101:56998] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCsOj3GVdXg3ORUAG2YTgAAABQ"]
[Thu Dec 04 05:31:40.645209 2025] [:error] [pid 2160:tid 2196] [client 192.178.4.101:45469] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCsPENDGjl4u2feUD_EFgAAAEY"]
[Thu Dec 04 05:32:01.633064 2025] [:error] [pid 38403:tid 38432] [client 192.178.4.101:57885] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCsUQBCL4g8TXcskwnidwAAARg"]
[Thu Dec 04 05:34:02.756863 2025] [:error] [pid 2159:tid 2180] [client 192.178.4.101:51405] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCsyj3GVdXg3ORUAG2ZZgAAABE"]
[Thu Dec 04 05:39:20.207895 2025] [:error] [pid 38403:tid 38408] [client 192.178.4.101:63857] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCuCABCL4g8TXcskwnm0AAAAQE"]
[Thu Dec 04 05:39:25.483069 2025] [:error] [pid 2159:tid 2179] [client 192.178.4.101:59671] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCuDT3GVdXg3ORUAG2bawAAABA"]
[Thu Dec 04 05:39:28.496629 2025] [:error] [pid 2161:tid 2228] [client 192.178.4.101:47826] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCuECjiGdnP9Am2woVkxAAAAIs"]
[Thu Dec 04 05:39:29.128077 2025] [:error] [pid 2159:tid 2164] [client 192.178.4.101:39697] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCuET3GVdXg3ORUAG2bewAAAAE"]
[Thu Dec 04 05:39:30.338127 2025] [:error] [pid 2244:tid 2246] [client 192.178.4.101:60225] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCuEpm00CCLpKa0F70kbAAAAMA"]
[Thu Dec 04 05:39:33.376693 2025] [:error] [pid 2161:tid 2241] [client 192.178.4.101:40398] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCuFSjiGdnP9Am2woVk0QAAAJg"]
[Thu Dec 04 05:39:35.221063 2025] [:error] [pid 2161:tid 2230] [client 192.178.4.101:63206] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCuFyjiGdnP9Am2woVk1gAAAI0"]
[Thu Dec 04 05:39:37.064681 2025] [:error] [pid 2244:tid 2252] [client 192.178.4.101:63085] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCuGZm00CCLpKa0F70kggAAAMY"]
[Thu Dec 04 05:39:38.905713 2025] [:error] [pid 2161:tid 2220] [client 192.178.4.101:47407] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCuGijiGdnP9Am2woVk3QAAAIM"]
[Thu Dec 04 05:39:40.108200 2025] [:error] [pid 2160:tid 2201] [client 192.178.4.101:56187] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCuHENDGjl4u2feUD_G_AAAAEs"]
[Thu Dec 04 05:39:41.927462 2025] [:error] [pid 2244:tid 2257] [client 192.178.4.101:62575] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCuHZm00CCLpKa0F70kkwAAAMs"]
[Thu Dec 04 05:39:43.763592 2025] [:error] [pid 38403:tid 38419] [client 192.178.4.101:65529] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCuHwBCL4g8TXcskwnm9QAAAQs"]
[Thu Dec 04 05:39:45.592849 2025] [:error] [pid 2244:tid 2255] [client 192.178.4.101:53929] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCuIZm00CCLpKa0F70knAAAAMk"]
[Thu Dec 04 05:39:46.813832 2025] [:error] [pid 2161:tid 2230] [client 192.178.4.101:63926] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCuIijiGdnP9Am2woVk9QAAAI0"]
[Thu Dec 04 05:39:48.650495 2025] [:error] [pid 2244:tid 2271] [client 192.178.4.101:60516] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCuJJm00CCLpKa0F70knwAAANg"]
[Thu Dec 04 05:39:51.703428 2025] [:error] [pid 2160:tid 2200] [client 192.178.4.101:53186] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCuJ0NDGjl4u2feUD_HBgAAAEo"]
[Thu Dec 04 05:39:52.932733 2025] [:error] [pid 38403:tid 38428] [client 192.178.4.101:62779] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCuKABCL4g8TXcskwnnIQAAARQ"]
[Thu Dec 04 05:39:54.774379 2025] [:error] [pid 2161:tid 2235] [client 192.178.4.101:38557] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCuKijiGdnP9Am2woVlDwAAAJI"]
[Thu Dec 04 05:39:57.818930 2025] [:error] [pid 38403:tid 38407] [client 192.178.4.101:55376] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCuLQBCL4g8TXcskwnnKgAAAQA"]
[Thu Dec 04 05:39:59.658196 2025] [:error] [pid 2159:tid 2186] [client 192.178.4.101:45122] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCuLz3GVdXg3ORUAG2b2QAAABc"]
[Thu Dec 04 05:40:01.510238 2025] [:error] [pid 2159:tid 2172] [client 192.178.4.101:38657] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCuMT3GVdXg3ORUAG2b3gAAAAk"]
[Thu Dec 04 05:40:03.225485 2025] [:error] [pid 38403:tid 38427] [client 192.178.4.101:48177] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCuMwBCL4g8TXcskwnnNAAAARM"]
[Thu Dec 04 05:40:04.541677 2025] [:error] [pid 2244:tid 2260] [client 192.178.4.101:55160] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCuNJm00CCLpKa0F70kswAAAM4"]
[Thu Dec 04 05:40:06.367627 2025] [:error] [pid 2244:tid 2254] [client 192.178.4.101:37821] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCuNpm00CCLpKa0F70kuAAAAMg"]
[Thu Dec 04 05:40:08.211637 2025] [:error] [pid 2244:tid 2263] [client 192.178.4.101:46455] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCuOJm00CCLpKa0F70kvQAAANE"]
[Thu Dec 04 05:40:11.869441 2025] [:error] [pid 2161:tid 2241] [client 192.178.4.101:49286] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCuOyjiGdnP9Am2woVlNAAAAJg"]
[Thu Dec 04 05:40:13.085421 2025] [:error] [pid 2160:tid 2211] [client 192.178.4.101:35819] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCuPUNDGjl4u2feUD_HKgAAAFU"]
[Thu Dec 04 05:40:45.105578 2025] [:error] [pid 2159:tid 2170] [client 192.178.4.101:46459] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCuXT3GVdXg3ORUAG2cGAAAAAc"]
[Thu Dec 04 05:40:47.315504 2025] [:error] [pid 2161:tid 2223] [client 192.178.4.101:48747] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCuXyjiGdnP9Am2woVlbgAAAIY"]
[Thu Dec 04 05:40:49.055429 2025] [:error] [pid 38403:tid 38430] [client 192.178.4.101:60339] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCuYQBCL4g8TXcskwnnmwAAARY"]
[Thu Dec 04 05:40:54.037547 2025] [:error] [pid 2161:tid 2232] [client 192.178.4.101:63556] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCuZijiGdnP9Am2woVlfgAAAI8"]
[Thu Dec 04 05:40:55.867194 2025] [:error] [pid 38403:tid 38416] [client 192.178.4.101:55318] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCuZwBCL4g8TXcskwnnoAAAAQg"]
[Thu Dec 04 05:40:57.733022 2025] [:error] [pid 38403:tid 38410] [client 192.178.4.101:40781] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCuaQBCL4g8TXcskwnnowAAAQI"]
[Thu Dec 04 05:41:00.846655 2025] [:error] [pid 38403:tid 38426] [client 192.178.4.101:48108] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCubABCL4g8TXcskwnnqgAAARI"]
[Thu Dec 04 05:41:01.986110 2025] [:error] [pid 2160:tid 2199] [client 192.178.4.101:62196] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCubUNDGjl4u2feUD_HVQAAAEk"]
[Thu Dec 04 05:41:03.214685 2025] [:error] [pid 38403:tid 38427] [client 192.178.4.101:43229] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCubwBCL4g8TXcskwnnsAAAARM"]
[Thu Dec 04 05:41:05.041129 2025] [:error] [pid 2160:tid 2203] [client 192.178.4.101:38568] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCucUNDGjl4u2feUD_HWQAAAE0"]
[Thu Dec 04 05:41:06.879628 2025] [:error] [pid 38403:tid 38413] [client 192.178.4.101:48499] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCucgBCL4g8TXcskwnnvgAAAQU"]
[Thu Dec 04 05:41:08.709073 2025] [:error] [pid 2159:tid 2167] [client 192.178.4.101:57068] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCudD3GVdXg3ORUAG2cRQAAAAQ"]
[Thu Dec 04 05:41:09.932093 2025] [:error] [pid 2159:tid 2178] [client 192.178.4.101:38395] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCudT3GVdXg3ORUAG2cSgAAAA8"]
[Thu Dec 04 05:41:11.846843 2025] [:error] [pid 2244:tid 2255] [client 192.178.4.101:46668] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCud5m00CCLpKa0F70lFQAAAMk"]
[Thu Dec 04 05:41:13.599139 2025] [:error] [pid 2160:tid 2200] [client 192.178.4.101:63667] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCueUNDGjl4u2feUD_HYwAAAEo"]
[Thu Dec 04 05:41:15.429272 2025] [:error] [pid 2159:tid 2185] [client 192.178.4.101:48118] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCuez3GVdXg3ORUAG2cUQAAABY"]
[Thu Dec 04 05:41:18.571331 2025] [:error] [pid 2161:tid 2238] [client 192.178.4.101:40445] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCufijiGdnP9Am2woVlnQAAAJU"]
[Thu Dec 04 05:41:19.189308 2025] [:error] [pid 2159:tid 2171] [client 192.178.4.101:55678] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCufz3GVdXg3ORUAG2cWAAAAAg"]
[Thu Dec 04 05:41:20.943102 2025] [:error] [pid 38403:tid 38420] [client 192.178.4.101:64980] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCugABCL4g8TXcskwnn4wAAAQw"]
[Thu Dec 04 05:41:22.895926 2025] [:error] [pid 2244:tid 2266] [client 192.178.4.101:37349] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCugpm00CCLpKa0F70lIAAAANM"]
[Thu Dec 04 05:41:24.612036 2025] [:error] [pid 2244:tid 2270] [client 192.178.4.101:59963] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCuhJm00CCLpKa0F70lJQAAANc"]
[Thu Dec 04 05:41:26.434378 2025] [:error] [pid 2159:tid 2169] [client 192.178.4.101:52619] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCuhj3GVdXg3ORUAG2cXwAAAAY"]
[Thu Dec 04 05:41:28.266903 2025] [:error] [pid 2160:tid 2205] [client 192.178.4.101:55806] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCuiENDGjl4u2feUD_HbgAAAE8"]
[Thu Dec 04 05:41:29.496840 2025] [:error] [pid 2244:tid 2262] [client 192.178.4.101:40228] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCuiZm00CCLpKa0F70lKwAAANA"]
[Thu Dec 04 05:41:31.333818 2025] [:error] [pid 2244:tid 2258] [client 192.178.4.101:53322] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCui5m00CCLpKa0F70lLwAAAMw"]
[Thu Dec 04 05:41:33.165177 2025] [:error] [pid 2160:tid 2200] [client 192.178.4.101:45711] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCujUNDGjl4u2feUD_HdgAAAEo"]
[Thu Dec 04 05:41:34.379979 2025] [:error] [pid 2159:tid 2171] [client 192.178.4.101:35987] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCujj3GVdXg3ORUAG2caAAAAAg"]
[Thu Dec 04 05:41:36.831703 2025] [:error] [pid 38403:tid 38432] [client 192.178.4.101:51953] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCukABCL4g8TXcskwnoEgAAARg"]
[Thu Dec 04 05:41:38.050472 2025] [:error] [pid 2160:tid 2211] [client 192.178.4.101:58760] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCukkNDGjl4u2feUD_HfgAAAFU"]
[Thu Dec 04 05:41:39.882343 2025] [:error] [pid 38403:tid 38407] [client 192.178.4.101:44397] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCukwBCL4g8TXcskwnoHQAAAQA"]
[Thu Dec 04 05:42:06.168070 2025] [:error] [pid 2159:tid 2177] [client 192.178.4.101:57456] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCurj3GVdXg3ORUAG2cjQAAAA4"]
[Thu Dec 04 05:42:07.245633 2025] [:error] [pid 2161:tid 2223] [client 192.178.4.101:55286] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCuryjiGdnP9Am2woVmCQAAAIY"]
[Thu Dec 04 05:42:09.837978 2025] [:error] [pid 2161:tid 2240] [client 192.178.4.101:40748] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCusSjiGdnP9Am2woVmEAAAAJc"]
[Thu Dec 04 05:42:11.674786 2025] [:error] [pid 2160:tid 2206] [client 192.178.4.101:36685] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCus0NDGjl4u2feUD_HqQAAAFA"]
[Thu Dec 04 05:42:12.908302 2025] [:error] [pid 2244:tid 2269] [client 192.178.4.101:51618] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCutJm00CCLpKa0F70leQAAANY"]
[Thu Dec 04 05:42:14.727660 2025] [:error] [pid 38403:tid 38423] [client 192.178.4.101:57839] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCutgBCL4g8TXcskwnoVwAAAQ8"]
[Thu Dec 04 05:42:16.453308 2025] [:error] [pid 38403:tid 38413] [client 192.178.4.101:57090] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCuuABCL4g8TXcskwnoXAAAAQU"]
[Thu Dec 04 05:42:18.388269 2025] [:error] [pid 2160:tid 2204] [client 192.178.4.101:64709] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCuukNDGjl4u2feUD_HsQAAAE4"]
[Thu Dec 04 05:42:19.608587 2025] [:error] [pid 2161:tid 2241] [client 192.178.4.101:61579] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCuuyjiGdnP9Am2woVmHAAAAJg"]
[Thu Dec 04 05:42:21.350643 2025] [:error] [pid 38403:tid 38419] [client 192.178.4.101:58038] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCuvQBCL4g8TXcskwnoawAAAQs"]
[Thu Dec 04 05:42:25.625152 2025] [:error] [pid 2161:tid 2220] [client 192.178.4.101:36070] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCuwSjiGdnP9Am2woVmJwAAAIM"]
[Thu Dec 04 05:42:26.278926 2025] [:error] [pid 2244:tid 2261] [client 192.178.4.101:51608] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCuwpm00CCLpKa0F70lhAAAAM8"]
[Thu Dec 04 05:42:28.871176 2025] [:error] [pid 2160:tid 2198] [client 192.178.4.101:47789] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCuxENDGjl4u2feUD_HuwAAAEg"]
[Thu Dec 04 05:42:29.383950 2025] [:error] [pid 2160:tid 2204] [client 192.178.4.101:44802] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCuxUNDGjl4u2feUD_HvQAAAE4"]
[Thu Dec 04 05:42:31.221005 2025] [:error] [pid 38403:tid 38422] [client 192.178.4.101:36761] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCuxwBCL4g8TXcskwnoewAAAQ4"]
[Thu Dec 04 05:42:33.057233 2025] [:error] [pid 38403:tid 38412] [client 192.178.4.101:44733] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCuyQBCL4g8TXcskwnoggAAAQQ"]
[Thu Dec 04 05:42:34.281874 2025] [:error] [pid 2159:tid 2174] [client 192.178.4.101:65389] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCuyj3GVdXg3ORUAG2czgAAAAs"]
[Thu Dec 04 05:42:36.171154 2025] [:error] [pid 2160:tid 2209] [client 192.178.4.101:34819] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCuzENDGjl4u2feUD_H0QAAAFM"]
[Thu Dec 04 05:42:38.000746 2025] [:error] [pid 38403:tid 38423] [client 192.178.4.101:35951] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCuzQBCL4g8TXcskwnoigAAAQ8"]
[Thu Dec 04 05:42:39.784361 2025] [:error] [pid 38403:tid 38431] [client 192.178.4.101:61986] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCuzwBCL4g8TXcskwnojQAAARc"]
[Thu Dec 04 05:42:41.010924 2025] [:error] [pid 2244:tid 2246] [client 192.178.4.101:45014] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCu0Zm00CCLpKa0F70loQAAAMA"]
[Thu Dec 04 05:42:42.836852 2025] [:error] [pid 2161:tid 2219] [client 192.178.4.101:57362] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCu0ijiGdnP9Am2woVmOwAAAII"]
[Thu Dec 04 05:42:44.676797 2025] [:error] [pid 2160:tid 2198] [client 192.178.4.101:34909] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCu1ENDGjl4u2feUD_H5AAAAEg"]
[Thu Dec 04 05:42:46.563963 2025] [:error] [pid 2244:tid 2254] [client 192.178.4.101:46537] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCu1pm00CCLpKa0F70lpQAAAMg"]
[Thu Dec 04 05:42:47.808261 2025] [:error] [pid 2161:tid 2235] [client 192.178.4.101:56525] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCu1yjiGdnP9Am2woVmRgAAAJI"]
[Thu Dec 04 05:42:49.554712 2025] [:error] [pid 38403:tid 38430] [client 192.178.4.101:43095] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCu2QBCL4g8TXcskwnoowAAARY"]
[Thu Dec 04 05:42:51.387708 2025] [:error] [pid 2160:tid 2203] [client 192.178.4.101:55249] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCu20NDGjl4u2feUD_H8gAAAE0"]
[Thu Dec 04 05:42:53.224822 2025] [:error] [pid 2159:tid 2177] [client 192.178.4.101:63248] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCu3T3GVdXg3ORUAG2c3gAAAA4"]
[Thu Dec 04 05:42:54.440263 2025] [:error] [pid 38403:tid 38430] [client 192.178.4.101:49507] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCu3gBCL4g8TXcskwnoqAAAARY"]
[Thu Dec 04 05:42:56.276590 2025] [:error] [pid 2160:tid 2192] [client 192.178.4.101:52643] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCu4ENDGjl4u2feUD_H-wAAAEI"]
[Thu Dec 04 05:42:58.009478 2025] [:error] [pid 2161:tid 2237] [client 192.178.4.101:60694] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCu4ijiGdnP9Am2woVmTwAAAJQ"]
[Thu Dec 04 05:42:59.936253 2025] [:error] [pid 2159:tid 2182] [client 192.178.4.101:59057] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCu4z3GVdXg3ORUAG2c4QAAABM"]
[Thu Dec 04 05:43:02.233083 2025] [:error] [pid 2244:tid 2268] [client 192.178.4.101:39396] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCu5pm00CCLpKa0F70lvAAAANU"]
[Thu Dec 04 05:43:03.380112 2025] [:error] [pid 2159:tid 2174] [client 192.178.4.101:50952] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCu5z3GVdXg3ORUAG2c6wAAAAs"]
[Thu Dec 04 05:43:26.365874 2025] [:error] [pid 2159:tid 2163] [client 192.178.4.101:44242] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCu_j3GVdXg3ORUAG2dCwAAAAA"]
[Thu Dec 04 05:43:27.290521 2025] [:error] [pid 2161:tid 2237] [client 192.178.4.101:52310] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCu_yjiGdnP9Am2woVmfgAAAJQ"]
[Thu Dec 04 05:43:29.259845 2025] [:error] [pid 38403:tid 38429] [client 192.178.4.101:57228] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCvAQBCL4g8TXcskwno9wAAARU"]
[Thu Dec 04 05:43:31.118735 2025] [:error] [pid 2244:tid 2263] [client 192.178.4.101:56502] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCvA5m00CCLpKa0F70l4wAAANE"]
[Thu Dec 04 05:43:32.946840 2025] [:error] [pid 2160:tid 2194] [client 192.178.4.101:50074] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCvBENDGjl4u2feUD_IOgAAAEQ"]
[Thu Dec 04 05:43:34.782558 2025] [:error] [pid 38403:tid 38417] [client 192.178.4.101:40038] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCvBgBCL4g8TXcskwnpJgAAAQk"]
[Thu Dec 04 05:43:36.135382 2025] [:error] [pid 38403:tid 38416] [client 192.178.4.101:59562] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCvCABCL4g8TXcskwnpMwAAAQg"]
[Thu Dec 04 05:43:37.843256 2025] [:error] [pid 2159:tid 2173] [client 192.178.4.101:42630] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCvCT3GVdXg3ORUAG2dGQAAAAo"]
[Thu Dec 04 05:43:39.673868 2025] [:error] [pid 2244:tid 2261] [client 192.178.4.101:54874] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCvC5m00CCLpKa0F70l9AAAAM8"]
[Thu Dec 04 05:43:41.507588 2025] [:error] [pid 2161:tid 2220] [client 192.178.4.101:36991] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCvDSjiGdnP9Am2woVmkgAAAIM"]
[Thu Dec 04 05:43:42.726318 2025] [:error] [pid 38403:tid 38426] [client 192.178.4.101:47725] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCvDgBCL4g8TXcskwnpOAAAARI"]
[Thu Dec 04 05:43:44.559033 2025] [:error] [pid 38403:tid 38411] [client 192.178.4.101:63629] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCvEABCL4g8TXcskwnpOwAAAQM"]
[Thu Dec 04 05:43:46.387038 2025] [:error] [pid 2159:tid 2187] [client 192.178.4.101:55850] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCvEj3GVdXg3ORUAG2dKQAAABg"]
[Thu Dec 04 05:43:48.248861 2025] [:error] [pid 2244:tid 2263] [client 192.178.4.101:45851] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCvFJm00CCLpKa0F70mCAAAANE"]
[Thu Dec 04 05:43:50.304394 2025] [:error] [pid 2159:tid 2167] [client 192.178.4.101:35447] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCvFj3GVdXg3ORUAG2dLgAAAAQ"]
[Thu Dec 04 05:43:53.209321 2025] [:error] [pid 2244:tid 2252] [client 192.178.4.101:59300] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCvGZm00CCLpKa0F70mFAAAAMY"]
[Thu Dec 04 05:43:53.755601 2025] [:error] [pid 38403:tid 38428] [client 192.178.4.101:60015] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCvGQBCL4g8TXcskwnpSwAAARQ"]
[Thu Dec 04 05:43:55.578309 2025] [:error] [pid 2160:tid 2211] [client 192.178.4.101:60888] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCvG0NDGjl4u2feUD_IXgAAAFU"]
[Thu Dec 04 05:43:58.177057 2025] [:error] [pid 2159:tid 2173] [client 192.178.4.101:50088] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCvHj3GVdXg3ORUAG2dPwAAAAo"]
[Thu Dec 04 05:43:59.242688 2025] [:error] [pid 2161:tid 2239] [client 192.178.4.101:60504] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCvHyjiGdnP9Am2woVmpwAAAJY"]
[Thu Dec 04 05:44:01.712433 2025] [:error] [pid 2161:tid 2233] [client 192.178.4.101:38072] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCvISjiGdnP9Am2woVmrQAAAJA"]
[Thu Dec 04 05:44:02.745748 2025] [:error] [pid 38403:tid 38432] [client 192.178.4.101:41282] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCvIgBCL4g8TXcskwnpWAAAARg"]
[Thu Dec 04 05:44:04.132326 2025] [:error] [pid 38403:tid 38408] [client 192.178.4.101:42038] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCvJABCL4g8TXcskwnpWwAAAQE"]
[Thu Dec 04 05:44:05.965680 2025] [:error] [pid 2244:tid 2251] [client 192.178.4.101:62135] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCvJZm00CCLpKa0F70mLgAAAMU"]
[Thu Dec 04 05:44:07.802093 2025] [:error] [pid 2244:tid 2260] [client 192.178.4.101:35472] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCvJ5m00CCLpKa0F70mOAAAAM4"]
[Thu Dec 04 05:44:09.036316 2025] [:error] [pid 2160:tid 2191] [client 192.178.4.101:65268] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCvKUNDGjl4u2feUD_IcQAAAEE"]
[Thu Dec 04 05:44:10.849741 2025] [:error] [pid 2161:tid 2234] [client 192.178.4.101:44583] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCvKijiGdnP9Am2woVmuwAAAJE"]
[Thu Dec 04 05:44:13.389219 2025] [:error] [pid 38403:tid 38430] [client 192.178.4.101:63760] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCvLQBCL4g8TXcskwnpcgAAARY"]
[Thu Dec 04 05:44:14.523205 2025] [:error] [pid 2159:tid 2168] [client 192.178.4.101:47133] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCvLj3GVdXg3ORUAG2dSwAAAAU"]
[Thu Dec 04 05:44:16.361703 2025] [:error] [pid 2161:tid 2226] [client 192.178.4.101:37216] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCvMCjiGdnP9Am2woVmwwAAAIk"]
[Thu Dec 04 05:44:18.194189 2025] [:error] [pid 2159:tid 2165] [client 192.178.4.101:36213] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCvMj3GVdXg3ORUAG2dUAAAAAI"]
[Thu Dec 04 05:44:19.404874 2025] [:error] [pid 2244:tid 2266] [client 192.178.4.101:35187] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCvM5m00CCLpKa0F70mRQAAANM"]
[Thu Dec 04 05:44:22.267443 2025] [:error] [pid 38403:tid 38410] [client 192.178.4.101:62250] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCvNgBCL4g8TXcskwnphQAAAQI"]
[Thu Dec 04 05:44:23.599781 2025] [:error] [pid 2244:tid 2256] [client 192.178.4.101:60933] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCvN5m00CCLpKa0F70mbAAAAMo"]
[Thu Dec 04 05:44:43.861530 2025] [:error] [pid 2161:tid 2217] [client 192.178.4.101:55889] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCvSyjiGdnP9Am2woVnAAAAAIA"]
[Thu Dec 04 05:44:45.930154 2025] [:error] [pid 2244:tid 2269] [client 192.178.4.101:57907] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCvTZm00CCLpKa0F70mmAAAANY"]
[Thu Dec 04 05:44:47.629360 2025] [:error] [pid 2160:tid 2192] [client 192.178.4.101:39241] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCvT0NDGjl4u2feUD_IuAAAAEI"]
[Thu Dec 04 05:44:50.071270 2025] [:error] [pid 38403:tid 38408] [client 192.178.4.101:61468] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCvUgBCL4g8TXcskwnpwAAAAQE"]
[Thu Dec 04 05:44:51.202145 2025] [:error] [pid 38403:tid 38419] [client 192.178.4.101:43366] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCvUwBCL4g8TXcskwnpwwAAAQs"]
[Thu Dec 04 05:44:53.028842 2025] [:error] [pid 2161:tid 2230] [client 192.178.4.101:35186] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCvVSjiGdnP9Am2woVnFAAAAI0"]
[Thu Dec 04 05:44:54.871974 2025] [:error] [pid 38403:tid 38413] [client 192.178.4.101:36035] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCvVgBCL4g8TXcskwnpywAAAQU"]
[Thu Dec 04 05:44:56.705819 2025] [:error] [pid 2160:tid 2210] [client 192.178.4.101:57982] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCvWENDGjl4u2feUD_IwAAAAFQ"]
[Thu Dec 04 05:44:57.913561 2025] [:error] [pid 38403:tid 38420] [client 192.178.4.101:54693] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCvWQBCL4g8TXcskwnp0AAAAQw"]
[Thu Dec 04 05:44:59.755181 2025] [:error] [pid 38403:tid 38424] [client 192.178.4.101:37928] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCvWwBCL4g8TXcskwnp1wAAARA"]
[Thu Dec 04 05:45:10.137223 2025] [:error] [pid 2244:tid 2251] [client 192.178.4.101:64831] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCvZpm00CCLpKa0F70mugAAAMU"]
[Thu Dec 04 05:45:11.970154 2025] [:error] [pid 2160:tid 2194] [client 192.178.4.101:44993] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCvZ0NDGjl4u2feUD_I0QAAAEQ"]
[Thu Dec 04 05:45:13.097960 2025] [:error] [pid 2159:tid 2173] [client 192.178.4.101:53910] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCvaT3GVdXg3ORUAG2dugAAAAo"]
[Thu Dec 04 05:45:15.020885 2025] [:error] [pid 2244:tid 2252] [client 192.178.4.101:36523] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCva5m00CCLpKa0F70mxQAAAMY"]
[Thu Dec 04 05:45:18.603942 2025] [:error] [pid 2160:tid 2192] [client 192.178.4.101:43816] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCvbkNDGjl4u2feUD_I1QAAAEI"]
[Thu Dec 04 05:45:19.910075 2025] [:error] [pid 2161:tid 2229] [client 192.178.4.101:59254] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCvbyjiGdnP9Am2woVnPAAAAIw"]
[Thu Dec 04 05:45:21.734462 2025] [:error] [pid 38403:tid 38419] [client 192.178.4.101:40307] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCvcQBCL4g8TXcskwnp_QAAAQs"]
[Thu Dec 04 05:45:28.983054 2025] [:error] [pid 38403:tid 38408] [client 192.178.4.101:49312] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCveABCL4g8TXcskwnqDQAAAQE"]
[Thu Dec 04 05:45:30.815103 2025] [:error] [pid 2244:tid 2258] [client 192.178.4.101:59304] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCvepm00CCLpKa0F70m5gAAAMw"]
[Thu Dec 04 05:45:32.740874 2025] [:error] [pid 2244:tid 2251] [client 192.178.4.101:36688] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCvfJm00CCLpKa0F70m6QAAAMU"]
[Thu Dec 04 05:45:34.574351 2025] [:error] [pid 38403:tid 38407] [client 192.178.4.101:54603] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCvfgBCL4g8TXcskwnqEAAAAQA"]
[Thu Dec 04 05:45:36.308759 2025] [:error] [pid 2160:tid 2199] [client 192.178.4.101:51556] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCvgENDGjl4u2feUD_I5gAAAEk"]
[Thu Dec 04 05:45:37.624725 2025] [:error] [pid 2161:tid 2222] [client 192.178.4.101:58151] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCvgSjiGdnP9Am2woVnVgAAAIU"]
[Thu Dec 04 05:45:39.465164 2025] [:error] [pid 2159:tid 2176] [client 192.178.4.101:48046] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCvgz3GVdXg3ORUAG2eBgAAAA0"]
[Thu Dec 04 05:45:59.457247 2025] [:error] [pid 2161:tid 2239] [client 192.178.4.101:46406] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCvlyjiGdnP9Am2woVnfwAAAJY"]
[Thu Dec 04 05:46:01.970720 2025] [:error] [pid 2161:tid 2237] [client 192.178.4.101:58640] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCvmSjiGdnP9Am2woVnggAAAJQ"]
[Thu Dec 04 05:46:03.897666 2025] [:error] [pid 2161:tid 2220] [client 192.178.4.101:52350] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCvmyjiGdnP9Am2woVniQAAAIM"]
[Thu Dec 04 05:46:05.029222 2025] [:error] [pid 2159:tid 2178] [client 192.178.4.101:44696] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCvnT3GVdXg3ORUAG2eMQAAAA8"]
[Thu Dec 04 05:46:06.824145 2025] [:error] [pid 2160:tid 2196] [client 192.178.4.101:52485] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCvnkNDGjl4u2feUD_JCAAAAEY"]
[Thu Dec 04 05:46:08.814090 2025] [:error] [pid 2244:tid 2258] [client 192.178.4.101:37740] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCvoJm00CCLpKa0F70nEQAAAMw"]
[Thu Dec 04 05:46:10.540625 2025] [:error] [pid 2161:tid 2224] [client 192.178.4.101:35947] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCvoijiGdnP9Am2woVnkgAAAIc"]
[Thu Dec 04 05:46:11.766261 2025] [:error] [pid 38403:tid 38413] [client 192.178.4.101:49425] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCvowBCL4g8TXcskwnqXAAAAQU"]
[Thu Dec 04 05:46:13.604632 2025] [:error] [pid 2244:tid 2257] [client 192.178.4.101:55921] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCvpZm00CCLpKa0F70nHgAAAMs"]
[Thu Dec 04 05:46:15.511599 2025] [:error] [pid 38403:tid 38410] [client 192.178.4.101:54376] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCvpwBCL4g8TXcskwnqZQAAAQI"]
[Thu Dec 04 05:46:16.635192 2025] [:error] [pid 38403:tid 38421] [client 192.178.4.101:53803] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCvqABCL4g8TXcskwnqaQAAAQ0"]
[Thu Dec 04 05:46:19.768445 2025] [:error] [pid 2160:tid 2211] [client 192.178.4.101:59662] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCvq0NDGjl4u2feUD_JIwAAAFU"]
[Thu Dec 04 05:46:20.485790 2025] [:error] [pid 38403:tid 38410] [client 192.178.4.101:47553] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCvrABCL4g8TXcskwnqggAAAQI"]
[Thu Dec 04 05:46:22.224319 2025] [:error] [pid 38403:tid 38427] [client 192.178.4.101:37276] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCvrgBCL4g8TXcskwnqhQAAARM"]
[Thu Dec 04 05:46:23.967381 2025] [:error] [pid 38403:tid 38410] [client 192.178.4.101:37921] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCvrwBCL4g8TXcskwnqiwAAAQI"]
[Thu Dec 04 05:46:26.612132 2025] [:error] [pid 38403:tid 38417] [client 192.178.4.101:47329] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCvsgBCL4g8TXcskwnqjgAAAQk"]
[Thu Dec 04 05:46:27.672431 2025] [:error] [pid 2161:tid 2241] [client 192.178.4.101:46590] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCvsyjiGdnP9Am2woVnswAAAJg"]
[Thu Dec 04 05:46:29.569997 2025] [:error] [pid 2161:tid 2227] [client 192.178.4.101:56645] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCvtSjiGdnP9Am2woVnuQAAAIo"]
[Thu Dec 04 05:46:31.411071 2025] [:error] [pid 2159:tid 2186] [client 192.178.4.101:64290] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCvtz3GVdXg3ORUAG2eSAAAABc"]
[Thu Dec 04 05:46:32.624089 2025] [:error] [pid 2244:tid 2267] [client 192.178.4.101:59294] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCvuJm00CCLpKa0F70nMwAAANQ"]
[Thu Dec 04 05:46:34.456505 2025] [:error] [pid 2244:tid 2256] [client 192.178.4.101:42059] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCvupm00CCLpKa0F70nNgAAAMo"]
[Thu Dec 04 05:46:36.397662 2025] [:error] [pid 2159:tid 2169] [client 192.178.4.101:34954] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCvvD3GVdXg3ORUAG2eUAAAAAY"]
[Thu Dec 04 05:46:37.433088 2025] [:error] [pid 2161:tid 2230] [client 192.178.4.101:55348] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCvvSjiGdnP9Am2woVnzQAAAI0"]
[Thu Dec 04 05:46:39.345985 2025] [:error] [pid 38403:tid 38414] [client 192.178.4.101:64667] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCvvwBCL4g8TXcskwnqsQAAAQY"]
[Thu Dec 04 05:46:41.177875 2025] [:error] [pid 2161:tid 2222] [client 192.178.4.101:57065] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCvwSjiGdnP9Am2woVn0gAAAIU"]
[Thu Dec 04 05:46:42.917893 2025] [:error] [pid 2161:tid 2223] [client 192.178.4.101:43966] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCvwijiGdnP9Am2woVn2gAAAIY"]
[Thu Dec 04 05:46:44.782509 2025] [:error] [pid 38403:tid 38426] [client 192.178.4.101:42248] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCvxABCL4g8TXcskwnqzAAAARI"]
[Thu Dec 04 05:46:46.580590 2025] [:error] [pid 2160:tid 2210] [client 192.178.4.101:50418] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCvxkNDGjl4u2feUD_JQgAAAFQ"]
[Thu Dec 04 05:46:47.835642 2025] [:error] [pid 2160:tid 2203] [client 192.178.4.101:44049] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCvx0NDGjl4u2feUD_JRQAAAE0"]
[Thu Dec 04 05:46:50.864867 2025] [:error] [pid 2244:tid 2257] [client 192.178.4.101:52404] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCvypm00CCLpKa0F70nSAAAAMs"]
[Thu Dec 04 05:46:52.086750 2025] [:error] [pid 38403:tid 38424] [client 192.178.4.101:50432] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCvzABCL4g8TXcskwnq4wAAARA"]
[Thu Dec 04 05:46:53.394771 2025] [:error] [pid 2161:tid 2217] [client 192.178.4.101:43719] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCvzSjiGdnP9Am2woVn8QAAAIA"]
[Thu Dec 04 05:46:55.875353 2025] [:error] [pid 2160:tid 2193] [client 192.178.4.101:63203] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCvz0NDGjl4u2feUD_JUgAAAEM"]
[Thu Dec 04 05:47:17.455070 2025] [:error] [pid 38403:tid 38431] [client 192.178.4.101:64329] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCv5QBCL4g8TXcskwnrLQAAARc"]
[Thu Dec 04 05:47:18.986192 2025] [:error] [pid 2161:tid 2231] [client 192.178.4.101:54709] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCv5ijiGdnP9Am2woVoHQAAAI4"]
[Thu Dec 04 05:47:21.728032 2025] [:error] [pid 2160:tid 2195] [client 192.178.4.101:40487] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCv6UNDGjl4u2feUD_JdgAAAEU"]
[Thu Dec 04 05:47:22.638758 2025] [:error] [pid 2160:tid 2200] [client 192.178.4.101:56395] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCv6kNDGjl4u2feUD_JeQAAAEo"]
[Thu Dec 04 05:47:25.228609 2025] [:error] [pid 38403:tid 38416] [client 192.178.4.101:65449] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCv7QBCL4g8TXcskwnrNAAAAQg"]
[Thu Dec 04 05:47:26.945913 2025] [:error] [pid 38403:tid 38413] [client 192.178.4.101:40865] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCv7gBCL4g8TXcskwnrOgAAAQU"]
[Thu Dec 04 05:47:28.680334 2025] [:error] [pid 38403:tid 38416] [client 192.178.4.101:55404] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCv8ABCL4g8TXcskwnrQgAAAQg"]
[Thu Dec 04 05:47:29.977916 2025] [:error] [pid 38403:tid 38424] [client 192.178.4.101:34945] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCv8QBCL4g8TXcskwnrSQAAARA"]
[Thu Dec 04 05:47:31.813126 2025] [:error] [pid 2161:tid 2218] [client 192.178.4.101:40332] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCv8yjiGdnP9Am2woVoMAAAAIE"]
[Thu Dec 04 05:47:33.631994 2025] [:error] [pid 2159:tid 2163] [client 192.178.4.101:63806] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCv9T3GVdXg3ORUAG2eewAAAAA"]
[Thu Dec 04 05:47:35.464454 2025] [:error] [pid 2159:tid 2184] [client 192.178.4.101:56358] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCv9z3GVdXg3ORUAG2efAAAABU"]
[Thu Dec 04 05:47:36.781024 2025] [:error] [pid 2161:tid 2220] [client 192.178.4.101:36801] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCv-CjiGdnP9Am2woVoOwAAAIM"]
[Thu Dec 04 05:47:38.448452 2025] [:error] [pid 2244:tid 2249] [client 192.178.4.101:44287] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCv-pm00CCLpKa0F70nfgAAAMM"]
[Thu Dec 04 05:47:40.285505 2025] [:error] [pid 2159:tid 2183] [client 192.178.4.101:62340] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCv_D3GVdXg3ORUAG2ehQAAABQ"]
[Thu Dec 04 05:47:42.471057 2025] [:error] [pid 38403:tid 38431] [client 192.178.4.101:55070] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCv_gBCL4g8TXcskwnrXAAAARc"]
[Thu Dec 04 05:47:44.112790 2025] [:error] [pid 38403:tid 38427] [client 192.178.4.101:48852] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCwAABCL4g8TXcskwnrYAAAARM"]
[Thu Dec 04 05:47:45.858800 2025] [:error] [pid 2161:tid 2234] [client 192.178.4.101:55709] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCwASjiGdnP9Am2woVoTQAAAJE"]
[Thu Dec 04 05:47:47.785301 2025] [:error] [pid 2160:tid 2206] [client 192.178.4.101:59810] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCwA0NDGjl4u2feUD_JugAAAFA"]
[Thu Dec 04 05:47:49.525219 2025] [:error] [pid 2244:tid 2250] [client 192.178.4.101:63810] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCwBZm00CCLpKa0F70niQAAAMQ"]
[Thu Dec 04 05:47:52.153744 2025] [:error] [pid 2159:tid 2186] [client 192.178.4.101:36667] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCwCD3GVdXg3ORUAG2ejQAAABc"]
[Thu Dec 04 05:47:53.190761 2025] [:error] [pid 38403:tid 38425] [client 192.178.4.101:36874] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCwCQBCL4g8TXcskwnrcwAAARE"]
[Thu Dec 04 05:47:54.504345 2025] [:error] [pid 2244:tid 2252] [client 192.178.4.101:65444] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCwCpm00CCLpKa0F70nlQAAAMY"]
[Thu Dec 04 05:47:56.244376 2025] [:error] [pid 2244:tid 2250] [client 192.178.4.101:60166] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCwDJm00CCLpKa0F70nmwAAAMQ"]
[Thu Dec 04 05:47:58.176870 2025] [:error] [pid 38403:tid 38410] [client 192.178.4.101:52529] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCwDgBCL4g8TXcskwnrfQAAAQI"]
[Thu Dec 04 05:47:59.325650 2025] [:error] [pid 2161:tid 2235] [client 192.178.4.101:49511] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCwDyjiGdnP9Am2woVoXQAAAJI"]
[Thu Dec 04 05:48:04.731472 2025] [:error] [pid 2159:tid 2183] [client 192.178.4.101:48649] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCwFD3GVdXg3ORUAG2elwAAABQ"]
[Thu Dec 04 05:48:11.547670 2025] [:error] [pid 2161:tid 2224] [client 192.178.4.101:54028] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCwGyjiGdnP9Am2woVocQAAAIc"]
[Thu Dec 04 05:48:37.615451 2025] [:error] [pid 38403:tid 38426] [client 192.178.4.101:38393] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCwNQBCL4g8TXcskwnruAAAARI"]
[Thu Dec 04 05:48:39.448808 2025] [:error] [pid 2161:tid 2217] [client 192.178.4.101:58676] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCwNyjiGdnP9Am2woVonAAAAIA"]
[Thu Dec 04 05:48:41.924426 2025] [:error] [pid 2159:tid 2179] [client 192.178.4.101:53936] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCwOT3GVdXg3ORUAG2e0AAAABA"]
[Thu Dec 04 05:48:43.210049 2025] [:error] [pid 2161:tid 2232] [client 192.178.4.101:35456] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCwOyjiGdnP9Am2woVoogAAAI8"]
[Thu Dec 04 05:48:45.043068 2025] [:error] [pid 2159:tid 2185] [client 192.178.4.101:49758] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCwPT3GVdXg3ORUAG2e1gAAABY"]
[Thu Dec 04 05:48:46.814394 2025] [:error] [pid 2244:tid 2250] [client 192.178.4.101:58516] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCwPpm00CCLpKa0F70n-gAAAMQ"]
[Thu Dec 04 05:48:49.449253 2025] [:error] [pid 2244:tid 2263] [client 192.178.4.101:64851] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCwQZm00CCLpKa0F70n_gAAANE"]
[Thu Dec 04 05:48:50.488484 2025] [:error] [pid 38403:tid 38428] [client 192.178.4.101:35284] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCwQgBCL4g8TXcskwnrwQAAARQ"]
[Thu Dec 04 05:48:52.311888 2025] [:error] [pid 2244:tid 2258] [client 192.178.4.101:46154] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCwRJm00CCLpKa0F70oAwAAAMw"]
[Thu Dec 04 05:48:54.221156 2025] [:error] [pid 2160:tid 2194] [client 192.178.4.101:65268] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCwRkNDGjl4u2feUD_KOQAAAEQ"]
[Thu Dec 04 05:48:55.374272 2025] [:error] [pid 2159:tid 2181] [client 192.178.4.101:53710] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCwRz3GVdXg3ORUAG2e4QAAABI"]
[Thu Dec 04 05:48:57.267462 2025] [:error] [pid 2160:tid 2206] [client 192.178.4.101:51765] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCwSUNDGjl4u2feUD_KQQAAAFA"]
[Thu Dec 04 05:48:59.105952 2025] [:error] [pid 2160:tid 2200] [client 192.178.4.101:58264] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCwS0NDGjl4u2feUD_KRwAAAEo"]
[Thu Dec 04 05:49:00.267070 2025] [:error] [pid 2159:tid 2183] [client 192.178.4.101:43510] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCwTD3GVdXg3ORUAG2e5gAAABQ"]
[Thu Dec 04 05:49:02.926350 2025] [:error] [pid 2161:tid 2238] [client 192.178.4.101:61518] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCwTijiGdnP9Am2woVoxAAAAJU"]
[Thu Dec 04 05:49:04.611272 2025] [:error] [pid 2160:tid 2208] [client 192.178.4.101:47649] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCwUENDGjl4u2feUD_KUAAAAFI"]
[Thu Dec 04 05:49:07.655378 2025] [:error] [pid 38403:tid 38411] [client 192.178.4.101:40949] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCwUwBCL4g8TXcskwnr4wAAAQM"]
[Thu Dec 04 05:49:11.256134 2025] [:error] [pid 2161:tid 2227] [client 192.178.4.101:53138] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCwVyjiGdnP9Am2woVoywAAAIo"]
[Thu Dec 04 05:49:14.476055 2025] [:error] [pid 38403:tid 38426] [client 192.178.4.101:61975] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCwWgBCL4g8TXcskwnr-AAAARI"]
[Thu Dec 04 05:49:16.261369 2025] [:error] [pid 2244:tid 2252] [client 192.178.4.101:36132] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCwXJm00CCLpKa0F70oHgAAAMY"]
[Thu Dec 04 05:49:18.066516 2025] [:error] [pid 2160:tid 2200] [client 192.178.4.101:51382] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCwXkNDGjl4u2feUD_KbwAAAEo"]
[Thu Dec 04 05:49:21.027960 2025] [:error] [pid 2244:tid 2268] [client 192.178.4.101:45967] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCwYZm00CCLpKa0F70oKAAAANU"]
[Thu Dec 04 05:49:22.951112 2025] [:error] [pid 2244:tid 2255] [client 192.178.4.101:43245] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCwYpm00CCLpKa0F70oLAAAAMk"]
[Thu Dec 04 05:49:27.624565 2025] [:error] [pid 2161:tid 2219] [client 192.178.4.101:40920] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCwZyjiGdnP9Am2woVo4AAAAII"]
[Thu Dec 04 05:49:28.553331 2025] [:error] [pid 2161:tid 2224] [client 192.178.4.101:59530] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCwaCjiGdnP9Am2woVo4gAAAIc"]
[Thu Dec 04 05:49:29.455226 2025] [:error] [pid 2159:tid 2177] [client 192.178.4.101:61704] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCwaT3GVdXg3ORUAG2fEQAAAA4"]
[Thu Dec 04 05:49:31.358862 2025] [:error] [pid 2161:tid 2233] [client 192.178.4.101:38056] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCwayjiGdnP9Am2woVo6gAAAJA"]
[Thu Dec 04 05:49:33.192842 2025] [:error] [pid 38403:tid 38408] [client 192.178.4.101:56806] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCwbQBCL4g8TXcskwnsFAAAAQE"]
[Thu Dec 04 05:49:35.026587 2025] [:error] [pid 38403:tid 38421] [client 192.178.4.101:39492] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCwbwBCL4g8TXcskwnsFwAAAQ0"]
[Thu Dec 04 05:49:58.207718 2025] [:error] [pid 2160:tid 2214] [client 192.178.4.101:47377] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCwhkNDGjl4u2feUD_KyQAAAFg"]
[Thu Dec 04 05:49:59.235678 2025] [:error] [pid 2159:tid 2178] [client 192.178.4.101:51985] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCwhz3GVdXg3ORUAG2fNgAAAA8"]
[Thu Dec 04 05:50:01.768477 2025] [:error] [pid 38403:tid 38422] [client 192.178.4.101:48068] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCwiQBCL4g8TXcskwnsRAAAAQ4"]
[Thu Dec 04 05:50:03.609861 2025] [:error] [pid 38403:tid 38410] [client 192.178.4.101:40821] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCwiwBCL4g8TXcskwnsRgAAAQI"]
[Thu Dec 04 05:50:05.431845 2025] [:error] [pid 2160:tid 2204] [client 192.178.4.101:43841] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCwjUNDGjl4u2feUD_K1AAAAE4"]
[Thu Dec 04 05:50:06.851617 2025] [:error] [pid 2160:tid 2194] [client 192.178.4.101:37714] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCwjkNDGjl4u2feUD_K1gAAAEQ"]
[Thu Dec 04 05:50:08.496273 2025] [:error] [pid 2161:tid 2235] [client 192.178.4.101:56639] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCwkCjiGdnP9Am2woVpJAAAAJI"]
[Thu Dec 04 05:50:10.328228 2025] [:error] [pid 2244:tid 2253] [client 192.178.4.101:65526] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCwkpm00CCLpKa0F70oZQAAAMc"]
[Thu Dec 04 05:50:12.161404 2025] [:error] [pid 2161:tid 2229] [client 192.178.4.101:36710] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCwlCjiGdnP9Am2woVpLQAAAIw"]
[Thu Dec 04 05:50:13.385180 2025] [:error] [pid 2160:tid 2206] [client 192.178.4.101:62041] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCwlUNDGjl4u2feUD_K4QAAAFA"]
[Thu Dec 04 05:50:15.145575 2025] [:error] [pid 2244:tid 2268] [client 192.178.4.101:49340] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCwl5m00CCLpKa0F70odAAAANU"]
[Thu Dec 04 05:50:18.143522 2025] [:error] [pid 2159:tid 2187] [client 192.178.4.101:39763] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCwmj3GVdXg3ORUAG2fSgAAABg"]
[Thu Dec 04 05:50:19.379124 2025] [:error] [pid 2161:tid 2229] [client 192.178.4.101:49933] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCwmyjiGdnP9Am2woVpRgAAAIw"]
[Thu Dec 04 05:50:20.722471 2025] [:error] [pid 38403:tid 38407] [client 192.178.4.101:46053] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCwnABCL4g8TXcskwnsVgAAAQA"]
[Thu Dec 04 05:50:22.561744 2025] [:error] [pid 2160:tid 2214] [client 192.178.4.101:56822] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCwnkNDGjl4u2feUD_K8wAAAFg"]
[Thu Dec 04 05:50:26.956669 2025] [:error] [pid 2159:tid 2174] [client 192.178.4.101:59144] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCwoj3GVdXg3ORUAG2fWAAAAAs"]
[Thu Dec 04 05:50:27.883608 2025] [:error] [pid 2161:tid 2222] [client 192.178.4.101:54156] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCwoyjiGdnP9Am2woVpVwAAAIU"]
[Thu Dec 04 05:50:29.119839 2025] [:error] [pid 2244:tid 2258] [client 192.178.4.101:54096] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCwpZm00CCLpKa0F70oggAAAMw"]
[Thu Dec 04 05:50:31.850067 2025] [:error] [pid 2244:tid 2269] [client 192.178.4.101:50895] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCwp5m00CCLpKa0F70oiQAAANY"]
[Thu Dec 04 05:50:33.766205 2025] [:error] [pid 2244:tid 2271] [client 192.178.4.101:50852] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCwqZm00CCLpKa0F70oiwAAANg"]
[Thu Dec 04 05:50:36.214953 2025] [:error] [pid 38403:tid 38416] [client 192.178.4.101:46113] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCwrABCL4g8TXcskwnscwAAAQg"]
[Thu Dec 04 05:50:37.361284 2025] [:error] [pid 2161:tid 2223] [client 192.178.4.101:51698] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCwrSjiGdnP9Am2woVpYwAAAIY"]
[Thu Dec 04 05:50:40.234092 2025] [:error] [pid 2244:tid 2261] [client 192.178.4.101:62959] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCwsJm00CCLpKa0F70olwAAAM8"]
[Thu Dec 04 05:50:41.671266 2025] [:error] [pid 38403:tid 38416] [client 192.178.4.101:53444] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCwsQBCL4g8TXcskwnsfwAAAQg"]
[Thu Dec 04 05:50:43.471315 2025] [:error] [pid 2159:tid 2184] [client 192.178.4.101:50305] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCwsz3GVdXg3ORUAG2fcgAAABU"]
[Thu Dec 04 05:50:44.690303 2025] [:error] [pid 2244:tid 2247] [client 192.178.4.101:54295] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCwtJm00CCLpKa0F70ooAAAAME"]
[Thu Dec 04 05:50:46.529183 2025] [:error] [pid 38403:tid 38416] [client 192.178.4.101:55534] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCwtgBCL4g8TXcskwnsjwAAAQg"]
[Thu Dec 04 05:50:49.708396 2025] [:error] [pid 38403:tid 38431] [client 192.178.4.101:51487] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCwuQBCL4g8TXcskwnslgAAARc"]
[Thu Dec 04 05:50:50.209823 2025] [:error] [pid 38403:tid 38430] [client 192.178.4.101:46097] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCwugBCL4g8TXcskwnsmwAAARY"]
[Thu Dec 04 05:50:52.086331 2025] [:error] [pid 2244:tid 2268] [client 192.178.4.101:65389] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCwvJm00CCLpKa0F70opQAAANU"]
[Thu Dec 04 05:50:53.848528 2025] [:error] [pid 2160:tid 2204] [client 192.178.4.101:59101] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCwvUNDGjl4u2feUD_LNgAAAE4"]
[Thu Dec 04 05:50:55.695399 2025] [:error] [pid 38403:tid 38408] [client 192.178.4.101:40563] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCwvwBCL4g8TXcskwnstQAAAQE"]
[Thu Dec 04 05:51:15.144403 2025] [:error] [pid 2244:tid 2251] [client 192.178.4.101:59398] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCw05m00CCLpKa0F70o2AAAAMU"]
[Thu Dec 04 05:51:16.973748 2025] [:error] [pid 2159:tid 2179] [client 192.178.4.101:35736] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCw1D3GVdXg3ORUAG2foQAAABA"]
[Thu Dec 04 05:51:18.999646 2025] [:error] [pid 2159:tid 2187] [client 192.178.4.101:46466] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCw1j3GVdXg3ORUAG2fpAAAABg"]
[Thu Dec 04 05:51:22.740100 2025] [:error] [pid 2244:tid 2262] [client 192.178.4.101:53257] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCw2pm00CCLpKa0F70o6wAAANA"]
[Thu Dec 04 05:51:24.021616 2025] [:error] [pid 2159:tid 2173] [client 192.178.4.101:53269] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCw3D3GVdXg3ORUAG2fswAAAAo"]
[Thu Dec 04 05:51:25.018320 2025] [:error] [pid 38403:tid 38407] [client 192.178.4.101:60948] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCw3QBCL4g8TXcskwns8QAAAQA"]
[Thu Dec 04 05:51:26.233739 2025] [:error] [pid 38403:tid 38423] [client 192.178.4.101:41922] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCw3gBCL4g8TXcskwns8gAAAQ8"]
[Thu Dec 04 05:51:28.063091 2025] [:error] [pid 2159:tid 2186] [client 192.178.4.101:36142] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCw4D3GVdXg3ORUAG2fvAAAABc"]
[Thu Dec 04 05:51:29.910626 2025] [:error] [pid 2244:tid 2246] [client 192.178.4.101:51859] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCw4Zm00CCLpKa0F70o_wAAAMA"]
[Thu Dec 04 05:51:31.728005 2025] [:error] [pid 38403:tid 38426] [client 192.178.4.101:54859] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCw4wBCL4g8TXcskwns-AAAARI"]
[Thu Dec 04 05:51:34.578069 2025] [:error] [pid 2244:tid 2265] [client 192.178.4.101:53555] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCw5pm00CCLpKa0F70pDwAAANI"]
[Thu Dec 04 05:51:35.409041 2025] [:error] [pid 2160:tid 2213] [client 192.178.4.101:47632] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCw50NDGjl4u2feUD_LZgAAAFc"]
[Thu Dec 04 05:51:37.242584 2025] [:error] [pid 2161:tid 2229] [client 192.178.4.101:65492] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCw6SjiGdnP9Am2woVppgAAAIw"]
[Thu Dec 04 05:51:39.075799 2025] [:error] [pid 38403:tid 38431] [client 192.178.4.101:36463] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCw6wBCL4g8TXcskwntAQAAARc"]
[Thu Dec 04 05:51:40.236090 2025] [:error] [pid 38403:tid 38426] [client 192.178.4.101:36939] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCw7ABCL4g8TXcskwntBAAAARI"]
[Thu Dec 04 05:51:44.125209 2025] [:error] [pid 38403:tid 38411] [client 192.178.4.101:53767] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCw8ABCL4g8TXcskwntCwAAAQM"]
[Thu Dec 04 05:51:45.560432 2025] [:error] [pid 2161:tid 2231] [client 192.178.4.101:36011] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCw8SjiGdnP9Am2woVpwQAAAI4"]
[Thu Dec 04 05:51:46.481776 2025] [:error] [pid 2159:tid 2174] [client 192.178.4.101:64504] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCw8j3GVdXg3ORUAG2gBAAAAAs"]
[Thu Dec 04 05:51:48.940150 2025] [:error] [pid 2159:tid 2185] [client 192.178.4.101:58511] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCw9D3GVdXg3ORUAG2gBgAAABY"]
[Thu Dec 04 05:51:50.081106 2025] [:error] [pid 38403:tid 38431] [client 192.178.4.101:63796] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCw9gBCL4g8TXcskwntFwAAARc"]
[Thu Dec 04 05:51:51.337942 2025] [:error] [pid 2161:tid 2224] [client 192.178.4.101:57915] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCw9yjiGdnP9Am2woVp8AAAAIc"]
[Thu Dec 04 05:51:53.137453 2025] [:error] [pid 38403:tid 38419] [client 192.178.4.101:58298] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCw-QBCL4g8TXcskwntIAAAAQs"]
[Thu Dec 04 05:51:54.970042 2025] [:error] [pid 2244:tid 2261] [client 192.178.4.101:40658] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCw-pm00CCLpKa0F70pSQAAAM8"]
[Thu Dec 04 05:51:56.812952 2025] [:error] [pid 2244:tid 2248] [client 192.178.4.101:39050] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCw_Jm00CCLpKa0F70pUgAAAMI"]
[Thu Dec 04 05:51:57.966941 2025] [:error] [pid 2159:tid 2183] [client 192.178.4.101:38239] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCw_T3GVdXg3ORUAG2gDwAAABQ"]
[Thu Dec 04 05:51:59.791157 2025] [:error] [pid 2160:tid 2201] [client 192.178.4.101:52688] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCw_0NDGjl4u2feUD_L0wAAAEs"]
[Thu Dec 04 05:52:01.692955 2025] [:error] [pid 2159:tid 2185] [client 192.178.4.101:42636] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCxAT3GVdXg3ORUAG2gGQAAABY"]
[Thu Dec 04 05:52:03.531343 2025] [:error] [pid 2159:tid 2168] [client 192.178.4.101:35399] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCxAz3GVdXg3ORUAG2gHQAAAAU"]
[Thu Dec 04 05:52:04.740951 2025] [:error] [pid 2244:tid 2246] [client 192.178.4.101:48118] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCxBJm00CCLpKa0F70pZgAAAMA"]
[Thu Dec 04 05:52:06.581593 2025] [:error] [pid 2244:tid 2259] [client 192.178.4.101:54634] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCxBpm00CCLpKa0F70paQAAAM0"]
[Thu Dec 04 05:52:08.346727 2025] [:error] [pid 2244:tid 2270] [client 192.178.4.101:47934] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCxCJm00CCLpKa0F70pbAAAANc"]
[Thu Dec 04 05:52:10.237135 2025] [:error] [pid 2159:tid 2169] [client 192.178.4.101:59132] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCxCj3GVdXg3ORUAG2gJgAAAAY"]
[Thu Dec 04 05:52:11.469605 2025] [:error] [pid 2244:tid 2268] [client 192.178.4.101:63271] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCxC5m00CCLpKa0F70pcAAAANU"]
[Thu Dec 04 05:52:35.826893 2025] [:error] [pid 2160:tid 2209] [client 192.178.4.101:53561] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCxI0NDGjl4u2feUD_MAwAAAFM"]
[Thu Dec 04 05:52:38.298723 2025] [:error] [pid 2160:tid 2191] [client 192.178.4.101:52780] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCxJkNDGjl4u2feUD_MBQAAAEE"]
[Thu Dec 04 05:52:39.581137 2025] [:error] [pid 2244:tid 2253] [client 192.178.4.101:46314] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCxJ5m00CCLpKa0F70psAAAAMc"]
[Thu Dec 04 05:52:43.740113 2025] [:error] [pid 2244:tid 2267] [client 192.178.4.101:34769] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCxK5m00CCLpKa0F70ptQAAANQ"]
[Thu Dec 04 05:52:44.653955 2025] [:error] [pid 38403:tid 38424] [client 192.178.4.101:54542] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCxLABCL4g8TXcskwntegAAARA"]
[Thu Dec 04 05:52:45.883832 2025] [:error] [pid 38403:tid 38431] [client 192.178.4.101:59053] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCxLQBCL4g8TXcskwntewAAARc"]
[Thu Dec 04 05:52:47.540416 2025] [:error] [pid 38403:tid 38427] [client 192.178.4.101:36500] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCxLwBCL4g8TXcskwnthQAAARM"]
[Thu Dec 04 05:52:49.369465 2025] [:error] [pid 2161:tid 2225] [client 192.178.4.101:44899] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCxMSjiGdnP9Am2woVqYQAAAIg"]
[Thu Dec 04 05:52:50.593844 2025] [:error] [pid 2161:tid 2235] [client 192.178.4.101:49487] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCxMijiGdnP9Am2woVqZgAAAJI"]
[Thu Dec 04 05:52:52.422759 2025] [:error] [pid 2161:tid 2230] [client 192.178.4.101:47553] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCxNCjiGdnP9Am2woVqbgAAAI0"]
[Thu Dec 04 05:52:56.091199 2025] [:error] [pid 2160:tid 2209] [client 192.178.4.101:64731] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCxOENDGjl4u2feUD_MHQAAAFM"]
[Thu Dec 04 05:52:57.930314 2025] [:error] [pid 2160:tid 2202] [client 192.178.4.101:60879] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCxOUNDGjl4u2feUD_MIwAAAEw"]
[Thu Dec 04 05:53:00.449134 2025] [:error] [pid 2161:tid 2235] [client 192.178.4.101:65194] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCxPCjiGdnP9Am2woVqiwAAAJI"]
[Thu Dec 04 05:53:02.536612 2025] [:error] [pid 2244:tid 2267] [client 192.178.4.101:36387] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCxPpm00CCLpKa0F70pygAAANQ"]
[Thu Dec 04 05:53:04.037056 2025] [:error] [pid 2161:tid 2229] [client 192.178.4.101:55664] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCxQCjiGdnP9Am2woVqoAAAAIw"]
[Thu Dec 04 05:53:05.268635 2025] [:error] [pid 2159:tid 2186] [client 192.178.4.101:40278] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCxQT3GVdXg3ORUAG2gaAAAABc"]
[Thu Dec 04 05:53:08.103803 2025] [:error] [pid 38403:tid 38407] [client 192.178.4.101:38317] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCxRABCL4g8TXcskwntsAAAAQA"]
[Thu Dec 04 05:53:09.483563 2025] [:error] [pid 2161:tid 2234] [client 192.178.4.101:61322] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCxRSjiGdnP9Am2woVqrgAAAJE"]
[Thu Dec 04 05:53:10.773862 2025] [:error] [pid 38403:tid 38414] [client 192.178.4.101:58059] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCxRgBCL4g8TXcskwntygAAAQY"]
[Thu Dec 04 05:53:13.612381 2025] [:error] [pid 38403:tid 38422] [client 192.178.4.101:40139] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCxSQBCL4g8TXcskwnt1QAAAQ4"]
[Thu Dec 04 05:53:14.373762 2025] [:error] [pid 2161:tid 2240] [client 192.178.4.101:48612] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCxSijiGdnP9Am2woVqugAAAJc"]
[Thu Dec 04 05:53:16.272879 2025] [:error] [pid 2160:tid 2207] [client 192.178.4.101:46498] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCxTENDGjl4u2feUD_MQQAAAFE"]
[Thu Dec 04 05:53:20.092613 2025] [:error] [pid 2244:tid 2251] [client 192.178.4.101:62103] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCxUJm00CCLpKa0F70p4QAAAMU"]
[Thu Dec 04 05:53:24.749670 2025] [:error] [pid 2161:tid 2232] [client 192.178.4.101:53720] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCxVCjiGdnP9Am2woVq6wAAAI8"]
[Thu Dec 04 05:53:27.569777 2025] [:error] [pid 2244:tid 2266] [client 192.178.4.101:63434] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCxV5m00CCLpKa0F70qEAAAANM"]
[Thu Dec 04 05:53:28.483138 2025] [:error] [pid 2160:tid 2197] [client 192.178.4.101:64580] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCxWENDGjl4u2feUD_MxwAAAEc"]
[Thu Dec 04 05:53:29.709229 2025] [:error] [pid 38403:tid 38426] [client 192.178.4.101:43067] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCxWQBCL4g8TXcskwnuBwAAARI"]
[Thu Dec 04 05:53:56.513429 2025] [:error] [pid 2159:tid 2178] [client 192.178.4.101:45047] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCxdD3GVdXg3ORUAG2g_AAAAA8"]
[Thu Dec 04 05:53:58.435374 2025] [:error] [pid 2160:tid 2214] [client 192.178.4.101:57184] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCxdkNDGjl4u2feUD_M5AAAAFg"]
[Thu Dec 04 05:54:00.269232 2025] [:error] [pid 2161:tid 2226] [client 192.178.4.101:51623] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCxeCjiGdnP9Am2woVrIQAAAIk"]
[Thu Dec 04 05:54:02.088568 2025] [:error] [pid 2161:tid 2234] [client 192.178.4.101:51246] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCxeijiGdnP9Am2woVrJQAAAJE"]
[Thu Dec 04 05:54:03.337939 2025] [:error] [pid 2244:tid 2261] [client 192.178.4.101:62007] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCxe5m00CCLpKa0F70qbgAAAM8"]
[Thu Dec 04 05:54:05.187758 2025] [:error] [pid 2160:tid 2208] [client 192.178.4.101:45556] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCxfUNDGjl4u2feUD_M9AAAAFI"]
[Thu Dec 04 05:54:07.003835 2025] [:error] [pid 2160:tid 2212] [client 192.178.4.101:64803] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCxf0NDGjl4u2feUD_M9gAAAFY"]
[Thu Dec 04 05:54:08.748437 2025] [:error] [pid 2161:tid 2228] [client 192.178.4.101:44837] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCxgCjiGdnP9Am2woVrLQAAAIs"]
[Thu Dec 04 05:54:10.651943 2025] [:error] [pid 2161:tid 2233] [client 192.178.4.101:45171] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCxgijiGdnP9Am2woVrMAAAAJA"]
[Thu Dec 04 05:54:12.424873 2025] [:error] [pid 38403:tid 38416] [client 192.178.4.101:61696] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCxhABCL4g8TXcskwnufgAAAQg"]
[Thu Dec 04 05:54:14.327227 2025] [:error] [pid 2160:tid 2194] [client 192.178.4.101:35935] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCxhkNDGjl4u2feUD_M_QAAAEQ"]
[Thu Dec 04 05:54:16.850191 2025] [:error] [pid 38403:tid 38420] [client 192.178.4.101:43067] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCxiABCL4g8TXcskwnuiwAAAQw"]
[Thu Dec 04 05:54:17.989650 2025] [:error] [pid 2244:tid 2266] [client 192.178.4.101:36022] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCxiZm00CCLpKa0F70qjQAAANM"]
[Thu Dec 04 05:54:20.832874 2025] [:error] [pid 2161:tid 2225] [client 192.178.4.101:35561] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCxjCjiGdnP9Am2woVrOQAAAIg"]
[Thu Dec 04 05:54:21.748897 2025] [:error] [pid 38403:tid 38412] [client 192.178.4.101:46244] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCxjQBCL4g8TXcskwnulwAAAQQ"]
[Thu Dec 04 05:54:22.875354 2025] [:error] [pid 2160:tid 2208] [client 192.178.4.101:50919] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCxjkNDGjl4u2feUD_NBgAAAFI"]
[Thu Dec 04 05:54:24.733695 2025] [:error] [pid 2244:tid 2248] [client 192.178.4.101:44413] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCxkJm00CCLpKa0F70qmgAAAMI"]
[Thu Dec 04 05:54:27.624109 2025] [:error] [pid 38403:tid 38426] [client 192.178.4.101:52562] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCxkwBCL4g8TXcskwnuoQAAARI"]
[Thu Dec 04 05:54:28.629728 2025] [:error] [pid 2161:tid 2222] [client 192.178.4.101:37357] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCxlCjiGdnP9Am2woVrRAAAAIU"]
[Thu Dec 04 05:54:30.316259 2025] [:error] [pid 2159:tid 2186] [client 192.178.4.101:48621] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCxlj3GVdXg3ORUAG2hIQAAABc"]
[Thu Dec 04 05:54:32.140435 2025] [:error] [pid 2161:tid 2233] [client 192.178.4.101:64780] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCxmCjiGdnP9Am2woVrSgAAAJA"]
[Thu Dec 04 05:54:33.912495 2025] [:error] [pid 38403:tid 38411] [client 192.178.4.101:37376] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCxmQBCL4g8TXcskwnuuQAAAQM"]
[Thu Dec 04 05:54:35.102481 2025] [:error] [pid 2161:tid 2224] [client 192.178.4.101:36260] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCxmyjiGdnP9Am2woVrUAAAAIc"]
[Thu Dec 04 05:54:36.943673 2025] [:error] [pid 38403:tid 38417] [client 192.178.4.101:52387] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCxnABCL4g8TXcskwnuwgAAAQk"]
[Thu Dec 04 05:54:38.768441 2025] [:error] [pid 2161:tid 2233] [client 192.178.4.101:50162] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCxnijiGdnP9Am2woVrVQAAAJA"]
[Thu Dec 04 05:54:40.525103 2025] [:error] [pid 2161:tid 2229] [client 192.178.4.101:50353] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCxoCjiGdnP9Am2woVrVwAAAIw"]
[Thu Dec 04 05:54:43.626322 2025] [:error] [pid 2160:tid 2197] [client 192.178.4.101:50189] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCxo0NDGjl4u2feUD_NOwAAAEc"]
[Thu Dec 04 05:54:45.462506 2025] [:error] [pid 38403:tid 38408] [client 192.178.4.101:37115] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCxpQBCL4g8TXcskwnu4AAAAQE"]
[Thu Dec 04 05:54:46.154261 2025] [:error] [pid 38403:tid 38425] [client 192.178.4.101:51732] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCxpgBCL4g8TXcskwnu5AAAARE"]
[Thu Dec 04 05:54:47.989139 2025] [:error] [pid 2159:tid 2171] [client 192.178.4.101:59380] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCxpz3GVdXg3ORUAG2hOgAAAAg"]
[Thu Dec 04 05:54:52.309687 2025] [:error] [pid 2159:tid 2187] [client 192.178.4.101:54088] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCxrD3GVdXg3ORUAG2hQwAAABg"]
[Thu Dec 04 05:55:19.009475 2025] [:error] [pid 2161:tid 2232] [client 192.178.4.101:40740] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCxxyjiGdnP9Am2woVrrQAAAI8"]
[Thu Dec 04 05:55:20.839028 2025] [:error] [pid 2160:tid 2207] [client 192.178.4.101:62197] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCxyENDGjl4u2feUD_NjAAAAFE"]
[Thu Dec 04 05:55:23.389051 2025] [:error] [pid 38403:tid 38432] [client 192.178.4.101:40424] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCxywBCL4g8TXcskwnvNgAAARg"]
[Thu Dec 04 05:55:25.202319 2025] [:error] [pid 2159:tid 2179] [client 192.178.4.101:63582] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCxzT3GVdXg3ORUAG2hkwAAABA"]
[Thu Dec 04 05:55:26.424276 2025] [:error] [pid 2159:tid 2165] [client 192.178.4.101:62692] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCxzj3GVdXg3ORUAG2hmwAAAAI"]
[Thu Dec 04 05:55:28.879796 2025] [:error] [pid 2159:tid 2164] [client 192.178.4.101:41708] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCx0D3GVdXg3ORUAG2hnQAAAAE"]
[Thu Dec 04 05:55:30.712142 2025] [:error] [pid 2161:tid 2240] [client 192.178.4.101:38647] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCx0ijiGdnP9Am2woVrwAAAAJc"]
[Thu Dec 04 05:55:31.931626 2025] [:error] [pid 2161:tid 2227] [client 192.178.4.101:63500] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCx0yjiGdnP9Am2woVrwwAAAIo"]
[Thu Dec 04 05:55:33.757071 2025] [:error] [pid 2161:tid 2231] [client 192.178.4.101:42084] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCx1SjiGdnP9Am2woVrxwAAAI4"]
[Thu Dec 04 05:55:35.594452 2025] [:error] [pid 2244:tid 2259] [client 192.178.4.101:60999] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCx15m00CCLpKa0F70rRAAAAM0"]
[Thu Dec 04 05:55:37.361817 2025] [:error] [pid 38403:tid 38420] [client 192.178.4.101:38994] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCx2QBCL4g8TXcskwnvYgAAAQw"]
[Thu Dec 04 05:55:38.637973 2025] [:error] [pid 2244:tid 2248] [client 192.178.4.101:42553] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCx2pm00CCLpKa0F70rSQAAAMI"]
[Thu Dec 04 05:55:40.477416 2025] [:error] [pid 2161:tid 2240] [client 192.178.4.101:50386] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCx3CjiGdnP9Am2woVr3AAAAJc"]
[Thu Dec 04 05:55:42.339621 2025] [:error] [pid 38403:tid 38425] [client 192.178.4.101:65277] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCx3gBCL4g8TXcskwnvbQAAARE"]
[Thu Dec 04 05:55:43.539280 2025] [:error] [pid 38403:tid 38418] [client 192.178.4.101:39572] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCx3wBCL4g8TXcskwnvcgAAAQo"]
[Thu Dec 04 05:55:46.675069 2025] [:error] [pid 38403:tid 38424] [client 192.178.4.101:49882] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCx4gBCL4g8TXcskwnvfgAAARA"]
[Thu Dec 04 05:55:47.296847 2025] [:error] [pid 38403:tid 38426] [client 192.178.4.101:54849] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCx4wBCL4g8TXcskwnvggAAARI"]
[Thu Dec 04 05:55:50.337664 2025] [:error] [pid 38403:tid 38422] [client 192.178.4.101:40093] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCx5gBCL4g8TXcskwnvjAAAAQ4"]
[Thu Dec 04 05:55:51.492922 2025] [:error] [pid 2161:tid 2218] [client 192.178.4.101:49045] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCx5yjiGdnP9Am2woVr7gAAAIE"]
[Thu Dec 04 05:55:53.326711 2025] [:error] [pid 2161:tid 2236] [client 192.178.4.101:65523] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCx6SjiGdnP9Am2woVr7wAAAJM"]
[Thu Dec 04 05:55:55.850632 2025] [:error] [pid 2160:tid 2204] [client 192.178.4.101:37244] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCx60NDGjl4u2feUD_NzwAAAE4"]
[Thu Dec 04 05:55:56.996102 2025] [:error] [pid 2159:tid 2163] [client 192.178.4.101:50476] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCx7D3GVdXg3ORUAG2hxAAAAAA"]
[Thu Dec 04 05:55:58.828115 2025] [:error] [pid 2161:tid 2231] [client 192.178.4.101:62310] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCx7ijiGdnP9Am2woVr9wAAAI4"]
[Thu Dec 04 05:56:00.056851 2025] [:error] [pid 2161:tid 2227] [client 192.178.4.101:38514] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCx8CjiGdnP9Am2woVr-gAAAIo"]
[Thu Dec 04 05:56:01.977087 2025] [:error] [pid 2159:tid 2171] [client 192.178.4.101:63865] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCx8T3GVdXg3ORUAG2hygAAAAg"]
[Thu Dec 04 05:56:03.726276 2025] [:error] [pid 38403:tid 38420] [client 192.178.4.101:54156] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCx8wBCL4g8TXcskwnvwwAAAQw"]
[Thu Dec 04 05:56:06.576241 2025] [:error] [pid 2244:tid 2256] [client 192.178.4.101:42958] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCx9pm00CCLpKa0F70rcgAAAMo"]
[Thu Dec 04 05:56:07.469005 2025] [:error] [pid 38403:tid 38429] [client 192.178.4.101:60948] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCx9wBCL4g8TXcskwnv0QAAARU"]
[Thu Dec 04 05:56:08.612673 2025] [:error] [pid 2161:tid 2226] [client 192.178.4.101:47573] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCx-CjiGdnP9Am2woVsCQAAAIk"]
[Thu Dec 04 05:56:10.433517 2025] [:error] [pid 2159:tid 2183] [client 192.178.4.101:47276] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCx-j3GVdXg3ORUAG2h0AAAABQ"]
[Thu Dec 04 05:56:12.278043 2025] [:error] [pid 2159:tid 2175] [client 192.178.4.101:60754] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCx_D3GVdXg3ORUAG2h0QAAAAw"]
[Thu Dec 04 05:56:14.098258 2025] [:error] [pid 38403:tid 38414] [client 192.178.4.101:58930] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCx_gBCL4g8TXcskwnv4gAAAQY"]
[Thu Dec 04 05:56:16.698359 2025] [:error] [pid 2244:tid 2270] [client 192.178.4.101:59685] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCyAJm00CCLpKa0F70rdwAAANc"]
[Thu Dec 04 05:56:39.695826 2025] [:error] [pid 2244:tid 2262] [client 192.178.4.101:54046] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCyF5m00CCLpKa0F70ruAAAANA"]
[Thu Dec 04 05:56:42.223625 2025] [:error] [pid 2161:tid 2238] [client 192.178.4.101:54648] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCyGijiGdnP9Am2woVsYgAAAJU"]
[Thu Dec 04 05:56:46.166229 2025] [:error] [pid 38403:tid 38427] [client 192.178.4.101:41094] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCyHgBCL4g8TXcskwnwaQAAARM"]
[Thu Dec 04 05:56:48.911904 2025] [:error] [pid 2244:tid 2270] [client 192.178.4.101:57868] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCyIJm00CCLpKa0F70rxgAAANc"]
[Thu Dec 04 05:56:50.257298 2025] [:error] [pid 2160:tid 2210] [client 192.178.4.101:60653] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCyIkNDGjl4u2feUD_OLAAAAFQ"]
[Thu Dec 04 05:56:51.184139 2025] [:error] [pid 2244:tid 2261] [client 192.178.4.101:55136] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCyI5m00CCLpKa0F70r0gAAAM8"]
[Thu Dec 04 05:56:52.272116 2025] [:error] [pid 2160:tid 2212] [client 192.178.4.101:49110] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCyJENDGjl4u2feUD_OMAAAAFY"]
[Thu Dec 04 05:56:54.108469 2025] [:error] [pid 2244:tid 2248] [client 192.178.4.101:51280] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCyJpm00CCLpKa0F70r3wAAAMI"]
[Thu Dec 04 05:56:55.863804 2025] [:error] [pid 2244:tid 2268] [client 192.178.4.101:64608] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCyJ5m00CCLpKa0F70r7AAAANU"]
[Thu Dec 04 05:56:57.798059 2025] [:error] [pid 2161:tid 2221] [client 192.178.4.101:44239] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCyKSjiGdnP9Am2woVseAAAAIQ"]
[Thu Dec 04 05:56:58.999141 2025] [:error] [pid 2244:tid 2271] [client 192.178.4.101:52824] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCyKpm00CCLpKa0F70r9wAAANg"]
[Thu Dec 04 05:57:04.491506 2025] [:error] [pid 2159:tid 2163] [client 192.178.4.101:63065] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCyMD3GVdXg3ORUAG2iJQAAAAA"]
[Thu Dec 04 05:57:05.718829 2025] [:error] [pid 2159:tid 2174] [client 192.178.4.101:62821] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCyMT3GVdXg3ORUAG2iKgAAAAs"]
[Thu Dec 04 05:57:10.552123 2025] [:error] [pid 2244:tid 2248] [client 192.178.4.101:40601] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCyNpm00CCLpKa0F70sCwAAAMI"]
[Thu Dec 04 05:57:11.828021 2025] [:error] [pid 38403:tid 38420] [client 192.178.4.101:58075] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCyNwBCL4g8TXcskwnwtQAAAQw"]
[Thu Dec 04 05:57:13.608929 2025] [:error] [pid 38403:tid 38432] [client 192.178.4.101:42965] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCyOQBCL4g8TXcskwnwvgAAARg"]
[Thu Dec 04 05:57:15.491155 2025] [:error] [pid 2159:tid 2170] [client 192.178.4.101:48360] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCyOz3GVdXg3ORUAG2iQAAAAAc"]
[Thu Dec 04 05:57:16.722786 2025] [:error] [pid 38403:tid 38407] [client 192.178.4.101:37830] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCyPABCL4g8TXcskwnwywAAAQA"]
[Thu Dec 04 05:57:18.549028 2025] [:error] [pid 2244:tid 2261] [client 192.178.4.101:41558] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCyPpm00CCLpKa0F70sHgAAAM8"]
[Thu Dec 04 05:57:20.651450 2025] [:error] [pid 2161:tid 2219] [client 192.178.4.101:60899] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCyQCjiGdnP9Am2woVsqAAAAII"]
[Thu Dec 04 05:57:23.259600 2025] [:error] [pid 2244:tid 2253] [client 192.178.4.101:39437] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCyQ5m00CCLpKa0F70sKgAAAMc"]
[Thu Dec 04 05:57:26.934836 2025] [:error] [pid 38403:tid 38415] [client 192.178.4.101:61154] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCyRgBCL4g8TXcskwnw5gAAAQc"]
[Thu Dec 04 05:57:28.240959 2025] [:error] [pid 2244:tid 2265] [client 192.178.4.101:64604] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCySJm00CCLpKa0F70sNQAAANI"]
[Thu Dec 04 05:57:29.371919 2025] [:error] [pid 38403:tid 38432] [client 192.178.4.101:56479] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCySQBCL4g8TXcskwnw6AAAARg"]
[Thu Dec 04 05:57:31.197562 2025] [:error] [pid 2161:tid 2241] [client 192.178.4.101:45307] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCySyjiGdnP9Am2woVsxgAAAJg"]
[Thu Dec 04 05:57:33.037164 2025] [:error] [pid 38403:tid 38410] [client 192.178.4.101:37410] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCyTQBCL4g8TXcskwnw7wAAAQI"]
[Thu Dec 04 05:57:34.256329 2025] [:error] [pid 2160:tid 2202] [client 192.178.4.101:61717] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCyTkNDGjl4u2feUD_ObgAAAEw"]
[Thu Dec 04 05:57:36.032184 2025] [:error] [pid 38403:tid 38415] [client 192.178.4.101:61951] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCyUABCL4g8TXcskwnw-wAAAQc"]
[Thu Dec 04 05:57:56.164104 2025] [:error] [pid 38403:tid 38427] [client 192.178.4.101:39071] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCyZABCL4g8TXcskwnxOgAAARM"]
[Thu Dec 04 05:57:57.987413 2025] [:error] [pid 38403:tid 38430] [client 192.178.4.101:58900] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCyZQBCL4g8TXcskwnxPwAAARY"]
[Thu Dec 04 05:57:59.923528 2025] [:error] [pid 38403:tid 38424] [client 192.178.4.101:61243] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCyZwBCL4g8TXcskwnxQwAAARA"]
[Thu Dec 04 05:58:02.369417 2025] [:error] [pid 2159:tid 2174] [client 192.178.4.101:43780] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCyaj3GVdXg3ORUAG2iswAAAAs"]
[Thu Dec 04 05:58:03.590014 2025] [:error] [pid 2161:tid 2241] [client 192.178.4.101:35601] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCyayjiGdnP9Am2woVtAwAAAJg"]
[Thu Dec 04 05:58:05.357572 2025] [:error] [pid 2160:tid 2190] [client 192.178.4.101:39372] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCybUNDGjl4u2feUD_OugAAAEA"]
[Thu Dec 04 05:58:07.254681 2025] [:error] [pid 2159:tid 2185] [client 192.178.4.101:60992] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCybz3GVdXg3ORUAG2iugAAABY"]
[Thu Dec 04 05:58:09.125686 2025] [:error] [pid 2161:tid 2234] [client 192.178.4.101:52117] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCycSjiGdnP9Am2woVtDQAAAJE"]
[Thu Dec 04 05:58:10.938657 2025] [:error] [pid 2244:tid 2265] [client 192.178.4.101:65300] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCycpm00CCLpKa0F70spQAAANI"]
[Thu Dec 04 05:58:12.154881 2025] [:error] [pid 2161:tid 2239] [client 192.178.4.101:61535] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCydCjiGdnP9Am2woVtDwAAAJY"]
[Thu Dec 04 05:58:14.078774 2025] [:error] [pid 2160:tid 2195] [client 192.178.4.101:52529] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCydkNDGjl4u2feUD_OywAAAEU"]
[Thu Dec 04 05:58:15.819970 2025] [:error] [pid 38403:tid 38418] [client 192.178.4.101:57166] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCydwBCL4g8TXcskwnxXAAAAQo"]
[Thu Dec 04 05:58:17.646867 2025] [:error] [pid 2244:tid 2252] [client 192.178.4.101:36382] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCyeZm00CCLpKa0F70ssAAAAMY"]
[Thu Dec 04 05:58:18.867394 2025] [:error] [pid 2160:tid 2207] [client 192.178.4.101:39384] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCyekNDGjl4u2feUD_O2AAAAFE"]
[Thu Dec 04 05:58:20.699040 2025] [:error] [pid 2161:tid 2219] [client 192.178.4.101:37156] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCyfCjiGdnP9Am2woVtFwAAAII"]
[Thu Dec 04 05:58:22.532717 2025] [:error] [pid 38403:tid 38426] [client 192.178.4.101:55565] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCyfgBCL4g8TXcskwnxYQAAARI"]
[Thu Dec 04 05:58:24.368808 2025] [:error] [pid 2244:tid 2253] [client 192.178.4.101:44550] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCygJm00CCLpKa0F70suAAAAMc"]
[Thu Dec 04 05:58:28.416363 2025] [:error] [pid 2159:tid 2168] [client 192.178.4.101:65000] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCyhD3GVdXg3ORUAG2ixAAAAAU"]
[Thu Dec 04 05:58:32.333021 2025] [:error] [pid 38403:tid 38427] [client 192.178.4.101:62410] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCyiABCL4g8TXcskwnxdQAAARM"]
[Thu Dec 04 05:58:33.265157 2025] [:error] [pid 2159:tid 2182] [client 192.178.4.101:49091] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCyiT3GVdXg3ORUAG2iyQAAABM"]
[Thu Dec 04 05:58:34.175046 2025] [:error] [pid 2160:tid 2200] [client 192.178.4.101:49530] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCyikNDGjl4u2feUD_O7wAAAEo"]
[Thu Dec 04 05:58:35.998213 2025] [:error] [pid 2161:tid 2218] [client 192.178.4.101:56625] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCyiyjiGdnP9Am2woVtJQAAAIE"]
[Thu Dec 04 05:58:37.226737 2025] [:error] [pid 2160:tid 2198] [client 192.178.4.101:37580] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCyjUNDGjl4u2feUD_O8QAAAEg"]
[Thu Dec 04 05:58:39.157854 2025] [:error] [pid 2160:tid 2207] [client 192.178.4.101:41664] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCyj0NDGjl4u2feUD_O8gAAAFE"]
[Thu Dec 04 05:58:40.898004 2025] [:error] [pid 38403:tid 38415] [client 192.178.4.101:36629] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCykABCL4g8TXcskwnxmQAAAQc"]
[Thu Dec 04 05:58:42.107085 2025] [:error] [pid 38403:tid 38427] [client 192.178.4.101:46075] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCykgBCL4g8TXcskwnxnwAAARM"]
[Thu Dec 04 05:58:43.950592 2025] [:error] [pid 2244:tid 2267] [client 192.178.4.101:56484] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCyk5m00CCLpKa0F70s1QAAANQ"]
[Thu Dec 04 05:58:45.706030 2025] [:error] [pid 2161:tid 2236] [client 192.178.4.101:42834] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCylSjiGdnP9Am2woVtMAAAAJM"]
[Thu Dec 04 05:58:47.610679 2025] [:error] [pid 2159:tid 2174] [client 192.178.4.101:60473] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCylz3GVdXg3ORUAG2i1gAAAAs"]
[Thu Dec 04 05:58:48.840616 2025] [:error] [pid 38403:tid 38421] [client 192.178.4.101:54788] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCymABCL4g8TXcskwnxtAAAAQ0"]
[Thu Dec 04 05:58:51.394300 2025] [:error] [pid 2159:tid 2179] [client 192.178.4.101:36698] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCymz3GVdXg3ORUAG2i3AAAABA"]
[Thu Dec 04 05:58:52.502049 2025] [:error] [pid 2244:tid 2268] [client 192.178.4.101:62745] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCynJm00CCLpKa0F70s2QAAANU"]
[Thu Dec 04 05:58:54.345998 2025] [:error] [pid 38403:tid 38427] [client 192.178.4.101:52902] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCyngBCL4g8TXcskwnxzgAAARM"]
[Thu Dec 04 05:59:15.028497 2025] [:error] [pid 2244:tid 2268] [client 192.178.4.101:62858] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCys5m00CCLpKa0F70s_AAAANU"]
[Thu Dec 04 05:59:18.260278 2025] [:error] [pid 2244:tid 2247] [client 192.178.4.101:41671] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCytpm00CCLpKa0F70tBAAAAME"]
[Thu Dec 04 05:59:19.402075 2025] [:error] [pid 38403:tid 38428] [client 192.178.4.101:49032] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCytwBCL4g8TXcskwnyHQAAARQ"]
[Thu Dec 04 05:59:20.553818 2025] [:error] [pid 2244:tid 2258] [client 192.178.4.101:50649] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCyuJm00CCLpKa0F70tCgAAAMw"]
[Thu Dec 04 05:59:22.546059 2025] [:error] [pid 38403:tid 38419] [client 192.178.4.101:50009] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCyugBCL4g8TXcskwnyJgAAAQs"]
[Thu Dec 04 05:59:25.057035 2025] [:error] [pid 2159:tid 2184] [client 192.178.4.101:40451] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCyvT3GVdXg3ORUAG2jFAAAABU"]
[Thu Dec 04 05:59:26.162719 2025] [:error] [pid 2159:tid 2163] [client 192.178.4.101:43203] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCyvj3GVdXg3ORUAG2jFgAAAAA"]
[Thu Dec 04 05:59:27.969912 2025] [:error] [pid 2159:tid 2184] [client 192.178.4.101:48592] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCyvz3GVdXg3ORUAG2jHAAAABU"]
[Thu Dec 04 05:59:29.192732 2025] [:error] [pid 2159:tid 2186] [client 192.178.4.101:49736] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCywT3GVdXg3ORUAG2jIAAAABc"]
[Thu Dec 04 05:59:31.009711 2025] [:error] [pid 38403:tid 38408] [client 192.178.4.101:48706] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCywwBCL4g8TXcskwnyNwAAAQE"]
[Thu Dec 04 05:59:32.857780 2025] [:error] [pid 2161:tid 2220] [client 192.178.4.101:45904] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCyxCjiGdnP9Am2woVteAAAAIM"]
[Thu Dec 04 05:59:34.683024 2025] [:error] [pid 38403:tid 38427] [client 192.178.4.101:50213] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCyxgBCL4g8TXcskwnyQQAAARM"]
[Thu Dec 04 05:59:35.903700 2025] [:error] [pid 38403:tid 38408] [client 192.178.4.101:46980] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCyxwBCL4g8TXcskwnyQwAAAQE"]
[Thu Dec 04 05:59:37.737729 2025] [:error] [pid 38403:tid 38423] [client 192.178.4.101:42629] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCyyQBCL4g8TXcskwnyTQAAAQ8"]
[Thu Dec 04 05:59:39.579123 2025] [:error] [pid 38403:tid 38421] [client 192.178.4.101:41376] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCyywBCL4g8TXcskwnyVwAAAQ0"]
[Thu Dec 04 05:59:41.404447 2025] [:error] [pid 38403:tid 38427] [client 192.178.4.101:50940] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCyzQBCL4g8TXcskwnyZwAAARM"]
[Thu Dec 04 05:59:42.625166 2025] [:error] [pid 38403:tid 38431] [client 192.178.4.101:54916] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCyzgBCL4g8TXcskwnybQAAARc"]
[Thu Dec 04 05:59:44.458123 2025] [:error] [pid 2160:tid 2192] [client 192.178.4.101:45898] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCy0ENDGjl4u2feUD_PWwAAAEI"]
[Thu Dec 04 05:59:49.306968 2025] [:error] [pid 2161:tid 2237] [client 192.178.4.101:51438] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCy1SjiGdnP9Am2woVtlgAAAJQ"]
[Thu Dec 04 05:59:50.227783 2025] [:error] [pid 2161:tid 2234] [client 192.178.4.101:60475] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCy1ijiGdnP9Am2woVtlwAAAJE"]
[Thu Dec 04 05:59:51.518651 2025] [:error] [pid 38403:tid 38422] [client 192.178.4.101:57572] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCy1wBCL4g8TXcskwnyegAAAQ4"]
[Thu Dec 04 05:59:53.353687 2025] [:error] [pid 2159:tid 2176] [client 192.178.4.101:44541] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCy2T3GVdXg3ORUAG2jPQAAAA0"]
[Thu Dec 04 05:59:54.492459 2025] [:error] [pid 2160:tid 2207] [client 192.178.4.101:56879] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCy2kNDGjl4u2feUD_PYAAAAFE"]
[Thu Dec 04 05:59:56.404274 2025] [:error] [pid 2244:tid 2271] [client 192.178.4.101:40278] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCy3Jm00CCLpKa0F70tLAAAANg"]
[Thu Dec 04 05:59:58.232813 2025] [:error] [pid 2160:tid 2208] [client 192.178.4.101:63215] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCy3kNDGjl4u2feUD_PZQAAAFI"]
[Thu Dec 04 06:00:00.071695 2025] [:error] [pid 38403:tid 38428] [client 192.178.4.101:64724] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCy4ABCL4g8TXcskwnyhQAAARQ"]
[Thu Dec 04 06:00:01.676732 2025] [:error] [pid 2159:tid 2168] [client 192.178.4.101:36737] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCy4T3GVdXg3ORUAG2jTgAAAAU"]
[Thu Dec 04 06:00:03.127614 2025] [:error] [pid 2244:tid 2249] [client 192.178.4.101:47485] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCy45m00CCLpKa0F70tQwAAAMM"]
[Thu Dec 04 06:00:04.955245 2025] [:error] [pid 2159:tid 2164] [client 192.178.4.101:55179] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCy5D3GVdXg3ORUAG2jWgAAAAE"]
[Thu Dec 04 06:00:06.188099 2025] [:error] [pid 2244:tid 2248] [client 192.178.4.101:49881] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCy5pm00CCLpKa0F70tSQAAAMI"]
[Thu Dec 04 06:00:08.005047 2025] [:error] [pid 38403:tid 38422] [client 192.178.4.101:43366] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCy6ABCL4g8TXcskwnylAAAAQ4"]
[Thu Dec 04 06:00:09.844703 2025] [:error] [pid 38403:tid 38423] [client 192.178.4.101:44663] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCy6QBCL4g8TXcskwnymQAAAQ8"]
[Thu Dec 04 06:00:31.748998 2025] [:error] [pid 2161:tid 2237] [client 192.178.4.101:57533] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCy_yjiGdnP9Am2woVtvQAAAJQ"]
[Thu Dec 04 06:00:34.286678 2025] [:error] [pid 2161:tid 2230] [client 192.178.4.101:57334] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCzAijiGdnP9Am2woVtwgAAAI0"]
[Thu Dec 04 06:00:35.499972 2025] [:error] [pid 2161:tid 2218] [client 192.178.4.101:57124] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCzAyjiGdnP9Am2woVtwwAAAIE"]
[Thu Dec 04 06:00:37.425597 2025] [:error] [pid 38403:tid 38421] [client 192.178.4.101:58793] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCzBQBCL4g8TXcskwny0QAAAQ0"]
[Thu Dec 04 06:00:38.397405 2025] [:error] [pid 2244:tid 2268] [client 192.178.4.101:55614] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCzBpm00CCLpKa0F70tbwAAANU"]
[Thu Dec 04 06:00:39.179811 2025] [:error] [pid 2161:tid 2236] [client 192.178.4.101:41064] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCzByjiGdnP9Am2woVtxQAAAJM"]
[Thu Dec 04 06:00:41.004685 2025] [:error] [pid 2160:tid 2198] [client 192.178.4.101:52031] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCzCUNDGjl4u2feUD_PgwAAAEg"]
[Thu Dec 04 06:00:41.257827 2025] [:error] [pid 2160:tid 2190] [client 192.178.4.101:56829] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCzCUNDGjl4u2feUD_PhQAAAEA"]
[Thu Dec 04 06:00:42.236325 2025] [:error] [pid 2161:tid 2228] [client 192.178.4.101:48168] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCzCijiGdnP9Am2woVtywAAAIs"]
[Thu Dec 04 06:00:46.204471 2025] [:error] [pid 2244:tid 2259] [client 192.178.4.101:51488] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCzDpm00CCLpKa0F70tdwAAAM0"]
[Thu Dec 04 06:00:47.140656 2025] [:error] [pid 38403:tid 38418] [client 192.178.4.101:52095] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCzDwBCL4g8TXcskwny4wAAAQo"]
[Thu Dec 04 06:00:49.605150 2025] [:error] [pid 38403:tid 38420] [client 192.178.4.101:62876] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCzEQBCL4g8TXcskwny6AAAAQw"]
[Thu Dec 04 06:00:50.521945 2025] [:error] [pid 2244:tid 2255] [client 192.178.4.101:58438] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCzEpm00CCLpKa0F70tfAAAAMk"]
[Thu Dec 04 06:00:52.029251 2025] [:error] [pid 2161:tid 2238] [client 192.178.4.101:64345] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCzFCjiGdnP9Am2woVt2gAAAJU"]
[Thu Dec 04 06:00:53.856242 2025] [:error] [pid 2159:tid 2182] [client 192.178.4.101:54306] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCzFT3GVdXg3ORUAG2jrQAAABM"]
[Thu Dec 04 06:00:56.688972 2025] [:error] [pid 38403:tid 38417] [client 192.178.4.101:36991] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCzGABCL4g8TXcskwny8gAAAQk"]
[Thu Dec 04 06:00:57.611088 2025] [:error] [pid 2244:tid 2269] [client 192.178.4.101:64917] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCzGZm00CCLpKa0F70thQAAANY"]
[Thu Dec 04 06:00:59.896269 2025] [:error] [pid 2159:tid 2183] [client 192.178.4.101:39016] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCzGz3GVdXg3ORUAG2jtAAAABQ"]
[Thu Dec 04 06:01:01.751935 2025] [:error] [pid 38403:tid 38426] [client 192.178.4.101:48710] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCzHQBCL4g8TXcskwny-wAAARI"]
[Thu Dec 04 06:01:01.788838 2025] [:error] [pid 38403:tid 38418] [client 192.178.4.101:53621] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCzHQBCL4g8TXcskwny_AAAAQo"]
[Thu Dec 04 06:01:03.041215 2025] [:error] [pid 38403:tid 38408] [client 192.178.4.101:36633] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCzHwBCL4g8TXcskwnzAAAAAQE"]
[Thu Dec 04 06:01:04.246868 2025] [:error] [pid 2159:tid 2180] [client 192.178.4.101:55248] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCzID3GVdXg3ORUAG2juwAAABE"]
[Thu Dec 04 06:01:06.122806 2025] [:error] [pid 2161:tid 2235] [client 192.178.4.101:40925] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCzIijiGdnP9Am2woVt4wAAAJI"]
[Thu Dec 04 06:01:07.916816 2025] [:error] [pid 2160:tid 2194] [client 192.178.4.101:55474] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCzI0NDGjl4u2feUD_PpAAAAEQ"]
[Thu Dec 04 06:01:09.750985 2025] [:error] [pid 2244:tid 2256] [client 192.178.4.101:63220] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCzJZm00CCLpKa0F70tkwAAAMo"]
[Thu Dec 04 06:01:10.577824 2025] [:error] [pid 2160:tid 2204] [client 192.178.4.101:44989] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCzJkNDGjl4u2feUD_PsAAAAE4"]
[Thu Dec 04 06:01:10.899256 2025] [:error] [pid 2160:tid 2197] [client 192.178.4.101:45312] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCzJkNDGjl4u2feUD_PswAAAEc"]
[Thu Dec 04 06:01:12.799390 2025] [:error] [pid 2160:tid 2205] [client 192.178.4.101:53393] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCzKENDGjl4u2feUD_PtgAAAE8"]
[Thu Dec 04 06:01:15.276566 2025] [:error] [pid 2159:tid 2187] [client 192.178.4.101:43427] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCzKz3GVdXg3ORUAG2jvwAAABg"]
[Thu Dec 04 06:01:16.464894 2025] [:error] [pid 38403:tid 38421] [client 192.178.4.101:60295] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCzLABCL4g8TXcskwnzKwAAAQ0"]
[Thu Dec 04 06:01:18.298556 2025] [:error] [pid 38403:tid 38408] [client 192.178.4.101:57148] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCzLgBCL4g8TXcskwnzMwAAAQE"]
[Thu Dec 04 06:01:20.135670 2025] [:error] [pid 2161:tid 2235] [client 192.178.4.101:49812] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCzMCjiGdnP9Am2woVuAgAAAJI"]
[Thu Dec 04 06:01:21.612679 2025] [:error] [pid 2244:tid 2261] [client 192.178.4.101:35416] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCzMZm00CCLpKa0F70togAAAM8"]
[Thu Dec 04 06:01:21.964460 2025] [:error] [pid 2161:tid 2239] [client 192.178.4.101:53482] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCzMSjiGdnP9Am2woVuCgAAAJY"]
[Thu Dec 04 06:01:24.434633 2025] [:error] [pid 2244:tid 2246] [client 192.178.4.101:35189] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCzNJm00CCLpKa0F70tqgAAAMA"]
[Thu Dec 04 06:01:25.122513 2025] [:error] [pid 2161:tid 2240] [client 192.178.4.101:55249] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCzNSjiGdnP9Am2woVuFwAAAJc"]
[Thu Dec 04 06:01:26.790260 2025] [:error] [pid 2244:tid 2254] [client 192.178.4.101:45904] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCzNpm00CCLpKa0F70trQAAAMg"]
[Thu Dec 04 06:01:28.689110 2025] [:error] [pid 2160:tid 2196] [client 192.178.4.101:44909] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCzOENDGjl4u2feUD_PygAAAEY"]
[Thu Dec 04 06:01:49.365589 2025] [:error] [pid 2244:tid 2271] [client 192.178.4.101:53447] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCzTZm00CCLpKa0F70t2wAAANg"]
[Thu Dec 04 06:01:51.110188 2025] [:error] [pid 2160:tid 2195] [client 192.178.4.101:45151] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCzT0NDGjl4u2feUD_P7wAAAEU"]
[Thu Dec 04 06:01:51.229736 2025] [:error] [pid 2161:tid 2223] [client 192.178.4.101:39611] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCzTyjiGdnP9Am2woVuUwAAAIY"]
[Thu Dec 04 06:01:53.128121 2025] [:error] [pid 38403:tid 38429] [client 192.178.4.101:47065] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCzUQBCL4g8TXcskwnzfgAAARU"]
[Thu Dec 04 06:01:54.962315 2025] [:error] [pid 2159:tid 2164] [client 192.178.4.101:55163] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCzUj3GVdXg3ORUAG2kCwAAAAE"]
[Thu Dec 04 06:01:56.784028 2025] [:error] [pid 2160:tid 2199] [client 192.178.4.101:39566] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCzVENDGjl4u2feUD_P9QAAAEk"]
[Thu Dec 04 06:01:58.005897 2025] [:error] [pid 2244:tid 2271] [client 192.178.4.101:60118] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCzVpm00CCLpKa0F70t6QAAANg"]
[Thu Dec 04 06:01:59.834422 2025] [:error] [pid 2159:tid 2183] [client 192.178.4.101:43679] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCzVz3GVdXg3ORUAG2kDQAAABQ"]
[Thu Dec 04 06:02:01.605063 2025] [:error] [pid 2160:tid 2208] [client 192.178.4.101:53035] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCzWUNDGjl4u2feUD_P_QAAAFI"]
[Thu Dec 04 06:02:03.502695 2025] [:error] [pid 2159:tid 2184] [client 192.178.4.101:38606] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCzWz3GVdXg3ORUAG2kEwAAABU"]
[Thu Dec 04 06:02:04.733595 2025] [:error] [pid 2159:tid 2173] [client 192.178.4.101:45031] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCzXD3GVdXg3ORUAG2kFwAAAAo"]
[Thu Dec 04 06:02:06.563199 2025] [:error] [pid 38403:tid 38426] [client 192.178.4.101:63033] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCzXgBCL4g8TXcskwnzlgAAARI"]
[Thu Dec 04 06:02:08.394060 2025] [:error] [pid 2244:tid 2259] [client 192.178.4.101:41075] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCzYJm00CCLpKa0F70t-gAAAM0"]
[Thu Dec 04 06:02:10.914886 2025] [:error] [pid 2160:tid 2206] [client 192.178.4.101:57104] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCzYkNDGjl4u2feUD_QBgAAAFA"]
[Thu Dec 04 06:02:12.067107 2025] [:error] [pid 38403:tid 38431] [client 192.178.4.101:38987] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCzZABCL4g8TXcskwnznQAAARc"]
[Thu Dec 04 06:02:13.980855 2025] [:error] [pid 2160:tid 2191] [client 192.178.4.101:41049] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCzZUNDGjl4u2feUD_QDQAAAEE"]
[Thu Dec 04 06:02:16.425222 2025] [:error] [pid 2244:tid 2259] [client 192.178.4.101:40332] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCzaJm00CCLpKa0F70uBwAAAM0"]
[Thu Dec 04 06:02:16.749749 2025] [:error] [pid 38403:tid 38419] [client 192.178.4.101:60983] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCzaABCL4g8TXcskwnzpQAAAQs"]
[Thu Dec 04 06:02:18.171579 2025] [:error] [pid 2244:tid 2267] [client 192.178.4.101:55821] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCzapm00CCLpKa0F70uDQAAANQ"]
[Thu Dec 04 06:02:20.041999 2025] [:error] [pid 2159:tid 2184] [client 192.178.4.101:53669] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCzbD3GVdXg3ORUAG2kOgAAABU"]
[Thu Dec 04 06:02:21.226504 2025] [:error] [pid 2161:tid 2239] [client 192.178.4.101:53483] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCzbSjiGdnP9Am2woVufgAAAJY"]
[Thu Dec 04 06:02:23.066689 2025] [:error] [pid 2160:tid 2214] [client 192.178.4.101:44829] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCzb0NDGjl4u2feUD_QHAAAAFg"]
[Thu Dec 04 06:02:24.892579 2025] [:error] [pid 38403:tid 38411] [client 192.178.4.101:58704] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCzcABCL4g8TXcskwnzqgAAAQM"]
[Thu Dec 04 06:02:26.112783 2025] [:error] [pid 38403:tid 38418] [client 192.178.4.101:37614] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCzcgBCL4g8TXcskwnzrAAAAQo"]
[Thu Dec 04 06:02:27.947995 2025] [:error] [pid 2244:tid 2254] [client 192.178.4.101:44885] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCzc5m00CCLpKa0F70uJQAAAMg"]
[Thu Dec 04 06:02:29.794577 2025] [:error] [pid 2161:tid 2227] [client 192.178.4.101:57829] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCzdSjiGdnP9Am2woVujAAAAIo"]
[Thu Dec 04 06:02:32.391369 2025] [:error] [pid 38403:tid 38419] [client 192.178.4.101:37453] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCzeABCL4g8TXcskwnzugAAAQs"]
[Thu Dec 04 06:02:33.463088 2025] [:error] [pid 2160:tid 2194] [client 192.178.4.101:50050] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCzeUNDGjl4u2feUD_QJAAAAEQ"]
[Thu Dec 04 06:02:35.285636 2025] [:error] [pid 2161:tid 2234] [client 192.178.4.101:59634] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCzeyjiGdnP9Am2woVukAAAAJE"]
[Thu Dec 04 06:02:37.116217 2025] [:error] [pid 38403:tid 38411] [client 192.178.4.101:51085] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCzfQBCL4g8TXcskwnzwgAAAQM"]
[Thu Dec 04 06:02:38.807722 2025] [:error] [pid 2244:tid 2248] [client 192.178.4.101:55638] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCzfpm00CCLpKa0F70uMQAAAMI"]
[Thu Dec 04 06:03:08.223125 2025] [:error] [pid 2160:tid 2196] [client 192.178.4.101:35944] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCznENDGjl4u2feUD_QcgAAAEY"]
[Thu Dec 04 06:03:10.050024 2025] [:error] [pid 2159:tid 2183] [client 192.178.4.101:47219] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCznj3GVdXg3ORUAG2knAAAABQ"]
[Thu Dec 04 06:03:12.563028 2025] [:error] [pid 2244:tid 2258] [client 192.178.4.101:46602] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCzoJm00CCLpKa0F70uWwAAAMw"]
[Thu Dec 04 06:03:14.392865 2025] [:error] [pid 2160:tid 2200] [client 192.178.4.101:60939] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCzokNDGjl4u2feUD_QfQAAAEo"]
[Thu Dec 04 06:03:15.614222 2025] [:error] [pid 2160:tid 2209] [client 192.178.4.101:47172] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCzo0NDGjl4u2feUD_QggAAAFM"]
[Thu Dec 04 06:03:21.576781 2025] [:error] [pid 2159:tid 2187] [client 192.178.4.101:43368] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCzqT3GVdXg3ORUAG2kswAAABg"]
[Thu Dec 04 06:03:21.637658 2025] [:error] [pid 2160:tid 2201] [client 192.178.4.101:44864] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCzqUNDGjl4u2feUD_QigAAAEs"]
[Thu Dec 04 06:03:23.504294 2025] [:error] [pid 2161:tid 2220] [client 192.178.4.101:35521] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCzqyjiGdnP9Am2woVuzwAAAIM"]
[Thu Dec 04 06:03:24.331214 2025] [:error] [pid 2161:tid 2227] [client 192.178.4.101:64523] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCzrCjiGdnP9Am2woVu0QAAAIo"]
[Thu Dec 04 06:03:26.570539 2025] [:error] [pid 38403:tid 38422] [client 192.178.4.101:47095] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCzrgBCL4g8TXcskwn0NAAAAQ4"]
[Thu Dec 04 06:03:27.182283 2025] [:error] [pid 2161:tid 2225] [client 192.178.4.101:49786] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCzryjiGdnP9Am2woVu1gAAAIg"]
[Thu Dec 04 06:03:29.022972 2025] [:error] [pid 2244:tid 2248] [client 192.178.4.101:44059] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCzsZm00CCLpKa0F70ucwAAAMI"]
[Thu Dec 04 06:03:32.172375 2025] [:error] [pid 2244:tid 2247] [client 192.178.4.101:44030] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCztJm00CCLpKa0F70udwAAAME"]
[Thu Dec 04 06:03:32.778679 2025] [:error] [pid 38403:tid 38423] [client 192.178.4.101:58629] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCztABCL4g8TXcskwn0OwAAAQ8"]
[Thu Dec 04 06:03:34.518102 2025] [:error] [pid 2159:tid 2169] [client 192.178.4.101:59883] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCztj3GVdXg3ORUAG2k3QAAAAY"]
[Thu Dec 04 06:03:36.356990 2025] [:error] [pid 2159:tid 2166] [client 192.178.4.101:34931] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCzuD3GVdXg3ORUAG2k5wAAAAM"]
[Thu Dec 04 06:03:38.281139 2025] [:error] [pid 2160:tid 2213] [client 192.178.4.101:56447] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCzukNDGjl4u2feUD_QogAAAFc"]
[Thu Dec 04 06:03:39.412110 2025] [:error] [pid 2161:tid 2227] [client 192.178.4.101:38523] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCzuyjiGdnP9Am2woVu6gAAAIo"]
[Thu Dec 04 06:03:41.241179 2025] [:error] [pid 2161:tid 2238] [client 192.178.4.101:52079] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCzvSjiGdnP9Am2woVu7AAAAJU"]
[Thu Dec 04 06:03:43.167244 2025] [:error] [pid 2160:tid 2195] [client 192.178.4.101:38306] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCzv0NDGjl4u2feUD_QqgAAAEU"]
[Thu Dec 04 06:03:46.003339 2025] [:error] [pid 2161:tid 2225] [client 192.178.4.101:52090] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCzwijiGdnP9Am2woVu9AAAAIg"]
[Thu Dec 04 06:03:46.831982 2025] [:error] [pid 38403:tid 38426] [client 192.178.4.101:63770] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCzwgBCL4g8TXcskwn0VwAAARI"]
[Thu Dec 04 06:03:48.582188 2025] [:error] [pid 2159:tid 2181] [client 192.178.4.101:53808] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCzxD3GVdXg3ORUAG2k-gAAABI"]
[Thu Dec 04 06:03:50.239398 2025] [:error] [pid 2161:tid 2237] [client 192.178.4.101:60721] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCzxijiGdnP9Am2woVu9wAAAJQ"]
[Thu Dec 04 06:03:50.409881 2025] [:error] [pid 2159:tid 2165] [client 192.178.4.101:52354] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCzxj3GVdXg3ORUAG2k-wAAAAI"]
[Thu Dec 04 06:03:52.242638 2025] [:error] [pid 2161:tid 2233] [client 192.178.4.101:35890] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCzyCjiGdnP9Am2woVu-QAAAJA"]
[Thu Dec 04 06:03:53.459265 2025] [:error] [pid 2159:tid 2164] [client 192.178.4.101:56675] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCzyT3GVdXg3ORUAG2k_AAAAAE"]
[Thu Dec 04 06:03:55.297076 2025] [:error] [pid 2161:tid 2220] [client 192.178.4.101:41309] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCzyyjiGdnP9Am2woVu_QAAAIM"]
[Thu Dec 04 06:03:57.124150 2025] [:error] [pid 2161:tid 2219] [client 192.178.4.101:60186] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCzzSjiGdnP9Am2woVvAgAAAII"]
[Thu Dec 04 06:03:58.965113 2025] [:error] [pid 2159:tid 2169] [client 192.178.4.101:50405] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCzzj3GVdXg3ORUAG2k_wAAAAY"]
[Thu Dec 04 06:04:00.179993 2025] [:error] [pid 2159:tid 2167] [client 192.178.4.101:47220] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCz0D3GVdXg3ORUAG2lBwAAAAQ"]
[Thu Dec 04 06:04:02.018132 2025] [:error] [pid 2244:tid 2246] [client 192.178.4.101:55273] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCz0pm00CCLpKa0F70upAAAAMA"]
[Thu Dec 04 06:04:03.859882 2025] [:error] [pid 2160:tid 2200] [client 192.178.4.101:46137] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCz00NDGjl4u2feUD_QwgAAAEo"]
[Thu Dec 04 06:04:05.783907 2025] [:error] [pid 2159:tid 2175] [client 192.178.4.101:46088] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCz1T3GVdXg3ORUAG2lEQAAAAw"]
[Thu Dec 04 06:04:27.383889 2025] [:error] [pid 2159:tid 2163] [client 192.178.4.101:37550] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCz6z3GVdXg3ORUAG2lMwAAAAA"]
[Thu Dec 04 06:04:29.038757 2025] [:error] [pid 2159:tid 2171] [client 192.178.4.101:43793] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCz7T3GVdXg3ORUAG2lNAAAAAg"]
[Thu Dec 04 06:04:30.567970 2025] [:error] [pid 38403:tid 38418] [client 192.178.4.101:51558] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCz7gBCL4g8TXcskwn0ywAAAQo"]
[Thu Dec 04 06:04:31.964420 2025] [:error] [pid 2160:tid 2190] [client 192.178.4.101:39078] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCz70NDGjl4u2feUD_Q5QAAAEA"]
[Thu Dec 04 06:04:33.269094 2025] [:error] [pid 2244:tid 2268] [client 192.178.4.101:43718] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCz8Zm00CCLpKa0F70u4wAAANU"]
[Thu Dec 04 06:04:33.789877 2025] [:error] [pid 2161:tid 2238] [client 192.178.4.101:57500] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCz8SjiGdnP9Am2woVvKQAAAJU"]
[Thu Dec 04 06:04:34.699677 2025] [:error] [pid 2244:tid 2246] [client 192.178.4.101:42882] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCz8pm00CCLpKa0F70u5AAAAMA"]
[Thu Dec 04 06:04:35.635374 2025] [:error] [pid 2244:tid 2258] [client 192.178.4.101:57067] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCz85m00CCLpKa0F70u5gAAAMw"]
[Thu Dec 04 06:04:36.857870 2025] [:error] [pid 2159:tid 2172] [client 192.178.4.101:55325] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCz9D3GVdXg3ORUAG2lPwAAAAk"]
[Thu Dec 04 06:04:39.394895 2025] [:error] [pid 2244:tid 2267] [client 192.178.4.101:52069] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCz95m00CCLpKa0F70u6gAAANQ"]
[Thu Dec 04 06:04:40.517150 2025] [:error] [pid 2160:tid 2204] [client 192.178.4.101:51450] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCz-ENDGjl4u2feUD_Q6AAAAE4"]
[Thu Dec 04 06:04:42.349779 2025] [:error] [pid 38403:tid 38419] [client 192.178.4.101:55502] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCz-gBCL4g8TXcskwn07gAAAQs"]
[Thu Dec 04 06:04:44.186417 2025] [:error] [pid 38403:tid 38411] [client 192.178.4.101:56977] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCz_ABCL4g8TXcskwn09QAAAQM"]
[Thu Dec 04 06:04:46.016675 2025] [:error] [pid 38403:tid 38425] [client 192.178.4.101:51356] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTCz_gBCL4g8TXcskwn1AgAAARE"]
[Thu Dec 04 06:04:48.962124 2025] [:error] [pid 2160:tid 2195] [client 192.178.4.101:57569] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC0AENDGjl4u2feUD_Q8AAAAEU"]
[Thu Dec 04 06:04:49.795811 2025] [:error] [pid 2161:tid 2223] [client 192.178.4.101:34921] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC0ASjiGdnP9Am2woVvNgAAAIY"]
[Thu Dec 04 06:04:51.522600 2025] [:error] [pid 2244:tid 2257] [client 192.178.4.101:46655] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC0A5m00CCLpKa0F70u9AAAAMs"]
[Thu Dec 04 06:04:53.402337 2025] [:error] [pid 38403:tid 38425] [client 192.178.4.101:57320] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC0BQBCL4g8TXcskwn1EQAAARE"]
[Thu Dec 04 06:04:54.579203 2025] [:error] [pid 2161:tid 2234] [client 192.178.4.101:35689] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC0BijiGdnP9Am2woVvOgAAAJE"]
[Thu Dec 04 06:04:54.701920 2025] [:error] [pid 2159:tid 2169] [client 192.178.4.101:54467] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC0Bj3GVdXg3ORUAG2lWAAAAAY"]
[Thu Dec 04 06:04:56.420515 2025] [:error] [pid 2160:tid 2199] [client 192.178.4.101:53454] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC0CENDGjl4u2feUD_Q9QAAAEk"]
[Thu Dec 04 06:04:58.239440 2025] [:error] [pid 2244:tid 2253] [client 192.178.4.101:48571] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC0Cpm00CCLpKa0F70u_QAAAMc"]
[Thu Dec 04 06:05:00.071149 2025] [:error] [pid 2159:tid 2171] [client 192.178.4.101:54148] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC0DD3GVdXg3ORUAG2lYQAAAAg"]
[Thu Dec 04 06:05:02.034122 2025] [:error] [pid 38403:tid 38425] [client 192.178.4.101:58988] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC0DgBCL4g8TXcskwn1IAAAARE"]
[Thu Dec 04 06:05:02.533181 2025] [:error] [pid 2244:tid 2255] [client 192.178.4.101:53544] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC0Dpm00CCLpKa0F70vAwAAAMk"]
[Thu Dec 04 06:05:03.819119 2025] [:error] [pid 2161:tid 2219] [client 192.178.4.101:59928] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC0DyjiGdnP9Am2woVvQgAAAII"]
[Thu Dec 04 06:05:04.419779 2025] [:error] [pid 38403:tid 38408] [client 192.178.4.101:59297] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC0EABCL4g8TXcskwn1IQAAAQE"]
[Thu Dec 04 06:05:05.597762 2025] [:error] [pid 2244:tid 2267] [client 192.178.4.101:59693] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC0EZm00CCLpKa0F70vCQAAANQ"]
[Thu Dec 04 06:05:07.633857 2025] [:error] [pid 2244:tid 2259] [client 192.178.4.101:35728] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC0E5m00CCLpKa0F70vDAAAAM0"]
[Thu Dec 04 06:05:09.249063 2025] [:error] [pid 2244:tid 2255] [client 192.178.4.101:62593] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC0FZm00CCLpKa0F70vEwAAAMk"]
[Thu Dec 04 06:05:10.475867 2025] [:error] [pid 38403:tid 38411] [client 192.178.4.101:60260] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC0FgBCL4g8TXcskwn1JAAAAQM"]
[Thu Dec 04 06:05:12.295382 2025] [:error] [pid 38403:tid 38429] [client 192.178.4.101:36100] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC0GABCL4g8TXcskwn1KAAAARU"]
[Thu Dec 04 06:05:13.917846 2025] [:error] [pid 2161:tid 2230] [client 192.178.4.101:55728] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC0GSjiGdnP9Am2woVvSwAAAI0"]
[Thu Dec 04 06:05:14.142912 2025] [:error] [pid 2159:tid 2181] [client 192.178.4.101:63996] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC0Gj3GVdXg3ORUAG2lewAAABI"]
[Thu Dec 04 06:05:16.065564 2025] [:error] [pid 2160:tid 2204] [client 192.178.4.101:37554] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC0HENDGjl4u2feUD_REgAAAE4"]
[Thu Dec 04 06:05:17.193470 2025] [:error] [pid 2159:tid 2176] [client 192.178.4.101:55369] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC0HT3GVdXg3ORUAG2lfgAAAA0"]
[Thu Dec 04 06:05:19.897350 2025] [:error] [pid 2244:tid 2261] [client 192.178.4.101:54894] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC0H5m00CCLpKa0F70vGAAAAM8"]
[Thu Dec 04 06:05:20.364062 2025] [:error] [pid 2244:tid 2260] [client 192.178.4.101:62398] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC0IJm00CCLpKa0F70vGQAAAM4"]
[Thu Dec 04 06:05:21.516557 2025] [:error] [pid 38403:tid 38414] [client 192.178.4.101:62353] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC0IQBCL4g8TXcskwn1eAAAAQY"]
[Thu Dec 04 06:05:23.294665 2025] [:error] [pid 2244:tid 2252] [client 192.178.4.101:52087] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC0I5m00CCLpKa0F70vHQAAAMY"]
[Thu Dec 04 06:05:44.288682 2025] [:error] [pid 2160:tid 2202] [client 192.178.4.101:54586] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC0OENDGjl4u2feUD_RSwAAAEw"]
[Thu Dec 04 06:05:46.829875 2025] [:error] [pid 2159:tid 2182] [client 192.178.4.101:44847] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC0Oj3GVdXg3ORUAG2lzwAAABM"]
[Thu Dec 04 06:05:48.056960 2025] [:error] [pid 2244:tid 2263] [client 192.178.4.101:60465] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC0PJm00CCLpKa0F70vQAAAANE"]
[Thu Dec 04 06:05:49.914914 2025] [:error] [pid 2160:tid 2200] [client 192.178.4.101:58602] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC0PUNDGjl4u2feUD_RXAAAAEo"]
[Thu Dec 04 06:05:51.717047 2025] [:error] [pid 2161:tid 2233] [client 192.178.4.101:50137] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC0PyjiGdnP9Am2woVveQAAAJA"]
[Thu Dec 04 06:05:53.553947 2025] [:error] [pid 2160:tid 2210] [client 192.178.4.101:43464] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC0QUNDGjl4u2feUD_RZgAAAFQ"]
[Thu Dec 04 06:05:54.340339 2025] [:error] [pid 2244:tid 2261] [client 192.178.4.101:63619] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC0Qpm00CCLpKa0F70vSQAAAM8"]
[Thu Dec 04 06:05:55.388623 2025] [:error] [pid 2244:tid 2259] [client 192.178.4.101:59630] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC0Q5m00CCLpKa0F70vTQAAAM0"]
[Thu Dec 04 06:05:57.225586 2025] [:error] [pid 2244:tid 2265] [client 192.178.4.101:49155] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC0RZm00CCLpKa0F70vUQAAANI"]
[Thu Dec 04 06:05:59.056991 2025] [:error] [pid 2244:tid 2259] [client 192.178.4.101:38673] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC0R5m00CCLpKa0F70vWAAAAM0"]
[Thu Dec 04 06:06:00.363649 2025] [:error] [pid 2159:tid 2178] [client 192.178.4.101:38586] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC0SD3GVdXg3ORUAG2l4AAAAA8"]
[Thu Dec 04 06:06:02.111397 2025] [:error] [pid 2244:tid 2271] [client 192.178.4.101:54094] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC0Spm00CCLpKa0F70vYwAAANg"]
[Thu Dec 04 06:06:03.929184 2025] [:error] [pid 2161:tid 2241] [client 192.178.4.101:43396] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC0SyjiGdnP9Am2woVvhwAAAJg"]
[Thu Dec 04 06:06:05.770688 2025] [:error] [pid 2244:tid 2258] [client 192.178.4.101:63865] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC0TZm00CCLpKa0F70vaQAAAMw"]
[Thu Dec 04 06:06:10.431087 2025] [:error] [pid 2159:tid 2169] [client 192.178.4.101:49494] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC0Uj3GVdXg3ORUAG2l5AAAAAY"]
[Thu Dec 04 06:06:11.358997 2025] [:error] [pid 2244:tid 2256] [client 192.178.4.101:59876] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC0U5m00CCLpKa0F70vcgAAAMo"]
[Thu Dec 04 06:06:11.583798 2025] [:error] [pid 2244:tid 2258] [client 192.178.4.101:37519] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC0U5m00CCLpKa0F70vcwAAAMw"]
[Thu Dec 04 06:06:12.566614 2025] [:error] [pid 2160:tid 2204] [client 192.178.4.101:53843] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC0VENDGjl4u2feUD_RgwAAAE4"]
[Thu Dec 04 06:06:15.693843 2025] [:error] [pid 2244:tid 2265] [client 192.178.4.101:60406] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC0V5m00CCLpKa0F70v3wAAANI"]
[Thu Dec 04 06:06:16.416515 2025] [:error] [pid 2161:tid 2226] [client 192.178.4.101:44204] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC0WCjiGdnP9Am2woVvnAAAAIk"]
[Thu Dec 04 06:06:18.140348 2025] [:error] [pid 38403:tid 38418] [client 192.178.4.101:39146] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC0WgBCL4g8TXcskwn18wAAAQo"]
[Thu Dec 04 06:06:19.418243 2025] [:error] [pid 38403:tid 38414] [client 192.178.4.101:36722] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC0WwBCL4g8TXcskwn19gAAAQY"]
[Thu Dec 04 06:06:22.399708 2025] [:error] [pid 2160:tid 2202] [client 192.178.4.101:44246] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC0XkNDGjl4u2feUD_RlQAAAEw"]
[Thu Dec 04 06:06:25.012610 2025] [:error] [pid 2160:tid 2210] [client 192.178.4.101:58848] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC0YUNDGjl4u2feUD_RnwAAAFQ"]
[Thu Dec 04 06:06:26.443880 2025] [:error] [pid 38403:tid 38432] [client 192.178.4.101:56780] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC0YgBCL4g8TXcskwn2EwAAARg"]
[Thu Dec 04 06:06:27.442000 2025] [:error] [pid 2161:tid 2232] [client 192.178.4.101:41542] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC0YyjiGdnP9Am2woVvtwAAAI8"]
[Thu Dec 04 06:06:29.215702 2025] [:error] [pid 38403:tid 38432] [client 192.178.4.101:46710] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC0ZQBCL4g8TXcskwn2IgAAARg"]
[Thu Dec 04 06:06:31.725987 2025] [:error] [pid 38403:tid 38412] [client 192.178.4.101:48032] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC0ZwBCL4g8TXcskwn2LAAAAQQ"]
[Thu Dec 04 06:06:32.830367 2025] [:error] [pid 2161:tid 2218] [client 192.178.4.101:34899] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC0aCjiGdnP9Am2woVvygAAAIE"]
[Thu Dec 04 06:06:35.282129 2025] [:error] [pid 2161:tid 2217] [client 192.178.4.101:41734] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC0ayjiGdnP9Am2woVv0gAAAIA"]
[Thu Dec 04 06:06:36.517608 2025] [:error] [pid 2244:tid 2250] [client 192.178.4.101:39847] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC0bJm00CCLpKa0F70wLAAAAMQ"]
[Thu Dec 04 06:06:38.345797 2025] [:error] [pid 2244:tid 2254] [client 192.178.4.101:57649] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC0bpm00CCLpKa0F70wLwAAAMg"]
[Thu Dec 04 06:06:40.016969 2025] [:error] [pid 2160:tid 2208] [client 192.178.4.101:63992] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC0cENDGjl4u2feUD_RrQAAAFI"]
[Thu Dec 04 06:06:41.918323 2025] [:error] [pid 2244:tid 2269] [client 192.178.4.101:46992] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC0cZm00CCLpKa0F70wNwAAANY"]
[Thu Dec 04 06:07:01.385545 2025] [:error] [pid 2161:tid 2233] [client 192.178.4.101:57121] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC0hSjiGdnP9Am2woVwAQAAAJA"]
[Thu Dec 04 06:07:02.604400 2025] [:error] [pid 38403:tid 38419] [client 192.178.4.101:39753] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC0hgBCL4g8TXcskwn2bgAAAQs"]
[Thu Dec 04 06:07:05.133073 2025] [:error] [pid 2244:tid 2258] [client 192.178.4.101:46649] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC0iZm00CCLpKa0F70wYQAAAMw"]
[Thu Dec 04 06:07:06.966042 2025] [:error] [pid 2161:tid 2227] [client 192.178.4.101:55667] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC0iijiGdnP9Am2woVwBgAAAIo"]
[Thu Dec 04 06:07:08.810651 2025] [:error] [pid 2244:tid 2259] [client 192.178.4.101:35123] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC0jJm00CCLpKa0F70wZAAAAM0"]
[Thu Dec 04 06:07:10.024950 2025] [:error] [pid 38403:tid 38407] [client 192.178.4.101:37435] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC0jgBCL4g8TXcskwn2jQAAAQA"]
[Thu Dec 04 06:07:12.858666 2025] [:error] [pid 2244:tid 2260] [client 192.178.4.101:41467] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC0kJm00CCLpKa0F70waQAAAM4"]
[Thu Dec 04 06:07:13.781789 2025] [:error] [pid 2161:tid 2232] [client 192.178.4.101:35360] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC0kSjiGdnP9Am2woVwDQAAAI8"]
[Thu Dec 04 06:07:15.521229 2025] [:error] [pid 2160:tid 2206] [client 192.178.4.101:48480] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC0k0NDGjl4u2feUD_R4QAAAFA"]
[Thu Dec 04 06:07:17.412363 2025] [:error] [pid 2161:tid 2217] [client 192.178.4.101:43872] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC0lSjiGdnP9Am2woVwFAAAAIA"]
[Thu Dec 04 06:07:19.212891 2025] [:error] [pid 2161:tid 2222] [client 192.178.4.101:51085] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC0lyjiGdnP9Am2woVwFwAAAIU"]
[Thu Dec 04 06:07:21.128663 2025] [:error] [pid 38403:tid 38407] [client 192.178.4.101:40886] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC0mQBCL4g8TXcskwn2qAAAAQA"]
[Thu Dec 04 06:07:22.987072 2025] [:error] [pid 2244:tid 2261] [client 192.178.4.101:64080] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC0mpm00CCLpKa0F70wcQAAAM8"]
[Thu Dec 04 06:07:24.705980 2025] [:error] [pid 38403:tid 38425] [client 192.178.4.101:64654] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC0nABCL4g8TXcskwn2twAAARE"]
[Thu Dec 04 06:07:25.927140 2025] [:error] [pid 38403:tid 38407] [client 192.178.4.101:52732] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC0nQBCL4g8TXcskwn2uwAAAQA"]
[Thu Dec 04 06:07:28.457972 2025] [:error] [pid 2244:tid 2268] [client 192.178.4.101:36900] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC0oJm00CCLpKa0F70wcwAAANU"]
[Thu Dec 04 06:07:31.434191 2025] [:error] [pid 2244:tid 2262] [client 192.178.4.101:52564] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC0o5m00CCLpKa0F70weQAAANA"]
[Thu Dec 04 06:07:33.268913 2025] [:error] [pid 2160:tid 2209] [client 192.178.4.101:58302] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC0pUNDGjl4u2feUD_R7AAAAFM"]
[Thu Dec 04 06:07:35.088349 2025] [:error] [pid 2161:tid 2218] [client 192.178.4.101:61065] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC0pyjiGdnP9Am2woVwKAAAAIE"]
[Thu Dec 04 06:07:36.307933 2025] [:error] [pid 2159:tid 2185] [client 192.178.4.101:47433] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC0qD3GVdXg3ORUAG2mmwAAABY"]
[Thu Dec 04 06:07:39.892885 2025] [:error] [pid 2244:tid 2269] [client 192.178.4.101:48867] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC0q5m00CCLpKa0F70wgQAAANY"]
[Thu Dec 04 06:07:40.949662 2025] [:error] [pid 2244:tid 2267] [client 192.178.4.101:61222] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC0rJm00CCLpKa0F70whAAAANQ"]
[Thu Dec 04 06:07:43.557239 2025] [:error] [pid 2244:tid 2257] [client 192.178.4.101:50219] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC0r5m00CCLpKa0F70wigAAAMs"]
[Thu Dec 04 06:07:44.545293 2025] [:error] [pid 2244:tid 2247] [client 192.178.4.101:41901] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC0sJm00CCLpKa0F70wlAAAAME"]
[Thu Dec 04 06:07:46.810673 2025] [:error] [pid 2161:tid 2218] [client 192.178.4.101:45920] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC0sijiGdnP9Am2woVwOQAAAIE"]
[Thu Dec 04 06:07:47.433833 2025] [:error] [pid 2161:tid 2227] [client 192.178.4.101:38858] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC0syjiGdnP9Am2woVwOgAAAIo"]
[Thu Dec 04 06:07:49.732058 2025] [:error] [pid 38403:tid 38432] [client 192.178.4.101:64051] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC0tQBCL4g8TXcskwn26gAAARg"]
[Thu Dec 04 06:07:50.914214 2025] [:error] [pid 2159:tid 2184] [client 192.178.4.101:60700] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC0tj3GVdXg3ORUAG2mowAAABU"]
[Thu Dec 04 06:07:52.735805 2025] [:error] [pid 2244:tid 2266] [client 192.178.4.101:36181] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC0uJm00CCLpKa0F70wogAAANM"]
[Thu Dec 04 06:07:55.576126 2025] [:error] [pid 2159:tid 2163] [client 192.178.4.101:48543] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC0uz3GVdXg3ORUAG2mpQAAAAA"]
[Thu Dec 04 06:07:56.877335 2025] [:error] [pid 2161:tid 2217] [client 192.178.4.101:43227] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC0vCjiGdnP9Am2woVwRAAAAIA"]
[Thu Dec 04 06:08:35.559187 2025] [:error] [pid 38403:tid 38421] [client 192.178.4.101:61114] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC04wBCL4g8TXcskwn3WwAAAQ0"]
[Thu Dec 04 06:08:35.765444 2025] [:error] [pid 2161:tid 2220] [client 192.178.4.101:43868] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC04yjiGdnP9Am2woVwbAAAAIM"]
[Thu Dec 04 06:08:38.936671 2025] [:error] [pid 2161:tid 2223] [client 192.178.4.101:40611] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC05ijiGdnP9Am2woVwcQAAAIY"]
[Thu Dec 04 06:08:40.062632 2025] [:error] [pid 2244:tid 2248] [client 192.178.4.101:52716] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC06Jm00CCLpKa0F70w3wAAAMI"]
[Thu Dec 04 06:08:41.996437 2025] [:error] [pid 2244:tid 2249] [client 192.178.4.101:45994] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC06Zm00CCLpKa0F70w4wAAAMM"]
[Thu Dec 04 06:08:45.605909 2025] [:error] [pid 38403:tid 38418] [client 192.178.4.101:34923] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC07QBCL4g8TXcskwn3cgAAAQo"]
[Thu Dec 04 06:08:47.556837 2025] [:error] [pid 2161:tid 2237] [client 192.178.4.101:59604] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC07yjiGdnP9Am2woVweAAAAJQ"]
[Thu Dec 04 06:08:50.454836 2025] [:error] [pid 38403:tid 38422] [client 192.178.4.101:52501] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC08gBCL4g8TXcskwn3fAAAAQ4"]
[Thu Dec 04 06:08:52.821416 2025] [:error] [pid 2244:tid 2246] [client 192.178.4.101:51003] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC09Jm00CCLpKa0F70w5wAAAMA"]
[Thu Dec 04 06:08:55.189698 2025] [:error] [pid 2244:tid 2263] [client 192.178.4.101:54473] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC095m00CCLpKa0F70w6QAAANE"]
[Thu Dec 04 06:08:56.495470 2025] [:error] [pid 2161:tid 2219] [client 192.178.4.101:34890] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC0-CjiGdnP9Am2woVwiwAAAII"]
[Thu Dec 04 06:08:57.427342 2025] [:error] [pid 2160:tid 2194] [client 192.178.4.101:53903] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC0-UNDGjl4u2feUD_SPAAAAEQ"]
[Thu Dec 04 06:08:59.163010 2025] [:error] [pid 2161:tid 2231] [client 192.178.4.101:61159] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC0-yjiGdnP9Am2woVwkgAAAI4"]
[Thu Dec 04 06:09:03.120967 2025] [:error] [pid 38403:tid 38424] [client 192.178.4.101:62496] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC0_wBCL4g8TXcskwn3iwAAARA"]
[Thu Dec 04 06:09:06.777788 2025] [:error] [pid 38403:tid 38429] [client 192.178.4.101:59384] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC1AgBCL4g8TXcskwn3kAAAARU"]
[Thu Dec 04 06:09:11.161296 2025] [:error] [pid 2159:tid 2187] [client 192.178.4.101:59796] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC1Bz3GVdXg3ORUAG2mzwAAABg"]
[Thu Dec 04 06:09:13.469954 2025] [:error] [pid 2244:tid 2271] [client 192.178.4.101:40631] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC1CZm00CCLpKa0F70w9AAAANg"]
[Thu Dec 04 06:09:15.670659 2025] [:error] [pid 38403:tid 38415] [client 192.178.4.101:35166] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC1CwBCL4g8TXcskwn3ngAAAQc"]
[Thu Dec 04 06:09:17.766745 2025] [:error] [pid 2159:tid 2177] [client 192.178.4.101:56961] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC1DT3GVdXg3ORUAG2m2wAAAA4"]
[Thu Dec 04 06:09:26.284489 2025] [:error] [pid 2161:tid 2226] [client 192.178.4.101:61157] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC1FijiGdnP9Am2woVwogAAAIk"]
[Thu Dec 04 06:09:27.300132 2025] [:error] [pid 2161:tid 2230] [client 192.178.4.101:50356] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC1FyjiGdnP9Am2woVwowAAAI0"]
[Thu Dec 04 06:09:28.412468 2025] [:error] [pid 2160:tid 2206] [client 192.178.4.101:47308] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC1GENDGjl4u2feUD_SWAAAAFA"]
[Thu Dec 04 06:09:30.119168 2025] [:error] [pid 2244:tid 2255] [client 192.178.4.101:36326] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC1Gpm00CCLpKa0F70xLgAAAMk"]
[Thu Dec 04 06:09:31.467587 2025] [:error] [pid 38403:tid 38418] [client 192.178.4.101:58204] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC1GwBCL4g8TXcskwn3yAAAAQo"]
[Thu Dec 04 06:10:01.911297 2025] [:error] [pid 2244:tid 2269] [client 192.178.4.101:41013] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC1OZm00CCLpKa0F70xfQAAANY"]
[Thu Dec 04 06:10:04.887159 2025] [:error] [pid 2160:tid 2202] [client 192.178.4.101:43947] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC1PENDGjl4u2feUD_ShwAAAEw"]
[Thu Dec 04 06:10:06.502226 2025] [:error] [pid 2159:tid 2167] [client 192.178.4.101:42097] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC1Pj3GVdXg3ORUAG2nRgAAAAQ"]
[Thu Dec 04 06:10:09.280408 2025] [:error] [pid 2159:tid 2183] [client 192.178.4.101:62890] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC1QT3GVdXg3ORUAG2nTAAAABQ"]
[Thu Dec 04 06:10:12.033710 2025] [:error] [pid 38403:tid 38417] [client 192.178.4.101:40980] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC1RABCL4g8TXcskwn4qwAAAQk"]
[Thu Dec 04 06:10:15.586050 2025] [:error] [pid 2161:tid 2228] [client 192.178.4.101:43556] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC1RyjiGdnP9Am2woVw7QAAAIs"]
[Thu Dec 04 06:10:19.281912 2025] [:error] [pid 38403:tid 38423] [client 192.178.4.101:62832] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC1SwBCL4g8TXcskwn43wAAAQ8"]
[Thu Dec 04 06:10:21.559008 2025] [:error] [pid 2244:tid 2266] [client 192.178.4.101:45406] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC1TZm00CCLpKa0F70xmgAAANM"]
[Thu Dec 04 06:10:25.749941 2025] [:error] [pid 2244:tid 2265] [client 192.178.4.101:54931] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC1UZm00CCLpKa0F70xowAAANI"]
[Thu Dec 04 06:10:29.330986 2025] [:error] [pid 38403:tid 38428] [client 192.178.4.101:44893] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC1VQBCL4g8TXcskwn4_wAAARQ"]
[Thu Dec 04 06:10:32.201969 2025] [:error] [pid 2244:tid 2249] [client 192.178.4.101:42178] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC1WJm00CCLpKa0F70xsQAAAMM"]
[Thu Dec 04 06:10:35.181567 2025] [:error] [pid 38403:tid 38414] [client 192.178.4.101:49529] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC1WwBCL4g8TXcskwn5GgAAAQY"]
[Thu Dec 04 06:10:36.222933 2025] [:error] [pid 38403:tid 38408] [client 192.178.4.101:35156] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC1XABCL4g8TXcskwn5IQAAAQE"]
[Thu Dec 04 06:10:39.665247 2025] [:error] [pid 2159:tid 2186] [client 192.178.4.101:45827] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC1Xz3GVdXg3ORUAG2nogAAABc"]
[Thu Dec 04 06:10:42.386253 2025] [:error] [pid 2160:tid 2191] [client 192.178.4.101:59029] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC1YkNDGjl4u2feUD_SzAAAAEE"]
[Thu Dec 04 06:10:44.748930 2025] [:error] [pid 2159:tid 2174] [client 192.178.4.101:44040] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC1ZD3GVdXg3ORUAG2ntQAAAAs"]
[Thu Dec 04 06:10:47.464226 2025] [:error] [pid 38403:tid 38425] [client 192.178.4.101:38099] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC1ZwBCL4g8TXcskwn5YwAAARE"]
[Thu Dec 04 06:10:49.481692 2025] [:error] [pid 2160:tid 2190] [client 192.178.4.101:35276] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC1aUNDGjl4u2feUD_S2QAAAEA"]
[Thu Dec 04 06:10:53.055104 2025] [:error] [pid 2160:tid 2201] [client 192.178.4.101:42980] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC1bUNDGjl4u2feUD_S3wAAAEs"]
[Thu Dec 04 06:10:56.488790 2025] [:error] [pid 2159:tid 2184] [client 192.178.4.101:38539] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC1cD3GVdXg3ORUAG2nywAAABU"]
[Thu Dec 04 06:11:32.450848 2025] [:error] [pid 2161:tid 2234] [client 192.178.4.101:48490] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC1lCjiGdnP9Am2woVxfgAAAJE"]
[Thu Dec 04 06:11:36.346342 2025] [:error] [pid 38403:tid 38408] [client 192.178.4.101:57004] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC1mABCL4g8TXcskwn6HAAAAQE"]
[Thu Dec 04 06:11:41.517300 2025] [:error] [pid 2244:tid 2254] [client 192.178.4.101:48464] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC1nZm00CCLpKa0F70yRwAAAMg"]
[Thu Dec 04 06:11:45.663088 2025] [:error] [pid 38403:tid 38411] [client 192.178.4.101:54394] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC1oQBCL4g8TXcskwn6RQAAAQM"]
[Thu Dec 04 06:11:53.386917 2025] [:error] [pid 2160:tid 2204] [client 192.178.4.101:45776] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC1qUNDGjl4u2feUD_THwAAAE4"]
[Thu Dec 04 06:12:01.918300 2025] [:error] [pid 38403:tid 38412] [client 192.178.4.101:46633] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC1sQBCL4g8TXcskwn6dwAAAQQ"]
[Thu Dec 04 06:12:04.197696 2025] [:error] [pid 2244:tid 2249] [client 192.178.4.101:39499] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC1tJm00CCLpKa0F70ycQAAAMM"]
[Thu Dec 04 06:12:12.081453 2025] [:error] [pid 2159:tid 2186] [client 192.178.4.101:37249] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC1vD3GVdXg3ORUAG2oGwAAABc"]
[Thu Dec 04 06:12:14.430660 2025] [:error] [pid 2159:tid 2172] [client 192.178.4.101:47992] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC1vj3GVdXg3ORUAG2oHgAAAAk"]
[Thu Dec 04 06:12:19.564079 2025] [:error] [pid 2160:tid 2194] [client 192.178.4.101:40983] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC1w0NDGjl4u2feUD_TPwAAAEQ"]
[Thu Dec 04 06:12:28.074069 2025] [:error] [pid 38403:tid 38408] [client 192.178.4.101:37359] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC1zABCL4g8TXcskwn6ywAAAQE"]
[Thu Dec 04 06:13:40.553280 2025] [:error] [pid 38403:tid 38415] [client 192.178.4.101:60862] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC2FABCL4g8TXcskwn7qwAAAQc"]
[Thu Dec 04 06:13:45.168390 2025] [:error] [pid 2160:tid 2199] [client 192.178.4.101:38613] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC2GUNDGjl4u2feUD_T0gAAAEk"]
[Thu Dec 04 06:13:47.983185 2025] [:error] [pid 2159:tid 2164] [client 192.178.4.101:57782] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC2Gz3GVdXg3ORUAG2okgAAAAE"]
[Thu Dec 04 06:13:51.064891 2025] [:error] [pid 2244:tid 2267] [client 192.178.4.101:53175] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC2H5m00CCLpKa0F70zRQAAANQ"]
[Thu Dec 04 06:13:54.478168 2025] [:error] [pid 2161:tid 2234] [client 192.178.4.101:54656] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC2IijiGdnP9Am2woVyNwAAAJE"]
[Thu Dec 04 06:14:00.517589 2025] [:error] [pid 2161:tid 2240] [client 192.178.4.101:50426] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC2KCjiGdnP9Am2woVyPgAAAJc"]
[Thu Dec 04 06:14:10.490232 2025] [:error] [pid 2161:tid 2240] [client 192.178.4.101:42186] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC2MijiGdnP9Am2woVyXwAAAJc"]
[Thu Dec 04 06:14:16.449951 2025] [:error] [pid 2160:tid 2193] [client 192.178.4.101:35021] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC2OENDGjl4u2feUD_UGgAAAEM"]
[Thu Dec 04 06:14:22.172796 2025] [:error] [pid 2244:tid 2247] [client 192.178.4.101:51702] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC2Ppm00CCLpKa0F70zxgAAAME"]
[Thu Dec 04 06:14:26.824979 2025] [:error] [pid 38403:tid 38411] [client 192.178.4.101:62446] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC2QgBCL4g8TXcskwn8UQAAAQM"]
[Thu Dec 04 06:14:31.724981 2025] [:error] [pid 2160:tid 2191] [client 192.178.4.101:40151] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC2R0NDGjl4u2feUD_UOgAAAEE"]
[Thu Dec 04 06:15:53.395800 2025] [:error] [pid 2244:tid 2256] [client 192.178.4.101:53545] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC2mZm00CCLpKa0F700awAAAMo"]
[Thu Dec 04 06:15:57.172599 2025] [:error] [pid 2161:tid 2237] [client 192.178.4.101:54873] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC2nSjiGdnP9Am2woVy6AAAAJQ"]
[Thu Dec 04 06:16:01.909229 2025] [:error] [pid 2244:tid 2250] [client 192.178.4.101:55523] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC2oZm00CCLpKa0F700dAAAAMQ"]
[Thu Dec 04 06:16:03.993414 2025] [:error] [pid 38403:tid 38431] [client 192.178.4.101:55013] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC2owBCL4g8TXcskwn9cwAAARc"]
[Thu Dec 04 06:16:07.283307 2025] [:error] [pid 38403:tid 38431] [client 192.178.4.101:44726] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC2pwBCL4g8TXcskwn9gAAAARc"]
[Thu Dec 04 06:16:13.204135 2025] [:error] [pid 38403:tid 38415] [client 192.178.4.101:44066] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC2rQBCL4g8TXcskwn9kwAAAQc"]
[Thu Dec 04 06:16:18.759244 2025] [:error] [pid 38403:tid 38412] [client 192.178.4.101:38088] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC2sgBCL4g8TXcskwn9mwAAAQQ"]
[Thu Dec 04 06:16:31.855082 2025] [:error] [pid 2244:tid 2256] [client 192.178.4.101:42082] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC2v5m00CCLpKa0F700vQAAAMo"]
[Thu Dec 04 06:16:35.906791 2025] [:error] [pid 2159:tid 2177] [client 192.178.4.101:40626] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC2wz3GVdXg3ORUAG2pdwAAAA4"]
[Thu Dec 04 06:16:38.500989 2025] [:error] [pid 38403:tid 38432] [client 192.178.4.101:57297] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC2xgBCL4g8TXcskwn92QAAARg"]
[Thu Dec 04 06:16:42.141599 2025] [:error] [pid 38403:tid 38410] [client 192.178.4.101:39353] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC2ygBCL4g8TXcskwn94gAAAQI"]
[Thu Dec 04 06:16:46.491173 2025] [:error] [pid 2244:tid 2263] [client 192.178.4.101:37818] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC2zpm00CCLpKa0F7007QAAANE"]
[Thu Dec 04 06:16:49.564204 2025] [:error] [pid 2160:tid 2205] [client 192.178.4.101:39556] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC20UNDGjl4u2feUD_U6AAAAE8"]
[Thu Dec 04 06:17:42.745206 2025] [:error] [pid 2160:tid 2190] [client 192.178.4.101:57178] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC3BkNDGjl4u2feUD_VVAAAAEA"]
[Thu Dec 04 06:17:51.951826 2025] [:error] [pid 38403:tid 38417] [client 192.178.4.101:61506] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC3DwBCL4g8TXcskwn-rwAAAQk"]
[Thu Dec 04 06:17:56.547565 2025] [:error] [pid 38403:tid 38407] [client 192.178.4.101:42071] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC3FABCL4g8TXcskwn-vgAAAQA"]
[Thu Dec 04 06:18:03.323207 2025] [:error] [pid 38403:tid 38415] [client 192.178.4.101:56235] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC3GwBCL4g8TXcskwn-zgAAAQc"]
[Thu Dec 04 06:18:05.587792 2025] [:error] [pid 2161:tid 2231] [client 192.178.4.101:42674] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC3HSjiGdnP9Am2woVzvgAAAI4"]
[Thu Dec 04 06:18:10.572354 2025] [:error] [pid 2161:tid 2230] [client 192.178.4.101:48634] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC3IijiGdnP9Am2woVzwQAAAI0"]
[Thu Dec 04 06:18:19.619640 2025] [:error] [pid 38403:tid 38415] [client 192.178.4.101:56330] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC3KwBCL4g8TXcskwn_BQAAAQc"]
[Thu Dec 04 06:18:21.688308 2025] [:error] [pid 2244:tid 2260] [client 192.178.4.101:46028] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC3LZm00CCLpKa0F701ygAAAM4"]
[Thu Dec 04 06:18:24.966016 2025] [:error] [pid 2244:tid 2271] [client 192.178.4.101:43354] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC3MJm00CCLpKa0F7010QAAANg"]
[Thu Dec 04 06:18:27.606784 2025] [:error] [pid 38403:tid 38407] [client 192.178.4.101:59312] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC3MwBCL4g8TXcskwn_HgAAAQA"]
[Thu Dec 04 06:18:31.475302 2025] [:error] [pid 38403:tid 38422] [client 192.178.4.101:44679] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC3NwBCL4g8TXcskwn_LwAAAQ4"]
[Thu Dec 04 06:18:36.291719 2025] [:error] [pid 38403:tid 38422] [client 192.178.4.101:50711] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC3PABCL4g8TXcskwn_PgAAAQ4"]
[Thu Dec 04 06:18:39.913110 2025] [:error] [pid 2244:tid 2257] [client 192.178.4.101:62485] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC3P5m00CCLpKa0F7015QAAAMs"]
[Thu Dec 04 06:19:37.944409 2025] [:error] [pid 2159:tid 2172] [client 192.178.4.101:56229] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC3eT3GVdXg3ORUAG2qcAAAAAk"]
[Thu Dec 04 06:19:41.377599 2025] [:error] [pid 2244:tid 2269] [client 192.178.4.101:42116] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC3fZm00CCLpKa0F702ZgAAANY"]
[Thu Dec 04 06:19:45.123893 2025] [:error] [pid 2244:tid 2257] [client 192.178.4.101:40357] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC3gZm00CCLpKa0F702cgAAAMs"]
[Thu Dec 04 06:19:48.836820 2025] [:error] [pid 2159:tid 2184] [client 192.178.4.101:35197] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC3hD3GVdXg3ORUAG2qfQAAABU"]
[Thu Dec 04 06:19:52.174332 2025] [:error] [pid 2161:tid 2220] [client 192.178.4.101:45296] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC3iCjiGdnP9Am2woV0VgAAAIM"]
[Thu Dec 04 06:19:55.395713 2025] [:error] [pid 2244:tid 2252] [client 192.178.4.101:42520] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC3i5m00CCLpKa0F702igAAAMY"]
[Thu Dec 04 06:19:58.450930 2025] [:error] [pid 38403:tid 38421] [client 192.178.4.101:55370] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC3jgBCL4g8TXcskwkAOgAAAQ0"]
[Thu Dec 04 06:20:02.235630 2025] [:error] [pid 38403:tid 38407] [client 192.178.4.101:44641] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC3kgBCL4g8TXcskwkASQAAAQA"]
[Thu Dec 04 06:20:05.241717 2025] [:error] [pid 38403:tid 38423] [client 192.178.4.101:49627] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC3lQBCL4g8TXcskwkAUAAAAQ8"]
[Thu Dec 04 06:20:08.830162 2025] [:error] [pid 2160:tid 2193] [client 192.178.4.101:46968] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC3mENDGjl4u2feUD_V_wAAAEM"]
[Thu Dec 04 06:20:12.035332 2025] [:error] [pid 2160:tid 2212] [client 192.178.4.101:51549] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC3nENDGjl4u2feUD_WBAAAAFY"]
[Thu Dec 04 06:20:15.126980 2025] [:error] [pid 2161:tid 2241] [client 192.178.4.101:35101] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC3nyjiGdnP9Am2woV0agAAAJg"]
[Thu Dec 04 06:20:19.392879 2025] [:error] [pid 2161:tid 2225] [client 192.178.4.101:58701] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC3oyjiGdnP9Am2woV0ewAAAIg"]
[Thu Dec 04 06:20:23.719511 2025] [:error] [pid 2244:tid 2266] [client 192.178.4.101:64454] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC3p5m00CCLpKa0F702zAAAANM"]
[Thu Dec 04 06:20:26.673761 2025] [:error] [pid 2159:tid 2176] [client 192.178.4.101:48370] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC3qj3GVdXg3ORUAG2qywAAAA0"]
[Thu Dec 04 06:20:30.073695 2025] [:error] [pid 38403:tid 38415] [client 192.178.4.101:38284] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC3rgBCL4g8TXcskwkBDQAAAQc"]
[Thu Dec 04 06:21:33.523832 2025] [:error] [pid 63383:tid 63432] [client 192.178.4.101:50682] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC37VJYyG_QEWdAPIWkTwAAAs8"]
[Thu Dec 04 06:21:37.237227 2025] [:error] [pid 63383:tid 63419] [client 192.178.4.101:64693] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC38VJYyG_QEWdAPIWkWAAAAsI"]
[Thu Dec 04 06:21:40.820666 2025] [:error] [pid 63383:tid 63418] [client 192.178.4.101:48436] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC39FJYyG_QEWdAPIWkXwAAAsE"]
[Thu Dec 04 06:21:44.317213 2025] [:error] [pid 38403:tid 38414] [client 192.178.4.101:38930] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC3-ABCL4g8TXcskwkBwQAAAQY"]
[Thu Dec 04 06:21:48.445437 2025] [:error] [pid 63381:tid 63456] [client 192.178.4.101:43749] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC3_Oidz_S5muoRMExKKgAAAk0"]
[Thu Dec 04 06:21:54.997081 2025] [:error] [pid 63383:tid 63438] [client 192.178.4.101:39869] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC4AlJYyG_QEWdAPIWkZQAAAtU"]
[Thu Dec 04 06:22:06.674513 2025] [:error] [pid 63382:tid 63478] [client 192.178.4.101:37807] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC4DkvJv09BlzBS6SRKLQAAAok"]
[Thu Dec 04 06:22:14.664888 2025] [:error] [pid 38403:tid 38420] [client 192.178.4.101:48800] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC4FgBCL4g8TXcskwkB6QAAAQw"]
[Thu Dec 04 06:22:23.542791 2025] [:error] [pid 2161:tid 2226] [client 192.178.4.101:58795] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC4HyjiGdnP9Am2woV1owAAAIk"]
[Thu Dec 04 06:31:51.144568 2025] [:error] [pid 63381:tid 63467] [client 192.178.4.101:49304] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC6V-idz_S5muoRMExNUAAAAlg"]
[Thu Dec 04 06:31:51.433494 2025] [:error] [pid 63321:tid 63347] [client 192.178.4.101:35462] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC6V7NTbeTF3WLMl8wqXQAAAZc"]
[Thu Dec 04 06:31:51.595954 2025] [:error] [pid 2161:tid 2225] [client 192.178.4.101:39022] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC6VyjiGdnP9Am2woV3bAAAAIg"]
[Thu Dec 04 06:31:52.374778 2025] [:error] [pid 63321:tid 63345] [client 192.178.4.101:47408] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC6WLNTbeTF3WLMl8wqXwAAAZU"]
[Thu Dec 04 06:31:54.114451 2025] [:error] [pid 38403:tid 38421] [client 192.178.4.101:40314] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC6WgBCL4g8TXcskwkFgQAAAQ0"]
[Thu Dec 04 06:32:01.220454 2025] [:error] [pid 63381:tid 63455] [client 192.178.4.101:55689] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC6Yeidz_S5muoRMExNVQAAAkw"]
[Thu Dec 04 06:32:11.004930 2025] [:error] [pid 63381:tid 63447] [client 192.178.4.101:34852] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC6a-idz_S5muoRMExNaQAAAkQ"]
[Thu Dec 04 06:32:16.783802 2025] [:error] [pid 63381:tid 63446] [client 192.178.4.101:51153] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC6cOidz_S5muoRMExNagAAAkM"]
[Thu Dec 04 06:32:32.819233 2025] [:error] [pid 2161:tid 2221] [client 192.178.4.101:64865] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC6gCjiGdnP9Am2woV3fwAAAIQ"]
[Thu Dec 04 06:32:32.889922 2025] [:error] [pid 38403:tid 38417] [client 192.178.4.101:60687] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTC6gABCL4g8TXcskwkFogAAAQk"]
[Thu Dec 04 07:28:44.128651 2025] [:error] [pid 63321:tid 63345] [client 134.195.198.147:43126] [client 134.195.198.147] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 134.195.198.147, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTDHrLNTbeTF3WLMl8w0SAAAAZU"]
[Thu Dec 04 07:28:51.490418 2025] [:error] [pid 63322:tid 63373] [client 165.140.216.197:38624] [client 165.140.216.197] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 165.140.216.197, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTDHs4vm-cfAnelmlGdkNQAAAdY"]
[Thu Dec 04 07:38:48.418965 2025] [:error] [pid 38403:tid 38419] [client 192.178.4.101:49109] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDKCABCL4g8TXcskwkclwAAAQs"]
[Thu Dec 04 07:38:53.471602 2025] [:error] [pid 63379:tid 63394] [client 192.178.4.101:50711] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDKDcvuHYNZ2IuzoJdcPwAAAgc"]
[Thu Dec 04 07:38:59.288714 2025] [:error] [pid 63382:tid 63477] [client 192.178.4.101:62616] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDKE0vJv09BlzBS6SRWcQAAAog"]
[Thu Dec 04 07:39:02.247429 2025] [:error] [pid 63321:tid 63342] [client 192.178.4.101:52193] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDKFrNTbeTF3WLMl8w18AAAAZI"]
[Thu Dec 04 07:39:05.301142 2025] [:error] [pid 63381:tid 63463] [client 192.178.4.101:49974] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDKGeidz_S5muoRMExeLwAAAlQ"]
[Thu Dec 04 07:39:08.758913 2025] [:error] [pid 63383:tid 63436] [client 192.178.4.101:54156] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDKHFJYyG_QEWdAPIW1wgAAAtM"]
[Thu Dec 04 07:39:13.558942 2025] [:error] [pid 63321:tid 63330] [client 192.178.4.101:46537] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDKIbNTbeTF3WLMl8w1-gAAAYY"]
[Thu Dec 04 07:39:16.455363 2025] [:error] [pid 63383:tid 63435] [client 192.178.4.101:43659] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDKJFJYyG_QEWdAPIW1ywAAAtI"]
[Thu Dec 04 07:39:30.682786 2025] [:error] [pid 38403:tid 38430] [client 192.178.4.101:64618] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDKMgBCL4g8TXcskwkc0gAAARY"]
[Thu Dec 04 07:39:33.647461 2025] [:error] [pid 63290:tid 63308] [client 192.178.4.101:49391] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDKNSoM7G4ZFQQHTRyiXAAAAVA"]
[Thu Dec 04 07:39:37.290527 2025] [:error] [pid 63381:tid 63447] [client 192.178.4.101:45582] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDKOeidz_S5muoRMExeQAAAAkQ"]
[Thu Dec 04 07:39:43.107226 2025] [:error] [pid 63381:tid 63461] [client 192.178.4.101:62843] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDKP-idz_S5muoRMExeSgAAAlI"]
[Thu Dec 04 07:41:51.289590 2025] [:error] [pid 63382:tid 63474] [client 192.178.4.101:41231] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDKv0vJv09BlzBS6SRW8wAAAoU"]
[Thu Dec 04 07:42:26.290290 2025] [:error] [pid 2161:tid 2224] [client 192.178.4.101:49082] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDK4ijiGdnP9Am2woWFJAAAAIc"]
[Thu Dec 04 07:43:36.555601 2025] [:error] [pid 63290:tid 63296] [client 192.178.4.101:39369] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDLKCoM7G4ZFQQHTRyjAwAAAUQ"]
[Thu Dec 04 07:43:40.213585 2025] [:error] [pid 63383:tid 63421] [client 192.178.4.101:55130] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDLLFJYyG_QEWdAPIW25QAAAsQ"]
[Thu Dec 04 07:43:43.763181 2025] [:error] [pid 63381:tid 63459] [client 192.178.4.101:41327] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDLL-idz_S5muoRMExfFQAAAlA"]
[Thu Dec 04 07:43:46.733738 2025] [:error] [pid 63381:tid 63446] [client 192.178.4.101:58770] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDLMuidz_S5muoRMExfFgAAAkM"]
[Thu Dec 04 07:43:49.792742 2025] [:error] [pid 63383:tid 63429] [client 192.178.4.101:45405] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDLNVJYyG_QEWdAPIW3CwAAAsw"]
[Thu Dec 04 07:44:11.690301 2025] [:error] [pid 2244:tid 2257] [client 192.178.4.101:35535] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDLS5m00CCLpKa0F71EUgAAAMs"]
[Thu Dec 04 07:44:18.105223 2025] [:error] [pid 63322:tid 63372] [client 192.178.4.101:36263] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDLUovm-cfAnelmlGdmfAAAAdU"]
[Thu Dec 04 07:44:21.073080 2025] [:error] [pid 63321:tid 63334] [client 192.178.4.101:49996] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDLVbNTbeTF3WLMl8w23QAAAYo"]
[Thu Dec 04 07:44:27.582862 2025] [:error] [pid 63322:tid 63372] [client 192.178.4.101:42237] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDLW4vm-cfAnelmlGdmjwAAAdU"]
[Thu Dec 04 07:44:30.543777 2025] [:error] [pid 63381:tid 63463] [client 192.178.4.101:39614] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDLXuidz_S5muoRMExfUAAAAlQ"]
[Thu Dec 04 07:45:10.691615 2025] [:error] [pid 2161:tid 2238] [client 192.178.4.101:46420] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDLhijiGdnP9Am2woWF7AAAAJU"]
[Thu Dec 04 07:45:14.978635 2025] [:error] [pid 63381:tid 63452] [client 192.178.4.101:39793] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDLiuidz_S5muoRMExfiQAAAkk"]
[Thu Dec 04 07:45:17.951175 2025] [:error] [pid 63322:tid 63366] [client 192.178.4.101:40446] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDLjYvm-cfAnelmlGdmqwAAAc8"]
[Thu Dec 04 07:45:21.001618 2025] [:error] [pid 38403:tid 38426] [client 192.178.4.101:65013] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDLkQBCL4g8TXcskwkezQAAARI"]
[Thu Dec 04 07:45:24.395119 2025] [:error] [pid 38403:tid 38419] [client 192.178.4.101:36574] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDLlABCL4g8TXcskwke0AAAAQs"]
[Thu Dec 04 07:45:27.344371 2025] [:error] [pid 38403:tid 38422] [client 192.178.4.101:43695] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDLlwBCL4g8TXcskwke3gAAAQ4"]
[Thu Dec 04 07:45:30.398735 2025] [:error] [pid 38403:tid 38412] [client 192.178.4.101:64424] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDLmgBCL4g8TXcskwke5wAAAQQ"]
[Thu Dec 04 07:45:33.854883 2025] [:error] [pid 2244:tid 2270] [client 192.178.4.101:37906] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDLnZm00CCLpKa0F71ExwAAANc"]
[Thu Dec 04 07:45:36.810647 2025] [:error] [pid 38403:tid 38407] [client 192.178.4.101:39990] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDLoABCL4g8TXcskwke9gAAAQA"]
[Thu Dec 04 07:45:39.772052 2025] [:error] [pid 63383:tid 63433] [client 192.178.4.101:42845] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDLo1JYyG_QEWdAPIW3lgAAAtA"]
[Thu Dec 04 07:45:43.710856 2025] [:error] [pid 38403:tid 38423] [client 192.178.4.101:64393] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDLpwBCL4g8TXcskwkfAwAAAQ8"]
[Thu Dec 04 07:45:46.358420 2025] [:error] [pid 63381:tid 63460] [client 192.178.4.101:47146] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDLquidz_S5muoRMExfvQAAAlE"]
[Thu Dec 04 07:45:49.338192 2025] [:error] [pid 38403:tid 38426] [client 192.178.4.101:47174] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDLrQBCL4g8TXcskwkfQgAAARI"]
[Thu Dec 04 07:45:52.291268 2025] [:error] [pid 2244:tid 2260] [client 192.178.4.101:50152] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDLsJm00CCLpKa0F71E0AAAAM4"]
[Thu Dec 04 07:47:19.679148 2025] [:error] [pid 63321:tid 63335] [client 192.178.4.101:56996] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDMB7NTbeTF3WLMl8w3bAAAAYs"]
[Thu Dec 04 07:47:23.927294 2025] [:error] [pid 2161:tid 2233] [client 192.178.4.101:52254] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDMCyjiGdnP9Am2woWGZwAAAJA"]
[Thu Dec 04 07:47:26.875791 2025] [:error] [pid 2244:tid 2255] [client 192.178.4.101:39713] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDMDpm00CCLpKa0F71FSAAAAMk"]
[Thu Dec 04 07:47:29.847615 2025] [:error] [pid 38403:tid 38415] [client 192.178.4.101:36650] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDMEQBCL4g8TXcskwkfswAAAQc"]
[Thu Dec 04 07:47:33.391344 2025] [:error] [pid 63381:tid 63449] [client 192.178.4.101:42749] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDMFeidz_S5muoRMExgNgAAAkY"]
[Thu Dec 04 07:47:36.354713 2025] [:error] [pid 63382:tid 63471] [client 192.178.4.101:48805] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDMGEvJv09BlzBS6SRYCQAAAoI"]
[Thu Dec 04 07:47:39.317228 2025] [:error] [pid 63382:tid 63477] [client 192.178.4.101:39396] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDMG0vJv09BlzBS6SRYDwAAAog"]
[Thu Dec 04 07:47:45.865185 2025] [:error] [pid 38403:tid 38413] [client 192.178.4.101:62846] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDMIQBCL4g8TXcskwkfzwAAAQU"]
[Thu Dec 04 07:47:48.779624 2025] [:error] [pid 63379:tid 63407] [client 192.178.4.101:52057] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDMJMvuHYNZ2IuzoJdeRgAAAhQ"]
[Thu Dec 04 07:47:51.737272 2025] [:error] [pid 38403:tid 38414] [client 192.178.4.101:60878] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDMJwBCL4g8TXcskwkf2gAAAQY"]
[Thu Dec 04 07:47:55.391425 2025] [:error] [pid 63382:tid 63487] [client 192.178.4.101:65104] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDMK0vJv09BlzBS6SRYHgAAApI"]
[Thu Dec 04 07:47:58.347816 2025] [:error] [pid 2244:tid 2263] [client 192.178.4.101:47015] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDMLpm00CCLpKa0F71FdwAAANE"]
[Thu Dec 04 07:48:01.806642 2025] [:error] [pid 63322:tid 63364] [client 192.178.4.101:52261] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDMMYvm-cfAnelmlGdnMgAAAc0"]
[Thu Dec 04 07:48:07.716154 2025] [:error] [pid 63322:tid 63363] [client 192.178.4.101:63782] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDMN4vm-cfAnelmlGdnOAAAAcw"]
[Thu Dec 04 07:48:10.766307 2025] [:error] [pid 63379:tid 63411] [client 192.178.4.101:47768] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDMOsvuHYNZ2IuzoJdeUAAAAhg"]
[Thu Dec 04 07:48:14.227639 2025] [:error] [pid 63382:tid 63480] [client 192.178.4.101:56640] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDMPkvJv09BlzBS6SRYMAAAAos"]
[Thu Dec 04 08:30:55.888653 2025] [:error] [pid 63321:tid 63327] [client 192.178.4.101:57636] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDWP7NTbeTF3WLMl8xAbQAAAYM"]
[Thu Dec 04 08:31:07.845158 2025] [:error] [pid 63290:tid 63305] [client 192.178.4.101:62493] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDWSyoM7G4ZFQQHTRyrtgAAAU0"]
[Thu Dec 04 08:31:09.423104 2025] [:error] [pid 2244:tid 2260] [client 192.178.4.101:56323] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDWTZm00CCLpKa0F71OZwAAAM4"]
[Thu Dec 04 08:31:16.319512 2025] [:error] [pid 63290:tid 63303] [client 192.178.4.101:48934] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDWVCoM7G4ZFQQHTRyruAAAAUs"]
[Thu Dec 04 08:31:23.078200 2025] [:error] [pid 2161:tid 2220] [client 192.178.4.101:60713] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDWWyjiGdnP9Am2woWQlAAAAIM"]
[Thu Dec 04 08:31:26.586026 2025] [:error] [pid 2161:tid 2217] [client 192.178.4.101:58503] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDWXijiGdnP9Am2woWQuAAAAIA"]
[Thu Dec 04 08:31:39.556295 2025] [:error] [pid 63382:tid 63475] [client 192.178.4.101:49377] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDWa0vJv09BlzBS6SRgGgAAAoY"]
[Thu Dec 04 08:31:41.086084 2025] [:error] [pid 63383:tid 63433] [client 192.178.4.101:46875] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDWbVJYyG_QEWdAPIXFGgAAAtA"]
[Thu Dec 04 08:31:47.896002 2025] [:error] [pid 38403:tid 38417] [client 192.178.4.101:56778] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDWcwBCL4g8TXcskwkzTAAAAQk"]
[Thu Dec 04 08:31:48.597374 2025] [:error] [pid 2244:tid 2266] [client 192.178.4.101:57403] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDWdJm00CCLpKa0F71O0AAAANM"]
[Thu Dec 04 08:33:29.635285 2025] [:error] [pid 63322:tid 63356] [client 192.178.4.101:52811] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDW2Yvm-cfAnelmlGdv0QAAAcU"]
[Thu Dec 04 08:33:37.054534 2025] [:error] [pid 63290:tid 63297] [client 192.178.4.101:52783] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDW4SoM7G4ZFQQHTRyr_wAAAUU"]
[Thu Dec 04 08:33:40.782332 2025] [:error] [pid 63379:tid 63396] [client 192.178.4.101:44613] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDW5MvuHYNZ2IuzoJdlgwAAAgk"]
[Thu Dec 04 08:33:55.233443 2025] [:error] [pid 63379:tid 63395] [client 192.178.4.101:57685] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDW88vuHYNZ2IuzoJdlkAAAAgg"]
[Thu Dec 04 08:34:03.745950 2025] [:error] [pid 63321:tid 63328] [client 192.178.4.101:53576] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDW-7NTbeTF3WLMl8xA7QAAAYQ"]
[Thu Dec 04 08:38:24.471059 2025] [:error] [pid 2161:tid 2227] [client 192.178.4.101:56293] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDYACjiGdnP9Am2woWS0wAAAIo"]
[Thu Dec 04 08:38:50.920684 2025] [:error] [pid 38403:tid 38417] [client 192.178.4.101:64316] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDYGgBCL4g8TXcskwk2ZQAAAQk"]
[Thu Dec 04 08:38:57.273360 2025] [:error] [pid 63379:tid 63397] [client 192.178.4.101:44501] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDYIcvuHYNZ2IuzoJdm8wAAAgo"]
[Thu Dec 04 08:39:14.538541 2025] [:error] [pid 63379:tid 63389] [client 43.130.34.74:60558] [client 43.130.34.74] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||paramountbaldivis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDYMsvuHYNZ2IuzoJdm9gAAAgI"]
[Thu Dec 04 10:13:11.152712 2025] [:error] [pid 38403:tid 38426] [client 120.29.76.237:45825] [client 120.29.76.237] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 120.29.76.237, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aTDuNwBCL4g8TXcskwls3QAAARI"]
[Thu Dec 04 10:34:17.244178 2025] [:error] [pid 63383:tid 63434] [client 192.178.4.101:63717] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDzKVJYyG_QEWdAPIXtLwAAAtE"]
[Thu Dec 04 10:34:17.912329 2025] [:error] [pid 63322:tid 63372] [client 192.178.4.101:50860] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDzKYvm-cfAnelmlGeMWgAAAdU"]
[Thu Dec 04 10:34:22.200868 2025] [:error] [pid 63383:tid 63417] [client 192.178.4.101:36788] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDzLlJYyG_QEWdAPIXtMgAAAsA"]
[Thu Dec 04 10:34:22.857093 2025] [:error] [pid 63383:tid 63429] [client 192.178.4.101:48198] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDzLlJYyG_QEWdAPIXtMwAAAsw"]
[Thu Dec 04 10:34:22.988289 2025] [:error] [pid 2244:tid 2251] [client 192.178.4.101:60720] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDzLpm00CCLpKa0F71tsQAAAMU"]
[Thu Dec 04 10:34:23.888279 2025] [:error] [pid 63322:tid 63363] [client 192.178.4.101:42163] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDzL4vm-cfAnelmlGeMXQAAAcw"]
[Thu Dec 04 10:34:24.022813 2025] [:error] [pid 63322:tid 63356] [client 192.178.4.101:45649] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDzMIvm-cfAnelmlGeMXgAAAcU"]
[Thu Dec 04 10:34:24.826371 2025] [:error] [pid 63381:tid 63452] [client 192.178.4.101:61288] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDzMOidz_S5muoRMEyeZwAAAkk"]
[Thu Dec 04 10:34:25.057608 2025] [:error] [pid 63381:tid 63453] [client 192.178.4.101:58534] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDzMeidz_S5muoRMEyeaAAAAko"]
[Thu Dec 04 10:34:25.860796 2025] [:error] [pid 63383:tid 63426] [client 192.178.4.101:60312] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDzMVJYyG_QEWdAPIXtNQAAAsk"]
[Thu Dec 04 10:34:26.941293 2025] [:error] [pid 63383:tid 63440] [client 192.178.4.101:61464] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDzMlJYyG_QEWdAPIXtNgAAAtc"]
[Thu Dec 04 10:34:27.976215 2025] [:error] [pid 63290:tid 63304] [client 192.178.4.101:49971] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDzMyoM7G4ZFQQHTRzHPwAAAUw"]
[Thu Dec 04 10:34:29.011969 2025] [:error] [pid 63290:tid 63299] [client 192.178.4.101:58781] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDzNSoM7G4ZFQQHTRzHQAAAAUc"]
[Thu Dec 04 10:34:29.092547 2025] [:error] [pid 38403:tid 38425] [client 192.178.4.101:62150] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDzNQBCL4g8TXcskwl4KgAAARE"]
[Thu Dec 04 10:34:29.951808 2025] [:error] [pid 63381:tid 63457] [client 192.178.4.101:63237] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDzNeidz_S5muoRMEyebQAAAk4"]
[Thu Dec 04 10:34:30.142342 2025] [:error] [pid 38403:tid 38426] [client 192.178.4.101:64549] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDzNgBCL4g8TXcskwl4LQAAARI"]
[Thu Dec 04 10:34:30.575874 2025] [:error] [pid 63381:tid 63446] [client 192.178.4.101:50610] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDzNuidz_S5muoRMEyebwAAAkM"]
[Thu Dec 04 10:34:31.176992 2025] [:error] [pid 38403:tid 38410] [client 192.178.4.101:62520] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDzNwBCL4g8TXcskwl4MgAAAQI"]
[Thu Dec 04 10:34:31.611503 2025] [:error] [pid 38403:tid 38419] [client 192.178.4.101:42730] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDzNwBCL4g8TXcskwl4NAAAAQs"]
[Thu Dec 04 10:34:32.341698 2025] [:error] [pid 63381:tid 63445] [client 192.178.4.101:42220] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDzOOidz_S5muoRMEyecAAAAkI"]
[Thu Dec 04 10:34:33.460292 2025] [:error] [pid 63382:tid 63492] [client 192.178.4.101:34816] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDzOUvJv09BlzBS6SR7hQAAApc"]
[Thu Dec 04 10:34:33.595722 2025] [:error] [pid 38403:tid 38427] [client 192.178.4.101:58386] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDzOQBCL4g8TXcskwl4PAAAARM"]
[Thu Dec 04 10:34:33.838070 2025] [:error] [pid 38403:tid 38411] [client 192.178.4.101:63688] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDzOQBCL4g8TXcskwl4PQAAAQM"]
[Thu Dec 04 10:34:34.492731 2025] [:error] [pid 2161:tid 2224] [client 192.178.4.101:39032] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDzOijiGdnP9Am2woWz1QAAAIc"]
[Thu Dec 04 10:34:34.778639 2025] [:error] [pid 63290:tid 63296] [client 192.178.4.101:63902] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDzOioM7G4ZFQQHTRzHSgAAAUQ"]
[Thu Dec 04 10:34:35.524237 2025] [:error] [pid 63383:tid 63422] [client 192.178.4.101:53437] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDzO1JYyG_QEWdAPIXtPgAAAsU"]
[Thu Dec 04 10:34:35.721963 2025] [:error] [pid 63290:tid 63305] [client 192.178.4.101:50535] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDzOyoM7G4ZFQQHTRzHTQAAAU0"]
[Thu Dec 04 10:34:36.561231 2025] [:error] [pid 63379:tid 63406] [client 192.178.4.101:60564] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDzPMvuHYNZ2IuzoJeANQAAAhM"]
[Thu Dec 04 10:34:36.664415 2025] [:error] [pid 63379:tid 63397] [client 192.178.4.101:37617] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDzPMvuHYNZ2IuzoJeANgAAAgo"]
[Thu Dec 04 10:34:36.977613 2025] [:error] [pid 63290:tid 63311] [client 192.178.4.101:61400] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDzPCoM7G4ZFQQHTRzHUwAAAVM"]
[Thu Dec 04 10:34:37.599751 2025] [:error] [pid 63382:tid 63479] [client 192.178.4.101:39925] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDzPUvJv09BlzBS6SR7igAAAoo"]
[Thu Dec 04 10:34:37.701854 2025] [:error] [pid 63290:tid 63309] [client 192.178.4.101:41215] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDzPSoM7G4ZFQQHTRzHVQAAAVE"]
[Thu Dec 04 10:34:38.736910 2025] [:error] [pid 2161:tid 2218] [client 192.178.4.101:42134] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDzPijiGdnP9Am2woWz2AAAAIE"]
[Thu Dec 04 10:34:40.495311 2025] [:error] [pid 63382:tid 63470] [client 192.178.4.101:43403] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDzQEvJv09BlzBS6SR7iwAAAoE"]
[Thu Dec 04 10:34:41.052051 2025] [:error] [pid 63383:tid 63433] [client 192.178.4.101:36041] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDzQVJYyG_QEWdAPIXtSgAAAtA"]
[Thu Dec 04 10:34:41.154657 2025] [:error] [pid 63383:tid 63424] [client 192.178.4.101:58480] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDzQVJYyG_QEWdAPIXtSwAAAsc"]
[Thu Dec 04 10:34:41.882728 2025] [:error] [pid 2161:tid 2236] [client 192.178.4.101:46598] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDzQSjiGdnP9Am2woWz3QAAAJM"]
[Thu Dec 04 10:34:43.121502 2025] [:error] [pid 63383:tid 63419] [client 192.178.4.101:41345] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDzQ1JYyG_QEWdAPIXtTwAAAsI"]
[Thu Dec 04 10:34:44.193449 2025] [:error] [pid 63321:tid 63347] [client 192.178.4.101:45322] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDzRLNTbeTF3WLMl8xhaAAAAZc"]
[Thu Dec 04 10:34:46.169683 2025] [:error] [pid 63322:tid 63366] [client 192.178.4.101:58168] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDzRovm-cfAnelmlGeMawAAAc8"]
[Thu Dec 04 10:34:48.474606 2025] [:error] [pid 38403:tid 38411] [client 192.178.4.101:44299] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDzSABCL4g8TXcskwl4SgAAAQM"]
[Thu Dec 04 10:34:49.610306 2025] [:error] [pid 63383:tid 63419] [client 192.178.4.101:53900] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDzSVJYyG_QEWdAPIXtWQAAAsI"]
[Thu Dec 04 10:34:51.482540 2025] [:error] [pid 63382:tid 63471] [client 192.178.4.101:50436] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDzS0vJv09BlzBS6SR7kgAAAoI"]
[Thu Dec 04 10:34:54.978293 2025] [:error] [pid 63383:tid 63433] [client 192.178.4.101:49025] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDzTlJYyG_QEWdAPIXtWgAAAtA"]
[Thu Dec 04 10:34:55.229986 2025] [:error] [pid 2244:tid 2260] [client 192.178.4.101:53407] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDzT5m00CCLpKa0F71txAAAAM4"]
[Thu Dec 04 10:34:55.418989 2025] [:error] [pid 2244:tid 2251] [client 192.178.4.101:53182] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDzT5m00CCLpKa0F71txQAAAMU"]
[Thu Dec 04 10:34:55.560142 2025] [:error] [pid 2244:tid 2267] [client 192.178.4.101:48117] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDzT5m00CCLpKa0F71txwAAANQ"]
[Thu Dec 04 10:34:56.012490 2025] [:error] [pid 63381:tid 63444] [client 192.178.4.101:53023] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDzUOidz_S5muoRMEyefgAAAkE"]
[Thu Dec 04 10:34:56.164745 2025] [:error] [pid 63381:tid 63461] [client 192.178.4.101:48055] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDzUOidz_S5muoRMEyefwAAAlI"]
[Thu Dec 04 10:34:56.596448 2025] [:error] [pid 63379:tid 63387] [client 192.178.4.101:44911] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDzUMvuHYNZ2IuzoJeAQQAAAgA"]
[Thu Dec 04 10:34:56.715717 2025] [:error] [pid 38403:tid 38420] [client 192.178.4.101:35752] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDzUABCL4g8TXcskwl4WgAAAQw"]
[Thu Dec 04 10:34:57.043053 2025] [:error] [pid 38403:tid 38417] [client 192.178.4.101:65159] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDzUQBCL4g8TXcskwl4WwAAAQk"]
[Thu Dec 04 10:34:57.200144 2025] [:error] [pid 38403:tid 38419] [client 192.178.4.101:44954] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDzUQBCL4g8TXcskwl4XQAAAQs"]
[Thu Dec 04 10:34:57.984117 2025] [:error] [pid 2244:tid 2263] [client 192.178.4.101:60211] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDzUZm00CCLpKa0F71tyAAAANE"]
[Thu Dec 04 10:34:58.790157 2025] [:error] [pid 38403:tid 38432] [client 192.178.4.101:41953] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDzUgBCL4g8TXcskwl4XwAAARg"]
[Thu Dec 04 10:34:59.014914 2025] [:error] [pid 63382:tid 63477] [client 192.178.4.101:53426] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDzU0vJv09BlzBS6SR7lQAAAog"]
[Thu Dec 04 10:35:00.069814 2025] [:error] [pid 38403:tid 38431] [client 192.178.4.101:63663] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDzVABCL4g8TXcskwl4YgAAARc"]
[Thu Dec 04 10:35:00.170926 2025] [:error] [pid 2244:tid 2255] [client 192.178.4.101:48055] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDzVJm00CCLpKa0F71tygAAAMk"]
[Thu Dec 04 10:35:13.426772 2025] [:error] [pid 2161:tid 2237] [client 192.178.4.101:46689] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDzYSjiGdnP9Am2woWz9gAAAJQ"]
[Thu Dec 04 10:35:14.493308 2025] [:error] [pid 38403:tid 38408] [client 192.178.4.101:43040] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDzYgBCL4g8TXcskwl4dQAAAQE"]
[Thu Dec 04 10:35:15.921736 2025] [:error] [pid 2244:tid 2251] [client 192.178.4.101:42426] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDzY5m00CCLpKa0F71t1AAAAMU"]
[Thu Dec 04 10:35:16.767208 2025] [:error] [pid 63381:tid 63447] [client 192.178.4.101:60278] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDzZOidz_S5muoRMEyelQAAAkQ"]
[Thu Dec 04 10:35:17.393743 2025] [:error] [pid 63322:tid 63360] [client 192.178.4.101:53431] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDzZYvm-cfAnelmlGeMhgAAAck"]
[Thu Dec 04 10:35:17.800337 2025] [:error] [pid 63381:tid 63456] [client 192.178.4.101:62074] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDzZeidz_S5muoRMEyelgAAAk0"]
[Thu Dec 04 10:35:20.575521 2025] [:error] [pid 63381:tid 63452] [client 192.178.4.101:55300] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDzaOidz_S5muoRMEyenQAAAkk"]
[Thu Dec 04 10:35:21.525620 2025] [:error] [pid 63383:tid 63417] [client 192.178.4.101:42280] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDzaVJYyG_QEWdAPIXtfgAAAsA"]
[Thu Dec 04 10:35:22.940074 2025] [:error] [pid 63379:tid 63397] [client 192.178.4.101:39112] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDzasvuHYNZ2IuzoJeASAAAAgo"]
[Thu Dec 04 10:35:23.908251 2025] [:error] [pid 63290:tid 63308] [client 192.178.4.101:45248] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDzayoM7G4ZFQQHTRzHbAAAAVA"]
[Thu Dec 04 10:35:23.999096 2025] [:error] [pid 63383:tid 63434] [client 192.178.4.101:53739] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDza1JYyG_QEWdAPIXtggAAAtE"]
[Thu Dec 04 10:35:26.814462 2025] [:error] [pid 63322:tid 63369] [client 192.178.4.101:39446] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDzbovm-cfAnelmlGeMjgAAAdI"]
[Thu Dec 04 10:35:28.234746 2025] [:error] [pid 63382:tid 63489] [client 192.178.4.101:51585] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDzcEvJv09BlzBS6SR7owAAApQ"]
[Thu Dec 04 10:35:29.185346 2025] [:error] [pid 63290:tid 63303] [client 192.178.4.101:58876] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDzcSoM7G4ZFQQHTRzHdAAAAUs"]
[Thu Dec 04 10:35:30.481275 2025] [:error] [pid 63383:tid 63418] [client 192.178.4.101:59144] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDzclJYyG_QEWdAPIXtqAAAAsE"]
[Thu Dec 04 10:35:31.122561 2025] [:error] [pid 63379:tid 63401] [client 192.178.4.101:43158] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDzc8vuHYNZ2IuzoJeAVAAAAg4"]
[Thu Dec 04 10:35:35.703932 2025] [:error] [pid 38403:tid 38414] [client 192.178.4.101:34799] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDzdwBCL4g8TXcskwl4pQAAAQY"]
[Thu Dec 04 10:35:36.060143 2025] [:error] [pid 63290:tid 63309] [client 192.178.4.101:45381] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDzeCoM7G4ZFQQHTRzHfwAAAVE"]
[Thu Dec 04 10:35:36.584701 2025] [:error] [pid 38403:tid 38407] [client 192.178.4.101:62558] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDzeABCL4g8TXcskwl4qAAAAQA"]
[Thu Dec 04 10:35:38.399852 2025] [:error] [pid 63379:tid 63399] [client 192.178.4.101:52501] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDzesvuHYNZ2IuzoJeAVgAAAgw"]
[Thu Dec 04 10:35:38.785879 2025] [:error] [pid 63381:tid 63443] [client 192.178.4.101:47587] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDzeuidz_S5muoRMEye2QAAAkA"]
[Thu Dec 04 10:35:39.969988 2025] [:error] [pid 63383:tid 63435] [client 192.178.4.101:57215] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDze1JYyG_QEWdAPIXttwAAAtI"]
[Thu Dec 04 10:35:40.556757 2025] [:error] [pid 63382:tid 63493] [client 192.178.4.101:40172] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDzfEvJv09BlzBS6SR7qAAAApg"]
[Thu Dec 04 10:35:41.430731 2025] [:error] [pid 38403:tid 38420] [client 192.178.4.101:62007] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDzfQBCL4g8TXcskwl4tgAAAQw"]
[Thu Dec 04 10:35:42.368679 2025] [:error] [pid 63381:tid 63454] [client 192.178.4.101:49768] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDzfuidz_S5muoRMEye3AAAAks"]
[Thu Dec 04 10:35:45.975915 2025] [:error] [pid 63381:tid 63456] [client 192.178.4.101:45629] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDzgeidz_S5muoRMEye5wAAAk0"]
[Thu Dec 04 10:35:46.497147 2025] [:error] [pid 38403:tid 38424] [client 192.178.4.101:43650] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDzggBCL4g8TXcskwl4zwAAARA"]
[Thu Dec 04 10:35:46.763095 2025] [:error] [pid 63383:tid 63431] [client 192.178.4.101:46673] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDzglJYyG_QEWdAPIXtwAAAAs4"]
[Thu Dec 04 10:35:47.700029 2025] [:error] [pid 2161:tid 2218] [client 192.178.4.101:54422] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDzgyjiGdnP9Am2woW0DgAAAIE"]
[Thu Dec 04 10:35:48.253745 2025] [:error] [pid 2244:tid 2249] [client 192.178.4.101:36737] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDzhJm00CCLpKa0F71t6gAAAMM"]
[Thu Dec 04 10:35:49.075008 2025] [:error] [pid 63381:tid 63461] [client 192.178.4.101:49859] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDzheidz_S5muoRMEye7AAAAlI"]
[Thu Dec 04 10:35:49.346895 2025] [:error] [pid 2161:tid 2227] [client 192.178.4.101:48843] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDzhSjiGdnP9Am2woW0EAAAAIo"]
[Thu Dec 04 10:35:49.897166 2025] [:error] [pid 63381:tid 63446] [client 192.178.4.101:52617] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDzheidz_S5muoRMEye7gAAAkM"]
[Thu Dec 04 10:35:54.888309 2025] [:error] [pid 63382:tid 63475] [client 192.178.4.101:39882] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDzikvJv09BlzBS6SR7tQAAAoY"]
[Thu Dec 04 10:35:58.194456 2025] [:error] [pid 63381:tid 63448] [client 192.178.4.101:56864] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDzjuidz_S5muoRMEye_gAAAkU"]
[Thu Dec 04 10:35:59.152467 2025] [:error] [pid 63321:tid 63329] [client 192.178.4.101:37995] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDzj7NTbeTF3WLMl8xhmgAAAYU"]
[Thu Dec 04 10:36:01.482443 2025] [:error] [pid 63381:tid 63444] [client 192.178.4.101:52808] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDzkeidz_S5muoRMEyfBwAAAkE"]
[Thu Dec 04 10:36:01.793744 2025] [:error] [pid 2244:tid 2257] [client 192.178.4.101:61886] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDzkZm00CCLpKa0F71t-AAAAMs"]
[Thu Dec 04 10:36:02.783181 2025] [:error] [pid 63383:tid 63417] [client 192.178.4.101:36180] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDzklJYyG_QEWdAPIXt1AAAAsA"]
[Thu Dec 04 10:36:03.413733 2025] [:error] [pid 63382:tid 63478] [client 192.178.4.101:40818] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDzk0vJv09BlzBS6SR7vwAAAok"]
[Thu Dec 04 10:36:03.673114 2025] [:error] [pid 63381:tid 63460] [client 192.178.4.101:59271] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDzk-idz_S5muoRMEyfGQAAAlE"]
[Thu Dec 04 10:36:06.024939 2025] [:error] [pid 63322:tid 63367] [client 192.178.4.101:50539] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDzlovm-cfAnelmlGeMsgAAAdA"]
[Thu Dec 04 10:36:09.344207 2025] [:error] [pid 63379:tid 63395] [client 192.178.4.101:37289] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDzmcvuHYNZ2IuzoJeAegAAAgg"]
[Thu Dec 04 10:36:26.821004 2025] [:error] [pid 38403:tid 38422] [client 192.178.4.101:60221] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDzqgBCL4g8TXcskwl5FgAAAQ4"]
[Thu Dec 04 10:36:29.834012 2025] [:error] [pid 38403:tid 38418] [client 192.178.4.101:43071] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDzrQBCL4g8TXcskwl5GAAAAQo"]
[Thu Dec 04 10:36:31.758334 2025] [:error] [pid 63381:tid 63455] [client 192.178.4.101:37688] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDzr-idz_S5muoRMEyfhQAAAkw"]
[Thu Dec 04 10:36:32.090964 2025] [:error] [pid 63321:tid 63326] [client 192.178.4.101:53987] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDzsLNTbeTF3WLMl8xhzwAAAYI"]
[Thu Dec 04 10:36:34.944669 2025] [:error] [pid 63381:tid 63457] [client 192.178.4.101:56288] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDzsuidz_S5muoRMEyfiQAAAk4"]
[Thu Dec 04 10:36:36.998619 2025] [:error] [pid 38403:tid 38407] [client 192.178.4.101:56268] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDztABCL4g8TXcskwl5GQAAAQA"]
[Thu Dec 04 10:36:37.306690 2025] [:error] [pid 63381:tid 63463] [client 192.178.4.101:57873] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDzteidz_S5muoRMEyfjgAAAlQ"]
[Thu Dec 04 10:36:38.455405 2025] [:error] [pid 63381:tid 63445] [client 192.178.4.101:58939] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDztuidz_S5muoRMEyflAAAAkI"]
[Thu Dec 04 10:36:39.338063 2025] [:error] [pid 2161:tid 2223] [client 192.178.4.101:51439] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDztyjiGdnP9Am2woW0NQAAAIY"]
[Thu Dec 04 10:36:39.586461 2025] [:error] [pid 63381:tid 63462] [client 192.178.4.101:59314] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDzt-idz_S5muoRMEyflwAAAlM"]
[Thu Dec 04 10:36:40.622259 2025] [:error] [pid 2161:tid 2241] [client 192.178.4.101:52329] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDzuCjiGdnP9Am2woW0NwAAAJg"]
[Thu Dec 04 10:36:40.992370 2025] [:error] [pid 38403:tid 38427] [client 192.178.4.101:64465] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDzuABCL4g8TXcskwl5GwAAARM"]
[Thu Dec 04 10:36:41.169878 2025] [:error] [pid 2161:tid 2220] [client 192.178.4.101:50927] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDzuSjiGdnP9Am2woW0OAAAAIM"]
[Thu Dec 04 10:36:42.913270 2025] [:error] [pid 63379:tid 63404] [client 192.178.4.101:36628] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDzusvuHYNZ2IuzoJeAigAAAhE"]
[Thu Dec 04 10:36:43.415011 2025] [:error] [pid 2161:tid 2227] [client 192.178.4.101:57677] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDzuyjiGdnP9Am2woW0PAAAAIo"]
[Thu Dec 04 10:36:47.158712 2025] [:error] [pid 63383:tid 63438] [client 192.178.4.101:37913] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDzv1JYyG_QEWdAPIXuPwAAAtU"]
[Thu Dec 04 10:36:49.125485 2025] [:error] [pid 63379:tid 63401] [client 192.178.4.101:46796] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDzwcvuHYNZ2IuzoJeAjQAAAg4"]
[Thu Dec 04 10:36:49.747815 2025] [:error] [pid 63379:tid 63399] [client 192.178.4.101:40088] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDzwcvuHYNZ2IuzoJeAjgAAAgw"]
[Thu Dec 04 10:36:50.042019 2025] [:error] [pid 63290:tid 63316] [client 192.178.4.101:65278] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDzwioM7G4ZFQQHTRzHtgAAAVg"]
[Thu Dec 04 10:36:55.121942 2025] [:error] [pid 63290:tid 63298] [client 192.178.4.101:42825] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDzxyoM7G4ZFQQHTRzHuQAAAUY"]
[Thu Dec 04 10:36:55.518359 2025] [:error] [pid 63290:tid 63313] [client 192.178.4.101:62219] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDzxyoM7G4ZFQQHTRzHugAAAVU"]
[Thu Dec 04 10:36:56.155675 2025] [:error] [pid 63321:tid 63341] [client 192.178.4.101:43103] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDzyLNTbeTF3WLMl8xh4QAAAZE"]
[Thu Dec 04 10:36:57.190108 2025] [:error] [pid 63383:tid 63417] [client 192.178.4.101:54130] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDzyVJYyG_QEWdAPIXuSQAAAsA"]
[Thu Dec 04 10:36:57.894588 2025] [:error] [pid 38403:tid 38413] [client 192.178.4.101:38337] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDzyQBCL4g8TXcskwl5KAAAAQU"]
[Thu Dec 04 10:36:58.357096 2025] [:error] [pid 63290:tid 63295] [client 192.178.4.101:40434] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDzyioM7G4ZFQQHTRzHvgAAAUM"]
[Thu Dec 04 10:37:02.049793 2025] [:error] [pid 2161:tid 2218] [client 192.178.4.101:55456] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDzzijiGdnP9Am2woW0SQAAAIE"]
[Thu Dec 04 10:37:04.368700 2025] [:error] [pid 63379:tid 63394] [client 192.178.4.101:38692] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDz0MvuHYNZ2IuzoJeAlAAAAgc"]
[Thu Dec 04 10:37:05.399580 2025] [:error] [pid 2244:tid 2259] [client 192.178.4.101:37744] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDz0Zm00CCLpKa0F71uIQAAAM0"]
[Thu Dec 04 10:37:10.291445 2025] [:error] [pid 63383:tid 63419] [client 192.178.4.101:35666] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDz1lJYyG_QEWdAPIXuVAAAAsI"]
[Thu Dec 04 10:37:11.326323 2025] [:error] [pid 63322:tid 63366] [client 192.178.4.101:40469] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDz14vm-cfAnelmlGeM3wAAAc8"]
[Thu Dec 04 10:37:18.622389 2025] [:error] [pid 63383:tid 63428] [client 192.178.4.101:52050] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDz3lJYyG_QEWdAPIXuVwAAAss"]
[Thu Dec 04 10:37:19.886103 2025] [:error] [pid 63382:tid 63472] [client 192.178.4.101:34865] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDz30vJv09BlzBS6SR8GwAAAoM"]
[Thu Dec 04 10:37:20.162420 2025] [:error] [pid 63381:tid 63457] [client 192.178.4.101:46188] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDz4Oidz_S5muoRMEyfuQAAAk4"]
[Thu Dec 04 10:37:20.322470 2025] [:error] [pid 2244:tid 2261] [client 192.178.4.101:37324] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDz4Jm00CCLpKa0F71uLwAAAM8"]
[Thu Dec 04 10:37:20.921495 2025] [:error] [pid 38403:tid 38414] [client 192.178.4.101:39481] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDz4ABCL4g8TXcskwl5RwAAAQY"]
[Thu Dec 04 10:37:21.356998 2025] [:error] [pid 63379:tid 63409] [client 192.178.4.101:62879] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDz4cvuHYNZ2IuzoJeAngAAAhY"]
[Thu Dec 04 10:37:24.246560 2025] [:error] [pid 2244:tid 2267] [client 192.178.4.101:44693] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDz5Jm00CCLpKa0F71uMwAAANQ"]
[Thu Dec 04 10:37:24.650419 2025] [:error] [pid 63321:tid 63328] [client 192.178.4.101:54744] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDz5LNTbeTF3WLMl8xh_gAAAYQ"]
[Thu Dec 04 10:37:24.858026 2025] [:error] [pid 63290:tid 63314] [client 192.178.4.101:54364] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDz5CoM7G4ZFQQHTRzH1gAAAVY"]
[Thu Dec 04 10:37:25.683230 2025] [:error] [pid 2244:tid 2271] [client 192.178.4.101:43553] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDz5Zm00CCLpKa0F71uNAAAANg"]
[Thu Dec 04 10:37:25.893271 2025] [:error] [pid 63322:tid 63368] [client 192.178.4.101:36610] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDz5Yvm-cfAnelmlGeM6AAAAdE"]
[Thu Dec 04 10:37:37.594794 2025] [:error] [pid 2244:tid 2251] [client 192.178.4.101:46757] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDz8Zm00CCLpKa0F71uQAAAAMU"]
[Thu Dec 04 10:37:37.852759 2025] [:error] [pid 63381:tid 63443] [client 192.178.4.101:36186] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDz8eidz_S5muoRMEyf0wAAAkA"]
[Thu Dec 04 10:37:42.983362 2025] [:error] [pid 63381:tid 63463] [client 192.178.4.101:48481] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDz9uidz_S5muoRMEyf6gAAAlQ"]
[Thu Dec 04 10:37:43.159974 2025] [:error] [pid 63383:tid 63423] [client 192.178.4.101:42407] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDz91JYyG_QEWdAPIXudAAAAsY"]
[Thu Dec 04 10:37:44.015026 2025] [:error] [pid 63322:tid 63368] [client 192.178.4.101:63238] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDz-Ivm-cfAnelmlGeM8wAAAdE"]
[Thu Dec 04 10:37:44.477129 2025] [:error] [pid 2161:tid 2225] [client 192.178.4.101:64624] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDz-CjiGdnP9Am2woW0fwAAAIg"]
[Thu Dec 04 10:37:44.994635 2025] [:error] [pid 38403:tid 38414] [client 192.178.4.101:41113] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDz-ABCL4g8TXcskwl5owAAAQY"]
[Thu Dec 04 10:37:45.133848 2025] [:error] [pid 2244:tid 2253] [client 192.178.4.101:63303] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDz-Zm00CCLpKa0F71uRQAAAMc"]
[Thu Dec 04 10:37:45.325261 2025] [:error] [pid 2161:tid 2218] [client 192.178.4.101:59436] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDz-SjiGdnP9Am2woW0gQAAAIE"]
[Thu Dec 04 10:37:48.274138 2025] [:error] [pid 63322:tid 63374] [client 192.178.4.101:38850] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDz_Ivm-cfAnelmlGeM9wAAAdc"]
[Thu Dec 04 10:37:48.788228 2025] [:error] [pid 63383:tid 63422] [client 192.178.4.101:55075] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDz_FJYyG_QEWdAPIXuewAAAsU"]
[Thu Dec 04 10:37:49.501989 2025] [:error] [pid 63382:tid 63489] [client 192.178.4.101:65117] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDz_UvJv09BlzBS6SR8JQAAApQ"]
[Thu Dec 04 10:37:50.352350 2025] [:error] [pid 2244:tid 2266] [client 192.178.4.101:37147] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDz_pm00CCLpKa0F71uRgAAANM"]
[Thu Dec 04 10:37:50.789568 2025] [:error] [pid 63290:tid 63313] [client 192.178.4.101:55220] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDz_ioM7G4ZFQQHTRzIQQAAAVU"]
[Thu Dec 04 10:37:51.256847 2025] [:error] [pid 63290:tid 63312] [client 192.178.4.101:49614] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDz_yoM7G4ZFQQHTRzIQgAAAVQ"]
[Thu Dec 04 10:37:51.822396 2025] [:error] [pid 38403:tid 38417] [client 192.178.4.101:35514] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTDz_wBCL4g8TXcskwl5uQAAAQk"]
[Thu Dec 04 10:37:56.102963 2025] [:error] [pid 38403:tid 38425] [client 192.178.4.101:49477] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTD0BABCL4g8TXcskwl5vQAAARE"]
[Thu Dec 04 10:37:56.451094 2025] [:error] [pid 38403:tid 38416] [client 192.178.4.101:51801] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTD0BABCL4g8TXcskwl5wAAAAQg"]
[Thu Dec 04 10:37:57.134833 2025] [:error] [pid 2244:tid 2271] [client 192.178.4.101:57289] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTD0BZm00CCLpKa0F71uSgAAANg"]
[Thu Dec 04 10:37:57.320105 2025] [:error] [pid 2161:tid 2230] [client 192.178.4.101:57275] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTD0BSjiGdnP9Am2woW0hwAAAI0"]
[Thu Dec 04 10:37:57.483787 2025] [:error] [pid 63322:tid 63363] [client 192.178.4.101:42581] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTD0BYvm-cfAnelmlGeM_AAAAcw"]
[Thu Dec 04 10:37:58.516088 2025] [:error] [pid 2161:tid 2240] [client 192.178.4.101:64965] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTD0BijiGdnP9Am2woW0iAAAAJc"]
[Thu Dec 04 10:38:00.357513 2025] [:error] [pid 63382:tid 63485] [client 192.178.4.101:40350] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTD0CEvJv09BlzBS6SR8KwAAApA"]
[Thu Dec 04 10:38:01.940022 2025] [:error] [pid 63381:tid 63450] [client 192.178.4.101:57451] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTD0Ceidz_S5muoRMEygDgAAAkc"]
[Thu Dec 04 10:38:02.970981 2025] [:error] [pid 38403:tid 38414] [client 192.178.4.101:64759] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTD0CgBCL4g8TXcskwl5ygAAAQY"]
[Thu Dec 04 10:38:03.622316 2025] [:error] [pid 63379:tid 63387] [client 192.178.4.101:54973] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTD0C8vuHYNZ2IuzoJeA1QAAAgA"]
[Thu Dec 04 10:38:06.739200 2025] [:error] [pid 63382:tid 63489] [client 192.178.4.101:61502] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTD0DkvJv09BlzBS6SR8MAAAApQ"]
[Thu Dec 04 10:38:19.233151 2025] [:error] [pid 63381:tid 63451] [client 192.178.4.101:40538] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTD0G-idz_S5muoRMEygLQAAAkg"]
[Thu Dec 04 10:38:20.349650 2025] [:error] [pid 63290:tid 63306] [client 192.178.4.101:48949] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTD0HCoM7G4ZFQQHTRzITgAAAU4"]
[Thu Dec 04 10:39:42.404000 2025] [:error] [pid 63322:tid 63374] [client 192.178.4.101:55934] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTD0bovm-cfAnelmlGeNeAAAAdc"]
[Thu Dec 04 10:39:45.952583 2025] [:error] [pid 63321:tid 63337] [client 192.178.4.101:36475] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTD0cbNTbeTF3WLMl8xitAAAAY0"]
[Thu Dec 04 10:39:57.185606 2025] [:error] [pid 38403:tid 38413] [client 192.178.4.101:40850] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTD0fQBCL4g8TXcskwl6SQAAAQU"]
[Thu Dec 04 10:39:59.489247 2025] [:error] [pid 63382:tid 63471] [client 192.178.4.101:56860] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTD0f0vJv09BlzBS6SR8gAAAAoI"]
[Thu Dec 04 10:40:00.430156 2025] [:error] [pid 38403:tid 38410] [client 192.178.4.101:57394] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTD0gABCL4g8TXcskwl6TAAAAQI"]
[Thu Dec 04 10:40:00.754948 2025] [:error] [pid 38403:tid 38428] [client 192.178.4.101:60807] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTD0gABCL4g8TXcskwl6TgAAARQ"]
[Thu Dec 04 10:40:02.043238 2025] [:error] [pid 38403:tid 38431] [client 192.178.4.101:51321] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTD0ggBCL4g8TXcskwl6UQAAARc"]
[Thu Dec 04 10:40:02.541419 2025] [:error] [pid 63379:tid 63389] [client 192.178.4.101:56612] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTD0gsvuHYNZ2IuzoJeBIwAAAgI"]
[Thu Dec 04 10:40:03.076976 2025] [:error] [pid 2161:tid 2236] [client 192.178.4.101:43750] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTD0gyjiGdnP9Am2woW1EgAAAJM"]
[Thu Dec 04 10:40:04.946344 2025] [:error] [pid 38403:tid 38422] [client 192.178.4.101:47947] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTD0hABCL4g8TXcskwl6UgAAAQ4"]
[Thu Dec 04 10:40:06.246002 2025] [:error] [pid 63290:tid 63304] [client 192.178.4.101:51478] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTD0hioM7G4ZFQQHTRzIkAAAAUw"]
[Thu Dec 04 10:40:07.547033 2025] [:error] [pid 63379:tid 63395] [client 192.178.4.101:49065] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTD0h8vuHYNZ2IuzoJeBKAAAAgg"]
[Thu Dec 04 10:40:09.129524 2025] [:error] [pid 63321:tid 63325] [client 192.178.4.101:45760] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTD0ibNTbeTF3WLMl8xi0AAAAYE"]
[Thu Dec 04 10:40:10.924802 2025] [:error] [pid 63321:tid 63333] [client 192.178.4.101:59307] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTD0irNTbeTF3WLMl8xi0QAAAYk"]
[Thu Dec 04 10:40:28.490221 2025] [:error] [pid 63321:tid 63327] [client 192.178.4.101:53775] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTD0nLNTbeTF3WLMl8xi4AAAAYM"]
[Thu Dec 04 10:40:29.318364 2025] [:error] [pid 63381:tid 63450] [client 192.178.4.101:35918] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTD0neidz_S5muoRMEyguQAAAkc"]
[Thu Dec 04 10:41:33.910516 2025] [:error] [pid 63290:tid 63300] [client 192.178.4.101:56940] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTD03SoM7G4ZFQQHTRzI2AAAAUg"]
[Thu Dec 04 10:41:34.057104 2025] [:error] [pid 38403:tid 38424] [client 192.178.4.101:43468] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTD03gBCL4g8TXcskwl65AAAARA"]
[Thu Dec 04 10:41:34.933494 2025] [:error] [pid 63321:tid 63325] [client 192.178.4.101:35429] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTD03rNTbeTF3WLMl8xjCgAAAYE"]
[Thu Dec 04 10:41:35.269274 2025] [:error] [pid 63322:tid 63367] [client 192.178.4.101:36774] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTD034vm-cfAnelmlGeN6wAAAdA"]
[Thu Dec 04 10:41:37.927742 2025] [:error] [pid 63381:tid 63448] [client 192.178.4.101:40241] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTD04eidz_S5muoRMEyg6QAAAkU"]
[Thu Dec 04 10:41:38.813991 2025] [:error] [pid 63322:tid 63365] [client 192.178.4.101:60507] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTD04ovm-cfAnelmlGeN7gAAAc4"]
[Thu Dec 04 10:41:41.511304 2025] [:error] [pid 63381:tid 63445] [client 192.178.4.101:37211] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTD05eidz_S5muoRMEyg7QAAAkI"]
[Thu Dec 04 10:41:41.877338 2025] [:error] [pid 63381:tid 63444] [client 192.178.4.101:55416] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTD05eidz_S5muoRMEyg8AAAAkE"]
[Thu Dec 04 10:41:42.920644 2025] [:error] [pid 2244:tid 2251] [client 192.178.4.101:62886] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTD05pm00CCLpKa0F71vEAAAAMU"]
[Thu Dec 04 10:41:43.473682 2025] [:error] [pid 63322:tid 63364] [client 192.178.4.101:58131] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTD054vm-cfAnelmlGeN7wAAAc0"]
[Thu Dec 04 10:41:43.795228 2025] [:error] [pid 63379:tid 63402] [client 192.178.4.101:49932] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTD058vuHYNZ2IuzoJeBgwAAAg8"]
[Thu Dec 04 10:41:44.506890 2025] [:error] [pid 63321:tid 63331] [client 192.178.4.101:45471] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTD06LNTbeTF3WLMl8xjEQAAAYc"]
[Thu Dec 04 10:41:44.763440 2025] [:error] [pid 2161:tid 2222] [client 192.178.4.101:48277] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTD06CjiGdnP9Am2woW1uQAAAIU"]
[Thu Dec 04 10:41:47.367758 2025] [:error] [pid 63383:tid 63437] [client 192.178.4.101:62044] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTD061JYyG_QEWdAPIXvdgAAAtQ"]
[Thu Dec 04 10:41:48.321688 2025] [:error] [pid 38403:tid 38414] [client 192.178.4.101:42998] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTD07ABCL4g8TXcskwl68wAAAQY"]
[Thu Dec 04 10:41:50.513464 2025] [:error] [pid 63381:tid 63444] [client 192.178.4.101:41418] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTD07uidz_S5muoRMEyhFAAAAkE"]
[Thu Dec 04 10:41:50.830854 2025] [:error] [pid 63381:tid 63448] [client 192.178.4.101:45315] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTD07uidz_S5muoRMEyhGAAAAkU"]
[Thu Dec 04 10:41:54.759669 2025] [:error] [pid 38403:tid 38408] [client 192.178.4.101:39574] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTD08gBCL4g8TXcskwl7DwAAAQE"]
[Thu Dec 04 10:41:55.795661 2025] [:error] [pid 2244:tid 2263] [client 192.178.4.101:36768] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTD085m00CCLpKa0F71vGwAAANE"]
[Thu Dec 04 10:41:59.513485 2025] [:error] [pid 63381:tid 63465] [client 192.178.4.101:62825] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTD09-idz_S5muoRMEyhKgAAAlY"]
[Thu Dec 04 10:42:00.550857 2025] [:error] [pid 63383:tid 63418] [client 192.178.4.101:50480] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTD0-FJYyG_QEWdAPIXvgAAAAsE"]
[Thu Dec 04 10:42:03.674759 2025] [:error] [pid 2161:tid 2232] [client 192.178.4.101:55333] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTD0-yjiGdnP9Am2woW15QAAAI8"]
[Thu Dec 04 10:42:14.172417 2025] [:error] [pid 63379:tid 63392] [client 192.178.4.101:43853] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTD1BsvuHYNZ2IuzoJeBmQAAAgU"]
[Thu Dec 04 10:42:18.355629 2025] [:error] [pid 63381:tid 63449] [client 192.178.4.101:50355] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTD1Cuidz_S5muoRMEyhTgAAAkY"]
[Thu Dec 04 10:42:20.662709 2025] [:error] [pid 63322:tid 63358] [client 192.178.4.101:56561] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTD1DIvm-cfAnelmlGeODAAAAcc"]
[Thu Dec 04 10:42:26.042122 2025] [:error] [pid 63379:tid 63388] [client 192.178.4.101:47991] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTD1EsvuHYNZ2IuzoJeBowAAAgE"]
[Thu Dec 04 10:42:27.595009 2025] [:error] [pid 2161:tid 2241] [client 192.178.4.101:51436] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTD1EyjiGdnP9Am2woW2DAAAAJg"]
[Thu Dec 04 10:42:27.818770 2025] [:error] [pid 2244:tid 2260] [client 192.178.4.101:53351] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTD1E5m00CCLpKa0F71vOgAAAM4"]
[Thu Dec 04 10:42:47.211460 2025] [:error] [pid 63379:tid 63400] [client 192.178.4.101:48407] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTD1J8vuHYNZ2IuzoJeBsgAAAg0"]
[Thu Dec 04 10:42:48.576654 2025] [:error] [pid 63383:tid 63417] [client 192.178.4.101:35159] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTD1KFJYyG_QEWdAPIXvzQAAAsA"]
[Thu Dec 04 10:42:50.926383 2025] [:error] [pid 63321:tid 63332] [client 192.178.4.101:62928] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTD1KrNTbeTF3WLMl8xjbgAAAYg"]
[Thu Dec 04 10:42:52.173568 2025] [:error] [pid 38403:tid 38418] [client 192.178.4.101:57844] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTD1LABCL4g8TXcskwl7YAAAAQo"]
[Thu Dec 04 10:42:54.002276 2025] [:error] [pid 63290:tid 63308] [client 192.178.4.101:36067] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTD1LioM7G4ZFQQHTRzJJgAAAVA"]
[Thu Dec 04 10:42:54.534581 2025] [:error] [pid 2244:tid 2268] [client 192.178.4.101:35459] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTD1Lpm00CCLpKa0F71vUQAAANU"]
[Thu Dec 04 10:42:55.821433 2025] [:error] [pid 63321:tid 63329] [client 192.178.4.101:62927] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTD1L7NTbeTF3WLMl8xjcgAAAYU"]
[Thu Dec 04 10:42:56.904919 2025] [:error] [pid 38403:tid 38426] [client 192.178.4.101:35524] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTD1MABCL4g8TXcskwl7ZgAAARI"]
[Thu Dec 04 10:42:57.886719 2025] [:error] [pid 63383:tid 63431] [client 192.178.4.101:53231] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTD1MVJYyG_QEWdAPIXv0AAAAs4"]
[Thu Dec 04 10:43:07.563124 2025] [:error] [pid 63382:tid 63487] [client 192.178.4.101:35460] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTD1O0vJv09BlzBS6SR9MAAAApI"]
[Thu Dec 04 10:43:08.852233 2025] [:error] [pid 63290:tid 63293] [client 192.178.4.101:40496] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTD1PCoM7G4ZFQQHTRzJLQAAAUE"]
[Thu Dec 04 10:43:15.209884 2025] [:error] [pid 63290:tid 63306] [client 192.178.4.101:59829] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTD1QyoM7G4ZFQQHTRzJMQAAAU4"]
[Thu Dec 04 10:43:16.574427 2025] [:error] [pid 38403:tid 38428] [client 192.178.4.101:60807] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTD1RABCL4g8TXcskwl7hQAAARQ"]
[Thu Dec 04 10:43:16.693238 2025] [:error] [pid 38403:tid 38430] [client 192.178.4.101:49078] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTD1RABCL4g8TXcskwl7iQAAARY"]
[Thu Dec 04 10:43:17.607007 2025] [:error] [pid 63381:tid 63461] [client 192.178.4.101:52458] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTD1Reidz_S5muoRMEyhrQAAAlI"]
[Thu Dec 04 10:43:17.852805 2025] [:error] [pid 63383:tid 63422] [client 192.178.4.101:65253] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTD1RVJYyG_QEWdAPIXv4wAAAsU"]
[Thu Dec 04 10:43:18.886972 2025] [:error] [pid 63381:tid 63464] [client 192.178.4.101:48076] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTD1Ruidz_S5muoRMEyhsAAAAlU"]
[Thu Dec 04 10:43:23.330135 2025] [:error] [pid 63379:tid 63393] [client 192.178.4.101:50554] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTD1S8vuHYNZ2IuzoJeBywAAAgY"]
[Thu Dec 04 10:43:26.783808 2025] [:error] [pid 63290:tid 63312] [client 192.178.4.101:56392] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTD1TioM7G4ZFQQHTRzJOQAAAVQ"]
[Thu Dec 04 10:43:27.815961 2025] [:error] [pid 63321:tid 63331] [client 192.178.4.101:60710] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTD1T7NTbeTF3WLMl8xjkQAAAYc"]
[Thu Dec 04 10:43:29.871075 2025] [:error] [pid 63322:tid 63358] [client 192.178.4.101:61207] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTD1UYvm-cfAnelmlGeOSgAAAcc"]
[Thu Dec 04 10:43:30.282627 2025] [:error] [pid 63379:tid 63403] [client 192.178.4.101:45488] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTD1UsvuHYNZ2IuzoJeB2AAAAhA"]
[Thu Dec 04 10:43:34.693081 2025] [:error] [pid 2244:tid 2256] [client 192.178.4.101:59513] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTD1Vpm00CCLpKa0F71vdgAAAMo"]
[Thu Dec 04 10:43:35.587306 2025] [:error] [pid 38403:tid 38421] [client 192.178.4.101:42728] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTD1VwBCL4g8TXcskwl7uwAAAQ0"]
[Thu Dec 04 10:43:35.867225 2025] [:error] [pid 63321:tid 63330] [client 192.178.4.101:52368] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTD1V7NTbeTF3WLMl8xjowAAAYY"]
[Thu Dec 04 10:43:36.893453 2025] [:error] [pid 38403:tid 38427] [client 192.178.4.101:44452] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTD1WABCL4g8TXcskwl7wAAAARM"]
[Thu Dec 04 10:43:37.924578 2025] [:error] [pid 63322:tid 63356] [client 192.178.4.101:60407] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTD1WYvm-cfAnelmlGeObwAAAcU"]
[Thu Dec 04 10:43:38.434994 2025] [:error] [pid 63322:tid 63373] [client 192.178.4.101:38862] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTD1Wovm-cfAnelmlGeOcQAAAdY"]
[Thu Dec 04 10:43:40.115352 2025] [:error] [pid 38403:tid 38426] [client 192.178.4.101:64651] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTD1XABCL4g8TXcskwl7zQAAARI"]
[Thu Dec 04 10:43:42.467156 2025] [:error] [pid 63381:tid 63456] [client 192.178.4.101:57132] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTD1Xuidz_S5muoRMEyh1wAAAk0"]
[Thu Dec 04 10:44:16.367731 2025] [:error] [pid 63379:tid 63391] [client 192.178.4.101:46532] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTD1gMvuHYNZ2IuzoJeCBwAAAgQ"]
[Thu Dec 04 10:44:17.399877 2025] [:error] [pid 63321:tid 63335] [client 192.178.4.101:50046] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTD1gbNTbeTF3WLMl8xj4QAAAYs"]
[Thu Dec 04 10:44:17.636756 2025] [:error] [pid 63381:tid 63449] [client 192.178.4.101:59816] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTD1geidz_S5muoRMEyiIAAAAkY"]
[Thu Dec 04 10:44:20.978386 2025] [:error] [pid 63383:tid 63425] [client 192.178.4.101:44416] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTD1hFJYyG_QEWdAPIXwRAAAAsg"]
[Thu Dec 04 10:44:21.153828 2025] [:error] [pid 38403:tid 38416] [client 192.178.4.101:44592] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTD1hQBCL4g8TXcskwl8DAAAAQg"]
[Thu Dec 04 10:44:22.076626 2025] [:error] [pid 63379:tid 63407] [client 192.178.4.101:40155] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTD1hsvuHYNZ2IuzoJeCCwAAAhQ"]
[Thu Dec 04 10:44:22.382507 2025] [:error] [pid 63321:tid 63339] [client 192.178.4.101:54935] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTD1hrNTbeTF3WLMl8xj5AAAAY8"]
[Thu Dec 04 10:44:22.666039 2025] [:error] [pid 2244:tid 2246] [client 192.178.4.101:52832] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTD1hpm00CCLpKa0F71vpQAAAMA"]
[Thu Dec 04 10:44:25.597089 2025] [:error] [pid 63381:tid 63458] [client 192.178.4.101:51155] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTD1ieidz_S5muoRMEyiJAAAAk8"]
[Thu Dec 04 10:44:27.666352 2025] [:error] [pid 63379:tid 63400] [client 192.178.4.101:58885] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTD1i8vuHYNZ2IuzoJeCDwAAAg0"]
[Thu Dec 04 10:44:27.940939 2025] [:error] [pid 63381:tid 63466] [client 192.178.4.101:54845] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTD1i-idz_S5muoRMEyiJgAAAlc"]
[Thu Dec 04 10:57:15.764768 2025] [:error] [pid 38403:tid 38427] [client 192.178.4.101:40422] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTD4iwBCL4g8TXcskwmCHAAAARM"]
[Thu Dec 04 10:57:43.244565 2025] [:error] [pid 63290:tid 63299] [client 192.178.4.101:58318] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTD4pyoM7G4ZFQQHTRzM4gAAAUc"]
[Thu Dec 04 10:58:01.298487 2025] [:error] [pid 63381:tid 63457] [client 192.178.4.101:43932] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTD4ueidz_S5muoRMEym9wAAAk4"]
[Thu Dec 04 11:05:13.779590 2025] [:error] [pid 63379:tid 63404] [client 192.178.4.101:37883] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTD6acvuHYNZ2IuzoJeGFAAAAhE"]
[Thu Dec 04 11:05:22.665455 2025] [:error] [pid 63381:tid 63463] [client 192.178.4.101:48179] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTD6cuidz_S5muoRMEyp5AAAAlQ"]
[Thu Dec 04 11:05:55.637823 2025] [:error] [pid 63383:tid 63432] [client 192.178.4.101:48485] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTD6k1JYyG_QEWdAPIX2rwAAAs8"]
[Thu Dec 04 11:53:44.167524 2025] [autoindex:error] [pid 63383:tid 63437] [client 107.170.71.105:63325] AH01276: Cannot serve directory /home/baldivis/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Thu Dec 04 12:00:33.972883 2025] [:error] [pid 63379:tid 63404] [client 192.178.4.101:52225] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTEHYcvuHYNZ2IuzoJeOuwAAAhE"]
[Thu Dec 04 12:00:40.454272 2025] [:error] [pid 2161:tid 2225] [client 192.178.4.101:62004] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTEHaCjiGdnP9Am2woXIUAAAAIg"]
[Thu Dec 04 12:00:42.465628 2025] [:error] [pid 63322:tid 63356] [client 192.178.4.101:51589] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTEHaovm-cfAnelmlGeecQAAAcU"]
[Thu Dec 04 12:00:42.843710 2025] [:error] [pid 63379:tid 63411] [client 192.178.4.101:45313] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTEHasvuHYNZ2IuzoJeOwQAAAhg"]
[Thu Dec 04 12:00:43.209649 2025] [:error] [pid 38403:tid 38415] [client 192.178.4.101:57697] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTEHawBCL4g8TXcskwmghgAAAQc"]
[Thu Dec 04 12:00:43.739343 2025] [:error] [pid 38403:tid 38428] [client 192.178.4.101:48849] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTEHawBCL4g8TXcskwmgiAAAARQ"]
[Thu Dec 04 12:00:44.294213 2025] [:error] [pid 2161:tid 2235] [client 192.178.4.101:58596] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTEHbCjiGdnP9Am2woXIVQAAAJI"]
[Thu Dec 04 12:00:44.659953 2025] [:error] [pid 63381:tid 63463] [client 192.178.4.101:39162] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTEHbOidz_S5muoRMEy9egAAAlQ"]
[Thu Dec 04 12:00:45.097644 2025] [:error] [pid 63383:tid 63428] [client 192.178.4.101:58496] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTEHbVJYyG_QEWdAPIUFyQAAAss"]
[Thu Dec 04 12:00:45.549668 2025] [:error] [pid 63382:tid 63471] [client 192.178.4.101:55026] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTEHbUvJv09BlzBS6SSLdAAAAoI"]
[Thu Dec 04 12:00:46.086883 2025] [:error] [pid 63383:tid 63435] [client 192.178.4.101:59687] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTEHblJYyG_QEWdAPIUFywAAAtI"]
[Thu Dec 04 12:00:46.557674 2025] [:error] [pid 38403:tid 38427] [client 192.178.4.101:37435] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTEHbgBCL4g8TXcskwmgkQAAARM"]
[Thu Dec 04 12:00:46.986084 2025] [:error] [pid 63383:tid 63434] [client 192.178.4.101:40428] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTEHblJYyG_QEWdAPIUFzQAAAtE"]
[Thu Dec 04 12:07:17.993739 2025] [:error] [pid 63379:tid 63389] [client 182.43.70.143:57188] [client 182.43.70.143] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.paramountbaldivis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.paramountbaldivis.com"] [uri "/"] [unique_id "aTEI9cvuHYNZ2IuzoJePvAAAAgI"]
[Thu Dec 04 12:30:55.718821 2025] [:error] [pid 2244:tid 2257] [client 143.110.180.207:61057] [client 143.110.180.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/css/"] [unique_id "aTEOf5m00CCLpKa0F72NkgAAAMs"], referer: binance.com
[Thu Dec 04 17:11:38.987679 2025] [:error] [pid 63321:tid 63335] [client 192.178.4.101:40703] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTFQSrNTbeTF3WLMl8y0XAAAAYs"]
[Thu Dec 04 17:11:41.462068 2025] [:error] [pid 63321:tid 63331] [client 192.178.4.101:36819] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTFQTbNTbeTF3WLMl8y0XQAAAYc"]
[Thu Dec 04 17:11:44.273531 2025] [:error] [pid 2244:tid 2253] [client 192.178.4.101:52498] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTFQUJm00CCLpKa0F70HqQAAAMc"]
[Thu Dec 04 17:11:51.903158 2025] [:error] [pid 63290:tid 63294] [client 192.178.4.101:42234] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTFQVyoM7G4ZFQQHTRwWdwAAAUI"]
[Thu Dec 04 17:11:53.957027 2025] [:error] [pid 63383:tid 63424] [client 192.178.4.101:44358] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTFQWVJYyG_QEWdAPIVqcgAAAsc"]
[Thu Dec 04 17:11:56.217684 2025] [:error] [pid 63379:tid 63410] [client 192.178.4.101:40653] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTFQXMvuHYNZ2IuzoJfHnAAAAhc"]
[Thu Dec 04 17:11:58.310749 2025] [:error] [pid 2244:tid 2268] [client 192.178.4.101:46305] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTFQXpm00CCLpKa0F70HvgAAANU"]
[Thu Dec 04 17:12:05.093842 2025] [:error] [pid 2244:tid 2261] [client 192.178.4.101:44677] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTFQZZm00CCLpKa0F70HxAAAAM8"]
[Thu Dec 04 17:12:25.868259 2025] [:error] [pid 63322:tid 63365] [client 192.178.4.101:55032] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTFQeYvm-cfAnelmlGfezAAAAc4"]
[Thu Dec 04 17:12:28.207879 2025] [:error] [pid 63290:tid 63307] [client 192.178.4.101:43519] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTFQfCoM7G4ZFQQHTRwWjQAAAU8"]
[Thu Dec 04 17:12:30.311250 2025] [:error] [pid 2161:tid 2237] [client 192.178.4.101:61190] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTFQfijiGdnP9Am2woUOrQAAAJQ"]
[Thu Dec 04 17:12:34.677731 2025] [:error] [pid 63382:tid 63484] [client 192.178.4.101:53731] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTFQgkvJv09BlzBS6STE0AAAAo8"]
[Thu Dec 04 17:18:25.836086 2025] [:error] [pid 63379:tid 63392] [client 192.178.4.101:40053] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTFR4cvuHYNZ2IuzoJfIbQAAAgU"]
[Thu Dec 04 17:18:33.366016 2025] [:error] [pid 2161:tid 2225] [client 192.178.4.101:59331] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTFR6SjiGdnP9Am2woUPwgAAAIg"]
[Thu Dec 04 17:18:40.074738 2025] [:error] [pid 2244:tid 2248] [client 192.178.4.101:59667] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTFR8Jm00CCLpKa0F70J1wAAAMI"]
[Thu Dec 04 17:18:42.472310 2025] [:error] [pid 63381:tid 63456] [client 192.178.4.101:46150] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTFR8uidz_S5muoRMEwL4QAAAk0"]
[Thu Dec 04 17:18:51.905731 2025] [:error] [pid 38403:tid 38414] [client 192.178.4.101:45500] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTFR-wBCL4g8TXcskwn2-AAAAQY"]
[Thu Dec 04 17:18:55.653571 2025] [:error] [pid 63381:tid 63450] [client 192.178.4.101:37124] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTFR_-idz_S5muoRMEwL-gAAAkc"]
[Thu Dec 04 17:18:59.382744 2025] [:error] [pid 63379:tid 63406] [client 192.178.4.101:37785] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTFSA8vuHYNZ2IuzoJfIcgAAAhM"]
[Thu Dec 04 17:19:08.230532 2025] [:error] [pid 63379:tid 63392] [client 192.178.4.101:55393] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTFSDMvuHYNZ2IuzoJfIdgAAAgU"]
[Thu Dec 04 17:19:12.649958 2025] [:error] [pid 63321:tid 63334] [client 192.178.4.101:64542] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTFSELNTbeTF3WLMl8y2CgAAAYo"]
[Thu Dec 04 17:19:15.637392 2025] [:error] [pid 63322:tid 63369] [client 192.178.4.101:44045] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTFSE4vm-cfAnelmlGffhQAAAdI"]
[Thu Dec 04 17:19:17.959236 2025] [:error] [pid 63381:tid 63460] [client 192.178.4.101:49660] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTFSFeidz_S5muoRMEwMCgAAAlE"]
[Thu Dec 04 17:20:12.931773 2025] [:error] [pid 2244:tid 2261] [client 192.178.4.101:64839] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTFSTJm00CCLpKa0F70KegAAAM8"]
[Thu Dec 04 17:20:15.801062 2025] [:error] [pid 63322:tid 63360] [client 192.178.4.101:46913] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTFST4vm-cfAnelmlGff4wAAAck"]
[Thu Dec 04 17:20:17.358074 2025] [:error] [pid 38403:tid 38432] [client 192.178.4.101:45699] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTFSUQBCL4g8TXcskwn3PAAAARg"]
[Thu Dec 04 17:20:37.454496 2025] [:error] [pid 63290:tid 63309] [client 192.178.4.101:50804] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTFSZSoM7G4ZFQQHTRwXwgAAAVE"]
[Thu Dec 04 17:20:39.831291 2025] [:error] [pid 2161:tid 2219] [client 192.178.4.101:59719] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTFSZyjiGdnP9Am2woUQBwAAAII"]
[Thu Dec 04 17:20:43.674456 2025] [:error] [pid 38403:tid 38429] [client 192.178.4.101:49063] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTFSawBCL4g8TXcskwn3SgAAARU"]
[Thu Dec 04 17:20:48.354692 2025] [:error] [pid 2244:tid 2261] [client 192.178.4.101:57796] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTFScJm00CCLpKa0F70KlAAAAM8"]
[Thu Dec 04 17:20:50.696993 2025] [:error] [pid 63321:tid 63333] [client 192.178.4.101:37664] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTFScrNTbeTF3WLMl8y2UQAAAYk"]
[Thu Dec 04 17:20:52.740195 2025] [:error] [pid 2161:tid 2233] [client 192.178.4.101:40168] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTFSdCjiGdnP9Am2woUQIwAAAJA"]
[Thu Dec 04 17:21:40.758952 2025] [:error] [pid 63290:tid 63316] [client 192.178.4.101:47547] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTFSpCoM7G4ZFQQHTRwYJwAAAVg"]
[Thu Dec 04 17:21:45.362404 2025] [:error] [pid 2244:tid 2249] [client 192.178.4.101:57137] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTFSqZm00CCLpKa0F70LFwAAAMM"]
[Thu Dec 04 17:22:02.448646 2025] [:error] [pid 63381:tid 63467] [client 192.178.4.101:56892] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTFSuuidz_S5muoRMEwMigAAAlg"]
[Thu Dec 04 17:22:17.883232 2025] [:error] [pid 2161:tid 2218] [client 192.178.4.101:47096] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTFSySjiGdnP9Am2woUQbwAAAIE"]
[Thu Dec 04 17:22:21.340569 2025] [:error] [pid 63383:tid 63440] [client 192.178.4.101:43886] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTFSzVJYyG_QEWdAPIVssgAAAtc"]
[Thu Dec 04 17:22:32.680457 2025] [:error] [pid 63381:tid 63457] [client 192.178.4.101:42528] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTFS2Oidz_S5muoRMEwMlQAAAk4"]
[Thu Dec 04 17:23:34.443852 2025] [:error] [pid 63290:tid 63307] [client 192.178.4.101:52144] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTFTFioM7G4ZFQQHTRwYXAAAAU8"]
[Thu Dec 04 17:23:37.254320 2025] [:error] [pid 63382:tid 63491] [client 192.178.4.101:64416] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTFTGUvJv09BlzBS6STF8QAAApY"]
[Thu Dec 04 17:23:51.473651 2025] [:error] [pid 38403:tid 38430] [client 192.178.4.101:43107] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTFTJwBCL4g8TXcskwn38QAAARY"]
[Thu Dec 04 17:23:56.442803 2025] [:error] [pid 2244:tid 2267] [client 192.178.4.101:46870] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTFTLJm00CCLpKa0F70L-QAAANQ"]
[Thu Dec 04 17:23:58.913532 2025] [:error] [pid 38403:tid 38424] [client 192.178.4.101:35725] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTFTLgBCL4g8TXcskwn39wAAARA"]
[Thu Dec 04 17:24:01.450798 2025] [:error] [pid 63321:tid 63326] [client 192.178.4.101:40134] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTFTMbNTbeTF3WLMl8y2tAAAAYI"]
[Thu Dec 04 17:24:06.390432 2025] [:error] [pid 63381:tid 63447] [client 192.178.4.101:41811] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTFTNuidz_S5muoRMEwM1QAAAkQ"]
[Thu Dec 04 17:24:10.038357 2025] [:error] [pid 63290:tid 63297] [client 192.178.4.101:51410] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTFTOioM7G4ZFQQHTRwYeAAAAUU"]
[Thu Dec 04 17:24:12.467603 2025] [:error] [pid 2244:tid 2253] [client 192.178.4.101:38732] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTFTPJm00CCLpKa0F70MIwAAAMc"]
[Thu Dec 04 17:24:30.749828 2025] [:error] [pid 2161:tid 2240] [client 192.178.4.101:60666] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTFTTijiGdnP9Am2woUROwAAAJc"]
[Thu Dec 04 17:25:19.285960 2025] [:error] [pid 63379:tid 63399] [client 192.178.4.101:56325] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTFTf8vuHYNZ2IuzoJfJewAAAgw"]
[Thu Dec 04 17:25:19.884004 2025] [:error] [pid 63322:tid 63371] [client 192.178.4.101:39687] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTFTf4vm-cfAnelmlGfggQAAAdQ"]
[Thu Dec 04 17:25:33.295694 2025] [:error] [pid 38403:tid 38417] [client 192.178.4.101:50798] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTFTjQBCL4g8TXcskwn4lQAAAQk"]
[Thu Dec 04 17:25:35.559973 2025] [:error] [pid 63322:tid 63363] [client 192.178.4.101:38827] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTFTj4vm-cfAnelmlGfgiwAAAcw"]
[Thu Dec 04 17:25:37.694186 2025] [:error] [pid 2161:tid 2241] [client 192.178.4.101:60956] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTFTkSjiGdnP9Am2woURcgAAAJg"]
[Thu Dec 04 17:25:39.973310 2025] [:error] [pid 2244:tid 2265] [client 192.178.4.101:61960] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTFTk5m00CCLpKa0F70MjgAAANI"]
[Thu Dec 04 17:25:42.046652 2025] [:error] [pid 38403:tid 38423] [client 192.178.4.101:35704] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTFTlgBCL4g8TXcskwn4mAAAAQ8"]
[Thu Dec 04 17:27:06.441236 2025] [:error] [pid 63321:tid 63339] [client 192.178.4.101:51038] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTFT6rNTbeTF3WLMl8y3IgAAAY8"]
[Thu Dec 04 17:27:11.614719 2025] [:error] [pid 63290:tid 63314] [client 192.178.4.101:62922] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTFT7yoM7G4ZFQQHTRwYyAAAAVY"]
[Thu Dec 04 17:27:16.440226 2025] [:error] [pid 63321:tid 63348] [client 192.178.4.101:65174] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTFT9LNTbeTF3WLMl8y3JwAAAZg"]
[Thu Dec 04 17:27:19.058508 2025] [:error] [pid 63382:tid 63493] [client 192.178.4.101:47809] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTFT90vJv09BlzBS6STGTgAAApg"]
[Thu Dec 04 17:27:36.100347 2025] [:error] [pid 38403:tid 38415] [client 192.178.4.101:41797] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTFUCABCL4g8TXcskwn40AAAAQc"]
[Thu Dec 04 17:27:39.108008 2025] [:error] [pid 63383:tid 63437] [client 192.178.4.101:62919] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTFUC1JYyG_QEWdAPIVuAAAAAtQ"]
[Thu Dec 04 17:27:42.224646 2025] [:error] [pid 63382:tid 63492] [client 192.178.4.101:43282] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTFUDkvJv09BlzBS6STGUwAAApc"]
[Thu Dec 04 17:27:48.291234 2025] [:error] [pid 63381:tid 63448] [client 192.178.4.101:55952] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTFUFOidz_S5muoRMEwNlAAAAkU"]
[Thu Dec 04 17:27:50.983476 2025] [:error] [pid 2244:tid 2263] [client 192.178.4.101:39158] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTFUFpm00CCLpKa0F70NQQAAANE"]
[Thu Dec 04 17:27:54.965884 2025] [:error] [pid 38403:tid 38423] [client 192.178.4.101:52918] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTFUGgBCL4g8TXcskwn43QAAAQ8"]
[Thu Dec 04 17:27:55.402012 2025] [:error] [pid 2244:tid 2247] [client 192.178.4.101:42603] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTFUG5m00CCLpKa0F70NRwAAAME"]
[Thu Dec 04 17:27:59.513934 2025] [:error] [pid 63383:tid 63423] [client 192.178.4.101:62643] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTFUH1JYyG_QEWdAPIVuMwAAAsY"]
[Thu Dec 04 17:30:26.652488 2025] [:error] [pid 63290:tid 63307] [client 192.178.4.101:36349] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTFUsioM7G4ZFQQHTRwZZgAAAU8"]
[Thu Dec 04 17:30:29.079658 2025] [:error] [pid 63382:tid 63492] [client 192.178.4.101:62966] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTFUtUvJv09BlzBS6STHGQAAApc"]
[Thu Dec 04 17:30:30.230373 2025] [:error] [pid 63382:tid 63473] [client 192.178.4.101:40961] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTFUtkvJv09BlzBS6STHGgAAAoQ"]
[Thu Dec 04 17:30:31.365929 2025] [:error] [pid 63321:tid 63341] [client 192.178.4.101:47440] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTFUt7NTbeTF3WLMl8y3kQAAAZE"]
[Thu Dec 04 17:30:37.320299 2025] [:error] [pid 2244:tid 2249] [client 192.178.4.101:51854] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTFUvZm00CCLpKa0F70OLwAAAMM"]
[Thu Dec 04 17:30:48.316798 2025] [:error] [pid 63382:tid 63470] [client 192.178.4.101:53568] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTFUyEvJv09BlzBS6STHIwAAAoE"]
[Thu Dec 04 17:48:06.059801 2025] [:error] [pid 63290:tid 63310] [client 192.178.4.101:52505] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTFY1ioM7G4ZFQQHTRwbjAAAAVI"]
[Thu Dec 04 17:48:27.263843 2025] [:error] [pid 2244:tid 2255] [client 192.178.4.101:50972] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTFY65m00CCLpKa0F70UKAAAAMk"]
[Thu Dec 04 17:48:31.461768 2025] [:error] [pid 2244:tid 2267] [client 192.178.4.101:56647] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTFY75m00CCLpKa0F70ULAAAANQ"]
[Thu Dec 04 17:48:33.502345 2025] [:error] [pid 2161:tid 2237] [client 192.178.4.101:49972] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTFY8SjiGdnP9Am2woUVoAAAAJQ"]
[Thu Dec 04 17:48:35.866692 2025] [:error] [pid 63322:tid 63354] [client 192.178.4.101:41379] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTFY84vm-cfAnelmlGfkggAAAcM"]
[Thu Dec 04 17:48:43.253160 2025] [:error] [pid 63383:tid 63417] [client 192.178.4.101:63341] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTFY-1JYyG_QEWdAPIVzEAAAAsA"]
[Thu Dec 04 17:51:14.416851 2025] [:error] [pid 2244:tid 2265] [client 192.178.4.102:56922] [client 192.178.4.102] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "15.235.27.39_38fe0bde74a94317ba64948c2013b47a85fb6514"): Internal error (specific information not available) [hostname "paramountbaldivis.com"] [uri "/index.php"] [unique_id "aTFZjZm00CCLpKa0F70VPwAAANI"]
[Thu Dec 04 17:51:56.544003 2025] [:error] [pid 63383:tid 63419] [client 192.178.4.101:48663] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTFZvFJYyG_QEWdAPIV0YAAAAsI"]
[Thu Dec 04 17:52:00.306328 2025] [:error] [pid 2244:tid 2255] [client 192.178.4.101:38462] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTFZwJm00CCLpKa0F70VzQAAAMk"]
[Thu Dec 04 17:52:05.988442 2025] [:error] [pid 63379:tid 63405] [client 192.178.4.101:55267] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTFZxcvuHYNZ2IuzoJfMmAAAAhI"]
[Thu Dec 04 17:52:08.026821 2025] [:error] [pid 63322:tid 63355] [client 192.178.4.101:36335] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTFZyIvm-cfAnelmlGflCgAAAcQ"]
[Thu Dec 04 17:52:13.212336 2025] [:error] [pid 63382:tid 63485] [client 192.178.4.101:60518] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTFZzUvJv09BlzBS6STJ6wAAApA"]
[Thu Dec 04 17:52:31.299416 2025] [:error] [pid 2244:tid 2256] [client 192.178.4.101:56037] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTFZ35m00CCLpKa0F70V4gAAAMo"]
[Thu Dec 04 17:52:33.681285 2025] [:error] [pid 2244:tid 2247] [client 192.178.4.101:64308] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTFZ4Zm00CCLpKa0F70V6gAAAME"]
[Thu Dec 04 17:52:38.098391 2025] [:error] [pid 38403:tid 38428] [client 192.178.4.101:48352] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTFZ5gBCL4g8TXcskwn9YAAAARQ"]
[Thu Dec 04 17:52:50.402614 2025] [:error] [pid 2244:tid 2253] [client 192.178.4.101:57015] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTFZ8pm00CCLpKa0F70V_wAAAMc"]
[Thu Dec 04 18:59:55.917977 2025] [:error] [pid 2244:tid 2250] [client 180.110.203.108:35799] [client 180.110.203.108] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||paramountbaldivis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTFpq5m00CCLpKa0F70yFwAAAMQ"]
[Thu Dec 04 19:53:38.247013 2025] [:error] [pid 38403:tid 38429] [client 45.157.54.38:58473] [client 45.157.54.38] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.157.54.38, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aTF2QgBCL4g8TXcskwkbFAAAARU"]
[Thu Dec 04 19:53:41.145581 2025] [:error] [pid 63379:tid 63402] [client 45.157.54.38:64933] [client 45.157.54.38] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.157.54.38, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aTF2RcvuHYNZ2IuzoJfeFgAAAg8"]
[Thu Dec 04 20:18:40.296631 2025] [:error] [pid 63381:tid 63447] [client 192.178.4.101:36019] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTF8IOidz_S5muoRMEw1sQAAAkQ"]
[Thu Dec 04 20:18:57.273229 2025] [:error] [pid 63382:tid 63479] [client 192.178.4.101:55891] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTF8MUvJv09BlzBS6SThMwAAAoo"]
[Thu Dec 04 20:19:11.872221 2025] [:error] [pid 63290:tid 63315] [client 192.178.4.101:35755] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTF8PyoM7G4ZFQQHTRw05gAAAVc"]
[Thu Dec 04 20:22:30.717497 2025] [:error] [pid 63322:tid 63353] [client 192.178.4.101:51171] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTF9Bovm-cfAnelmlGf-5QAAAcI"]
[Thu Dec 04 20:22:35.895773 2025] [:error] [pid 63383:tid 63432] [client 192.178.4.101:62030] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTF9C1JYyG_QEWdAPIWjXQAAAs8"]
[Thu Dec 04 20:22:40.943844 2025] [:error] [pid 63322:tid 63372] [client 192.178.4.101:65105] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTF9EIvm-cfAnelmlGf-5wAAAdU"]
[Thu Dec 04 20:22:54.426821 2025] [:error] [pid 63290:tid 63292] [client 192.178.4.101:44040] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTF9HioM7G4ZFQQHTRw1sgAAAUA"]
[Thu Dec 04 20:23:07.342820 2025] [:error] [pid 63322:tid 63359] [client 192.178.4.101:62494] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTF9K4vm-cfAnelmlGf-8wAAAcg"]
[Thu Dec 04 20:23:15.336195 2025] [:error] [pid 38403:tid 38429] [client 192.178.4.101:65188] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTF9MwBCL4g8TXcskwkhxwAAARU"]
[Thu Dec 04 20:23:25.531765 2025] [:error] [pid 63383:tid 63424] [client 192.178.4.101:36564] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTF9PVJYyG_QEWdAPIWjhAAAAsc"]
[Thu Dec 04 21:03:40.598794 2025] [:error] [pid 63382:tid 63492] [client 192.178.4.101:65099] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTGGrEvJv09BlzBS6STp_wAAApc"]
[Thu Dec 04 21:03:55.138248 2025] [:error] [pid 2244:tid 2263] [client 192.178.4.101:36739] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTGGu5m00CCLpKa0F71lgwAAANE"]
[Thu Dec 04 21:04:08.666033 2025] [:error] [pid 63321:tid 63345] [client 192.178.4.101:64476] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTGGyLNTbeTF3WLMl8zezAAAAZU"]
[Thu Dec 04 21:04:18.234717 2025] [:error] [pid 2161:tid 2237] [client 192.178.4.101:55792] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTGG0ijiGdnP9Am2woU--gAAAJQ"]
[Thu Dec 04 21:04:26.395709 2025] [:error] [pid 63379:tid 63398] [client 192.178.4.101:58093] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTGG2svuHYNZ2IuzoJfpbAAAAgs"]
[Thu Dec 04 21:04:32.508307 2025] [:error] [pid 2161:tid 2240] [client 192.178.4.101:57893] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTGG4CjiGdnP9Am2woU_BQAAAJc"]
[Thu Dec 04 21:07:22.091876 2025] [:error] [pid 63379:tid 63409] [client 192.178.4.101:49248] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTGHisvuHYNZ2IuzoJfpqQAAAhY"]
[Thu Dec 04 21:07:32.866997 2025] [:error] [pid 2244:tid 2263] [client 192.178.4.101:56765] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTGHlJm00CCLpKa0F71mugAAANE"]
[Thu Dec 04 21:07:39.705453 2025] [:error] [pid 63382:tid 63482] [client 192.178.4.101:64272] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTGHm0vJv09BlzBS6STqlAAAAo0"]
[Thu Dec 04 21:10:30.111257 2025] [:error] [pid 63381:tid 63449] [client 192.178.4.101:60515] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTGIRuidz_S5muoRMEw_zQAAAkY"]
[Thu Dec 04 21:10:35.419923 2025] [:error] [pid 2244:tid 2258] [client 192.178.4.101:59177] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTGIS5m00CCLpKa0F71n9AAAAMw"]
[Thu Dec 04 21:10:42.039812 2025] [:error] [pid 2161:tid 2229] [client 192.178.4.101:37986] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTGIUijiGdnP9Am2woVALQAAAIw"]
[Thu Dec 04 21:10:50.579084 2025] [:error] [pid 38403:tid 38418] [client 192.178.4.101:48763] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTGIWgBCL4g8TXcskwkubwAAAQo"]
[Thu Dec 04 21:10:56.141968 2025] [:error] [pid 2244:tid 2249] [client 192.178.4.101:35326] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTGIYJm00CCLpKa0F71oJgAAAMM"]
[Thu Dec 04 21:11:18.870245 2025] [:error] [pid 63379:tid 63399] [client 192.178.4.101:54976] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTGIdsvuHYNZ2IuzoJfqIQAAAgw"]
[Thu Dec 04 21:14:18.869338 2025] [:error] [pid 63290:tid 63311] [client 192.178.4.101:51796] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTGJKioM7G4ZFQQHTRw_kQAAAVM"]
[Thu Dec 04 21:14:25.004443 2025] [:error] [pid 38403:tid 38429] [client 192.178.4.101:47726] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTGJMQBCL4g8TXcskwkvYQAAARU"]
[Thu Dec 04 21:14:35.641753 2025] [:error] [pid 38403:tid 38425] [client 192.178.4.101:46107] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTGJOwBCL4g8TXcskwkvaQAAARE"]
[Thu Dec 04 22:07:34.121802 2025] [:error] [pid 63382:tid 63472] [client 192.178.4.101:48331] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTGVpkvJv09BlzBS6ST0mwAAAoM"]
[Thu Dec 04 22:07:39.947717 2025] [:error] [pid 63383:tid 63439] [client 192.178.4.101:48653] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTGVq1JYyG_QEWdAPIXBLAAAAtY"]
[Thu Dec 04 22:07:57.887709 2025] [:error] [pid 2244:tid 2267] [client 192.178.4.101:40498] [client 192.178.4.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTGVvZm00CCLpKa0F719hgAAANQ"]
[Thu Dec 04 23:18:48.394420 2025] [:error] [pid 2161:tid 2223] [client 34.26.32.106:48374] [client 34.26.32.106] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.paramountbaldivis.com"] [uri "/.git/config"] [unique_id "aTGmWCjiGdnP9Am2woVZTQAAAIY"]
[Fri Dec 05 02:32:19.604705 2025] [:error] [pid 4577:tid 4595] [client 66.249.64.101:42155] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTHTs69fB6WQjuhMq_8-7gAAABA"]
[Fri Dec 05 02:32:20.092021 2025] [:error] [pid 4492:tid 4551] [client 66.249.64.101:53342] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTHTtKktiJtKB3zqv338vwAAAQM"]
[Fri Dec 05 02:32:21.782945 2025] [:error] [pid 4577:tid 4579] [client 66.249.64.101:41529] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTHTta9fB6WQjuhMq_8-_gAAAAA"]
[Fri Dec 05 02:32:22.535900 2025] [:error] [pid 4491:tid 4540] [client 66.249.64.101:38052] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTHTtiUq6tbvu6y_H_HkyAAAANM"]
[Fri Dec 05 02:32:23.507336 2025] [:error] [pid 4577:tid 4592] [client 66.249.64.101:44503] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTHTt69fB6WQjuhMq_8_AAAAAA0"]
[Fri Dec 05 02:32:25.502624 2025] [:error] [pid 33349:tid 33357] [client 66.249.64.101:36765] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTHTuVmzLHxEoifSuEwjXQAAAEQ"]
[Fri Dec 05 02:32:31.832027 2025] [:error] [pid 4492:tid 4549] [client 66.249.64.101:37883] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTHTv6ktiJtKB3zqv3388AAAAQE"]
[Fri Dec 05 02:32:34.920611 2025] [:error] [pid 33349:tid 33371] [client 66.249.64.101:54592] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTHTwlmzLHxEoifSuEwjggAAAFI"]
[Fri Dec 05 02:32:47.090353 2025] [:error] [pid 4490:tid 4506] [client 66.249.64.101:35778] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTHTz2RzE1f_JiXqDpztrAAAAIw"]
[Fri Dec 05 02:32:55.798784 2025] [:error] [pid 33349:tid 33368] [client 66.249.64.101:61060] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTHT11mzLHxEoifSuEwjvwAAAE8"]
[Fri Dec 05 02:33:11.538754 2025] [:error] [pid 33349:tid 33369] [client 66.249.64.101:54681] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTHT51mzLHxEoifSuEwj4AAAAFA"]
[Fri Dec 05 02:34:48.240563 2025] [:error] [pid 4577:tid 4600] [client 66.249.64.101:50436] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTHUSK9fB6WQjuhMq_9AHQAAABU"]
[Fri Dec 05 02:34:53.695613 2025] [:error] [pid 4492:tid 4554] [client 66.249.64.101:38981] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTHUTaktiJtKB3zqv3393QAAAQY"]
[Fri Dec 05 02:35:17.616675 2025] [:error] [pid 4492:tid 4550] [client 66.249.64.101:59956] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTHUZaktiJtKB3zqv3398QAAAQI"]
[Fri Dec 05 02:35:25.951128 2025] [:error] [pid 4490:tid 4500] [client 66.249.64.101:56377] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTHUbWRzE1f_JiXqDpzulQAAAIY"]
[Fri Dec 05 02:35:34.041938 2025] [:error] [pid 4491:tid 4544] [client 66.249.64.101:50771] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTHUdiUq6tbvu6y_H_HmfAAAANY"]
[Fri Dec 05 05:04:33.060112 2025] [:error] [pid 53923:tid 53933] [client 66.249.64.101:63665] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTH3Ybl8ebZN0VCAVXDYZQAAAMg"]
[Fri Dec 05 05:04:37.584568 2025] [:error] [pid 24010:tid 24014] [client 66.249.64.101:51014] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTH3ZatjRoDpxa46mwf3NwAAAQI"]
[Fri Dec 05 05:04:40.970704 2025] [:error] [pid 24010:tid 24018] [client 66.249.64.101:52934] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTH3aKtjRoDpxa46mwf3PAAAAQY"]
[Fri Dec 05 05:04:52.715677 2025] [:error] [pid 53923:tid 53931] [client 66.249.64.101:44541] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTH3dLl8ebZN0VCAVXDYmgAAAMY"]
[Fri Dec 05 05:04:58.785107 2025] [:error] [pid 53839:tid 53899] [client 66.249.64.101:36751] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTH3eqQOuERg_RN7bn9iSAAAAIM"]
[Fri Dec 05 05:05:05.692438 2025] [:error] [pid 53837:tid 53845] [client 66.249.64.101:41981] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTH3gTbsUyTxys8OiMIF9wAAAAM"]
[Fri Dec 05 05:05:12.749598 2025] [:error] [pid 53837:tid 53858] [client 66.249.64.101:35793] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTH3iDbsUyTxys8OiMIGDgAAABA"]
[Fri Dec 05 05:08:03.087867 2025] [:error] [pid 53923:tid 53928] [client 66.249.64.101:48351] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTH4M7l8ebZN0VCAVXDbDAAAAMM"]
[Fri Dec 05 05:08:33.739023 2025] [:error] [pid 53923:tid 53949] [client 66.249.64.101:47760] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTH4Ubl8ebZN0VCAVXDbkQAAANg"]
[Fri Dec 05 05:08:39.572280 2025] [:error] [pid 24010:tid 24033] [client 66.249.64.101:48492] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTH4V6tjRoDpxa46mwf7WgAAARU"]
[Fri Dec 05 05:08:44.038936 2025] [:error] [pid 53839:tid 53903] [client 66.249.64.101:59005] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTH4XKQOuERg_RN7bn9ktgAAAIc"]
[Fri Dec 05 05:08:52.605740 2025] [:error] [pid 53839:tid 53901] [client 66.249.64.101:43128] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTH4ZKQOuERg_RN7bn9k1gAAAIU"]
[Fri Dec 05 05:10:38.593525 2025] [:error] [pid 53837:tid 53862] [client 66.249.64.101:53167] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTH4zjbsUyTxys8OiMIIwwAAABQ"]
[Fri Dec 05 05:10:41.416185 2025] [:error] [pid 53838:tid 53889] [client 66.249.64.101:35648] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTH40Z8M7CH_vMhLrzLmvAAAAFQ"]
[Fri Dec 05 05:10:49.038624 2025] [:error] [pid 53837:tid 53866] [client 66.249.64.101:40077] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTH42TbsUyTxys8OiMIIxwAAABg"]
[Fri Dec 05 05:16:10.702590 2025] [:error] [pid 53838:tid 53888] [client 66.249.64.101:45091] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTH6Gp8M7CH_vMhLrzLpLgAAAFM"]
[Fri Dec 05 05:16:32.777831 2025] [:error] [pid 53923:tid 53936] [client 66.249.64.101:45503] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTH6MLl8ebZN0VCAVXDfTAAAAMs"]
[Fri Dec 05 05:21:47.015657 2025] [:error] [pid 53838:tid 53893] [client 66.249.64.101:35278] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTH7a58M7CH_vMhLrzLrnAAAAFg"]
[Fri Dec 05 05:21:56.724814 2025] [:error] [pid 53839:tid 53912] [client 66.249.64.101:40980] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTH7dKQOuERg_RN7bn9qUAAAAJA"]
[Fri Dec 05 05:22:32.746391 2025] [:error] [pid 53838:tid 53880] [client 66.249.64.101:57882] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTH7mJ8M7CH_vMhLrzLsEwAAAEs"]
[Fri Dec 05 05:24:31.867057 2025] [:error] [pid 53923:tid 53939] [client 66.249.64.101:60594] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTH8D7l8ebZN0VCAVXDjpwAAAM4"]
[Fri Dec 05 05:24:35.579861 2025] [:error] [pid 53839:tid 53910] [client 66.249.64.101:53402] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTH8E6QOuERg_RN7bn9rkgAAAI4"]
[Fri Dec 05 05:24:35.891654 2025] [:error] [pid 53837:tid 53849] [client 66.249.64.101:38879] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTH8EzbsUyTxys8OiMIOPwAAAAc"]
[Fri Dec 05 05:24:38.701352 2025] [:error] [pid 53837:tid 53848] [client 66.249.64.101:52388] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTH8FjbsUyTxys8OiMIOQwAAAAY"]
[Fri Dec 05 05:24:50.649104 2025] [:error] [pid 53837:tid 53864] [client 66.249.64.101:47927] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTH8IjbsUyTxys8OiMIOVQAAABY"]
[Fri Dec 05 05:24:55.070857 2025] [:error] [pid 24010:tid 24022] [client 66.249.64.101:57193] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTH8J6tjRoDpxa46mwcGbgAAAQo"]
[Fri Dec 05 05:24:58.579464 2025] [:error] [pid 24010:tid 24017] [client 66.249.64.101:46109] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTH8KqtjRoDpxa46mwcGfgAAAQU"]
[Fri Dec 05 05:33:56.188609 2025] [:error] [pid 53837:tid 53843] [client 66.249.64.101:35042] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTH-RDbsUyTxys8OiMIRNgAAAAE"]
[Fri Dec 05 05:33:57.035974 2025] [:error] [pid 53837:tid 53845] [client 66.249.64.101:37121] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTH-RTbsUyTxys8OiMIRNwAAAAM"]
[Fri Dec 05 05:33:59.114504 2025] [:error] [pid 53838:tid 53886] [client 66.249.64.101:41100] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTH-R58M7CH_vMhLrzLwVQAAAFE"]
[Fri Dec 05 05:34:00.186723 2025] [:error] [pid 53923:tid 53933] [client 66.249.64.101:45154] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTH-SLl8ebZN0VCAVXDnqwAAAMg"]
[Fri Dec 05 05:34:01.476017 2025] [:error] [pid 53923:tid 53926] [client 66.249.64.101:59301] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTH-Sbl8ebZN0VCAVXDnsAAAAME"]
[Fri Dec 05 05:34:03.831533 2025] [:error] [pid 53839:tid 53896] [client 66.249.64.101:53094] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTH-S6QOuERg_RN7bn9u4gAAAIA"]
[Fri Dec 05 05:34:07.468669 2025] [:error] [pid 24010:tid 24035] [client 66.249.64.101:53896] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTH-T6tjRoDpxa46mwcLOQAAARc"]
[Fri Dec 05 05:34:09.798736 2025] [:error] [pid 24010:tid 24033] [client 66.249.64.101:56239] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTH-UatjRoDpxa46mwcLPwAAARU"]
[Fri Dec 05 05:34:10.028814 2025] [:error] [pid 53923:tid 53946] [client 66.249.64.101:51356] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTH-Url8ebZN0VCAVXDn1gAAANU"]
[Fri Dec 05 05:34:12.667220 2025] [:error] [pid 53837:tid 53855] [client 66.249.64.101:45655] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTH-VDbsUyTxys8OiMIRSgAAAA0"]
[Fri Dec 05 05:34:15.659956 2025] [:error] [pid 24010:tid 24020] [client 66.249.64.101:40887] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTH-V6tjRoDpxa46mwcLXQAAAQg"]
[Fri Dec 05 05:34:17.852358 2025] [:error] [pid 53923:tid 53926] [client 66.249.64.101:57655] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTH-Wbl8ebZN0VCAVXDn8AAAAME"]
[Fri Dec 05 05:34:19.202202 2025] [:error] [pid 24010:tid 24020] [client 66.249.64.101:52553] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTH-W6tjRoDpxa46mwcLagAAAQg"]
[Fri Dec 05 05:34:20.712383 2025] [:error] [pid 24010:tid 24030] [client 66.249.64.101:57041] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTH-XKtjRoDpxa46mwcLcgAAARI"]
[Fri Dec 05 05:34:22.345815 2025] [:error] [pid 53838:tid 53871] [client 66.249.64.101:56682] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTH-Xp8M7CH_vMhLrzLwdAAAAEI"]
[Fri Dec 05 05:34:23.621678 2025] [:error] [pid 53839:tid 53915] [client 66.249.64.101:57505] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTH-X6QOuERg_RN7bn9vLgAAAJM"]
[Fri Dec 05 05:34:23.946254 2025] [:error] [pid 24010:tid 24024] [client 66.249.64.101:42779] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTH-X6tjRoDpxa46mwcLegAAAQw"]
[Fri Dec 05 05:34:27.628526 2025] [:error] [pid 53923:tid 53927] [client 66.249.64.101:46984] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTH-Y7l8ebZN0VCAVXDoAgAAAMI"]
[Fri Dec 05 05:34:28.268642 2025] [:error] [pid 53923:tid 53931] [client 66.249.64.101:48920] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTH-ZLl8ebZN0VCAVXDoAwAAAMY"]
[Fri Dec 05 05:34:29.272348 2025] [:error] [pid 53923:tid 53930] [client 66.249.64.101:54772] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTH-Zbl8ebZN0VCAVXDoBgAAAMU"]
[Fri Dec 05 05:34:31.564397 2025] [:error] [pid 53923:tid 53938] [client 66.249.64.101:60221] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTH-Z7l8ebZN0VCAVXDoDgAAAM0"]
[Fri Dec 05 05:34:42.606387 2025] [:error] [pid 53838:tid 53871] [client 66.249.64.101:60854] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTH-cp8M7CH_vMhLrzLwfgAAAEI"]
[Fri Dec 05 05:34:44.604707 2025] [:error] [pid 53838:tid 53875] [client 66.249.64.101:59178] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTH-dJ8M7CH_vMhLrzLwggAAAEY"]
[Fri Dec 05 05:34:46.157389 2025] [:error] [pid 53838:tid 53887] [client 66.249.64.101:55125] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTH-dp8M7CH_vMhLrzLwiQAAAFI"]
[Fri Dec 05 05:34:48.584724 2025] [:error] [pid 53838:tid 53879] [client 66.249.64.101:58841] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTH-eJ8M7CH_vMhLrzLwjwAAAEo"]
[Fri Dec 05 05:34:49.892161 2025] [:error] [pid 24010:tid 24018] [client 66.249.64.101:57190] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTH-eatjRoDpxa46mwcLsgAAAQY"]
[Fri Dec 05 05:34:50.338071 2025] [:error] [pid 53839:tid 53914] [client 66.249.64.101:54704] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTH-eqQOuERg_RN7bn9vRAAAAJI"]
[Fri Dec 05 05:34:51.460887 2025] [:error] [pid 53837:tid 53846] [client 66.249.64.101:60043] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTH-ezbsUyTxys8OiMIRYgAAAAQ"]
[Fri Dec 05 05:34:53.185036 2025] [:error] [pid 53923:tid 53949] [client 66.249.64.101:46228] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTH-fbl8ebZN0VCAVXDoLQAAANg"]
[Fri Dec 05 05:35:15.808641 2025] [:error] [pid 24010:tid 24027] [client 66.249.64.101:64382] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTH-k6tjRoDpxa46mwcL4QAAAQ8"]
[Fri Dec 05 05:35:16.639076 2025] [:error] [pid 53839:tid 53901] [client 66.249.64.101:61795] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTH-lKQOuERg_RN7bn9vdQAAAIU"]
[Fri Dec 05 05:35:18.062765 2025] [:error] [pid 53838:tid 53882] [client 66.249.64.101:51009] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTH-lp8M7CH_vMhLrzLwoQAAAE0"]
[Fri Dec 05 05:35:19.609337 2025] [:error] [pid 53839:tid 53904] [client 66.249.64.101:45578] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTH-l6QOuERg_RN7bn9vfgAAAIg"]
[Fri Dec 05 05:35:21.174115 2025] [:error] [pid 53923:tid 53949] [client 66.249.64.101:40038] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTH-mbl8ebZN0VCAVXDoUwAAANg"]
[Fri Dec 05 05:35:24.363674 2025] [:error] [pid 53923:tid 53929] [client 66.249.64.101:53450] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTH-nLl8ebZN0VCAVXDoXQAAAMQ"]
[Fri Dec 05 05:35:24.935558 2025] [:error] [pid 53923:tid 53946] [client 66.249.64.101:50161] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTH-nLl8ebZN0VCAVXDoYAAAANU"]
[Fri Dec 05 05:35:25.567977 2025] [:error] [pid 53923:tid 53935] [client 66.249.64.101:37878] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTH-nbl8ebZN0VCAVXDoYwAAAMo"]
[Fri Dec 05 05:35:27.505134 2025] [:error] [pid 53923:tid 53940] [client 66.249.64.101:56752] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTH-n7l8ebZN0VCAVXDoZgAAAM8"]
[Fri Dec 05 05:35:29.360048 2025] [:error] [pid 53839:tid 53908] [client 66.249.64.101:54415] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTH-oaQOuERg_RN7bn9viwAAAIw"]
[Fri Dec 05 05:35:30.271645 2025] [:error] [pid 24010:tid 24024] [client 66.249.64.101:61847] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTH-oqtjRoDpxa46mwcL8QAAAQw"]
[Fri Dec 05 05:35:31.750691 2025] [:error] [pid 24010:tid 24023] [client 66.249.64.101:34888] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTH-o6tjRoDpxa46mwcL9wAAAQs"]
[Fri Dec 05 05:35:32.804851 2025] [:error] [pid 53923:tid 53949] [client 66.249.64.101:56901] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTH-pLl8ebZN0VCAVXDoegAAANg"]
[Fri Dec 05 05:35:33.818686 2025] [:error] [pid 53839:tid 53918] [client 66.249.64.101:42339] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTH-paQOuERg_RN7bn9vkAAAAJY"]
[Fri Dec 05 05:35:35.607146 2025] [:error] [pid 53838:tid 53890] [client 66.249.64.101:56378] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTH-p58M7CH_vMhLrzLwrwAAAFU"]
[Fri Dec 05 05:35:37.203489 2025] [:error] [pid 24010:tid 24014] [client 66.249.64.101:48731] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTH-qatjRoDpxa46mwcMBAAAAQI"]
[Fri Dec 05 05:35:39.956500 2025] [:error] [pid 53923:tid 53940] [client 66.249.64.101:50454] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTH-q7l8ebZN0VCAVXDohwAAAM8"]
[Fri Dec 05 05:35:41.624331 2025] [:error] [pid 53838:tid 53880] [client 66.249.64.101:60828] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTH-rZ8M7CH_vMhLrzLwugAAAEs"]
[Fri Dec 05 05:35:44.294170 2025] [:error] [pid 53839:tid 53916] [client 66.249.64.101:45405] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTH-sKQOuERg_RN7bn9vowAAAJQ"]
[Fri Dec 05 05:35:45.035254 2025] [:error] [pid 53839:tid 53919] [client 66.249.64.101:36276] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTH-saQOuERg_RN7bn9vpwAAAJc"]
[Fri Dec 05 05:35:46.553289 2025] [:error] [pid 53923:tid 53929] [client 66.249.64.101:42150] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTH-srl8ebZN0VCAVXDoigAAAMQ"]
[Fri Dec 05 05:35:47.865912 2025] [:error] [pid 53839:tid 53914] [client 66.249.64.101:42307] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTH-s6QOuERg_RN7bn9vqwAAAJI"]
[Fri Dec 05 05:35:53.703242 2025] [:error] [pid 53838:tid 53877] [client 66.249.64.101:55484] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTH-uZ8M7CH_vMhLrzLwxQAAAEg"]
[Fri Dec 05 05:35:55.118307 2025] [:error] [pid 53837:tid 53862] [client 66.249.64.101:53668] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTH-uzbsUyTxys8OiMIRowAAABQ"]
[Fri Dec 05 05:35:59.927613 2025] [:error] [pid 53837:tid 53863] [client 66.249.64.101:49644] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTH-vzbsUyTxys8OiMIRqgAAABU"]
[Fri Dec 05 05:36:01.093822 2025] [:error] [pid 53837:tid 53849] [client 66.249.64.101:60735] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTH-wTbsUyTxys8OiMIRqwAAAAc"]
[Fri Dec 05 05:36:02.489363 2025] [:error] [pid 24010:tid 24016] [client 66.249.64.101:48901] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTH-wqtjRoDpxa46mwcMLQAAAQQ"]
[Fri Dec 05 05:36:04.227616 2025] [:error] [pid 53838:tid 53883] [client 66.249.64.101:57525] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTH-xJ8M7CH_vMhLrzLwzgAAAE4"]
[Fri Dec 05 05:36:04.696494 2025] [:error] [pid 53838:tid 53881] [client 66.249.64.101:49970] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTH-xJ8M7CH_vMhLrzLwzwAAAEw"]
[Fri Dec 05 05:36:06.266946 2025] [:error] [pid 53923:tid 53927] [client 66.249.64.101:39895] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTH-xrl8ebZN0VCAVXDoogAAAMI"]
[Fri Dec 05 05:36:07.991714 2025] [:error] [pid 24010:tid 24025] [client 66.249.64.101:42684] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTH-x6tjRoDpxa46mwcMOQAAAQ0"]
[Fri Dec 05 05:36:27.227449 2025] [:error] [pid 53838:tid 53872] [client 66.249.64.101:63557] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTH-258M7CH_vMhLrzLw3wAAAEM"]
[Fri Dec 05 05:36:28.874047 2025] [:error] [pid 53839:tid 53913] [client 66.249.64.101:41430] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTH-3KQOuERg_RN7bn9v7AAAAJE"]
[Fri Dec 05 05:36:32.482344 2025] [:error] [pid 53839:tid 53901] [client 66.249.64.101:64745] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTH-4KQOuERg_RN7bn9v9QAAAIU"]
[Fri Dec 05 05:36:33.495191 2025] [:error] [pid 53838:tid 53878] [client 66.249.64.101:50037] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTH-4Z8M7CH_vMhLrzLw4wAAAEk"]
[Fri Dec 05 05:36:35.138628 2025] [:error] [pid 24010:tid 24031] [client 66.249.64.101:46307] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTH-46tjRoDpxa46mwcMZwAAARM"]
[Fri Dec 05 05:36:42.033098 2025] [:error] [pid 53838:tid 53892] [client 66.249.64.101:57631] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTH-6p8M7CH_vMhLrzLw7wAAAFc"]
[Fri Dec 05 05:36:43.180268 2025] [:error] [pid 53923:tid 53931] [client 66.249.64.101:43775] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTH-67l8ebZN0VCAVXDo0AAAAMY"]
[Fri Dec 05 05:36:45.204341 2025] [:error] [pid 53923:tid 53944] [client 66.249.64.101:43458] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTH-7bl8ebZN0VCAVXDo0gAAANM"]
[Fri Dec 05 05:36:53.977871 2025] [:error] [pid 53838:tid 53873] [client 66.249.64.101:61008] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTH-9Z8M7CH_vMhLrzLw-wAAAEQ"]
[Fri Dec 05 05:36:55.889628 2025] [:error] [pid 53838:tid 53871] [client 66.249.64.101:47927] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTH-958M7CH_vMhLrzLxAAAAAEI"]
[Fri Dec 05 05:36:58.555675 2025] [:error] [pid 53838:tid 53878] [client 66.249.64.101:65308] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTH--p8M7CH_vMhLrzLxBgAAAEk"]
[Fri Dec 05 05:36:59.998209 2025] [:error] [pid 53839:tid 53916] [client 66.249.64.101:51684] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTH--6QOuERg_RN7bn9wKAAAAJQ"]
[Fri Dec 05 05:37:02.421144 2025] [:error] [pid 53839:tid 53917] [client 66.249.64.101:57528] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTH-_qQOuERg_RN7bn9wLAAAAJU"]
[Fri Dec 05 05:37:04.073972 2025] [:error] [pid 53837:tid 53844] [client 66.249.64.101:40674] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTH_ADbsUyTxys8OiMIR4wAAAAI"]
[Fri Dec 05 05:37:07.462863 2025] [:error] [pid 53837:tid 53865] [client 66.249.64.101:35492] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTH_AzbsUyTxys8OiMIR6QAAABc"]
[Fri Dec 05 05:37:07.987791 2025] [:error] [pid 24010:tid 24024] [client 66.249.64.101:57224] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTH_A6tjRoDpxa46mwcMzQAAAQw"]
[Fri Dec 05 05:37:09.054685 2025] [:error] [pid 24010:tid 24031] [client 66.249.64.101:41441] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTH_BatjRoDpxa46mwcM0gAAARM"]
[Fri Dec 05 05:37:10.444124 2025] [:error] [pid 53837:tid 53857] [client 66.249.64.101:42033] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTH_BjbsUyTxys8OiMIR8QAAAA8"]
[Fri Dec 05 05:37:15.373370 2025] [:error] [pid 53839:tid 53916] [client 66.249.64.101:43567] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTH_C6QOuERg_RN7bn9wPwAAAJQ"]
[Fri Dec 05 05:37:16.341051 2025] [:error] [pid 53838:tid 53877] [client 66.249.64.101:64264] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTH_DJ8M7CH_vMhLrzLxJgAAAEg"]
[Fri Dec 05 05:37:16.547439 2025] [:error] [pid 53838:tid 53873] [client 66.249.64.101:41296] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTH_DJ8M7CH_vMhLrzLxJwAAAEQ"]
[Fri Dec 05 05:37:21.484294 2025] [:error] [pid 24010:tid 24026] [client 66.249.64.101:43957] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTH_EatjRoDpxa46mwcM8gAAAQ4"]
[Fri Dec 05 05:37:22.337959 2025] [:error] [pid 53838:tid 53878] [client 66.249.64.101:37619] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTH_Ep8M7CH_vMhLrzLxLwAAAEk"]
[Fri Dec 05 05:37:24.815681 2025] [:error] [pid 53837:tid 53861] [client 66.249.64.101:46129] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTH_FDbsUyTxys8OiMISFwAAABM"]
[Fri Dec 05 05:37:45.588350 2025] [:error] [pid 53923:tid 53938] [client 66.249.64.101:42103] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTH_Kbl8ebZN0VCAVXDpMAAAAM0"]
[Fri Dec 05 05:37:47.311904 2025] [:error] [pid 53837:tid 53865] [client 66.249.64.101:48681] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTH_KzbsUyTxys8OiMISUQAAABc"]
[Fri Dec 05 05:37:52.869770 2025] [:error] [pid 24010:tid 24030] [client 66.249.64.101:42421] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTH_MKtjRoDpxa46mwcNOQAAARI"]
[Fri Dec 05 05:37:58.687063 2025] [:error] [pid 53923:tid 53949] [client 66.249.64.101:35659] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTH_Nrl8ebZN0VCAVXDpPQAAANg"]
[Fri Dec 05 05:38:14.452372 2025] [:error] [pid 53923:tid 53934] [client 66.249.64.101:49664] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTH_Rrl8ebZN0VCAVXDpTgAAAMk"]
[Fri Dec 05 05:38:19.975727 2025] [:error] [pid 53923:tid 53927] [client 66.249.64.101:64346] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTH_S7l8ebZN0VCAVXDpVgAAAMI"]
[Fri Dec 05 05:38:22.875601 2025] [:error] [pid 53837:tid 53856] [client 66.249.64.101:58806] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTH_TjbsUyTxys8OiMIStgAAAA4"]
[Fri Dec 05 05:38:28.531766 2025] [:error] [pid 24010:tid 24031] [client 66.249.64.101:39858] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTH_VKtjRoDpxa46mwcNmgAAARM"]
[Fri Dec 05 05:38:32.764729 2025] [:error] [pid 53837:tid 53848] [client 66.249.64.101:47664] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTH_WDbsUyTxys8OiMISwgAAAAY"]
[Fri Dec 05 05:38:35.640903 2025] [:error] [pid 53923:tid 53945] [client 66.249.64.101:65361] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTH_W7l8ebZN0VCAVXDpZwAAANQ"]
[Fri Dec 05 05:38:38.126341 2025] [:error] [pid 53837:tid 53862] [client 66.249.64.101:56822] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTH_XjbsUyTxys8OiMISygAAABQ"]
[Fri Dec 05 05:38:42.947330 2025] [:error] [pid 53839:tid 53904] [client 66.249.64.101:47467] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTH_YqQOuERg_RN7bn9wxQAAAIg"]
[Fri Dec 05 05:39:32.834443 2025] [:error] [pid 24010:tid 24022] [client 66.249.64.101:49083] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTH_lKtjRoDpxa46mwcOGAAAAQo"]
[Fri Dec 05 05:39:35.194029 2025] [:error] [pid 24010:tid 24032] [client 66.249.64.101:51413] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTH_l6tjRoDpxa46mwcOIgAAARQ"]
[Fri Dec 05 05:39:37.745104 2025] [:error] [pid 53923:tid 53928] [client 66.249.64.101:50349] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTH_mbl8ebZN0VCAVXDp1QAAAMM"]
[Fri Dec 05 05:39:42.050352 2025] [:error] [pid 53839:tid 53905] [client 66.249.64.101:38412] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTH_nqQOuERg_RN7bn9xKAAAAIk"]
[Fri Dec 05 05:39:48.834568 2025] [:error] [pid 53923:tid 53934] [client 66.249.64.101:49970] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTH_pLl8ebZN0VCAVXDp4QAAAMk"]
[Fri Dec 05 05:39:55.846826 2025] [:error] [pid 53923:tid 53934] [client 66.249.64.101:65160] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTH_q7l8ebZN0VCAVXDqCgAAAMk"]
[Fri Dec 05 05:40:00.059341 2025] [:error] [pid 53839:tid 53914] [client 66.249.64.101:64443] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTH_sKQOuERg_RN7bn9xWwAAAJI"]
[Fri Dec 05 05:40:04.914275 2025] [:error] [pid 53837:tid 53863] [client 66.249.64.101:54762] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTH_tDbsUyTxys8OiMITPgAAABU"]
[Fri Dec 05 05:40:07.019392 2025] [:error] [pid 24010:tid 24023] [client 66.249.64.101:37005] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTH_t6tjRoDpxa46mwcOcAAAAQs"]
[Fri Dec 05 05:40:14.320282 2025] [:error] [pid 53838:tid 53869] [client 66.249.64.101:52303] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTH_vp8M7CH_vMhLrzLyagAAAEA"]
[Fri Dec 05 05:40:15.983711 2025] [:error] [pid 24010:tid 24014] [client 66.249.64.101:39232] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTH_v6tjRoDpxa46mwcOdQAAAQI"]
[Fri Dec 05 05:40:18.971714 2025] [:error] [pid 53837:tid 53851] [client 66.249.64.101:48689] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTH_wjbsUyTxys8OiMITTgAAAAk"]
[Fri Dec 05 05:40:22.246724 2025] [:error] [pid 53839:tid 53917] [client 66.249.64.101:57455] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTH_xqQOuERg_RN7bn9xigAAAJU"]
[Fri Dec 05 05:40:25.621635 2025] [:error] [pid 53839:tid 53911] [client 66.249.64.101:36992] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTH_yaQOuERg_RN7bn9xjQAAAI8"]
[Fri Dec 05 05:40:27.844920 2025] [:error] [pid 53923:tid 53944] [client 66.249.64.101:64556] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTH_y7l8ebZN0VCAVXDqNQAAANM"]
[Fri Dec 05 05:41:16.993997 2025] [:error] [pid 24010:tid 24028] [client 66.249.64.101:41834] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTH__KtjRoDpxa46mwcO7QAAARA"]
[Fri Dec 05 05:41:33.215480 2025] [:error] [pid 24010:tid 24022] [client 66.249.64.101:63537] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIADatjRoDpxa46mwcPBAAAAQo"]
[Fri Dec 05 05:41:34.991498 2025] [:error] [pid 24010:tid 24024] [client 66.249.64.101:43415] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIADqtjRoDpxa46mwcPCwAAAQw"]
[Fri Dec 05 05:41:39.553385 2025] [:error] [pid 53839:tid 53917] [client 66.249.64.101:38882] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIAE6QOuERg_RN7bn9x-AAAAJU"]
[Fri Dec 05 05:41:45.672990 2025] [:error] [pid 53923:tid 53935] [client 66.249.64.101:56493] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIAGbl8ebZN0VCAVXDqmgAAAMo"]
[Fri Dec 05 05:41:48.882234 2025] [:error] [pid 24010:tid 24020] [client 66.249.64.101:44606] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIAHKtjRoDpxa46mwcPJAAAAQg"]
[Fri Dec 05 05:41:53.593655 2025] [:error] [pid 53839:tid 53904] [client 66.249.64.101:59729] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIAIaQOuERg_RN7bn9yBgAAAIg"]
[Fri Dec 05 05:42:43.382468 2025] [:error] [pid 53839:tid 53908] [client 66.249.64.101:49400] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIAU6QOuERg_RN7bn9yRwAAAIw"]
[Fri Dec 05 05:42:55.590498 2025] [:error] [pid 53923:tid 53943] [client 66.249.64.101:39829] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIAX7l8ebZN0VCAVXDrFAAAANI"]
[Fri Dec 05 05:43:02.063141 2025] [:error] [pid 53838:tid 53877] [client 66.249.64.101:51586] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIAZp8M7CH_vMhLrzLzMgAAAEg"]
[Fri Dec 05 05:43:31.096860 2025] [:error] [pid 53923:tid 53928] [client 66.249.64.101:59412] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIAg7l8ebZN0VCAVXDrigAAAMM"]
[Fri Dec 05 05:43:31.264995 2025] [:error] [pid 53838:tid 53889] [client 66.249.64.101:48068] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIAg58M7CH_vMhLrzLzVwAAAFQ"]
[Fri Dec 05 05:43:32.636413 2025] [:error] [pid 24010:tid 24032] [client 66.249.64.101:38482] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIAhKtjRoDpxa46mwcQUgAAARQ"]
[Fri Dec 05 05:43:33.511504 2025] [:error] [pid 24010:tid 24015] [client 66.249.64.101:40645] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIAhatjRoDpxa46mwcQVQAAAQM"]
[Fri Dec 05 05:43:40.147991 2025] [:error] [pid 53923:tid 53946] [client 66.249.64.101:59246] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIAjLl8ebZN0VCAVXDrmQAAANU"]
[Fri Dec 05 05:45:37.933119 2025] [:error] [pid 53838:tid 53888] [client 66.249.64.101:61657] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIBAZ8M7CH_vMhLrzLz8wAAAFM"]
[Fri Dec 05 05:45:42.186858 2025] [:error] [pid 53837:tid 53850] [client 66.249.64.101:37607] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIBBjbsUyTxys8OiMIVYAAAAAg"]
[Fri Dec 05 05:45:47.474244 2025] [:error] [pid 24010:tid 24024] [client 66.249.64.101:42196] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIBC6tjRoDpxa46mwcRsAAAAQw"]
[Fri Dec 05 05:45:52.278938 2025] [:error] [pid 24010:tid 24024] [client 66.249.64.101:40419] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIBEKtjRoDpxa46mwcR1gAAAQw"]
[Fri Dec 05 05:48:08.745000 2025] [:error] [pid 53923:tid 53949] [client 66.249.64.101:47618] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIBmLl8ebZN0VCAVXDt4wAAANg"]
[Fri Dec 05 05:54:32.021806 2025] [:error] [pid 53923:tid 53946] [client 66.249.64.101:57425] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIDGLl8ebZN0VCAVXDx6gAAANU"]
[Fri Dec 05 05:54:34.371234 2025] [:error] [pid 53923:tid 53935] [client 66.249.64.101:37287] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIDGrl8ebZN0VCAVXDx7AAAAMo"]
[Fri Dec 05 05:54:38.485653 2025] [:error] [pid 53837:tid 53844] [client 66.249.64.101:51354] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIDHjbsUyTxys8OiMIZAgAAAAI"]
[Fri Dec 05 05:54:47.730737 2025] [:error] [pid 53923:tid 53932] [client 66.249.64.101:47768] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIDJ7l8ebZN0VCAVXDyFQAAAMc"]
[Fri Dec 05 05:54:55.541437 2025] [:error] [pid 53923:tid 53927] [client 66.249.64.101:37948] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIDL7l8ebZN0VCAVXDyIAAAAMI"]
[Fri Dec 05 05:54:57.574591 2025] [:error] [pid 53838:tid 53869] [client 66.249.64.101:34950] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIDMZ8M7CH_vMhLrzL4IgAAAEA"]
[Fri Dec 05 05:57:47.252545 2025] [:error] [pid 53838:tid 53876] [client 66.249.64.101:64357] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTID258M7CH_vMhLrzL4_gAAAEc"]
[Fri Dec 05 05:57:50.079600 2025] [:error] [pid 53837:tid 53850] [client 66.249.64.101:38243] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTID3jbsUyTxys8OiMIalwAAAAg"]
[Fri Dec 05 05:57:51.769313 2025] [:error] [pid 24010:tid 24014] [client 66.249.64.101:46246] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTID36tjRoDpxa46mwcZ1gAAAQI"]
[Fri Dec 05 05:57:53.385223 2025] [:error] [pid 53837:tid 53860] [client 66.249.64.101:55106] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTID4TbsUyTxys8OiMIanAAAABI"]
[Fri Dec 05 05:57:58.382941 2025] [:error] [pid 53923:tid 53930] [client 66.249.64.101:47614] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTID5rl8ebZN0VCAVXDzZQAAAMU"]
[Fri Dec 05 05:58:21.654623 2025] [:error] [pid 53839:tid 53900] [client 66.249.64.101:39391] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTID_aQOuERg_RN7bn95FQAAAIQ"]
[Fri Dec 05 05:58:31.300675 2025] [:error] [pid 53923:tid 53945] [client 66.249.64.101:50199] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIEB7l8ebZN0VCAVXDziwAAANQ"]
[Fri Dec 05 05:58:32.312808 2025] [:error] [pid 24010:tid 24014] [client 66.249.64.101:39438] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIECKtjRoDpxa46mwcaMwAAAQI"]
[Fri Dec 05 05:58:34.013111 2025] [:error] [pid 53839:tid 53899] [client 66.249.64.101:38637] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIECqQOuERg_RN7bn95IQAAAIM"]
[Fri Dec 05 05:58:36.065075 2025] [:error] [pid 53839:tid 53915] [client 66.249.64.101:35768] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIEDKQOuERg_RN7bn95JAAAAJM"]
[Fri Dec 05 05:58:37.772519 2025] [:error] [pid 53923:tid 53940] [client 66.249.64.101:39086] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIEDbl8ebZN0VCAVXDzmgAAAM8"]
[Fri Dec 05 05:58:42.324978 2025] [:error] [pid 24010:tid 24025] [client 66.249.64.101:39286] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIEEqtjRoDpxa46mwcaUgAAAQ0"]
[Fri Dec 05 05:59:58.592913 2025] [:error] [pid 53923:tid 53939] [client 66.249.64.101:42075] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIEXrl8ebZN0VCAVXD0WAAAAM4"]
[Fri Dec 05 06:00:01.749966 2025] [:error] [pid 53839:tid 53897] [client 66.249.64.101:37562] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIEYaQOuERg_RN7bn95yAAAAIE"]
[Fri Dec 05 06:00:06.882298 2025] [:error] [pid 53838:tid 53891] [client 66.249.64.101:57024] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIEZp8M7CH_vMhLrzL51gAAAFY"]
[Fri Dec 05 06:00:09.138369 2025] [:error] [pid 24010:tid 24034] [client 66.249.64.101:62111] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIEaatjRoDpxa46mwcbDQAAARY"]
[Fri Dec 05 06:00:13.069334 2025] [:error] [pid 53838:tid 53892] [client 66.249.64.101:35284] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIEbZ8M7CH_vMhLrzL54gAAAFc"]
[Fri Dec 05 06:02:35.630917 2025] [:error] [pid 53839:tid 53907] [client 66.249.64.101:64056] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIE-6QOuERg_RN7bn97JgAAAIs"]
[Fri Dec 05 06:02:38.618347 2025] [:error] [pid 53839:tid 53908] [client 66.249.64.101:61230] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIE_qQOuERg_RN7bn97KgAAAIw"]
[Fri Dec 05 06:02:41.167227 2025] [:error] [pid 53837:tid 53859] [client 66.249.64.101:62930] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIFATbsUyTxys8OiMIcjgAAABE"]
[Fri Dec 05 06:02:46.711755 2025] [:error] [pid 53923:tid 53949] [client 66.249.64.101:55752] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIFBrl8ebZN0VCAVXD11QAAANg"]
[Fri Dec 05 06:02:48.134444 2025] [:error] [pid 53837:tid 53865] [client 66.249.64.101:42069] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIFCDbsUyTxys8OiMIclQAAABc"]
[Fri Dec 05 06:02:51.911407 2025] [:error] [pid 53838:tid 53889] [client 66.249.64.101:59721] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIFC58M7CH_vMhLrzL7FgAAAFQ"]
[Fri Dec 05 06:02:55.843029 2025] [:error] [pid 53838:tid 53881] [client 66.249.64.101:41246] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIFD58M7CH_vMhLrzL7GgAAAEw"]
[Fri Dec 05 06:02:58.263824 2025] [:error] [pid 53923:tid 53927] [client 66.249.64.101:43911] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIFErl8ebZN0VCAVXD16AAAAMI"]
[Fri Dec 05 06:03:00.648780 2025] [:error] [pid 53837:tid 53853] [client 66.249.64.101:43295] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIFFDbsUyTxys8OiMIcpAAAAAs"]
[Fri Dec 05 06:03:04.890077 2025] [:error] [pid 53838:tid 53878] [client 66.249.64.101:41103] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIFGJ8M7CH_vMhLrzL7IQAAAEk"]
[Fri Dec 05 06:03:07.581063 2025] [:error] [pid 24010:tid 24025] [client 66.249.64.101:43922] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIFG6tjRoDpxa46mwcdKQAAAQ0"]
[Fri Dec 05 06:03:10.808129 2025] [:error] [pid 53839:tid 53907] [client 66.249.64.101:50466] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIFHqQOuERg_RN7bn97QQAAAIs"]
[Fri Dec 05 06:03:13.437816 2025] [:error] [pid 53923:tid 53928] [client 66.249.64.101:51347] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIFIbl8ebZN0VCAVXD2AwAAAMM"]
[Fri Dec 05 06:03:22.436729 2025] [:error] [pid 24010:tid 24018] [client 66.249.64.101:55136] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIFKqtjRoDpxa46mwcdZAAAAQY"]
[Fri Dec 05 06:03:25.112601 2025] [:error] [pid 53838:tid 53872] [client 66.249.64.101:53458] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIFLZ8M7CH_vMhLrzL7RwAAAEM"]
[Fri Dec 05 06:04:13.629479 2025] [:error] [pid 24010:tid 24021] [client 66.249.64.101:46538] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIFXatjRoDpxa46mwcd3AAAAQk"]
[Fri Dec 05 06:04:21.147872 2025] [:error] [pid 24010:tid 24029] [client 66.249.64.101:39095] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIFZatjRoDpxa46mwcd4AAAARE"]
[Fri Dec 05 06:04:31.446310 2025] [:error] [pid 24010:tid 24027] [client 66.249.64.101:52148] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIFb6tjRoDpxa46mwcd7QAAAQ8"]
[Fri Dec 05 06:04:35.528626 2025] [:error] [pid 24010:tid 24012] [client 66.249.64.101:59249] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIFc6tjRoDpxa46mwcd8gAAAQA"]
[Fri Dec 05 06:04:39.969970 2025] [:error] [pid 24010:tid 24022] [client 66.249.64.101:56441] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIFd6tjRoDpxa46mwceHwAAAQo"]
[Fri Dec 05 06:04:41.555280 2025] [:error] [pid 24010:tid 24017] [client 66.249.64.101:50827] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIFeatjRoDpxa46mwceKQAAAQU"]
[Fri Dec 05 06:04:46.469871 2025] [:error] [pid 24010:tid 24019] [client 66.249.64.101:59571] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIFfqtjRoDpxa46mwceNgAAAQc"]
[Fri Dec 05 06:04:48.757011 2025] [:error] [pid 24010:tid 24017] [client 66.249.64.101:44358] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIFgKtjRoDpxa46mwcePAAAAQU"]
[Fri Dec 05 06:04:51.787151 2025] [:error] [pid 53839:tid 53908] [client 66.249.64.101:49562] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIFg6QOuERg_RN7bn973AAAAIw"]
[Fri Dec 05 06:04:59.966260 2025] [:error] [pid 53923:tid 53935] [client 66.249.64.101:41667] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIFi7l8ebZN0VCAVXD2hwAAAMo"]
[Fri Dec 05 06:05:03.641494 2025] [:error] [pid 53837:tid 53842] [client 66.249.64.101:50479] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIFjzbsUyTxys8OiMId3gAAAAA"]
[Fri Dec 05 06:05:06.226211 2025] [:error] [pid 53839:tid 53906] [client 66.249.64.101:63004] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIFkqQOuERg_RN7bn98HAAAAIo"]
[Fri Dec 05 06:05:07.880131 2025] [:error] [pid 53837:tid 53850] [client 66.249.64.101:41519] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIFkzbsUyTxys8OiMId6wAAAAg"]
[Fri Dec 05 06:05:46.101596 2025] [:error] [pid 53839:tid 53904] [client 66.249.64.101:46553] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIFuqQOuERg_RN7bn98ZgAAAIg"]
[Fri Dec 05 06:05:47.859626 2025] [:error] [pid 53839:tid 53896] [client 66.249.64.101:52691] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIFu6QOuERg_RN7bn98bwAAAIA"]
[Fri Dec 05 06:05:50.242660 2025] [:error] [pid 24010:tid 24013] [client 66.249.64.101:54849] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIFvqtjRoDpxa46mwcepwAAAQE"]
[Fri Dec 05 06:05:53.875845 2025] [:error] [pid 53839:tid 53897] [client 66.249.64.101:48186] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIFwaQOuERg_RN7bn98gwAAAIE"]
[Fri Dec 05 06:05:59.278285 2025] [:error] [pid 53923:tid 53945] [client 66.249.64.101:36062] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIFx7l8ebZN0VCAVXD2_QAAANQ"]
[Fri Dec 05 06:06:11.058220 2025] [:error] [pid 24010:tid 24018] [client 66.249.64.101:37723] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIF06tjRoDpxa46mwce0gAAAQY"]
[Fri Dec 05 06:06:14.945527 2025] [:error] [pid 53838:tid 53884] [client 66.249.64.101:49934] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIF1p8M7CH_vMhLrzL8jwAAAE8"]
[Fri Dec 05 06:06:19.324639 2025] [:error] [pid 24010:tid 24012] [client 66.249.64.101:39075] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIF26tjRoDpxa46mwce3QAAAQA"]
[Fri Dec 05 06:06:20.513524 2025] [:error] [pid 24010:tid 24027] [client 66.249.64.101:39115] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIF3KtjRoDpxa46mwce4QAAAQ8"]
[Fri Dec 05 06:06:21.608731 2025] [:error] [pid 53923:tid 53926] [client 66.249.64.101:46312] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIF3bl8ebZN0VCAVXD3EQAAAME"]
[Fri Dec 05 06:06:21.990915 2025] [:error] [pid 53838:tid 53879] [client 66.249.64.101:57869] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIF3Z8M7CH_vMhLrzL8mQAAAEo"]
[Fri Dec 05 06:06:29.347340 2025] [:error] [pid 53923:tid 53947] [client 66.249.64.101:52677] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIF5bl8ebZN0VCAVXD3HQAAANY"]
[Fri Dec 05 06:06:32.316655 2025] [:error] [pid 53923:tid 53946] [client 66.249.64.101:44853] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIF6Ll8ebZN0VCAVXD3IwAAANU"]
[Fri Dec 05 06:06:34.380333 2025] [:error] [pid 53838:tid 53876] [client 66.249.64.101:40766] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIF6p8M7CH_vMhLrzL8pwAAAEc"]
[Fri Dec 05 06:06:39.995042 2025] [:error] [pid 53838:tid 53890] [client 66.249.64.101:65245] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIF758M7CH_vMhLrzL8uQAAAFU"]
[Fri Dec 05 06:07:30.367544 2025] [:error] [pid 53839:tid 53914] [client 66.249.64.101:49874] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIGIqQOuERg_RN7bn99GQAAAJI"]
[Fri Dec 05 06:07:31.955749 2025] [:error] [pid 24010:tid 24023] [client 66.249.64.101:50087] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIGI6tjRoDpxa46mwcfcwAAAQs"]
[Fri Dec 05 06:07:34.524006 2025] [:error] [pid 53837:tid 53859] [client 66.249.64.101:39610] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIGJjbsUyTxys8OiMIe4gAAABE"]
[Fri Dec 05 06:07:41.435251 2025] [:error] [pid 53837:tid 53858] [client 66.249.64.101:39676] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIGLTbsUyTxys8OiMIe7wAAABA"]
[Fri Dec 05 06:07:49.332621 2025] [:error] [pid 53837:tid 53847] [client 66.249.64.101:57703] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIGNTbsUyTxys8OiMIe_gAAAAU"]
[Fri Dec 05 06:07:51.715189 2025] [:error] [pid 24010:tid 24018] [client 66.249.64.101:40277] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIGN6tjRoDpxa46mwcflwAAAQY"]
[Fri Dec 05 06:07:56.178233 2025] [:error] [pid 53923:tid 53937] [client 66.249.64.101:65524] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIGPLl8ebZN0VCAVXD3qgAAAMw"]
[Fri Dec 05 06:08:00.087047 2025] [:error] [pid 53837:tid 53857] [client 66.249.64.101:51534] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIGQDbsUyTxys8OiMIfFgAAAA8"]
[Fri Dec 05 06:08:01.243135 2025] [:error] [pid 24010:tid 24036] [client 66.249.64.101:56830] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIGQatjRoDpxa46mwcfogAAARg"]
[Fri Dec 05 06:08:08.671071 2025] [:error] [pid 53837:tid 53865] [client 66.249.64.101:57028] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIGSDbsUyTxys8OiMIfHgAAABc"]
[Fri Dec 05 06:08:11.707963 2025] [:error] [pid 24010:tid 24023] [client 66.249.64.101:63750] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIGS6tjRoDpxa46mwcfuAAAAQs"]
[Fri Dec 05 06:08:22.335668 2025] [:error] [pid 53838:tid 53879] [client 66.249.64.101:58161] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIGVp8M7CH_vMhLrzL9IgAAAEo"]
[Fri Dec 05 06:09:04.225228 2025] [:error] [pid 53837:tid 53853] [client 66.249.64.101:36149] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIGgDbsUyTxys8OiMIfdwAAAAs"]
[Fri Dec 05 06:09:06.989693 2025] [:error] [pid 53839:tid 53914] [client 66.249.64.101:65350] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIGgqQOuERg_RN7bn99mgAAAJI"]
[Fri Dec 05 06:09:09.425687 2025] [:error] [pid 53838:tid 53875] [client 66.249.64.101:53946] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIGhZ8M7CH_vMhLrzL9fQAAAEY"]
[Fri Dec 05 06:09:11.957046 2025] [:error] [pid 53837:tid 53845] [client 66.249.64.101:52531] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIGhzbsUyTxys8OiMIffQAAAAM"]
[Fri Dec 05 06:09:14.909594 2025] [:error] [pid 24010:tid 24013] [client 66.249.64.101:40793] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIGiqtjRoDpxa46mwcgMgAAAQE"]
[Fri Dec 05 06:09:22.203160 2025] [:error] [pid 24010:tid 24018] [client 66.249.64.101:64759] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIGkqtjRoDpxa46mwcgPwAAAQY"]
[Fri Dec 05 06:09:25.433486 2025] [:error] [pid 53839:tid 53901] [client 66.249.64.101:37192] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIGlaQOuERg_RN7bn99twAAAIU"]
[Fri Dec 05 06:09:30.780850 2025] [:error] [pid 24010:tid 24015] [client 66.249.64.101:58580] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIGmqtjRoDpxa46mwcgTAAAAQM"]
[Fri Dec 05 06:09:32.856873 2025] [:error] [pid 53923:tid 53936] [client 66.249.64.101:41815] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIGnLl8ebZN0VCAVXD4QwAAAMs"]
[Fri Dec 05 06:09:34.432683 2025] [:error] [pid 53923:tid 53928] [client 66.249.64.101:40668] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIGnrl8ebZN0VCAVXD4RAAAAMM"]
[Fri Dec 05 06:09:37.885638 2025] [:error] [pid 53837:tid 53860] [client 66.249.64.101:61691] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIGoTbsUyTxys8OiMIfkwAAABI"]
[Fri Dec 05 06:09:42.695885 2025] [:error] [pid 24010:tid 24020] [client 66.249.64.101:37826] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIGpqtjRoDpxa46mwcgawAAAQg"]
[Fri Dec 05 06:09:48.371086 2025] [:error] [pid 53839:tid 53911] [client 66.249.64.101:36083] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIGrKQOuERg_RN7bn99zQAAAI8"]
[Fri Dec 05 06:09:49.091512 2025] [:error] [pid 53838:tid 53882] [client 66.249.64.101:38211] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIGrZ8M7CH_vMhLrzL93AAAAE0"]
[Fri Dec 05 06:09:50.407142 2025] [:error] [pid 24010:tid 24022] [client 66.249.64.101:42773] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIGrqtjRoDpxa46mwcggQAAAQo"]
[Fri Dec 05 06:09:55.273293 2025] [:error] [pid 24010:tid 24018] [client 66.249.64.101:57525] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIGs6tjRoDpxa46mwcgkwAAAQY"]
[Fri Dec 05 06:09:57.708598 2025] [:error] [pid 53923:tid 53938] [client 66.249.64.101:41400] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIGtbl8ebZN0VCAVXD4ZAAAAM0"]
[Fri Dec 05 06:10:00.693438 2025] [:error] [pid 53839:tid 53900] [client 66.249.64.101:45502] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIGuKQOuERg_RN7bn995gAAAIQ"]
[Fri Dec 05 06:10:52.597426 2025] [:error] [pid 24010:tid 24029] [client 66.249.64.101:58705] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIG7KtjRoDpxa46mwchbwAAARE"]
[Fri Dec 05 06:10:55.006350 2025] [:error] [pid 53837:tid 53844] [client 66.249.64.101:59160] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIG7zbsUyTxys8OiMIf2AAAAAI"]
[Fri Dec 05 06:10:57.670168 2025] [:error] [pid 53923:tid 53937] [client 66.249.64.101:44020] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIG8bl8ebZN0VCAVXD47AAAAMw"]
[Fri Dec 05 06:11:00.542471 2025] [:error] [pid 24010:tid 24024] [client 66.249.64.101:44999] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIG9KtjRoDpxa46mwchlAAAAQw"]
[Fri Dec 05 06:11:02.458872 2025] [:error] [pid 24010:tid 24035] [client 66.249.64.101:46215] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIG9qtjRoDpxa46mwchmgAAARc"]
[Fri Dec 05 06:11:08.051420 2025] [:error] [pid 53923:tid 53933] [client 66.249.64.101:48822] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIG_Ll8ebZN0VCAVXD4_QAAAMg"]
[Fri Dec 05 06:11:13.048232 2025] [:error] [pid 53838:tid 53876] [client 66.249.64.101:44499] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIHAZ8M7CH_vMhLrzL-UAAAAEc"]
[Fri Dec 05 06:11:20.334991 2025] [:error] [pid 53837:tid 53850] [client 66.249.64.101:38299] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIHCDbsUyTxys8OiMIf9QAAAAg"]
[Fri Dec 05 06:11:23.250115 2025] [:error] [pid 24010:tid 24017] [client 66.249.64.101:60813] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIHC6tjRoDpxa46mwch5wAAAQU"]
[Fri Dec 05 06:11:28.716977 2025] [:error] [pid 53837:tid 53862] [client 66.249.64.101:49388] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIHEDbsUyTxys8OiMIgBQAAABQ"]
[Fri Dec 05 06:11:30.983840 2025] [:error] [pid 24010:tid 24018] [client 66.249.64.101:38011] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIHEqtjRoDpxa46mwch9wAAAQY"]
[Fri Dec 05 06:11:34.041116 2025] [:error] [pid 53838:tid 53892] [client 66.249.64.101:36251] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIHFp8M7CH_vMhLrzL-agAAAFc"]
[Fri Dec 05 06:11:38.807134 2025] [:error] [pid 53838:tid 53872] [client 66.249.64.101:49574] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIHGp8M7CH_vMhLrzL-cwAAAEM"]
[Fri Dec 05 06:12:36.648053 2025] [:error] [pid 24010:tid 24014] [client 66.249.64.101:40187] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIHVKtjRoDpxa46mwciuwAAAQI"]
[Fri Dec 05 06:12:37.774019 2025] [:error] [pid 53837:tid 53861] [client 66.249.64.101:39340] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIHVTbsUyTxys8OiMIgWQAAABM"]
[Fri Dec 05 06:12:42.044270 2025] [:error] [pid 53838:tid 53884] [client 66.249.64.101:54164] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIHWp8M7CH_vMhLrzL-wwAAAE8"]
[Fri Dec 05 06:12:45.548974 2025] [:error] [pid 53923:tid 53929] [client 66.249.64.101:62993] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIHXbl8ebZN0VCAVXD5nwAAAMQ"]
[Fri Dec 05 06:12:50.675081 2025] [:error] [pid 53837:tid 53848] [client 66.249.64.101:50015] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIHYjbsUyTxys8OiMIgYgAAAAY"]
[Fri Dec 05 06:12:52.362278 2025] [:error] [pid 24010:tid 24017] [client 66.249.64.101:62697] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIHZKtjRoDpxa46mwci4AAAAQU"]
[Fri Dec 05 06:12:57.245466 2025] [:error] [pid 53839:tid 53912] [client 66.249.64.101:45619] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIHaaQOuERg_RN7bn9_YQAAAJA"]
[Fri Dec 05 06:12:58.323926 2025] [:error] [pid 53839:tid 53899] [client 66.249.64.101:38684] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIHaqQOuERg_RN7bn9_ZwAAAIM"]
[Fri Dec 05 06:13:01.259592 2025] [:error] [pid 24010:tid 24017] [client 66.249.64.101:46567] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIHbatjRoDpxa46mwci9gAAAQU"]
[Fri Dec 05 06:13:05.349240 2025] [:error] [pid 53923:tid 53930] [client 66.249.64.101:46682] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIHcbl8ebZN0VCAVXD5sQAAAMU"]
[Fri Dec 05 06:13:07.969196 2025] [:error] [pid 53839:tid 53898] [client 66.249.64.101:56326] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIHc6QOuERg_RN7bn9_ggAAAII"]
[Fri Dec 05 06:13:09.993914 2025] [:error] [pid 53839:tid 53911] [client 66.249.64.101:58234] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIHdaQOuERg_RN7bn9_jQAAAI8"]
[Fri Dec 05 06:13:13.038633 2025] [:error] [pid 24010:tid 24020] [client 66.249.64.101:40093] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIHeatjRoDpxa46mwcjDgAAAQg"]
[Fri Dec 05 06:13:16.975631 2025] [:error] [pid 53923:tid 53929] [client 66.249.64.101:54324] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIHfLl8ebZN0VCAVXD5wwAAAMQ"]
[Fri Dec 05 06:13:21.060066 2025] [:error] [pid 53923:tid 53941] [client 66.249.64.101:45663] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIHgbl8ebZN0VCAVXD5yAAAANA"]
[Fri Dec 05 06:13:28.160706 2025] [:error] [pid 24010:tid 24035] [client 66.249.64.101:62992] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIHiKtjRoDpxa46mwcjJwAAARc"]
[Fri Dec 05 06:13:30.249089 2025] [:error] [pid 53923:tid 53937] [client 66.249.64.101:54251] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIHirl8ebZN0VCAVXD50AAAAMw"]
[Fri Dec 05 06:13:31.112932 2025] [:error] [pid 53923:tid 53933] [client 66.249.64.101:59624] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIHi7l8ebZN0VCAVXD50gAAAMg"]
[Fri Dec 05 06:14:04.868202 2025] [:error] [pid 53839:tid 53917] [client 66.249.64.101:63142] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIHrKQOuERg_RN7bn-AFwAAAJU"]
[Fri Dec 05 06:14:10.536759 2025] [:error] [pid 53923:tid 53939] [client 66.249.64.101:48403] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIHsrl8ebZN0VCAVXD5_gAAAM4"]
[Fri Dec 05 06:14:12.936249 2025] [:error] [pid 53923:tid 53936] [client 66.249.64.101:54798] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIHtLl8ebZN0VCAVXD6AAAAAMs"]
[Fri Dec 05 06:14:15.962810 2025] [:error] [pid 53839:tid 53916] [client 66.249.64.101:36173] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIHt6QOuERg_RN7bn-AJAAAAJQ"]
[Fri Dec 05 06:14:21.295013 2025] [:error] [pid 53923:tid 53928] [client 66.249.64.101:46753] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIHvbl8ebZN0VCAVXD6DgAAAMM"]
[Fri Dec 05 06:14:26.909509 2025] [:error] [pid 24010:tid 24032] [client 66.249.64.101:44533] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIHwqtjRoDpxa46mwcjpwAAARQ"]
[Fri Dec 05 06:14:29.837152 2025] [:error] [pid 24010:tid 24028] [client 66.249.64.101:59092] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIHxatjRoDpxa46mwcjsAAAARA"]
[Fri Dec 05 06:14:31.019191 2025] [:error] [pid 53837:tid 53853] [client 66.249.64.101:52507] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIHxzbsUyTxys8OiMIguQAAAAs"]
[Fri Dec 05 06:14:32.352575 2025] [:error] [pid 53839:tid 53912] [client 66.249.64.101:40548] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIHyKQOuERg_RN7bn-AMAAAAJA"]
[Fri Dec 05 06:14:37.003202 2025] [:error] [pid 24010:tid 24018] [client 66.249.64.101:65025] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIHzatjRoDpxa46mwcj0gAAAQY"]
[Fri Dec 05 06:14:38.694885 2025] [:error] [pid 24010:tid 24026] [client 66.249.64.101:39678] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIHzqtjRoDpxa46mwcj2QAAAQ4"]
[Fri Dec 05 06:14:42.051251 2025] [:error] [pid 53923:tid 53940] [client 66.249.64.101:42571] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIH0rl8ebZN0VCAVXD6NgAAAM8"]
[Fri Dec 05 06:14:44.545410 2025] [:error] [pid 53923:tid 53932] [client 66.249.64.101:60023] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIH1Ll8ebZN0VCAVXD6QQAAAMc"]
[Fri Dec 05 06:14:46.888816 2025] [:error] [pid 53923:tid 53935] [client 66.249.64.101:63631] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIH1rl8ebZN0VCAVXD6TwAAAMo"]
[Fri Dec 05 06:14:54.174631 2025] [:error] [pid 53839:tid 53915] [client 66.249.64.101:36619] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIH3qQOuERg_RN7bn-ASAAAAJM"]
[Fri Dec 05 06:14:56.358480 2025] [:error] [pid 53837:tid 53845] [client 66.249.64.101:38288] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIH4DbsUyTxys8OiMIg-QAAAAM"]
[Fri Dec 05 06:14:59.381906 2025] [:error] [pid 53923:tid 53939] [client 66.249.64.101:53473] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIH47l8ebZN0VCAVXD6fgAAAM4"]
[Fri Dec 05 06:15:38.531822 2025] [:error] [pid 53837:tid 53852] [client 66.249.64.101:59656] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIICjbsUyTxys8OiMIhTQAAAAo"]
[Fri Dec 05 06:15:41.196165 2025] [:error] [pid 53837:tid 53859] [client 66.249.64.101:58830] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIIDTbsUyTxys8OiMIhUAAAABE"]
[Fri Dec 05 06:15:42.878884 2025] [:error] [pid 53923:tid 53946] [client 66.249.64.101:46276] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIIDrl8ebZN0VCAVXD7AgAAANU"]
[Fri Dec 05 06:15:44.914241 2025] [:error] [pid 53923:tid 53926] [client 66.249.64.101:39778] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIIELl8ebZN0VCAVXD7BwAAAME"]
[Fri Dec 05 06:15:45.520929 2025] [:error] [pid 53839:tid 53897] [client 66.249.64.101:39669] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIIEaQOuERg_RN7bn-AkwAAAIE"]
[Fri Dec 05 06:15:48.299154 2025] [:error] [pid 53838:tid 53881] [client 66.249.64.101:49615] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIIFJ8M7CH_vMhLrzL_lwAAAEw"]
[Fri Dec 05 06:15:51.296648 2025] [:error] [pid 53839:tid 53901] [client 66.249.64.101:35770] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIIF6QOuERg_RN7bn-AnQAAAIU"]
[Fri Dec 05 06:15:54.048900 2025] [:error] [pid 53923:tid 53944] [client 66.249.64.101:59539] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIIGrl8ebZN0VCAVXD7GAAAANM"]
[Fri Dec 05 06:15:57.151860 2025] [:error] [pid 53838:tid 53880] [client 66.249.64.101:49037] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIIHZ8M7CH_vMhLrzL_owAAAEs"]
[Fri Dec 05 06:15:59.757347 2025] [:error] [pid 53837:tid 53845] [client 66.249.64.101:61571] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIIHzbsUyTxys8OiMIhVwAAAAM"]
[Fri Dec 05 06:16:01.252849 2025] [:error] [pid 53838:tid 53873] [client 66.249.64.101:61890] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIIIZ8M7CH_vMhLrzL_qwAAAEQ"]
[Fri Dec 05 06:16:07.118899 2025] [:error] [pid 53837:tid 53850] [client 66.249.64.101:45082] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIIJzbsUyTxys8OiMIhYwAAAAg"]
[Fri Dec 05 06:16:14.830791 2025] [:error] [pid 53923:tid 53947] [client 66.249.64.101:41527] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIILrl8ebZN0VCAVXD7NgAAANY"]
[Fri Dec 05 06:16:16.946203 2025] [:error] [pid 24010:tid 24021] [client 66.249.64.101:46157] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIIMKtjRoDpxa46mwclCQAAAQk"]
[Fri Dec 05 06:16:24.220374 2025] [:error] [pid 24010:tid 24012] [client 66.249.64.101:44029] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIIOKtjRoDpxa46mwclHgAAAQA"]
[Fri Dec 05 06:16:25.520599 2025] [:error] [pid 53839:tid 53902] [client 66.249.64.101:38581] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIIOaQOuERg_RN7bn-A7gAAAIY"]
[Fri Dec 05 06:16:29.810290 2025] [:error] [pid 53837:tid 53842] [client 66.249.64.101:52381] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIIPTbsUyTxys8OiMIhigAAAAA"]
[Fri Dec 05 06:16:33.162829 2025] [:error] [pid 53839:tid 53912] [client 66.249.64.101:37468] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIIQaQOuERg_RN7bn-BBQAAAJA"]
[Fri Dec 05 06:16:35.519068 2025] [:error] [pid 24010:tid 24029] [client 66.249.64.101:46115] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIIQ6tjRoDpxa46mwclKAAAARE"]
[Fri Dec 05 06:17:09.753275 2025] [:error] [pid 24010:tid 24023] [client 66.249.64.101:53621] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIIZatjRoDpxa46mwcliQAAAQs"]
[Fri Dec 05 06:17:11.400533 2025] [:error] [pid 24010:tid 24033] [client 66.249.64.101:52488] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIIZ6tjRoDpxa46mwclkAAAARU"]
[Fri Dec 05 06:17:16.438223 2025] [:error] [pid 53837:tid 53862] [client 66.249.64.101:54287] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIIbDbsUyTxys8OiMIh7AAAABQ"]
[Fri Dec 05 06:17:32.381379 2025] [:error] [pid 24010:tid 24036] [client 66.249.64.101:38522] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIIfKtjRoDpxa46mwclxgAAARg"]
[Fri Dec 05 06:17:35.203449 2025] [:error] [pid 53837:tid 53849] [client 66.249.64.101:47875] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIIfzbsUyTxys8OiMIibAAAAAc"]
[Fri Dec 05 06:17:36.058758 2025] [:error] [pid 24010:tid 24012] [client 66.249.64.101:65053] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIIgKtjRoDpxa46mwcl0QAAAQA"]
[Fri Dec 05 06:17:38.339912 2025] [:error] [pid 53923:tid 53937] [client 66.249.64.101:53068] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIIgrl8ebZN0VCAVXD7zwAAAMw"]
[Fri Dec 05 06:17:43.429244 2025] [:error] [pid 53923:tid 53937] [client 66.249.64.101:49026] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIIh7l8ebZN0VCAVXD71QAAAMw"]
[Fri Dec 05 06:17:46.077611 2025] [:error] [pid 53923:tid 53935] [client 66.249.64.101:42602] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIIirl8ebZN0VCAVXD73gAAAMo"]
[Fri Dec 05 06:17:52.086565 2025] [:error] [pid 53838:tid 53892] [client 66.249.64.101:40034] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIIkJ8M7CH_vMhLrzIAWwAAAFc"]
[Fri Dec 05 06:18:01.662498 2025] [:error] [pid 24010:tid 24033] [client 66.249.64.101:64346] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIImatjRoDpxa46mwcmDQAAARU"]
[Fri Dec 05 06:18:47.079895 2025] [:error] [pid 24010:tid 24021] [client 66.249.64.101:47183] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIIx6tjRoDpxa46mwcmiAAAAQk"]
[Fri Dec 05 06:18:53.163745 2025] [:error] [pid 53838:tid 53882] [client 66.249.64.101:38827] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIIzZ8M7CH_vMhLrzIA9gAAAE0"]
[Fri Dec 05 06:18:56.947148 2025] [:error] [pid 53838:tid 53883] [client 66.249.64.101:35384] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTII0J8M7CH_vMhLrzIA_AAAAE4"]
[Fri Dec 05 06:18:59.335993 2025] [:error] [pid 53839:tid 53901] [client 66.249.64.101:48242] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTII06QOuERg_RN7bn-CDAAAAIU"]
[Fri Dec 05 06:19:09.214063 2025] [:error] [pid 53837:tid 53856] [client 66.249.64.101:61233] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTII3TbsUyTxys8OiMIjYAAAAA4"]
[Fri Dec 05 06:19:15.218539 2025] [:error] [pid 53837:tid 53847] [client 66.249.64.101:36468] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTII4zbsUyTxys8OiMIjbAAAAAU"]
[Fri Dec 05 06:19:28.979319 2025] [:error] [pid 53839:tid 53906] [client 66.249.64.101:65169] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTII8KQOuERg_RN7bn-CRAAAAIo"]
[Fri Dec 05 06:19:31.173304 2025] [:error] [pid 24010:tid 24018] [client 66.249.64.101:42098] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTII86tjRoDpxa46mwcm4QAAAQY"]
[Fri Dec 05 06:19:32.639934 2025] [:error] [pid 24010:tid 24028] [client 66.249.64.101:39359] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTII9KtjRoDpxa46mwcm6QAAARA"]
[Fri Dec 05 06:19:33.911409 2025] [:error] [pid 53923:tid 53935] [client 66.249.64.101:59341] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTII9bl8ebZN0VCAVXD8nwAAAMo"]
[Fri Dec 05 06:19:35.584167 2025] [:error] [pid 24010:tid 24023] [client 66.249.64.101:51875] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTII96tjRoDpxa46mwcm9AAAAQs"]
[Fri Dec 05 06:19:39.415849 2025] [:error] [pid 53838:tid 53872] [client 66.249.64.101:43330] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTII-58M7CH_vMhLrzIBVAAAAEM"]
[Fri Dec 05 06:19:42.595848 2025] [:error] [pid 53839:tid 53907] [client 66.249.64.101:35195] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTII_qQOuERg_RN7bn-CUgAAAIs"]
[Fri Dec 05 06:20:36.402933 2025] [:error] [pid 53838:tid 53880] [client 66.249.64.101:59680] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIJNJ8M7CH_vMhLrzIBvQAAAEs"]
[Fri Dec 05 06:20:39.766705 2025] [:error] [pid 53923:tid 53933] [client 66.249.64.101:63563] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIJN7l8ebZN0VCAVXD9BQAAAMg"]
[Fri Dec 05 06:20:54.726381 2025] [:error] [pid 53839:tid 53909] [client 66.249.64.101:63181] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIJRqQOuERg_RN7bn-CwAAAAI0"]
[Fri Dec 05 06:20:57.028944 2025] [:error] [pid 53837:tid 53850] [client 66.249.64.101:59621] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIJSTbsUyTxys8OiMIj4AAAAAg"]
[Fri Dec 05 06:21:02.364197 2025] [:error] [pid 24010:tid 24035] [client 66.249.64.101:35294] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIJTqtjRoDpxa46mwcn8gAAARc"]
[Fri Dec 05 06:21:10.738922 2025] [:error] [pid 24010:tid 24027] [client 66.249.64.101:36855] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIJVqtjRoDpxa46mwcoFAAAAQ8"]
[Fri Dec 05 06:21:18.876625 2025] [:error] [pid 53839:tid 53910] [client 66.249.64.101:36241] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIJXqQOuERg_RN7bn-C_gAAAI4"]
[Fri Dec 05 06:21:28.460493 2025] [:error] [pid 53838:tid 53875] [client 66.249.64.101:43864] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIJaJ8M7CH_vMhLrzICCQAAAEY"]
[Fri Dec 05 06:21:30.140709 2025] [:error] [pid 24010:tid 24034] [client 66.249.64.101:64925] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIJaqtjRoDpxa46mwcoMgAAARY"]
[Fri Dec 05 06:21:33.319127 2025] [:error] [pid 53837:tid 53863] [client 66.249.64.101:46401] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIJbTbsUyTxys8OiMIkOgAAABU"]
[Fri Dec 05 06:22:30.778195 2025] [:error] [pid 53838:tid 53889] [client 66.249.64.101:54859] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIJpp8M7CH_vMhLrzICYgAAAFQ"]
[Fri Dec 05 06:22:33.412752 2025] [:error] [pid 53838:tid 53890] [client 66.249.64.101:57190] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIJqZ8M7CH_vMhLrzICZQAAAFU"]
[Fri Dec 05 06:22:35.454978 2025] [:error] [pid 53839:tid 53901] [client 66.249.64.101:46241] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIJq6QOuERg_RN7bn-DkAAAAIU"]
[Fri Dec 05 06:22:40.698342 2025] [:error] [pid 53839:tid 53907] [client 66.249.64.101:64404] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIJsKQOuERg_RN7bn-DlgAAAIs"]
[Fri Dec 05 06:22:51.648435 2025] [:error] [pid 53838:tid 53882] [client 66.249.64.101:55807] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIJu58M7CH_vMhLrzICdgAAAE0"]
[Fri Dec 05 06:22:54.960167 2025] [:error] [pid 53923:tid 53925] [client 66.249.64.101:56575] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIJvrl8ebZN0VCAVXD-ngAAAMA"]
[Fri Dec 05 06:22:57.278090 2025] [:error] [pid 24010:tid 24034] [client 66.249.64.101:36575] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIJwatjRoDpxa46mwcpaAAAARY"]
[Fri Dec 05 06:23:00.458825 2025] [:error] [pid 53837:tid 53858] [client 66.249.64.101:60732] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIJxDbsUyTxys8OiMIkqQAAABA"]
[Fri Dec 05 06:23:03.733068 2025] [:error] [pid 53838:tid 53888] [client 66.249.64.101:44177] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIJx58M7CH_vMhLrzIClQAAAFM"]
[Fri Dec 05 06:23:06.708382 2025] [:error] [pid 24010:tid 24016] [client 66.249.64.101:35420] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIJyqtjRoDpxa46mwcpgwAAAQQ"]
[Fri Dec 05 06:23:54.292161 2025] [:error] [pid 53839:tid 53899] [client 66.249.64.101:48894] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIJ-qQOuERg_RN7bn-ELAAAAIM"]
[Fri Dec 05 06:23:58.785199 2025] [:error] [pid 24010:tid 24021] [client 66.249.64.101:55671] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIJ_qtjRoDpxa46mwcqQwAAAQk"]
[Fri Dec 05 06:24:13.236828 2025] [:error] [pid 53923:tid 53925] [client 66.249.64.101:52268] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIKDbl8ebZN0VCAVXD_OgAAAMA"]
[Fri Dec 05 06:24:15.185865 2025] [:error] [pid 24010:tid 24032] [client 66.249.64.101:49977] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIKD6tjRoDpxa46mwcqjgAAARQ"]
[Fri Dec 05 06:24:31.011439 2025] [:error] [pid 53923:tid 53944] [client 66.249.64.101:61231] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIKH7l8ebZN0VCAVXD_ngAAANM"]
[Fri Dec 05 06:24:33.686721 2025] [:error] [pid 53839:tid 53905] [client 66.249.64.101:39270] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIKIaQOuERg_RN7bn-EqgAAAIk"]
[Fri Dec 05 06:24:36.353956 2025] [:error] [pid 53838:tid 53888] [client 66.249.64.101:54383] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIKJJ8M7CH_vMhLrzIDGgAAAFM"]
[Fri Dec 05 06:24:40.318506 2025] [:error] [pid 53837:tid 53865] [client 66.249.64.101:53920] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIKKDbsUyTxys8OiMIlTAAAABc"]
[Fri Dec 05 06:24:42.576942 2025] [:error] [pid 24010:tid 24034] [client 66.249.64.101:43086] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIKKqtjRoDpxa46mwcrBgAAARY"]
[Fri Dec 05 06:25:56.973679 2025] [:error] [pid 53839:tid 53913] [client 66.249.64.101:60077] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIKdKQOuERg_RN7bn-FXAAAAJE"]
[Fri Dec 05 06:26:01.357833 2025] [:error] [pid 53839:tid 53900] [client 66.249.64.101:55502] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIKeaQOuERg_RN7bn-FYgAAAIQ"]
[Fri Dec 05 06:26:01.466911 2025] [:error] [pid 53923:tid 53928] [client 66.249.64.101:37549] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIKebl8ebZN0VCAVXAAzQAAAMM"]
[Fri Dec 05 06:26:02.389464 2025] [:error] [pid 53838:tid 53887] [client 66.249.64.101:35344] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIKep8M7CH_vMhLrzIDqQAAAFI"]
[Fri Dec 05 06:26:04.223775 2025] [:error] [pid 53837:tid 53849] [client 66.249.64.101:48826] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIKfDbsUyTxys8OiMIl0wAAAAc"]
[Fri Dec 05 06:26:05.916095 2025] [:error] [pid 53839:tid 53907] [client 66.249.64.101:53122] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIKfaQOuERg_RN7bn-FbQAAAIs"]
[Fri Dec 05 06:26:07.709038 2025] [:error] [pid 53838:tid 53884] [client 66.249.64.101:58677] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIKf58M7CH_vMhLrzIDrwAAAE8"]
[Fri Dec 05 06:26:14.619301 2025] [:error] [pid 53837:tid 53853] [client 66.249.64.101:62376] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIKhjbsUyTxys8OiMIl5gAAAAs"]
[Fri Dec 05 06:26:28.990771 2025] [:error] [pid 53839:tid 53914] [client 66.249.64.101:35871] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIKlKQOuERg_RN7bn-FsgAAAJI"]
[Fri Dec 05 06:26:31.355676 2025] [:error] [pid 53923:tid 53941] [client 66.249.64.101:47105] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIKl7l8ebZN0VCAVXABEAAAANA"]
[Fri Dec 05 06:26:34.406070 2025] [:error] [pid 53923:tid 53925] [client 66.249.64.101:50476] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIKmrl8ebZN0VCAVXABFgAAAMA"]
[Fri Dec 05 06:26:36.099315 2025] [:error] [pid 24010:tid 24012] [client 66.249.64.101:38561] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIKnKtjRoDpxa46mwcsSQAAAQA"]
[Fri Dec 05 06:26:40.071162 2025] [:error] [pid 53838:tid 53888] [client 66.249.64.101:41455] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIKoJ8M7CH_vMhLrzIEBwAAAFM"]
[Fri Dec 05 06:26:52.733051 2025] [:error] [pid 53838:tid 53870] [client 66.249.64.101:45720] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIKrJ8M7CH_vMhLrzIEPgAAAEE"]
[Fri Dec 05 06:27:28.762722 2025] [:error] [pid 53837:tid 53852] [client 66.249.64.101:62861] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIK0DbsUyTxys8OiMImfAAAAAo"]
[Fri Dec 05 06:27:30.547163 2025] [:error] [pid 53923:tid 53933] [client 66.249.64.101:65115] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIK0rl8ebZN0VCAVXABggAAAMg"]
[Fri Dec 05 06:27:32.818778 2025] [:error] [pid 24010:tid 24018] [client 66.249.64.101:64475] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIK1KtjRoDpxa46mwcspQAAAQY"]
[Fri Dec 05 06:27:49.713641 2025] [:error] [pid 53839:tid 53903] [client 66.249.64.101:47687] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIK5aQOuERg_RN7bn-GVAAAAIc"]
[Fri Dec 05 06:27:50.060293 2025] [:error] [pid 24010:tid 24030] [client 66.249.64.101:63965] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIK5qtjRoDpxa46mwcs1AAAARI"]
[Fri Dec 05 06:27:51.614947 2025] [:error] [pid 24010:tid 24026] [client 66.249.64.101:38040] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIK56tjRoDpxa46mwcs2gAAAQ4"]
[Fri Dec 05 06:29:07.231995 2025] [:error] [pid 24010:tid 24024] [client 66.249.64.101:55280] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTILM6tjRoDpxa46mwcteQAAAQw"]
[Fri Dec 05 06:29:10.571405 2025] [:error] [pid 53838:tid 53882] [client 66.249.64.101:60826] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTILNp8M7CH_vMhLrzIFhgAAAE0"]
[Fri Dec 05 06:29:12.407481 2025] [:error] [pid 53923:tid 53930] [client 66.249.64.101:53984] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTILOLl8ebZN0VCAVXACUAAAAMU"]
[Fri Dec 05 06:29:13.961780 2025] [:error] [pid 53923:tid 53938] [client 66.249.64.101:36284] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTILObl8ebZN0VCAVXACZAAAAM0"]
[Fri Dec 05 06:29:22.159610 2025] [:error] [pid 53839:tid 53896] [client 66.249.64.101:42291] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTILQqQOuERg_RN7bn-HIQAAAIA"]
[Fri Dec 05 06:29:31.254219 2025] [:error] [pid 53839:tid 53907] [client 66.249.64.101:65466] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTILS6QOuERg_RN7bn-HNAAAAIs"]
[Fri Dec 05 06:29:33.295876 2025] [:error] [pid 53837:tid 53861] [client 66.249.64.101:39879] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTILTTbsUyTxys8OiMInkAAAABM"]
[Fri Dec 05 06:29:36.743459 2025] [:error] [pid 24010:tid 24015] [client 66.249.64.101:50710] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTILUKtjRoDpxa46mwcuAAAAAQM"]
[Fri Dec 05 06:29:40.749176 2025] [:error] [pid 53838:tid 53879] [client 66.249.64.101:45413] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTILVJ8M7CH_vMhLrzIFtwAAAEo"]
[Fri Dec 05 06:29:44.821798 2025] [:error] [pid 53838:tid 53881] [client 66.249.64.101:56613] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTILWJ8M7CH_vMhLrzIFywAAAEw"]
[Fri Dec 05 06:29:46.994622 2025] [:error] [pid 53837:tid 53863] [client 66.249.64.101:50941] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTILWjbsUyTxys8OiMInogAAABU"]
[Fri Dec 05 06:29:58.062319 2025] [:error] [pid 53837:tid 53852] [client 66.249.64.101:65081] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTILZjbsUyTxys8OiMIntAAAAAo"]
[Fri Dec 05 06:29:59.183001 2025] [:error] [pid 53839:tid 53901] [client 66.249.64.101:41493] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTILZ6QOuERg_RN7bn-HcwAAAIU"]
[Fri Dec 05 06:30:00.340960 2025] [:error] [pid 53923:tid 53926] [client 66.249.64.101:37599] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTILaLl8ebZN0VCAVXACuwAAAME"]
[Fri Dec 05 06:30:01.738050 2025] [:error] [pid 53838:tid 53870] [client 66.249.64.101:55858] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTILaZ8M7CH_vMhLrzIGDAAAAEE"]
[Fri Dec 05 06:30:04.103972 2025] [:error] [pid 24010:tid 24022] [client 66.249.64.101:55057] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTILbKtjRoDpxa46mwculQAAAQo"]
[Fri Dec 05 06:30:56.060435 2025] [:error] [pid 24010:tid 24018] [client 66.249.64.101:49515] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTILoKtjRoDpxa46mwcvFQAAAQY"]
[Fri Dec 05 06:30:59.251512 2025] [:error] [pid 53923:tid 53940] [client 66.249.64.101:50071] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTILo7l8ebZN0VCAVXADGwAAAM8"]
[Fri Dec 05 06:31:10.740834 2025] [:error] [pid 53837:tid 53858] [client 66.249.64.101:39363] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTILrjbsUyTxys8OiMIoIQAAABA"]
[Fri Dec 05 06:31:12.653686 2025] [:error] [pid 24010:tid 24026] [client 66.249.64.101:42921] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTILsKtjRoDpxa46mwcvQQAAAQ4"]
[Fri Dec 05 06:31:19.089483 2025] [:error] [pid 24010:tid 24027] [client 66.249.64.101:52035] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTILt6tjRoDpxa46mwcvVwAAAQ8"]
[Fri Dec 05 06:31:21.452737 2025] [:error] [pid 53838:tid 53869] [client 66.249.64.101:39847] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTILuZ8M7CH_vMhLrzIGlAAAAEA"]
[Fri Dec 05 06:31:24.507509 2025] [:error] [pid 53837:tid 53866] [client 66.249.64.101:56300] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTILvDbsUyTxys8OiMIoSwAAABg"]
[Fri Dec 05 06:31:25.587260 2025] [:error] [pid 53838:tid 53882] [client 66.249.64.101:44529] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTILvZ8M7CH_vMhLrzIGogAAAE0"]
[Fri Dec 05 06:31:29.781287 2025] [:error] [pid 24010:tid 24019] [client 66.249.64.101:38871] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTILwatjRoDpxa46mwcvfAAAAQc"]
[Fri Dec 05 06:31:35.522382 2025] [:error] [pid 53837:tid 53864] [client 66.249.64.101:44614] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTILxzbsUyTxys8OiMIoWQAAABY"]
[Fri Dec 05 06:31:38.933662 2025] [:error] [pid 53923:tid 53935] [client 66.249.64.101:63869] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTILyrl8ebZN0VCAVXADagAAAMo"]
[Fri Dec 05 06:31:40.689473 2025] [:error] [pid 53839:tid 53899] [client 66.249.64.101:54710] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTILzKQOuERg_RN7bn-IOwAAAIM"]
[Fri Dec 05 06:31:45.828623 2025] [:error] [pid 53838:tid 53890] [client 66.249.64.101:58300] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIL0Z8M7CH_vMhLrzIG2QAAAFU"]
[Fri Dec 05 06:35:37.779714 2025] [:error] [pid 53838:tid 53878] [client 66.249.64.101:63235] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIMuZ8M7CH_vMhLrzIIowAAAEk"]
[Fri Dec 05 06:35:43.365244 2025] [:error] [pid 53923:tid 53941] [client 66.249.64.101:44126] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIMv7l8ebZN0VCAVXAFcwAAANA"]
[Fri Dec 05 06:35:46.757033 2025] [:error] [pid 24010:tid 24033] [client 66.249.64.101:51135] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIMwqtjRoDpxa46mwczMAAAARU"]
[Fri Dec 05 06:35:49.789920 2025] [:error] [pid 53838:tid 53892] [client 66.249.64.101:42971] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIMxZ8M7CH_vMhLrzIIrwAAAFc"]
[Fri Dec 05 06:35:55.284156 2025] [:error] [pid 53837:tid 53865] [client 66.249.64.101:47883] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIMyzbsUyTxys8OiMIqZQAAABc"]
[Fri Dec 05 06:35:58.294980 2025] [:error] [pid 53838:tid 53882] [client 66.249.64.101:57823] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIMzp8M7CH_vMhLrzIIywAAAE0"]
[Fri Dec 05 06:36:00.321115 2025] [:error] [pid 53923:tid 53941] [client 66.249.64.101:55095] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIM0Ll8ebZN0VCAVXAFmAAAANA"]
[Fri Dec 05 06:36:01.268779 2025] [:error] [pid 53837:tid 53844] [client 66.249.64.101:42717] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIM0TbsUyTxys8OiMIqkAAAAAI"]
[Fri Dec 05 06:36:02.764465 2025] [:error] [pid 53837:tid 53848] [client 66.249.64.101:54463] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIM0jbsUyTxys8OiMIqlgAAAAY"]
[Fri Dec 05 06:36:04.506856 2025] [:error] [pid 53837:tid 53863] [client 66.249.64.101:36126] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIM1DbsUyTxys8OiMIqnQAAABU"]
[Fri Dec 05 06:36:06.134088 2025] [:error] [pid 24010:tid 24036] [client 66.249.64.101:42598] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIM1qtjRoDpxa46mwczegAAARg"]
[Fri Dec 05 06:36:11.367909 2025] [:error] [pid 53839:tid 53905] [client 66.249.64.101:42685] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIM26QOuERg_RN7bn-KHAAAAIk"]
[Fri Dec 05 06:36:21.532350 2025] [:error] [pid 53923:tid 53945] [client 66.249.64.101:63279] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIM5bl8ebZN0VCAVXAFugAAANQ"]
[Fri Dec 05 06:36:32.453347 2025] [:error] [pid 53837:tid 53854] [client 66.249.64.101:62778] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIM8DbsUyTxys8OiMIqvwAAAAw"]
[Fri Dec 05 06:36:33.308481 2025] [:error] [pid 24010:tid 24012] [client 66.249.64.101:55622] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIM8atjRoDpxa46mwcz1AAAAQA"]
[Fri Dec 05 06:36:34.857298 2025] [:error] [pid 53838:tid 53879] [client 66.249.64.101:50465] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIM8p8M7CH_vMhLrzII-wAAAEo"]
[Fri Dec 05 06:37:15.123150 2025] [:error] [pid 53839:tid 53905] [client 66.249.64.101:52570] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTING6QOuERg_RN7bn-KawAAAIk"]
[Fri Dec 05 06:37:30.749092 2025] [:error] [pid 53923:tid 53926] [client 66.249.64.101:40375] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTINKrl8ebZN0VCAVXAGGAAAAME"]
[Fri Dec 05 06:37:31.187277 2025] [:error] [pid 53837:tid 53856] [client 66.249.64.101:53597] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTINKzbsUyTxys8OiMIrHgAAAA4"]
[Fri Dec 05 06:37:32.859628 2025] [:error] [pid 53923:tid 53933] [client 66.249.64.101:54535] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTINLLl8ebZN0VCAVXAGKQAAAMg"]
[Fri Dec 05 06:37:38.593892 2025] [:error] [pid 53839:tid 53904] [client 66.249.64.101:37657] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTINMqQOuERg_RN7bn-KrAAAAIg"]
[Fri Dec 05 06:37:42.131130 2025] [:error] [pid 24010:tid 24018] [client 66.249.64.101:58166] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTINNqtjRoDpxa46mwc0fQAAAQY"]
[Fri Dec 05 06:37:43.817768 2025] [:error] [pid 24010:tid 24020] [client 66.249.64.101:52295] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTINN6tjRoDpxa46mwc0hQAAAQg"]
[Fri Dec 05 06:37:46.537322 2025] [:error] [pid 24010:tid 24022] [client 66.249.64.101:56503] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTINOqtjRoDpxa46mwc0iwAAAQo"]
[Fri Dec 05 06:37:53.289727 2025] [:error] [pid 53837:tid 53853] [client 66.249.64.101:61144] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTINQTbsUyTxys8OiMIrYwAAAAs"]
[Fri Dec 05 06:37:55.245286 2025] [:error] [pid 24010:tid 24030] [client 66.249.64.101:62173] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTINQ6tjRoDpxa46mwc0wwAAARI"]
[Fri Dec 05 06:37:56.739148 2025] [:error] [pid 53923:tid 53927] [client 66.249.64.101:45529] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTINRLl8ebZN0VCAVXAGSQAAAMI"]
[Fri Dec 05 06:37:59.404703 2025] [:error] [pid 53923:tid 53938] [client 66.249.64.101:60556] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTINR7l8ebZN0VCAVXAGUQAAAM0"]
[Fri Dec 05 06:38:00.799125 2025] [:error] [pid 53839:tid 53905] [client 66.249.64.101:45610] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTINSKQOuERg_RN7bn-KyQAAAIk"]
[Fri Dec 05 06:38:02.163601 2025] [:error] [pid 53837:tid 53853] [client 66.249.64.101:63528] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTINSjbsUyTxys8OiMIreAAAAAs"]
[Fri Dec 05 06:38:04.531073 2025] [:error] [pid 53837:tid 53856] [client 66.249.64.101:56698] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTINTDbsUyTxys8OiMIrgQAAAA4"]
[Fri Dec 05 06:38:07.520923 2025] [:error] [pid 24010:tid 24021] [client 66.249.64.101:46547] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTINT6tjRoDpxa46mwc03gAAAQk"]
[Fri Dec 05 06:38:08.738171 2025] [:error] [pid 53838:tid 53883] [client 66.249.64.101:42860] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTINUJ8M7CH_vMhLrzIJyAAAAE4"]
[Fri Dec 05 06:39:00.314239 2025] [:error] [pid 53837:tid 53853] [client 66.249.64.101:40222] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTINhDbsUyTxys8OiMIrxQAAAAs"]
[Fri Dec 05 06:39:04.183662 2025] [:error] [pid 53837:tid 53849] [client 66.249.64.101:42060] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTINiDbsUyTxys8OiMIrzAAAAAc"]
[Fri Dec 05 06:39:06.189351 2025] [:error] [pid 53923:tid 53936] [client 66.249.64.101:47435] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTINirl8ebZN0VCAVXAG7gAAAMs"]
[Fri Dec 05 06:39:08.994641 2025] [:error] [pid 53839:tid 53902] [client 66.249.64.101:50396] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTINjKQOuERg_RN7bn-LIAAAAIY"]
[Fri Dec 05 06:39:10.426796 2025] [:error] [pid 53839:tid 53905] [client 66.249.64.101:41128] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTINjqQOuERg_RN7bn-LIQAAAIk"]
[Fri Dec 05 06:39:14.386322 2025] [:error] [pid 53839:tid 53911] [client 66.249.64.101:49775] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTINkqQOuERg_RN7bn-LJwAAAI8"]
[Fri Dec 05 06:39:15.531284 2025] [:error] [pid 53923:tid 53936] [client 66.249.64.101:47288] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTINk7l8ebZN0VCAVXAG-gAAAMs"]
[Fri Dec 05 06:39:18.178760 2025] [:error] [pid 53838:tid 53874] [client 66.249.64.101:62051] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTINlp8M7CH_vMhLrzIKXwAAAEU"]
[Fri Dec 05 06:39:28.682716 2025] [:error] [pid 24010:tid 24014] [client 66.249.64.101:43999] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTINoKtjRoDpxa46mwc1ogAAAQI"]
[Fri Dec 05 06:39:30.190839 2025] [:error] [pid 24010:tid 24021] [client 66.249.64.101:36115] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTINoqtjRoDpxa46mwc1rAAAAQk"]
[Fri Dec 05 06:39:30.766443 2025] [:error] [pid 53837:tid 53849] [client 66.249.64.101:37977] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTINojbsUyTxys8OiMIsAwAAAAc"]
[Fri Dec 05 06:39:33.775228 2025] [:error] [pid 53839:tid 53910] [client 66.249.64.101:57542] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTINpaQOuERg_RN7bn-LNwAAAI4"]
[Fri Dec 05 06:39:36.206700 2025] [:error] [pid 53838:tid 53872] [client 66.249.64.101:45090] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTINqJ8M7CH_vMhLrzIKiQAAAEM"]
[Fri Dec 05 06:39:37.887146 2025] [:error] [pid 53923:tid 53937] [client 66.249.64.101:53275] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTINqbl8ebZN0VCAVXAHFAAAAMw"]
[Fri Dec 05 06:39:39.736998 2025] [:error] [pid 53839:tid 53911] [client 66.249.64.101:60554] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTINq6QOuERg_RN7bn-LQwAAAI8"]
[Fri Dec 05 06:39:41.519354 2025] [:error] [pid 53923:tid 53934] [client 66.249.64.101:45895] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTINrbl8ebZN0VCAVXAHGQAAAMk"]
[Fri Dec 05 06:39:46.341767 2025] [:error] [pid 24010:tid 24021] [client 66.249.64.101:56920] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTINsqtjRoDpxa46mwc12gAAAQk"]
[Fri Dec 05 06:39:50.238871 2025] [:error] [pid 53838:tid 53888] [client 66.249.64.101:63714] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTINtp8M7CH_vMhLrzIKrAAAAFM"]
[Fri Dec 05 06:39:51.680803 2025] [:error] [pid 53923:tid 53941] [client 66.249.64.101:57529] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTINt7l8ebZN0VCAVXAHLAAAANA"]
[Fri Dec 05 06:39:53.040419 2025] [:error] [pid 53923:tid 53936] [client 66.249.64.101:54060] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTINubl8ebZN0VCAVXAHLwAAAMs"]
[Fri Dec 05 06:39:54.509594 2025] [:error] [pid 53838:tid 53882] [client 66.249.64.101:48061] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTINup8M7CH_vMhLrzIKuAAAAE0"]
[Fri Dec 05 06:39:57.511950 2025] [:error] [pid 53839:tid 53898] [client 66.249.64.101:43406] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTINvaQOuERg_RN7bn-LbAAAAII"]
[Fri Dec 05 06:40:41.350698 2025] [:error] [pid 53839:tid 53916] [client 66.249.64.101:45963] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIN6aQOuERg_RN7bn-MFwAAAJQ"]
[Fri Dec 05 06:40:45.128509 2025] [:error] [pid 53838:tid 53870] [client 66.249.64.101:60185] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIN7Z8M7CH_vMhLrzILAwAAAEE"]
[Fri Dec 05 06:40:46.607496 2025] [:error] [pid 53923:tid 53930] [client 66.249.64.101:35631] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIN7rl8ebZN0VCAVXAHhAAAAMU"]
[Fri Dec 05 06:40:49.549747 2025] [:error] [pid 53837:tid 53846] [client 66.249.64.101:37913] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIN8TbsUyTxys8OiMIsXgAAAAQ"]
[Fri Dec 05 06:40:51.251873 2025] [:error] [pid 53839:tid 53902] [client 66.249.64.101:64823] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIN86QOuERg_RN7bn-MMQAAAIY"]
[Fri Dec 05 06:40:52.948118 2025] [:error] [pid 24010:tid 24014] [client 66.249.64.101:54968] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIN9KtjRoDpxa46mwc2jgAAAQI"]
[Fri Dec 05 06:40:55.651419 2025] [:error] [pid 53839:tid 53898] [client 66.249.64.101:46924] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIN96QOuERg_RN7bn-MNQAAAII"]
[Fri Dec 05 06:40:57.376525 2025] [:error] [pid 53923:tid 53941] [client 66.249.64.101:48534] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIN-bl8ebZN0VCAVXAHlAAAANA"]
[Fri Dec 05 06:40:59.029955 2025] [:error] [pid 53923:tid 53943] [client 66.249.64.101:48652] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIN-7l8ebZN0VCAVXAHmQAAANI"]
[Fri Dec 05 06:40:59.984983 2025] [:error] [pid 53839:tid 53903] [client 66.249.64.101:56014] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIN-6QOuERg_RN7bn-MPwAAAIc"]
[Fri Dec 05 06:41:03.306973 2025] [:error] [pid 24010:tid 24032] [client 66.249.64.101:64783] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIN_6tjRoDpxa46mwc2pwAAARQ"]
[Fri Dec 05 06:41:05.480032 2025] [:error] [pid 24010:tid 24020] [client 66.249.64.101:54034] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIOAatjRoDpxa46mwc2rwAAAQg"]
[Fri Dec 05 06:41:06.675118 2025] [:error] [pid 53837:tid 53866] [client 66.249.64.101:57241] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIOAjbsUyTxys8OiMIslgAAABg"]
[Fri Dec 05 06:41:08.198239 2025] [:error] [pid 53838:tid 53892] [client 66.249.64.101:62823] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIOBJ8M7CH_vMhLrzILLAAAAFc"]
[Fri Dec 05 06:41:09.998455 2025] [:error] [pid 53923:tid 53930] [client 66.249.64.101:64006] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIOBbl8ebZN0VCAVXAHpwAAAMU"]
[Fri Dec 05 06:41:12.675384 2025] [:error] [pid 53838:tid 53877] [client 66.249.64.101:48378] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIOCJ8M7CH_vMhLrzILNgAAAEg"]
[Fri Dec 05 06:41:14.673794 2025] [:error] [pid 53837:tid 53853] [client 66.249.64.101:34993] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIOCjbsUyTxys8OiMIsrAAAAAs"]
[Fri Dec 05 06:41:18.952569 2025] [:error] [pid 24010:tid 24013] [client 66.249.64.101:56962] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIODqtjRoDpxa46mwc2xwAAAQE"]
[Fri Dec 05 06:41:20.519758 2025] [:error] [pid 53839:tid 53906] [client 66.249.64.101:55438] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIOEKQOuERg_RN7bn-MZAAAAIo"]
[Fri Dec 05 06:41:22.615764 2025] [:error] [pid 53923:tid 53942] [client 66.249.64.101:41545] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIOErl8ebZN0VCAVXAHwAAAANE"]
[Fri Dec 05 06:41:24.916501 2025] [:error] [pid 53837:tid 53849] [client 66.249.64.101:41780] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIOFDbsUyTxys8OiMIsxgAAAAc"]
[Fri Dec 05 06:41:28.617265 2025] [:error] [pid 24010:tid 24022] [client 66.249.64.101:64150] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIOGKtjRoDpxa46mwc25gAAAQo"]
[Fri Dec 05 06:41:31.787038 2025] [:error] [pid 53839:tid 53915] [client 66.249.64.101:35522] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIOG6QOuERg_RN7bn-MdgAAAJM"]
[Fri Dec 05 06:41:32.921505 2025] [:error] [pid 53837:tid 53848] [client 66.249.64.101:43674] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIOHDbsUyTxys8OiMIs0wAAAAY"]
[Fri Dec 05 06:41:34.379234 2025] [:error] [pid 24010:tid 24028] [client 66.249.64.101:64776] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIOHqtjRoDpxa46mwc2-QAAARA"]
[Fri Dec 05 06:41:36.124961 2025] [:error] [pid 24010:tid 24026] [client 66.249.64.101:41467] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIOIKtjRoDpxa46mwc3AwAAAQ4"]
[Fri Dec 05 06:41:37.011251 2025] [:error] [pid 53839:tid 53914] [client 66.249.64.101:38169] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIOIaQOuERg_RN7bn-MfAAAAJI"]
[Fri Dec 05 06:41:38.203829 2025] [:error] [pid 24010:tid 24018] [client 66.249.64.101:60672] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIOIqtjRoDpxa46mwc3DAAAAQY"]
[Fri Dec 05 06:42:13.553616 2025] [:error] [pid 53837:tid 53849] [client 66.249.64.101:63701] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIORTbsUyTxys8OiMItNwAAAAc"]
[Fri Dec 05 06:42:14.570468 2025] [:error] [pid 53839:tid 53919] [client 66.249.64.101:62435] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIORqQOuERg_RN7bn-MsAAAAJc"]
[Fri Dec 05 06:42:17.038179 2025] [:error] [pid 24010:tid 24032] [client 66.249.64.101:58806] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIOSatjRoDpxa46mwc3fwAAARQ"]
[Fri Dec 05 06:42:19.011675 2025] [:error] [pid 24010:tid 24022] [client 66.249.64.101:63407] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIOS6tjRoDpxa46mwc3gwAAAQo"]
[Fri Dec 05 06:42:20.822085 2025] [:error] [pid 53923:tid 53936] [client 66.249.64.101:53681] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIOTLl8ebZN0VCAVXAIJwAAAMs"]
[Fri Dec 05 06:42:22.392313 2025] [:error] [pid 24010:tid 24028] [client 66.249.64.101:40075] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIOTqtjRoDpxa46mwc3jwAAARA"]
[Fri Dec 05 06:42:24.224780 2025] [:error] [pid 24010:tid 24017] [client 66.249.64.101:48409] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIOUKtjRoDpxa46mwc3lQAAAQU"]
[Fri Dec 05 06:42:28.632854 2025] [:error] [pid 53838:tid 53882] [client 66.249.64.101:56542] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIOVJ8M7CH_vMhLrzILpwAAAE0"]
[Fri Dec 05 06:42:30.326068 2025] [:error] [pid 53838:tid 53878] [client 66.249.64.101:39877] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIOVp8M7CH_vMhLrzILqAAAAEk"]
[Fri Dec 05 06:42:33.790129 2025] [:error] [pid 53837:tid 53849] [client 66.249.64.101:37546] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIOWTbsUyTxys8OiMItbQAAAAc"]
[Fri Dec 05 06:42:36.484081 2025] [:error] [pid 53839:tid 53901] [client 66.249.64.101:49259] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIOXKQOuERg_RN7bn-M8AAAAIU"]
[Fri Dec 05 06:42:38.025733 2025] [:error] [pid 53839:tid 53902] [client 66.249.64.101:64646] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIOXqQOuERg_RN7bn-M_wAAAIY"]
[Fri Dec 05 06:42:39.363225 2025] [:error] [pid 24010:tid 24034] [client 66.249.64.101:39125] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIOX6tjRoDpxa46mwc30QAAARY"]
[Fri Dec 05 06:42:40.970421 2025] [:error] [pid 53838:tid 53876] [client 66.249.64.101:42690] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIOYJ8M7CH_vMhLrzIL2wAAAEc"]
[Fri Dec 05 06:42:45.982892 2025] [:error] [pid 53837:tid 53858] [client 66.249.64.101:58565] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIOZTbsUyTxys8OiMItiwAAABA"]
[Fri Dec 05 06:42:47.331416 2025] [:error] [pid 53837:tid 53853] [client 66.249.64.101:48471] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIOZzbsUyTxys8OiMItmwAAAAs"]
[Fri Dec 05 06:42:48.272146 2025] [:error] [pid 53839:tid 53903] [client 66.249.64.101:51228] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIOaKQOuERg_RN7bn-NNQAAAIc"]
[Fri Dec 05 06:42:51.806768 2025] [:error] [pid 24010:tid 24030] [client 66.249.64.101:45868] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIOa6tjRoDpxa46mwc4JgAAARI"]
[Fri Dec 05 06:42:54.555031 2025] [:error] [pid 53838:tid 53869] [client 66.249.64.101:35027] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIObp8M7CH_vMhLrzIMLwAAAEA"]
[Fri Dec 05 06:42:56.779814 2025] [:error] [pid 53837:tid 53858] [client 66.249.64.101:55827] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIOcDbsUyTxys8OiMItugAAABA"]
[Fri Dec 05 06:42:58.602861 2025] [:error] [pid 53838:tid 53872] [client 66.249.64.101:39408] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIOcp8M7CH_vMhLrzIMOgAAAEM"]
[Fri Dec 05 06:43:00.137875 2025] [:error] [pid 53839:tid 53900] [client 66.249.64.101:35780] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIOdKQOuERg_RN7bn-NSwAAAIQ"]
[Fri Dec 05 06:43:01.980340 2025] [:error] [pid 53837:tid 53847] [client 66.249.64.101:56747] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIOdTbsUyTxys8OiMItwgAAAAU"]
[Fri Dec 05 06:43:04.380293 2025] [:error] [pid 53923:tid 53937] [client 66.249.64.101:60313] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIOeLl8ebZN0VCAVXAJRwAAAMw"]
[Fri Dec 05 06:43:07.692994 2025] [:error] [pid 53923:tid 53930] [client 66.249.64.101:61114] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIOe7l8ebZN0VCAVXAJYQAAAMU"]
[Fri Dec 05 06:43:09.391411 2025] [:error] [pid 53923:tid 53935] [client 66.249.64.101:50448] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIOfbl8ebZN0VCAVXAJdwAAAMo"]
[Fri Dec 05 06:43:11.078917 2025] [:error] [pid 24010:tid 24032] [client 66.249.64.101:61470] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIOf6tjRoDpxa46mwc4pwAAARQ"]
[Fri Dec 05 06:43:38.968987 2025] [:error] [pid 53837:tid 53857] [client 66.249.64.101:54620] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIOmjbsUyTxys8OiMIuFQAAAA8"]
[Fri Dec 05 06:43:40.368612 2025] [:error] [pid 53839:tid 53915] [client 66.249.64.101:48070] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIOnKQOuERg_RN7bn-NowAAAJM"]
[Fri Dec 05 06:43:43.768568 2025] [:error] [pid 24010:tid 24031] [client 66.249.64.101:60344] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIOn6tjRoDpxa46mwc5JwAAARM"]
[Fri Dec 05 06:43:46.006490 2025] [:error] [pid 53839:tid 53906] [client 66.249.64.101:36973] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIOoqQOuERg_RN7bn-NtAAAAIo"]
[Fri Dec 05 06:43:46.555519 2025] [:error] [pid 53839:tid 53914] [client 66.249.64.101:48495] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIOoqQOuERg_RN7bn-NtgAAAJI"]
[Fri Dec 05 06:43:47.001898 2025] [:error] [pid 24010:tid 24035] [client 66.249.64.101:58342] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIOo6tjRoDpxa46mwc5VQAAARc"]
[Fri Dec 05 06:43:50.448331 2025] [:error] [pid 53923:tid 53931] [client 66.249.64.101:51702] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIOprl8ebZN0VCAVXAKUgAAAMY"]
[Fri Dec 05 06:43:52.127750 2025] [:error] [pid 53838:tid 53882] [client 66.249.64.101:58975] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIOqJ8M7CH_vMhLrzIMlgAAAE0"]
[Fri Dec 05 06:43:55.334691 2025] [:error] [pid 53839:tid 53910] [client 66.249.64.101:47125] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIOq6QOuERg_RN7bn-N0wAAAI4"]
[Fri Dec 05 06:43:56.398160 2025] [:error] [pid 53838:tid 53871] [client 66.249.64.101:58070] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIOrJ8M7CH_vMhLrzIMngAAAEI"]
[Fri Dec 05 06:43:58.201877 2025] [:error] [pid 24010:tid 24034] [client 66.249.64.101:37841] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIOrqtjRoDpxa46mwc5mgAAARY"]
[Fri Dec 05 06:44:02.354403 2025] [:error] [pid 53839:tid 53909] [client 66.249.64.101:36876] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIOsqQOuERg_RN7bn-N5AAAAI0"]
[Fri Dec 05 06:44:03.968782 2025] [:error] [pid 24010:tid 24026] [client 66.249.64.101:41425] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIOs6tjRoDpxa46mwc5rgAAAQ4"]
[Fri Dec 05 06:44:11.471706 2025] [:error] [pid 24010:tid 24012] [client 66.249.64.101:36081] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIOu6tjRoDpxa46mwc5uAAAAQA"]
[Fri Dec 05 06:44:13.228482 2025] [:error] [pid 53923:tid 53933] [client 66.249.64.101:37092] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIOvbl8ebZN0VCAVXAK0AAAAMg"]
[Fri Dec 05 06:44:14.857395 2025] [:error] [pid 53923:tid 53926] [client 66.249.64.101:61557] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIOvrl8ebZN0VCAVXAK1QAAAME"]
[Fri Dec 05 06:44:16.500793 2025] [:error] [pid 53838:tid 53891] [client 66.249.64.101:34800] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIOwJ8M7CH_vMhLrzIM2wAAAFY"]
[Fri Dec 05 06:44:20.142272 2025] [:error] [pid 53838:tid 53880] [client 66.249.64.101:48691] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIOxJ8M7CH_vMhLrzIM5AAAAEs"]
[Fri Dec 05 06:44:21.169920 2025] [:error] [pid 24010:tid 24026] [client 66.249.64.101:64333] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIOxatjRoDpxa46mwc5xwAAAQ4"]
[Fri Dec 05 06:44:23.305098 2025] [:error] [pid 24010:tid 24030] [client 66.249.64.101:53958] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIOx6tjRoDpxa46mwc52wAAARI"]
[Fri Dec 05 06:44:26.119150 2025] [:error] [pid 53837:tid 53846] [client 66.249.64.101:57395] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIOyjbsUyTxys8OiMIusAAAAAQ"]
[Fri Dec 05 06:44:27.684108 2025] [:error] [pid 53838:tid 53880] [client 66.249.64.101:38929] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIOy58M7CH_vMhLrzINDgAAAEs"]
[Fri Dec 05 06:44:30.407482 2025] [:error] [pid 24010:tid 24031] [client 66.249.64.101:59316] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIOzqtjRoDpxa46mwc59QAAARM"]
[Fri Dec 05 06:44:32.240463 2025] [:error] [pid 53923:tid 53928] [client 66.249.64.101:61061] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIO0Ll8ebZN0VCAVXALAgAAAMM"]
[Fri Dec 05 06:44:34.256574 2025] [:error] [pid 53923:tid 53930] [client 66.249.64.101:44625] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIO0rl8ebZN0VCAVXALBwAAAMU"]
[Fri Dec 05 06:44:35.774638 2025] [:error] [pid 24010:tid 24017] [client 66.249.64.101:48100] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIO06tjRoDpxa46mwc5_gAAAQU"]
[Fri Dec 05 06:45:00.851410 2025] [:error] [pid 24010:tid 24034] [client 66.249.64.101:55330] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIO7KtjRoDpxa46mwc6kQAAARY"]
[Fri Dec 05 06:45:04.469294 2025] [:error] [pid 53838:tid 53869] [client 66.249.64.101:56226] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIO8J8M7CH_vMhLrzINQQAAAEA"]
[Fri Dec 05 06:45:06.216597 2025] [:error] [pid 53837:tid 53864] [client 66.249.64.101:53494] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIO8jbsUyTxys8OiMIu4gAAABY"]
[Fri Dec 05 06:45:08.707595 2025] [:error] [pid 53923:tid 53927] [client 66.249.64.101:35004] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIO9Ll8ebZN0VCAVXALnwAAAMI"]
[Fri Dec 05 06:45:10.681996 2025] [:error] [pid 53837:tid 53860] [client 66.249.64.101:63653] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIO9jbsUyTxys8OiMIu6QAAABI"]
[Fri Dec 05 06:45:12.852495 2025] [:error] [pid 53839:tid 53909] [client 66.249.64.101:44721] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIO-KQOuERg_RN7bn-O4AAAAI0"]
[Fri Dec 05 06:45:14.699681 2025] [:error] [pid 53837:tid 53844] [client 66.249.64.101:54962] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIO-jbsUyTxys8OiMIu9AAAAAI"]
[Fri Dec 05 06:45:17.187331 2025] [:error] [pid 53923:tid 53946] [client 66.249.64.101:36899] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIO_bl8ebZN0VCAVXALwQAAANU"]
[Fri Dec 05 06:45:19.579654 2025] [:error] [pid 24010:tid 24020] [client 66.249.64.101:50158] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIO_6tjRoDpxa46mwc65QAAAQg"]
[Fri Dec 05 06:45:21.467870 2025] [:error] [pid 53839:tid 53919] [client 66.249.64.101:54041] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIPAaQOuERg_RN7bn-O6wAAAJc"]
[Fri Dec 05 06:45:24.115819 2025] [:error] [pid 53839:tid 53918] [client 66.249.64.101:43350] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIPBKQOuERg_RN7bn-O8gAAAJY"]
[Fri Dec 05 06:45:26.516107 2025] [:error] [pid 24010:tid 24023] [client 66.249.64.101:40202] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIPBqtjRoDpxa46mwc7AwAAAQs"]
[Fri Dec 05 06:45:31.246439 2025] [:error] [pid 53837:tid 53857] [client 66.249.64.101:41457] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIPCzbsUyTxys8OiMIvMAAAAA8"]
[Fri Dec 05 06:45:33.332194 2025] [:error] [pid 53839:tid 53897] [client 66.249.64.101:60468] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIPDaQOuERg_RN7bn-PCAAAAIE"]
[Fri Dec 05 06:45:37.030379 2025] [:error] [pid 24010:tid 24012] [client 66.249.64.101:36950] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIPEatjRoDpxa46mwc7EQAAAQA"]
[Fri Dec 05 06:45:38.951995 2025] [:error] [pid 53839:tid 53917] [client 66.249.64.101:35838] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIPEqQOuERg_RN7bn-PEwAAAJU"]
[Fri Dec 05 06:45:41.617908 2025] [:error] [pid 53838:tid 53869] [client 66.249.64.101:48423] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIPFZ8M7CH_vMhLrzINiQAAAEA"]
[Fri Dec 05 06:45:42.340952 2025] [:error] [pid 53838:tid 53888] [client 66.249.64.101:37427] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIPFp8M7CH_vMhLrzINjgAAAFM"]
[Fri Dec 05 06:45:43.984714 2025] [:error] [pid 53839:tid 53902] [client 66.249.64.101:35483] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIPF6QOuERg_RN7bn-PHAAAAIY"]
[Fri Dec 05 06:45:45.536367 2025] [:error] [pid 53838:tid 53871] [client 66.249.64.101:42577] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIPGZ8M7CH_vMhLrzINmQAAAEI"]
[Fri Dec 05 06:45:47.060807 2025] [:error] [pid 53838:tid 53872] [client 66.249.64.101:52520] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIPG58M7CH_vMhLrzINowAAAEM"]
[Fri Dec 05 06:45:47.703356 2025] [:error] [pid 24010:tid 24033] [client 66.249.64.101:64512] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIPG6tjRoDpxa46mwc7IwAAARU"]
[Fri Dec 05 06:45:50.525845 2025] [:error] [pid 53923:tid 53949] [client 66.249.64.101:63475] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIPHrl8ebZN0VCAVXAMOgAAANg"]
[Fri Dec 05 06:45:50.881365 2025] [:error] [pid 53839:tid 53903] [client 66.249.64.101:55141] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIPHqQOuERg_RN7bn-PLwAAAIc"]
[Fri Dec 05 06:45:52.556822 2025] [:error] [pid 53837:tid 53864] [client 66.249.64.101:60435] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIPIDbsUyTxys8OiMIvWQAAABY"]
[Fri Dec 05 06:45:54.558152 2025] [:error] [pid 53923:tid 53941] [client 66.249.64.101:55016] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIPIrl8ebZN0VCAVXAMQQAAANA"]
[Fri Dec 05 06:45:56.091468 2025] [:error] [pid 24010:tid 24012] [client 66.249.64.101:51047] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIPJKtjRoDpxa46mwc7NQAAAQA"]
[Fri Dec 05 06:45:58.940827 2025] [:error] [pid 53837:tid 53866] [client 66.249.64.101:41797] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIPJjbsUyTxys8OiMIvaQAAABg"]
[Fri Dec 05 06:46:32.339970 2025] [:error] [pid 53839:tid 53903] [client 66.249.64.101:46348] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIPSKQOuERg_RN7bn-PjwAAAIc"]
[Fri Dec 05 06:46:33.816756 2025] [:error] [pid 53837:tid 53847] [client 66.249.64.101:56119] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIPSTbsUyTxys8OiMIvsAAAAAU"]
[Fri Dec 05 06:46:35.929866 2025] [:error] [pid 24010:tid 24019] [client 66.249.64.101:46146] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIPS6tjRoDpxa46mwc7pQAAAQc"]
[Fri Dec 05 06:46:36.785061 2025] [:error] [pid 53923:tid 53940] [client 66.249.64.101:60772] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIPTLl8ebZN0VCAVXAMhQAAAM8"]
[Fri Dec 05 06:46:38.119155 2025] [:error] [pid 24010:tid 24033] [client 66.249.64.101:60314] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIPTqtjRoDpxa46mwc7sgAAARU"]
[Fri Dec 05 06:46:41.039950 2025] [:error] [pid 24010:tid 24022] [client 66.249.64.101:36772] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIPUatjRoDpxa46mwc7vgAAAQo"]
[Fri Dec 05 06:46:42.896326 2025] [:error] [pid 24010:tid 24015] [client 66.249.64.101:48622] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIPUqtjRoDpxa46mwc7zAAAAQM"]
[Fri Dec 05 06:46:44.008522 2025] [:error] [pid 53838:tid 53885] [client 66.249.64.101:65348] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIPVJ8M7CH_vMhLrzIOEgAAAFA"]
[Fri Dec 05 06:46:45.119417 2025] [:error] [pid 53923:tid 53933] [client 66.249.64.101:40190] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIPVbl8ebZN0VCAVXAMkwAAAMg"]
[Fri Dec 05 06:46:46.450923 2025] [:error] [pid 53839:tid 53917] [client 66.249.64.101:47793] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIPVqQOuERg_RN7bn-PuQAAAJU"]
[Fri Dec 05 06:46:48.167774 2025] [:error] [pid 53837:tid 53854] [client 66.249.64.101:53727] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIPWDbsUyTxys8OiMIvxQAAAAw"]
[Fri Dec 05 06:46:49.719366 2025] [:error] [pid 24010:tid 24030] [client 66.249.64.101:58999] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIPWatjRoDpxa46mwc77wAAARI"]
[Fri Dec 05 06:46:52.741495 2025] [:error] [pid 53837:tid 53846] [client 66.249.64.101:35031] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIPXDbsUyTxys8OiMIvyQAAAAQ"]
[Fri Dec 05 06:46:53.886663 2025] [:error] [pid 53838:tid 53891] [client 66.249.64.101:53210] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIPXZ8M7CH_vMhLrzIOJQAAAFY"]
[Fri Dec 05 06:46:55.029199 2025] [:error] [pid 53923:tid 53939] [client 66.249.64.101:64392] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIPX7l8ebZN0VCAVXAMuQAAAM4"]
[Fri Dec 05 06:46:56.512088 2025] [:error] [pid 53838:tid 53880] [client 66.249.64.101:52204] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIPYJ8M7CH_vMhLrzIOMgAAAEs"]
[Fri Dec 05 06:46:57.658212 2025] [:error] [pid 53923:tid 53927] [client 66.249.64.101:36972] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIPYbl8ebZN0VCAVXAMxQAAAMI"]
[Fri Dec 05 06:46:58.936729 2025] [:error] [pid 53837:tid 53858] [client 66.249.64.101:49336] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIPYjbsUyTxys8OiMIv2gAAABA"]
[Fri Dec 05 06:47:00.400244 2025] [:error] [pid 53838:tid 53872] [client 66.249.64.101:36609] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIPZJ8M7CH_vMhLrzIOPAAAAEM"]
[Fri Dec 05 06:47:02.409331 2025] [:error] [pid 53923:tid 53928] [client 66.249.64.101:63627] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIPZrl8ebZN0VCAVXAM3QAAAMM"]
[Fri Dec 05 06:47:03.802412 2025] [:error] [pid 53923:tid 53938] [client 66.249.64.101:45393] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIPZ7l8ebZN0VCAVXAM4gAAAM0"]
[Fri Dec 05 06:47:04.990109 2025] [:error] [pid 53839:tid 53905] [client 66.249.64.101:62520] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIPaKQOuERg_RN7bn-P7AAAAIk"]
[Fri Dec 05 06:47:05.873534 2025] [:error] [pid 24010:tid 24018] [client 66.249.64.101:60237] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIPaatjRoDpxa46mwc8QQAAAQY"]
[Fri Dec 05 06:47:06.799211 2025] [:error] [pid 53837:tid 53843] [client 66.249.64.101:42883] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIPajbsUyTxys8OiMIv7AAAAAE"]
[Fri Dec 05 06:47:07.755367 2025] [:error] [pid 24010:tid 24024] [client 66.249.64.101:50219] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIPa6tjRoDpxa46mwc8SAAAAQw"]
[Fri Dec 05 06:47:09.284334 2025] [:error] [pid 53923:tid 53948] [client 66.249.64.101:39555] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIPbbl8ebZN0VCAVXANBQAAANc"]
[Fri Dec 05 06:47:10.563485 2025] [:error] [pid 53839:tid 53911] [client 66.249.64.101:42770] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIPbqQOuERg_RN7bn-P8AAAAI8"]
[Fri Dec 05 06:47:11.811287 2025] [:error] [pid 24010:tid 24017] [client 66.249.64.101:49325] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIPb6tjRoDpxa46mwc8WQAAAQU"]
[Fri Dec 05 06:47:13.226372 2025] [:error] [pid 53839:tid 53896] [client 66.249.64.101:39392] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIPcaQOuERg_RN7bn-P9QAAAIA"]
[Fri Dec 05 06:47:14.052639 2025] [:error] [pid 24010:tid 24033] [client 66.249.64.101:38195] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIPcqtjRoDpxa46mwc8aQAAARU"]
[Fri Dec 05 06:47:15.508699 2025] [:error] [pid 53923:tid 53942] [client 66.249.64.101:63150] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIPc7l8ebZN0VCAVXANMgAAANE"]
[Fri Dec 05 06:47:17.133304 2025] [:error] [pid 53837:tid 53859] [client 66.249.64.101:42373] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIPdTbsUyTxys8OiMIwDAAAABE"]
[Fri Dec 05 06:47:18.197899 2025] [:error] [pid 53837:tid 53861] [client 66.249.64.101:40663] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIPdjbsUyTxys8OiMIwEwAAABM"]
[Fri Dec 05 06:47:19.465929 2025] [:error] [pid 24010:tid 24017] [client 66.249.64.101:41058] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIPd6tjRoDpxa46mwc8fQAAAQU"]
[Fri Dec 05 06:47:19.742018 2025] [:error] [pid 53923:tid 53926] [client 66.249.64.101:46105] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIPd7l8ebZN0VCAVXANNQAAAME"]
[Fri Dec 05 06:47:20.794180 2025] [:error] [pid 53837:tid 53853] [client 66.249.64.101:57276] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIPeDbsUyTxys8OiMIwGgAAAAs"]
[Fri Dec 05 06:47:22.490247 2025] [:error] [pid 53837:tid 53861] [client 66.249.64.101:34799] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIPejbsUyTxys8OiMIwIAAAABM"]
[Fri Dec 05 06:47:24.565239 2025] [:error] [pid 53837:tid 53842] [client 66.249.64.101:45674] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIPfDbsUyTxys8OiMIwKQAAAAA"]
[Fri Dec 05 06:47:47.783866 2025] [:error] [pid 24010:tid 24016] [client 66.249.64.101:46701] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIPk6tjRoDpxa46mwc81QAAAQQ"]
[Fri Dec 05 06:47:49.421868 2025] [:error] [pid 24010:tid 24022] [client 66.249.64.101:48923] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIPlatjRoDpxa46mwc83gAAAQo"]
[Fri Dec 05 06:47:52.435613 2025] [:error] [pid 24010:tid 24023] [client 66.249.64.101:45667] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIPmKtjRoDpxa46mwc85QAAAQs"]
[Fri Dec 05 06:47:53.742880 2025] [:error] [pid 53837:tid 53866] [client 66.249.64.101:61987] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIPmTbsUyTxys8OiMIwZAAAABg"]
[Fri Dec 05 06:47:56.010892 2025] [:error] [pid 53923:tid 53934] [client 66.249.64.101:54997] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIPnLl8ebZN0VCAVXANlgAAAMk"]
[Fri Dec 05 06:47:57.620761 2025] [:error] [pid 24010:tid 24021] [client 66.249.64.101:45423] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIPnatjRoDpxa46mwc88gAAAQk"]
[Fri Dec 05 06:47:58.920836 2025] [:error] [pid 24010:tid 24031] [client 66.249.64.101:58802] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIPnqtjRoDpxa46mwc89wAAARM"]
[Fri Dec 05 06:47:59.906504 2025] [:error] [pid 53923:tid 53943] [client 66.249.64.101:45197] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIPn7l8ebZN0VCAVXANogAAANI"]
[Fri Dec 05 06:48:00.981287 2025] [:error] [pid 53837:tid 53851] [client 66.249.64.101:57974] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIPoDbsUyTxys8OiMIwdAAAAAk"]
[Fri Dec 05 06:48:02.672670 2025] [:error] [pid 53839:tid 53913] [client 66.249.64.101:41898] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIPoqQOuERg_RN7bn-QSwAAAJE"]
[Fri Dec 05 06:48:04.405035 2025] [:error] [pid 53838:tid 53880] [client 66.249.64.101:52248] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIPpJ8M7CH_vMhLrzIPBwAAAEs"]
[Fri Dec 05 06:48:06.107377 2025] [:error] [pid 24010:tid 24021] [client 66.249.64.101:43116] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIPpqtjRoDpxa46mwc9DQAAAQk"]
[Fri Dec 05 06:48:07.732124 2025] [:error] [pid 24010:tid 24030] [client 66.249.64.101:52603] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIPp6tjRoDpxa46mwc9EwAAARI"]
[Fri Dec 05 06:48:09.172371 2025] [:error] [pid 24010:tid 24023] [client 66.249.64.101:58277] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIPqatjRoDpxa46mwc9GwAAAQs"]
[Fri Dec 05 06:48:11.016801 2025] [:error] [pid 24010:tid 24032] [client 66.249.64.101:52542] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIPq6tjRoDpxa46mwc9JgAAARQ"]
[Fri Dec 05 06:48:12.722782 2025] [:error] [pid 53923:tid 53944] [client 66.249.64.101:41893] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIPrLl8ebZN0VCAVXANtgAAANM"]
[Fri Dec 05 06:48:16.521684 2025] [:error] [pid 53839:tid 53909] [client 66.249.64.101:45423] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIPsKQOuERg_RN7bn-QYwAAAI0"]
[Fri Dec 05 06:48:17.750415 2025] [:error] [pid 24010:tid 24024] [client 66.249.64.101:62162] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIPsatjRoDpxa46mwc9NAAAAQw"]
[Fri Dec 05 06:48:21.325217 2025] [:error] [pid 53923:tid 53942] [client 66.249.64.101:53531] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIPtbl8ebZN0VCAVXANvgAAANE"]
[Fri Dec 05 06:48:22.627080 2025] [:error] [pid 24010:tid 24014] [client 66.249.64.101:58414] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIPtqtjRoDpxa46mwc9QgAAAQI"]
[Fri Dec 05 06:48:23.890718 2025] [:error] [pid 53923:tid 53940] [client 66.249.64.101:49693] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIPt7l8ebZN0VCAVXANwwAAAM8"]
[Fri Dec 05 06:48:25.147631 2025] [:error] [pid 53838:tid 53869] [client 66.249.64.101:43496] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIPuZ8M7CH_vMhLrzIPIAAAAEA"]
[Fri Dec 05 06:48:26.524695 2025] [:error] [pid 53923:tid 53944] [client 66.249.64.101:40907] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIPurl8ebZN0VCAVXAN0QAAANM"]
[Fri Dec 05 06:48:28.217309 2025] [:error] [pid 24010:tid 24023] [client 66.249.64.101:37414] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIPvKtjRoDpxa46mwc9VQAAAQs"]
[Fri Dec 05 06:48:30.855449 2025] [:error] [pid 53838:tid 53870] [client 66.249.64.101:36724] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIPvp8M7CH_vMhLrzIPKQAAAEE"]
[Fri Dec 05 06:48:31.654307 2025] [:error] [pid 24010:tid 24025] [client 66.249.64.101:41195] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIPv6tjRoDpxa46mwc9XQAAAQ0"]
[Fri Dec 05 06:48:33.309282 2025] [:error] [pid 53923:tid 53936] [client 66.249.64.101:44388] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIPwbl8ebZN0VCAVXAN3wAAAMs"]
[Fri Dec 05 06:48:34.837155 2025] [:error] [pid 53837:tid 53854] [client 66.249.64.101:50039] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIPwjbsUyTxys8OiMIwpwAAAAw"]
[Fri Dec 05 06:48:36.724358 2025] [:error] [pid 24010:tid 24034] [client 66.249.64.101:58904] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIPxKtjRoDpxa46mwc9bAAAARY"]
[Fri Dec 05 06:48:38.352039 2025] [:error] [pid 53838:tid 53891] [client 66.249.64.101:42200] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIPxp8M7CH_vMhLrzIPNQAAAFY"]
[Fri Dec 05 06:48:40.081999 2025] [:error] [pid 53837:tid 53851] [client 66.249.64.101:48273] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIPyDbsUyTxys8OiMIwrwAAAAk"]
[Fri Dec 05 06:48:42.268713 2025] [:error] [pid 53923:tid 53947] [client 66.249.64.101:40826] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIPyrl8ebZN0VCAVXAOBAAAANY"]
[Fri Dec 05 06:48:43.598877 2025] [:error] [pid 53923:tid 53942] [client 66.249.64.101:35905] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIPy7l8ebZN0VCAVXAOBwAAANE"]
[Fri Dec 05 06:48:44.900181 2025] [:error] [pid 24010:tid 24036] [client 66.249.64.101:64542] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIPzKtjRoDpxa46mwc9ewAAARg"]
[Fri Dec 05 06:49:11.105120 2025] [:error] [pid 53838:tid 53878] [client 66.249.64.101:48951] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIP558M7CH_vMhLrzIPmAAAAEk"]
[Fri Dec 05 06:49:14.741761 2025] [:error] [pid 24010:tid 24025] [client 66.249.64.101:63346] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIP6qtjRoDpxa46mwc9sQAAAQ0"]
[Fri Dec 05 06:49:19.680317 2025] [:error] [pid 24010:tid 24028] [client 66.249.64.101:59640] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIP76tjRoDpxa46mwc9vAAAARA"]
[Fri Dec 05 06:49:20.117935 2025] [:error] [pid 24010:tid 24035] [client 66.249.64.101:64719] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIP8KtjRoDpxa46mwc9vgAAARc"]
[Fri Dec 05 06:49:21.904435 2025] [:error] [pid 53839:tid 53912] [client 66.249.64.101:43159] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIP8aQOuERg_RN7bn-RKgAAAJA"]
[Fri Dec 05 06:49:26.067761 2025] [:error] [pid 53837:tid 53846] [client 66.249.64.101:55966] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIP9jbsUyTxys8OiMIxCgAAAAQ"]
[Fri Dec 05 06:49:27.369018 2025] [:error] [pid 53837:tid 53845] [client 66.249.64.101:39699] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIP9zbsUyTxys8OiMIxDgAAAAM"]
[Fri Dec 05 06:49:29.628904 2025] [:error] [pid 24010:tid 24034] [client 66.249.64.101:37821] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIP-atjRoDpxa46mwc94wAAARY"]
[Fri Dec 05 06:49:31.054586 2025] [:error] [pid 53839:tid 53917] [client 66.249.64.101:39944] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIP-6QOuERg_RN7bn-RWwAAAJU"]
[Fri Dec 05 06:49:33.717034 2025] [:error] [pid 24010:tid 24027] [client 66.249.64.101:37818] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIP_atjRoDpxa46mwc98wAAAQ8"]
[Fri Dec 05 06:49:35.081261 2025] [:error] [pid 24010:tid 24018] [client 66.249.64.101:49751] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIP_6tjRoDpxa46mwc99wAAAQY"]
[Fri Dec 05 06:49:37.665994 2025] [:error] [pid 53923:tid 53928] [client 66.249.64.101:55837] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIQAbl8ebZN0VCAVXAOiAAAAMM"]
[Fri Dec 05 06:49:39.514311 2025] [:error] [pid 53837:tid 53851] [client 66.249.64.101:49179] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIQAzbsUyTxys8OiMIxSwAAAAk"]
[Fri Dec 05 06:49:41.703639 2025] [:error] [pid 53838:tid 53893] [client 66.249.64.101:39305] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIQBZ8M7CH_vMhLrzIPxAAAAFg"]
[Fri Dec 05 06:49:43.544010 2025] [:error] [pid 53923:tid 53937] [client 66.249.64.101:38493] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIQB7l8ebZN0VCAVXAOmAAAAMw"]
[Fri Dec 05 06:49:46.231852 2025] [:error] [pid 24010:tid 24028] [client 66.249.64.101:35107] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIQCqtjRoDpxa46mwc-BwAAARA"]
[Fri Dec 05 06:49:47.926951 2025] [:error] [pid 53839:tid 53902] [client 66.249.64.101:48685] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIQC6QOuERg_RN7bn-RjwAAAIY"]
[Fri Dec 05 06:49:56.390930 2025] [:error] [pid 24010:tid 24012] [client 66.249.64.101:64157] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIQFKtjRoDpxa46mwc-GwAAAQA"]
[Fri Dec 05 06:49:58.609706 2025] [:error] [pid 53838:tid 53878] [client 66.249.64.101:35332] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIQFp8M7CH_vMhLrzIP3QAAAEk"]
[Fri Dec 05 06:50:02.826564 2025] [:error] [pid 53923:tid 53929] [client 66.249.64.101:43733] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIQGrl8ebZN0VCAVXAO3gAAAMQ"]
[Fri Dec 05 06:50:35.569013 2025] [:error] [pid 53839:tid 53912] [client 66.249.64.101:44272] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIQO6QOuERg_RN7bn-SegAAAJA"]
[Fri Dec 05 06:50:38.105773 2025] [:error] [pid 53838:tid 53873] [client 66.249.64.101:39085] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIQPp8M7CH_vMhLrzIQeAAAAEQ"]
[Fri Dec 05 06:50:42.152799 2025] [:error] [pid 53837:tid 53844] [client 66.249.64.101:52321] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIQQjbsUyTxys8OiMIxwAAAAAI"]
[Fri Dec 05 06:50:44.156270 2025] [:error] [pid 53837:tid 53852] [client 66.249.64.101:57162] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIQRDbsUyTxys8OiMIxxgAAAAo"]
[Fri Dec 05 06:50:48.179073 2025] [:error] [pid 53923:tid 53929] [client 66.249.64.101:55719] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIQSLl8ebZN0VCAVXAPdwAAAMQ"]
[Fri Dec 05 06:50:50.120699 2025] [:error] [pid 53839:tid 53907] [client 66.249.64.101:52651] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIQSqQOuERg_RN7bn-SmgAAAIs"]
[Fri Dec 05 06:50:50.923805 2025] [:error] [pid 24010:tid 24035] [client 66.249.64.101:57032] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIQSqtjRoDpxa46mwc-wgAAARc"]
[Fri Dec 05 06:50:51.574290 2025] [:error] [pid 53837:tid 53862] [client 66.249.64.101:44721] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIQSzbsUyTxys8OiMIx2AAAABQ"]
[Fri Dec 05 06:50:52.452402 2025] [:error] [pid 53837:tid 53857] [client 66.249.64.101:53498] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIQTDbsUyTxys8OiMIx2gAAAA8"]
[Fri Dec 05 06:50:53.898488 2025] [:error] [pid 53838:tid 53891] [client 66.249.64.101:61164] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIQTZ8M7CH_vMhLrzIQngAAAFY"]
[Fri Dec 05 06:50:55.787516 2025] [:error] [pid 53923:tid 53940] [client 66.249.64.101:62739] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIQT7l8ebZN0VCAVXAPhwAAAM8"]
[Fri Dec 05 06:50:57.376964 2025] [:error] [pid 53837:tid 53859] [client 66.249.64.101:46719] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIQUTbsUyTxys8OiMIx3wAAABE"]
[Fri Dec 05 06:50:58.903123 2025] [:error] [pid 24010:tid 24022] [client 66.249.64.101:38308] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIQUqtjRoDpxa46mwc-3wAAAQo"]
[Fri Dec 05 06:51:00.775267 2025] [:error] [pid 53839:tid 53916] [client 66.249.64.101:50680] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIQVKQOuERg_RN7bn-StwAAAJQ"]
[Fri Dec 05 06:51:03.554985 2025] [:error] [pid 53837:tid 53847] [client 66.249.64.101:46205] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIQVzbsUyTxys8OiMIx7AAAAAU"]
[Fri Dec 05 06:51:05.293913 2025] [:error] [pid 53837:tid 53862] [client 66.249.64.101:54758] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIQWTbsUyTxys8OiMIx-QAAABQ"]
[Fri Dec 05 06:51:07.645608 2025] [:error] [pid 24010:tid 24025] [client 66.249.64.101:57839] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIQW6tjRoDpxa46mwc--QAAAQ0"]
[Fri Dec 05 06:51:09.071314 2025] [:error] [pid 53839:tid 53900] [client 66.249.64.101:40926] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIQXaQOuERg_RN7bn-S3QAAAIQ"]
[Fri Dec 05 06:51:12.744085 2025] [:error] [pid 24010:tid 24017] [client 66.249.64.101:35447] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIQYKtjRoDpxa46mwc-_wAAAQU"]
[Fri Dec 05 06:51:15.523969 2025] [:error] [pid 53837:tid 53864] [client 66.249.64.101:59398] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIQYzbsUyTxys8OiMIyKgAAABY"]
[Fri Dec 05 06:51:17.639520 2025] [:error] [pid 24010:tid 24030] [client 66.249.64.101:59028] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIQZatjRoDpxa46mwc_EwAAARI"]
[Fri Dec 05 06:51:19.386063 2025] [:error] [pid 53839:tid 53897] [client 66.249.64.101:41707] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIQZ6QOuERg_RN7bn-S7gAAAIE"]
[Fri Dec 05 06:51:20.335692 2025] [:error] [pid 24010:tid 24036] [client 66.249.64.101:51761] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIQaKtjRoDpxa46mwc_IQAAARg"]
[Fri Dec 05 06:51:22.136757 2025] [:error] [pid 53923:tid 53926] [client 66.249.64.101:46063] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIQarl8ebZN0VCAVXAP3gAAAME"]
[Fri Dec 05 06:51:24.857298 2025] [:error] [pid 53838:tid 53870] [client 66.249.64.101:35192] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIQbJ8M7CH_vMhLrzIRAwAAAEE"]
[Fri Dec 05 06:51:26.382711 2025] [:error] [pid 53923:tid 53940] [client 66.249.64.101:55760] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIQbrl8ebZN0VCAVXAP6AAAAM8"]
[Fri Dec 05 06:51:28.224781 2025] [:error] [pid 53923:tid 53941] [client 66.249.64.101:51263] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIQcLl8ebZN0VCAVXAP-gAAANA"]
[Fri Dec 05 06:51:30.466827 2025] [:error] [pid 53923:tid 53929] [client 66.249.64.101:57032] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIQcrl8ebZN0VCAVXAQBwAAAMQ"]
[Fri Dec 05 06:51:57.125786 2025] [:error] [pid 24010:tid 24026] [client 66.249.64.101:42073] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIQjatjRoDpxa46mwc_8QAAAQ4"]
[Fri Dec 05 06:52:00.129338 2025] [:error] [pid 24010:tid 24031] [client 66.249.64.101:51449] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIQkKtjRoDpxa46mwc_-QAAARM"]
[Fri Dec 05 06:52:02.437099 2025] [:error] [pid 53837:tid 53861] [client 66.249.64.101:58534] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIQkjbsUyTxys8OiMIygwAAABM"]
[Fri Dec 05 06:52:04.611360 2025] [:error] [pid 53838:tid 53887] [client 66.249.64.101:36746] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIQlJ8M7CH_vMhLrzIRSwAAAFI"]
[Fri Dec 05 06:52:06.354011 2025] [:error] [pid 24010:tid 24029] [client 66.249.64.101:39403] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIQlqtjRoDpxa46mwdAFgAAARE"]
[Fri Dec 05 06:52:08.095880 2025] [:error] [pid 53839:tid 53906] [client 66.249.64.101:45687] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIQmKQOuERg_RN7bn-TYQAAAIo"]
[Fri Dec 05 06:52:10.985116 2025] [:error] [pid 24010:tid 24027] [client 66.249.64.101:41086] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIQmqtjRoDpxa46mwdALgAAAQ8"]
[Fri Dec 05 06:52:12.417840 2025] [:error] [pid 53839:tid 53898] [client 66.249.64.101:56220] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIQnKQOuERg_RN7bn-TbwAAAII"]
[Fri Dec 05 06:52:15.160648 2025] [:error] [pid 53838:tid 53886] [client 66.249.64.101:52761] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIQn58M7CH_vMhLrzIRWwAAAFE"]
[Fri Dec 05 06:52:16.893860 2025] [:error] [pid 24010:tid 24013] [client 66.249.64.101:61782] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIQoKtjRoDpxa46mwdAQgAAAQE"]
[Fri Dec 05 06:52:18.443478 2025] [:error] [pid 53923:tid 53945] [client 66.249.64.101:49865] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIQorl8ebZN0VCAVXAQlgAAANQ"]
[Fri Dec 05 06:52:20.830467 2025] [:error] [pid 53837:tid 53850] [client 66.249.64.101:60568] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIQpDbsUyTxys8OiMIykgAAAAg"]
[Fri Dec 05 06:52:22.632795 2025] [:error] [pid 24010:tid 24026] [client 66.249.64.101:40199] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIQpqtjRoDpxa46mwdAWgAAAQ4"]
[Fri Dec 05 06:52:26.153175 2025] [:error] [pid 53923:tid 53928] [client 66.249.64.101:46371] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIQqrl8ebZN0VCAVXAQpQAAAMM"]
[Fri Dec 05 06:52:27.585514 2025] [:error] [pid 24010:tid 24028] [client 66.249.64.101:41026] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIQq6tjRoDpxa46mwdAZQAAARA"]
[Fri Dec 05 06:52:28.196810 2025] [:error] [pid 53923:tid 53935] [client 66.249.64.101:57298] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIQrLl8ebZN0VCAVXAQqQAAAMo"]
[Fri Dec 05 06:52:29.305038 2025] [:error] [pid 53838:tid 53870] [client 66.249.64.101:45545] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIQrZ8M7CH_vMhLrzIRbAAAAEE"]
[Fri Dec 05 06:52:33.772484 2025] [:error] [pid 53839:tid 53902] [client 66.249.64.101:37811] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIQsaQOuERg_RN7bn-TnQAAAIY"]
[Fri Dec 05 06:52:35.481525 2025] [:error] [pid 53837:tid 53849] [client 66.249.64.101:41768] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIQszbsUyTxys8OiMIynAAAAAc"]
[Fri Dec 05 06:52:38.034996 2025] [:error] [pid 53838:tid 53869] [client 66.249.64.101:55161] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIQtp8M7CH_vMhLrzIRjQAAAEA"]
[Fri Dec 05 06:52:39.851527 2025] [:error] [pid 53837:tid 53856] [client 66.249.64.101:39508] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIQtzbsUyTxys8OiMIyowAAAA4"]
[Fri Dec 05 06:52:41.409784 2025] [:error] [pid 24010:tid 24012] [client 66.249.64.101:51532] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIQuatjRoDpxa46mwdAiQAAAQA"]
[Fri Dec 05 06:52:43.771639 2025] [:error] [pid 53838:tid 53886] [client 66.249.64.101:52633] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIQu58M7CH_vMhLrzIRoQAAAFE"]
[Fri Dec 05 06:52:45.546418 2025] [:error] [pid 53837:tid 53856] [client 66.249.64.101:58592] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIQvTbsUyTxys8OiMIysgAAAA4"]
[Fri Dec 05 06:52:48.306982 2025] [:error] [pid 53837:tid 53850] [client 66.249.64.101:57796] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIQwDbsUyTxys8OiMIywQAAAAg"]
[Fri Dec 05 06:52:49.862953 2025] [:error] [pid 53923:tid 53936] [client 66.249.64.101:52508] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIQwbl8ebZN0VCAVXAQwwAAAMs"]
[Fri Dec 05 06:52:52.749941 2025] [:error] [pid 24010:tid 24013] [client 66.249.64.101:42295] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIQxKtjRoDpxa46mwdAowAAAQE"]
[Fri Dec 05 06:53:21.633383 2025] [:error] [pid 53839:tid 53902] [client 66.249.64.101:53783] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIQ4aQOuERg_RN7bn-T-QAAAIY"]
[Fri Dec 05 06:53:23.334676 2025] [:error] [pid 53923:tid 53943] [client 66.249.64.101:64930] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIQ47l8ebZN0VCAVXARAgAAANI"]
[Fri Dec 05 06:53:27.477319 2025] [:error] [pid 53839:tid 53920] [client 66.249.64.101:55862] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIQ56QOuERg_RN7bn-UBgAAAJg"]
[Fri Dec 05 06:53:28.883711 2025] [:error] [pid 24010:tid 24012] [client 66.249.64.101:57995] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIQ6KtjRoDpxa46mwdA4QAAAQA"]
[Fri Dec 05 06:53:30.936821 2025] [:error] [pid 53837:tid 53853] [client 66.249.64.101:52551] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIQ6jbsUyTxys8OiMIzQQAAAAs"]
[Fri Dec 05 06:53:32.956941 2025] [:error] [pid 24010:tid 24033] [client 66.249.64.101:48577] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIQ7KtjRoDpxa46mwdA-QAAARU"]
[Fri Dec 05 06:53:35.290843 2025] [:error] [pid 53839:tid 53916] [client 66.249.64.101:54838] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIQ76QOuERg_RN7bn-ULAAAAJQ"]
[Fri Dec 05 06:53:38.860527 2025] [:error] [pid 53923:tid 53930] [client 66.249.64.101:53032] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIQ8rl8ebZN0VCAVXARLAAAAMU"]
[Fri Dec 05 06:53:39.920643 2025] [:error] [pid 53923:tid 53942] [client 66.249.64.101:64054] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIQ87l8ebZN0VCAVXARLgAAANE"]
[Fri Dec 05 06:53:41.387984 2025] [:error] [pid 53838:tid 53886] [client 66.249.64.101:36959] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIQ9Z8M7CH_vMhLrzISAQAAAFE"]
[Fri Dec 05 06:53:43.055524 2025] [:error] [pid 24010:tid 24018] [client 66.249.64.101:47406] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIQ96tjRoDpxa46mwdBFgAAAQY"]
[Fri Dec 05 06:53:45.483733 2025] [:error] [pid 53838:tid 53879] [client 66.249.64.101:37260] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIQ-Z8M7CH_vMhLrzISCAAAAEo"]
[Fri Dec 05 06:53:47.104012 2025] [:error] [pid 53837:tid 53850] [client 66.249.64.101:51407] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIQ-zbsUyTxys8OiMIzYAAAAAg"]
[Fri Dec 05 06:53:49.825328 2025] [:error] [pid 53838:tid 53878] [client 66.249.64.101:41949] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIQ_Z8M7CH_vMhLrzISDAAAAEk"]
[Fri Dec 05 06:53:51.536766 2025] [:error] [pid 53837:tid 53862] [client 66.249.64.101:54158] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIQ_zbsUyTxys8OiMIzcwAAABQ"]
[Fri Dec 05 06:53:54.203767 2025] [:error] [pid 53923:tid 53927] [client 66.249.64.101:37687] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIRArl8ebZN0VCAVXARPQAAAMI"]
[Fri Dec 05 06:53:55.906290 2025] [:error] [pid 53839:tid 53904] [client 66.249.64.101:46838] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIRA6QOuERg_RN7bn-UXgAAAIg"]
[Fri Dec 05 06:53:58.278938 2025] [:error] [pid 53923:tid 53949] [client 66.249.64.101:44800] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIRBrl8ebZN0VCAVXARQwAAANg"]
[Fri Dec 05 06:53:59.967142 2025] [:error] [pid 53923:tid 53933] [client 66.249.64.101:53007] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIRB7l8ebZN0VCAVXARRQAAAMg"]
[Fri Dec 05 06:54:02.816947 2025] [:error] [pid 53839:tid 53911] [client 66.249.64.101:50235] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIRCqQOuERg_RN7bn-UbAAAAI8"]
[Fri Dec 05 06:54:04.281663 2025] [:error] [pid 53923:tid 53946] [client 66.249.64.101:60874] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIRDLl8ebZN0VCAVXARSgAAANU"]
[Fri Dec 05 06:54:06.722605 2025] [:error] [pid 53923:tid 53949] [client 66.249.64.101:55556] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIRDrl8ebZN0VCAVXARUAAAANg"]
[Fri Dec 05 06:54:08.173045 2025] [:error] [pid 24010:tid 24013] [client 66.249.64.101:59816] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIREKtjRoDpxa46mwdBUQAAAQE"]
[Fri Dec 05 06:54:08.438072 2025] [:error] [pid 24010:tid 24032] [client 66.249.64.101:39202] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIREKtjRoDpxa46mwdBUwAAARQ"]
[Fri Dec 05 06:54:10.430927 2025] [:error] [pid 53837:tid 53861] [client 66.249.64.101:64337] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIREjbsUyTxys8OiMIzsgAAABM"]
[Fri Dec 05 06:54:12.673364 2025] [:error] [pid 53838:tid 53879] [client 66.249.64.101:41513] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIRFJ8M7CH_vMhLrzISKgAAAEo"]
[Fri Dec 05 06:54:14.527250 2025] [:error] [pid 53923:tid 53943] [client 66.249.64.101:62298] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIRFrl8ebZN0VCAVXARZAAAANI"]
[Fri Dec 05 06:54:15.150593 2025] [:error] [pid 53839:tid 53916] [client 66.249.64.101:49021] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIRF6QOuERg_RN7bn-UgQAAAJQ"]
[Fri Dec 05 06:54:41.071846 2025] [:error] [pid 53839:tid 53915] [client 66.249.64.101:42639] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIRMaQOuERg_RN7bn-UxQAAAJM"]
[Fri Dec 05 06:54:44.279258 2025] [:error] [pid 53923:tid 53935] [client 66.249.64.101:39291] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIRNLl8ebZN0VCAVXARuwAAAMo"]
[Fri Dec 05 06:54:48.717623 2025] [:error] [pid 53839:tid 53916] [client 66.249.64.101:39492] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIROKQOuERg_RN7bn-U0gAAAJQ"]
[Fri Dec 05 06:54:49.660315 2025] [:error] [pid 53923:tid 53945] [client 66.249.64.101:55581] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIRObl8ebZN0VCAVXARywAAANQ"]
[Fri Dec 05 06:54:50.363501 2025] [:error] [pid 53923:tid 53932] [client 66.249.64.101:36014] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIROrl8ebZN0VCAVXAR0QAAAMc"]
[Fri Dec 05 06:54:53.047877 2025] [:error] [pid 53923:tid 53945] [client 66.249.64.101:54006] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIRPbl8ebZN0VCAVXAR2wAAANQ"]
[Fri Dec 05 06:54:54.757460 2025] [:error] [pid 53837:tid 53846] [client 66.249.64.101:54808] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIRPjbsUyTxys8OiMI0DwAAAAQ"]
[Fri Dec 05 06:54:57.116222 2025] [:error] [pid 53837:tid 53862] [client 66.249.64.101:51532] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIRQTbsUyTxys8OiMI0EgAAABQ"]
[Fri Dec 05 06:54:58.772999 2025] [:error] [pid 53923:tid 53930] [client 66.249.64.101:45053] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIRQrl8ebZN0VCAVXAR5QAAAMU"]
[Fri Dec 05 06:55:01.498642 2025] [:error] [pid 53839:tid 53917] [client 66.249.64.101:62030] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIRRaQOuERg_RN7bn-U3wAAAJU"]
[Fri Dec 05 06:55:11.639448 2025] [:error] [pid 53923:tid 53945] [client 66.249.64.101:38852] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIRT7l8ebZN0VCAVXASGQAAANQ"]
[Fri Dec 05 06:55:13.309833 2025] [:error] [pid 53838:tid 53873] [client 66.249.64.101:61391] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIRUZ8M7CH_vMhLrzISkQAAAEQ"]
[Fri Dec 05 06:55:16.008485 2025] [:error] [pid 53839:tid 53918] [client 66.249.64.101:63639] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIRVKQOuERg_RN7bn-U6gAAAJY"]
[Fri Dec 05 06:55:17.611596 2025] [:error] [pid 53839:tid 53905] [client 66.249.64.101:57585] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIRVaQOuERg_RN7bn-U8AAAAIk"]
[Fri Dec 05 06:55:20.059109 2025] [:error] [pid 53837:tid 53860] [client 66.249.64.101:57644] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIRWDbsUyTxys8OiMI0PgAAABI"]
[Fri Dec 05 06:55:21.760991 2025] [:error] [pid 24010:tid 24033] [client 66.249.64.101:39716] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIRWatjRoDpxa46mwdCLwAAARU"]
[Fri Dec 05 06:55:24.314527 2025] [:error] [pid 53837:tid 53854] [client 66.249.64.101:51034] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIRXDbsUyTxys8OiMI0RAAAAAw"]
[Fri Dec 05 06:55:29.003977 2025] [:error] [pid 53837:tid 53850] [client 66.249.64.101:41496] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIRYTbsUyTxys8OiMI0UQAAAAg"]
[Fri Dec 05 06:55:30.539686 2025] [:error] [pid 24010:tid 24028] [client 66.249.64.101:62632] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIRYqtjRoDpxa46mwdCTwAAARA"]
[Fri Dec 05 06:55:31.104533 2025] [:error] [pid 53923:tid 53949] [client 66.249.64.101:60424] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIRY7l8ebZN0VCAVXASSAAAANg"]
[Fri Dec 05 06:55:32.245111 2025] [:error] [pid 53838:tid 53876] [client 66.249.64.101:47657] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIRZJ8M7CH_vMhLrzISzAAAAEc"]
[Fri Dec 05 06:55:33.244509 2025] [:error] [pid 53837:tid 53865] [client 66.249.64.101:34806] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIRZTbsUyTxys8OiMI0XQAAABc"]
[Fri Dec 05 06:55:34.599100 2025] [:error] [pid 53837:tid 53851] [client 66.249.64.101:37480] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIRZjbsUyTxys8OiMI0aAAAAAk"]
[Fri Dec 05 06:55:36.276931 2025] [:error] [pid 24010:tid 24012] [client 66.249.64.101:35985] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIRaKtjRoDpxa46mwdCagAAAQA"]
[Fri Dec 05 06:55:37.633734 2025] [:error] [pid 53923:tid 53940] [client 66.249.64.101:52899] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIRabl8ebZN0VCAVXASYgAAAM8"]
[Fri Dec 05 06:55:38.992330 2025] [:error] [pid 53838:tid 53893] [client 66.249.64.101:59156] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIRap8M7CH_vMhLrzIS4AAAAFg"]
[Fri Dec 05 06:56:01.124210 2025] [:error] [pid 53923:tid 53928] [client 66.249.64.101:41379] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIRgbl8ebZN0VCAVXASrAAAAMM"]
[Fri Dec 05 06:56:03.683049 2025] [:error] [pid 53923:tid 53939] [client 66.249.64.101:53626] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIRg7l8ebZN0VCAVXAStAAAAM4"]
[Fri Dec 05 06:56:05.330276 2025] [:error] [pid 53838:tid 53881] [client 66.249.64.101:40663] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIRhZ8M7CH_vMhLrzITIQAAAEw"]
[Fri Dec 05 06:56:07.018846 2025] [:error] [pid 53839:tid 53897] [client 66.249.64.101:53069] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIRh6QOuERg_RN7bn-VVgAAAIE"]
[Fri Dec 05 06:56:08.708854 2025] [:error] [pid 53837:tid 53842] [client 66.249.64.101:48471] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIRiDbsUyTxys8OiMI06QAAAAA"]
[Fri Dec 05 06:56:10.399273 2025] [:error] [pid 53839:tid 53906] [client 66.249.64.101:39090] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIRiqQOuERg_RN7bn-VXwAAAIo"]
[Fri Dec 05 06:56:12.172471 2025] [:error] [pid 53838:tid 53892] [client 66.249.64.101:53820] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIRjJ8M7CH_vMhLrzITJgAAAFc"]
[Fri Dec 05 06:56:14.185453 2025] [:error] [pid 53838:tid 53869] [client 66.249.64.101:54431] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIRjp8M7CH_vMhLrzITKwAAAEA"]
[Fri Dec 05 06:56:15.788295 2025] [:error] [pid 53838:tid 53893] [client 66.249.64.101:53443] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIRj58M7CH_vMhLrzITMAAAAFg"]
[Fri Dec 05 06:56:17.501015 2025] [:error] [pid 53837:tid 53864] [client 66.249.64.101:54018] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIRkTbsUyTxys8OiMI0-QAAABY"]
[Fri Dec 05 06:56:19.054141 2025] [:error] [pid 53838:tid 53890] [client 66.249.64.101:44634] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIRk58M7CH_vMhLrzITNQAAAFU"]
[Fri Dec 05 06:56:20.549508 2025] [:error] [pid 53839:tid 53905] [client 66.249.64.101:42040] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIRlKQOuERg_RN7bn-VdQAAAIk"]
[Fri Dec 05 06:56:22.068185 2025] [:error] [pid 53838:tid 53877] [client 66.249.64.101:58569] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIRlp8M7CH_vMhLrzITNwAAAEg"]
[Fri Dec 05 06:56:23.562731 2025] [:error] [pid 53839:tid 53898] [client 66.249.64.101:43698] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIRl6QOuERg_RN7bn-VfAAAAII"]
[Fri Dec 05 06:56:25.364657 2025] [:error] [pid 53838:tid 53873] [client 66.249.64.101:38545] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIRmZ8M7CH_vMhLrzITOgAAAEQ"]
[Fri Dec 05 06:56:26.869033 2025] [:error] [pid 53838:tid 53888] [client 66.249.64.101:62888] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIRmp8M7CH_vMhLrzITPwAAAFM"]
[Fri Dec 05 06:56:29.221533 2025] [:error] [pid 53839:tid 53912] [client 66.249.64.101:59045] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIRnaQOuERg_RN7bn-ViQAAAJA"]
[Fri Dec 05 06:56:30.013775 2025] [:error] [pid 53837:tid 53851] [client 66.249.64.101:45339] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIRnjbsUyTxys8OiMI1GAAAAAk"]
[Fri Dec 05 06:56:31.400858 2025] [:error] [pid 53839:tid 53899] [client 66.249.64.101:47360] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIRn6QOuERg_RN7bn-VkwAAAIM"]
[Fri Dec 05 06:56:33.206192 2025] [:error] [pid 53839:tid 53918] [client 66.249.64.101:65495] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIRoaQOuERg_RN7bn-VmAAAAJY"]
[Fri Dec 05 06:56:34.686064 2025] [:error] [pid 53837:tid 53861] [client 66.249.64.101:52242] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIRojbsUyTxys8OiMI1IwAAABM"]
[Fri Dec 05 06:56:36.230034 2025] [:error] [pid 53923:tid 53939] [client 66.249.64.101:36490] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIRpLl8ebZN0VCAVXATAgAAAM4"]
[Fri Dec 05 06:56:37.704986 2025] [:error] [pid 53923:tid 53942] [client 66.249.64.101:60760] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIRpbl8ebZN0VCAVXATCAAAANE"]
[Fri Dec 05 06:56:39.205779 2025] [:error] [pid 24010:tid 24033] [client 66.249.64.101:39313] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIRp6tjRoDpxa46mwdDEAAAARU"]
[Fri Dec 05 06:56:42.511530 2025] [:error] [pid 24010:tid 24019] [client 66.249.64.101:36585] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIRqqtjRoDpxa46mwdDGwAAAQc"]
[Fri Dec 05 06:56:44.003110 2025] [:error] [pid 53839:tid 53896] [client 66.249.64.101:61134] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIRrKQOuERg_RN7bn-VpAAAAIA"]
[Fri Dec 05 06:56:45.512960 2025] [:error] [pid 53923:tid 53949] [client 66.249.64.101:51709] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIRrbl8ebZN0VCAVXATIAAAANg"]
[Fri Dec 05 06:56:48.844390 2025] [:error] [pid 24010:tid 24015] [client 66.249.64.101:49854] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIRsKtjRoDpxa46mwdDMAAAAQM"]
[Fri Dec 05 06:56:50.323070 2025] [:error] [pid 53923:tid 53941] [client 66.249.64.101:53239] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIRsrl8ebZN0VCAVXATKQAAANA"]
[Fri Dec 05 06:56:51.830664 2025] [:error] [pid 24010:tid 24028] [client 66.249.64.101:50576] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIRs6tjRoDpxa46mwdDPAAAARA"]
[Fri Dec 05 06:56:53.315707 2025] [:error] [pid 53839:tid 53910] [client 66.249.64.101:62114] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIRtaQOuERg_RN7bn-VsAAAAI4"]
[Fri Dec 05 06:56:54.833636 2025] [:error] [pid 53838:tid 53883] [client 66.249.64.101:41249] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIRtp8M7CH_vMhLrzITcwAAAE4"]
[Fri Dec 05 06:56:56.646114 2025] [:error] [pid 53837:tid 53845] [client 66.249.64.101:58227] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIRuDbsUyTxys8OiMI1RwAAAAM"]
[Fri Dec 05 06:56:58.141697 2025] [:error] [pid 53923:tid 53934] [client 66.249.64.101:44450] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIRurl8ebZN0VCAVXATNwAAAMk"]
[Fri Dec 05 06:57:19.217789 2025] [:error] [pid 24010:tid 24017] [client 66.249.64.101:53998] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIRz6tjRoDpxa46mwdDhgAAAQU"]
[Fri Dec 05 06:57:21.563115 2025] [:error] [pid 24010:tid 24020] [client 66.249.64.101:42777] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIR0atjRoDpxa46mwdDkgAAAQg"]
[Fri Dec 05 06:57:24.519476 2025] [:error] [pid 53837:tid 53864] [client 66.249.64.101:49977] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIR1DbsUyTxys8OiMI1ywAAABY"]
[Fri Dec 05 06:57:27.829101 2025] [:error] [pid 24010:tid 24034] [client 66.249.64.101:40442] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIR16tjRoDpxa46mwdDngAAARY"]
[Fri Dec 05 06:57:29.318286 2025] [:error] [pid 53837:tid 53861] [client 66.249.64.101:34924] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIR2TbsUyTxys8OiMI1zgAAABM"]
[Fri Dec 05 06:57:30.835481 2025] [:error] [pid 53839:tid 53912] [client 66.249.64.101:56792] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIR2qQOuERg_RN7bn-WKQAAAJA"]
[Fri Dec 05 06:57:32.335904 2025] [:error] [pid 53923:tid 53948] [client 66.249.64.101:48519] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIR3Ll8ebZN0VCAVXATpgAAANc"]
[Fri Dec 05 06:57:33.830454 2025] [:error] [pid 53839:tid 53902] [client 66.249.64.101:42958] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIR3aQOuERg_RN7bn-WMwAAAIY"]
[Fri Dec 05 06:57:35.627907 2025] [:error] [pid 24010:tid 24031] [client 66.249.64.101:58215] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIR36tjRoDpxa46mwdDrQAAARM"]
[Fri Dec 05 06:57:37.133415 2025] [:error] [pid 53923:tid 53936] [client 66.249.64.101:39389] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIR4bl8ebZN0VCAVXATrQAAAMs"]
[Fri Dec 05 06:57:38.636714 2025] [:error] [pid 53837:tid 53862] [client 66.249.64.101:35804] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIR4jbsUyTxys8OiMI12QAAABQ"]
[Fri Dec 05 06:57:39.993780 2025] [:error] [pid 53839:tid 53912] [client 66.249.64.101:57510] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIR46QOuERg_RN7bn-WPAAAAJA"]
[Fri Dec 05 06:57:41.650746 2025] [:error] [pid 53837:tid 53851] [client 66.249.64.101:46692] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIR5TbsUyTxys8OiMI14AAAAAk"]
[Fri Dec 05 06:57:43.421435 2025] [:error] [pid 24010:tid 24022] [client 66.249.64.101:50324] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIR56tjRoDpxa46mwdDsgAAAQo"]
[Fri Dec 05 06:57:44.910811 2025] [:error] [pid 53923:tid 53940] [client 66.249.64.101:35142] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIR6Ll8ebZN0VCAVXATvgAAAM8"]
[Fri Dec 05 06:57:46.436600 2025] [:error] [pid 53923:tid 53946] [client 66.249.64.101:36832] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIR6rl8ebZN0VCAVXATwQAAANU"]
[Fri Dec 05 06:57:47.923121 2025] [:error] [pid 53839:tid 53901] [client 66.249.64.101:51991] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIR66QOuERg_RN7bn-WSQAAAIU"]
[Fri Dec 05 06:57:49.426813 2025] [:error] [pid 53837:tid 53863] [client 66.249.64.101:62387] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIR7TbsUyTxys8OiMI18wAAABU"]
[Fri Dec 05 06:57:51.220603 2025] [:error] [pid 24010:tid 24019] [client 66.249.64.101:36931] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIR76tjRoDpxa46mwdDuwAAAQc"]
[Fri Dec 05 06:57:52.740350 2025] [:error] [pid 53839:tid 53899] [client 66.249.64.101:35590] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIR8KQOuERg_RN7bn-WUQAAAIM"]
[Fri Dec 05 06:57:56.088202 2025] [:error] [pid 53838:tid 53884] [client 66.249.64.101:63870] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIR9J8M7CH_vMhLrzIUJgAAAE8"]
[Fri Dec 05 06:57:57.753726 2025] [:error] [pid 53837:tid 53852] [client 66.249.64.101:57455] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIR9TbsUyTxys8OiMI2BwAAAAo"]
[Fri Dec 05 06:57:59.682229 2025] [:error] [pid 53839:tid 53910] [client 66.249.64.101:43898] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIR96QOuERg_RN7bn-WXgAAAI4"]
[Fri Dec 05 06:58:09.807964 2025] [:error] [pid 53923:tid 53944] [client 66.249.64.101:47877] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTISAbl8ebZN0VCAVXAT7wAAANM"]
[Fri Dec 05 06:58:14.010293 2025] [:error] [pid 24010:tid 24020] [client 66.249.64.101:64862] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTISBqtjRoDpxa46mwdD6gAAAQg"]
[Fri Dec 05 06:58:30.993664 2025] [:error] [pid 53839:tid 53914] [client 49.150.201.79:8817] [client 49.150.201.79] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.150.201.79, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aTISFqQOuERg_RN7bn-WjQAAAJI"]
[Fri Dec 05 06:58:42.695467 2025] [:error] [pid 53837:tid 53860] [client 66.249.64.101:44695] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTISIjbsUyTxys8OiMI2ewAAABI"]
[Fri Dec 05 06:58:44.187162 2025] [:error] [pid 24010:tid 24017] [client 66.249.64.101:46232] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTISJKtjRoDpxa46mwdETwAAAQU"]
[Fri Dec 05 06:58:46.807692 2025] [:error] [pid 53837:tid 53843] [client 66.249.64.101:52518] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTISJjbsUyTxys8OiMI2gwAAAAE"]
[Fri Dec 05 06:58:47.904072 2025] [:error] [pid 53839:tid 53913] [client 66.249.64.101:63852] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTISJ6QOuERg_RN7bn-WrgAAAJE"]
[Fri Dec 05 06:58:48.305416 2025] [:error] [pid 53923:tid 53944] [client 66.249.64.101:63454] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTISKLl8ebZN0VCAVXAUSgAAANM"]
[Fri Dec 05 06:58:49.820707 2025] [:error] [pid 24010:tid 24018] [client 66.249.64.101:52359] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTISKatjRoDpxa46mwdEXgAAAQY"]
[Fri Dec 05 06:58:51.317613 2025] [:error] [pid 24010:tid 24015] [client 66.249.64.101:50132] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTISK6tjRoDpxa46mwdEYgAAAQM"]
[Fri Dec 05 06:58:52.829012 2025] [:error] [pid 53923:tid 53937] [client 66.249.64.101:36691] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTISLLl8ebZN0VCAVXAUUQAAAMw"]
[Fri Dec 05 06:58:54.652380 2025] [:error] [pid 24010:tid 24027] [client 66.249.64.101:47523] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTISLqtjRoDpxa46mwdEcAAAAQ8"]
[Fri Dec 05 06:58:56.118567 2025] [:error] [pid 53923:tid 53945] [client 66.249.64.101:37668] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTISMLl8ebZN0VCAVXAUWwAAANQ"]
[Fri Dec 05 06:58:57.481024 2025] [:error] [pid 53923:tid 53938] [client 66.249.64.101:38730] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTISMbl8ebZN0VCAVXAUXgAAAM0"]
[Fri Dec 05 06:58:59.110906 2025] [:error] [pid 24010:tid 24017] [client 66.249.64.101:52292] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTISM6tjRoDpxa46mwdEfwAAAQU"]
[Fri Dec 05 06:59:00.774693 2025] [:error] [pid 53839:tid 53901] [client 66.249.64.101:50878] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTISNKQOuERg_RN7bn-WuwAAAIU"]
[Fri Dec 05 06:59:02.414167 2025] [:error] [pid 53838:tid 53886] [client 66.249.64.101:44407] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTISNp8M7CH_vMhLrzIUmgAAAFE"]
[Fri Dec 05 06:59:03.924140 2025] [:error] [pid 24010:tid 24026] [client 66.249.64.101:38709] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTISN6tjRoDpxa46mwdEkAAAAQ4"]
[Fri Dec 05 06:59:05.426677 2025] [:error] [pid 53923:tid 53929] [client 66.249.64.101:56888] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTISObl8ebZN0VCAVXAUZgAAAMQ"]
[Fri Dec 05 06:59:06.966247 2025] [:error] [pid 24010:tid 24032] [client 66.249.64.101:51987] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTISOqtjRoDpxa46mwdEmAAAARQ"]
[Fri Dec 05 06:59:08.429757 2025] [:error] [pid 53838:tid 53886] [client 66.249.64.101:35266] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTISPJ8M7CH_vMhLrzIUogAAAFE"]
[Fri Dec 05 06:59:11.728716 2025] [:error] [pid 53837:tid 53848] [client 66.249.64.101:62179] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTISPzbsUyTxys8OiMI2nQAAAAY"]
[Fri Dec 05 06:59:13.087653 2025] [:error] [pid 53837:tid 53842] [client 66.249.64.101:64222] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTISQTbsUyTxys8OiMI2nwAAAAA"]
[Fri Dec 05 06:59:14.712243 2025] [:error] [pid 53839:tid 53903] [client 66.249.64.101:65052] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTISQqQOuERg_RN7bn-W6AAAAIc"]
[Fri Dec 05 06:59:16.208357 2025] [:error] [pid 24010:tid 24013] [client 66.249.64.101:55949] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTISRKtjRoDpxa46mwdErgAAAQE"]
[Fri Dec 05 06:59:18.004267 2025] [:error] [pid 53923:tid 53932] [client 66.249.64.101:40485] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTISRrl8ebZN0VCAVXAUewAAAMc"]
[Fri Dec 05 06:59:19.519721 2025] [:error] [pid 53839:tid 53910] [client 66.249.64.101:58929] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTISR6QOuERg_RN7bn-W_AAAAI4"]
[Fri Dec 05 06:59:21.757891 2025] [:error] [pid 53923:tid 53948] [client 66.249.64.101:55248] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTISSbl8ebZN0VCAVXAUiAAAANc"]
[Fri Dec 05 06:59:23.300151 2025] [:error] [pid 24010:tid 24016] [client 66.249.64.101:52352] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTISS6tjRoDpxa46mwdEugAAAQQ"]
[Fri Dec 05 06:59:24.616487 2025] [:error] [pid 53923:tid 53932] [client 66.249.64.101:63076] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTISTLl8ebZN0VCAVXAUlgAAAMc"]
[Fri Dec 05 06:59:25.823799 2025] [:error] [pid 53839:tid 53899] [client 66.249.64.101:65285] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTISTaQOuERg_RN7bn-XDQAAAIM"]
[Fri Dec 05 06:59:27.177474 2025] [:error] [pid 53839:tid 53900] [client 66.249.64.101:44740] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIST6QOuERg_RN7bn-XGQAAAIQ"]
[Fri Dec 05 06:59:28.824632 2025] [:error] [pid 53923:tid 53928] [client 66.249.64.101:60409] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTISULl8ebZN0VCAVXAUmwAAAMM"]
[Fri Dec 05 06:59:59.471930 2025] [:error] [pid 53839:tid 53905] [client 66.249.64.101:53031] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTISb6QOuERg_RN7bn-XnwAAAIk"]
[Fri Dec 05 07:00:01.799609 2025] [:error] [pid 24010:tid 24029] [client 66.249.64.101:37710] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIScatjRoDpxa46mwdFQQAAARE"]
[Fri Dec 05 07:00:03.624896 2025] [:error] [pid 24010:tid 24013] [client 66.249.64.101:56921] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTISc6tjRoDpxa46mwdFRQAAAQE"]
[Fri Dec 05 07:00:05.175342 2025] [:error] [pid 53837:tid 53850] [client 66.249.64.101:58481] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTISdTbsUyTxys8OiMI2_AAAAAg"]
[Fri Dec 05 07:00:06.647137 2025] [:error] [pid 53923:tid 53945] [client 66.249.64.101:55748] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTISdrl8ebZN0VCAVXAU7wAAANQ"]
[Fri Dec 05 07:00:08.113086 2025] [:error] [pid 24010:tid 24021] [client 66.249.64.101:40691] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTISeKtjRoDpxa46mwdFWAAAAQk"]
[Fri Dec 05 07:00:09.977078 2025] [:error] [pid 53839:tid 53904] [client 66.249.64.101:56240] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTISeaQOuERg_RN7bn-XqwAAAIg"]
[Fri Dec 05 07:00:11.397030 2025] [:error] [pid 53838:tid 53887] [client 66.249.64.101:63105] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTISe58M7CH_vMhLrzIVHQAAAFI"]
[Fri Dec 05 07:00:12.922438 2025] [:error] [pid 53838:tid 53886] [client 66.249.64.101:44057] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTISfJ8M7CH_vMhLrzIVIwAAAFE"]
[Fri Dec 05 07:00:14.724441 2025] [:error] [pid 24010:tid 24030] [client 66.249.64.101:61269] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTISfqtjRoDpxa46mwdFYwAAARI"]
[Fri Dec 05 07:00:16.211456 2025] [:error] [pid 53837:tid 53860] [client 66.249.64.101:58671] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTISgDbsUyTxys8OiMI3BgAAABI"]
[Fri Dec 05 07:00:17.695995 2025] [:error] [pid 53839:tid 53899] [client 66.249.64.101:59726] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTISgaQOuERg_RN7bn-XwwAAAIM"]
[Fri Dec 05 07:00:19.196952 2025] [:error] [pid 24010:tid 24033] [client 66.249.64.101:40137] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTISg6tjRoDpxa46mwdFawAAARU"]
[Fri Dec 05 07:00:21.013121 2025] [:error] [pid 24010:tid 24023] [client 66.249.64.101:63420] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIShatjRoDpxa46mwdFcAAAAQs"]
[Fri Dec 05 07:00:22.488775 2025] [:error] [pid 53838:tid 53881] [client 66.249.64.101:54277] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIShp8M7CH_vMhLrzIVMQAAAEw"]
[Fri Dec 05 07:00:24.006005 2025] [:error] [pid 53923:tid 53944] [client 66.249.64.101:54657] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTISiLl8ebZN0VCAVXAVEAAAANM"]
[Fri Dec 05 07:00:25.807878 2025] [:error] [pid 53839:tid 53912] [client 66.249.64.101:46875] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTISiaQOuERg_RN7bn-X0QAAAJA"]
[Fri Dec 05 07:00:27.310291 2025] [:error] [pid 24010:tid 24036] [client 66.249.64.101:56401] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTISi6tjRoDpxa46mwdFhQAAARg"]
[Fri Dec 05 07:00:28.807937 2025] [:error] [pid 24010:tid 24024] [client 66.249.64.101:61221] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTISjKtjRoDpxa46mwdFkgAAAQw"]
[Fri Dec 05 07:00:30.594035 2025] [:error] [pid 53839:tid 53908] [client 66.249.64.101:60154] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTISjqQOuERg_RN7bn-X2AAAAIw"]
[Fri Dec 05 07:00:32.096404 2025] [:error] [pid 53838:tid 53878] [client 66.249.64.101:65238] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTISkJ8M7CH_vMhLrzIVQgAAAEk"]
[Fri Dec 05 07:00:33.601223 2025] [:error] [pid 53837:tid 53855] [client 66.249.64.101:47288] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTISkTbsUyTxys8OiMI3IgAAAA0"]
[Fri Dec 05 07:00:36.890381 2025] [:error] [pid 53923:tid 53938] [client 66.249.64.101:42695] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTISlLl8ebZN0VCAVXAVJAAAAM0"]
[Fri Dec 05 07:00:38.802677 2025] [:error] [pid 53923:tid 53939] [client 66.249.64.101:39102] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTISlrl8ebZN0VCAVXAVLQAAAM4"]
[Fri Dec 05 07:00:40.200805 2025] [:error] [pid 53839:tid 53905] [client 66.249.64.101:63067] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTISmKQOuERg_RN7bn-X6AAAAIk"]
[Fri Dec 05 07:00:41.703914 2025] [:error] [pid 53837:tid 53864] [client 66.249.64.101:59318] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTISmTbsUyTxys8OiMI3KwAAABY"]
[Fri Dec 05 07:00:44.857163 2025] [:error] [pid 53839:tid 53909] [client 66.249.64.101:49576] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTISnKQOuERg_RN7bn-X_AAAAI0"]
[Fri Dec 05 07:00:48.281852 2025] [:error] [pid 24010:tid 24023] [client 66.249.64.101:49565] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTISoKtjRoDpxa46mwdF1wAAAQs"]
[Fri Dec 05 07:00:49.782671 2025] [:error] [pid 53838:tid 53878] [client 66.249.64.101:36826] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTISoZ8M7CH_vMhLrzIVaQAAAEk"]
[Fri Dec 05 07:00:51.593363 2025] [:error] [pid 53837:tid 53853] [client 66.249.64.101:52006] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTISozbsUyTxys8OiMI3MwAAAAs"]
[Fri Dec 05 07:00:53.090688 2025] [:error] [pid 53837:tid 53844] [client 66.249.64.101:44174] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTISpTbsUyTxys8OiMI3NQAAAAI"]
[Fri Dec 05 07:02:28.130669 2025] [:error] [pid 53839:tid 53899] [client 112.209.184.79:4237] [client 112.209.184.79] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 112.209.184.79, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aTITBKQOuERg_RN7bn-Y_AAAAIM"]
[Fri Dec 05 07:04:41.110731 2025] [:error] [pid 53839:tid 53904] [client 66.249.64.101:43892] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTITiaQOuERg_RN7bn-aRgAAAIg"]
[Fri Dec 05 07:04:43.748104 2025] [:error] [pid 53839:tid 53906] [client 66.249.64.101:41752] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTITi6QOuERg_RN7bn-aTAAAAIo"]
[Fri Dec 05 07:04:45.833774 2025] [:error] [pid 53923:tid 53949] [client 66.249.64.101:61382] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTITjbl8ebZN0VCAVXAXNgAAANg"]
[Fri Dec 05 07:04:47.928677 2025] [:error] [pid 24010:tid 24013] [client 66.249.64.101:60962] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTITj6tjRoDpxa46mwdIqgAAAQE"]
[Fri Dec 05 07:04:49.743737 2025] [:error] [pid 24010:tid 24022] [client 66.249.64.101:47878] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTITkatjRoDpxa46mwdIsAAAAQo"]
[Fri Dec 05 07:04:52.329882 2025] [:error] [pid 24010:tid 24027] [client 66.249.64.101:49525] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTITlKtjRoDpxa46mwdIvgAAAQ8"]
[Fri Dec 05 07:04:53.945902 2025] [:error] [pid 53923:tid 53947] [client 66.249.64.101:54770] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTITlbl8ebZN0VCAVXAXQAAAANY"]
[Fri Dec 05 07:04:55.738734 2025] [:error] [pid 53837:tid 53843] [client 66.249.64.101:63626] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTITlzbsUyTxys8OiMI48AAAAAE"]
[Fri Dec 05 07:04:57.835403 2025] [:error] [pid 24010:tid 24021] [client 66.249.64.101:65345] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTITmatjRoDpxa46mwdIzwAAAQk"]
[Fri Dec 05 07:04:59.643281 2025] [:error] [pid 24010:tid 24034] [client 66.249.64.101:44389] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTITm6tjRoDpxa46mwdI1AAAARY"]
[Fri Dec 05 07:05:01.435103 2025] [:error] [pid 53839:tid 53906] [client 66.249.64.101:65245] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTITnaQOuERg_RN7bn-acwAAAIo"]
[Fri Dec 05 07:05:03.547316 2025] [:error] [pid 53923:tid 53934] [client 66.249.64.101:42956] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTITn7l8ebZN0VCAVXAXVAAAAMk"]
[Fri Dec 05 07:05:05.659979 2025] [:error] [pid 53838:tid 53874] [client 66.249.64.101:44143] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIToZ8M7CH_vMhLrzIXAAAAAEU"]
[Fri Dec 05 07:05:07.788730 2025] [:error] [pid 53839:tid 53900] [client 66.249.64.101:46168] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTITo6QOuERg_RN7bn-aiwAAAIQ"]
[Fri Dec 05 07:05:09.834922 2025] [:error] [pid 24010:tid 24034] [client 66.249.64.101:41197] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTITpatjRoDpxa46mwdI6wAAARY"]
[Fri Dec 05 07:05:11.623407 2025] [:error] [pid 24010:tid 24016] [client 66.249.64.101:39660] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTITp6tjRoDpxa46mwdI9AAAAQQ"]
[Fri Dec 05 07:05:13.499398 2025] [:error] [pid 53923:tid 53940] [client 66.249.64.101:57915] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTITqbl8ebZN0VCAVXAXlAAAAM8"]
[Fri Dec 05 07:05:15.540150 2025] [:error] [pid 53839:tid 53898] [client 66.249.64.101:49528] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTITq6QOuERg_RN7bn-aqwAAAII"]
[Fri Dec 05 07:05:21.240125 2025] [:error] [pid 53923:tid 53946] [client 66.249.64.101:49814] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTITsbl8ebZN0VCAVXAXpAAAANU"]
[Fri Dec 05 07:05:26.926869 2025] [:error] [pid 53923:tid 53941] [client 66.249.64.101:65075] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTITtrl8ebZN0VCAVXAXsAAAANA"]
[Fri Dec 05 07:05:29.030540 2025] [:error] [pid 24010:tid 24017] [client 66.249.64.101:56259] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTITuatjRoDpxa46mwdJEgAAAQU"]
[Fri Dec 05 07:05:30.889354 2025] [:error] [pid 53838:tid 53873] [client 66.249.64.101:40208] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTITup8M7CH_vMhLrzIXgAAAAEQ"]
[Fri Dec 05 07:05:32.640399 2025] [:error] [pid 53838:tid 53880] [client 66.249.64.101:55676] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTITvJ8M7CH_vMhLrzIXgwAAAEs"]
[Fri Dec 05 07:05:34.729129 2025] [:error] [pid 53838:tid 53885] [client 66.249.64.101:47295] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTITvp8M7CH_vMhLrzIXhgAAAFA"]
[Fri Dec 05 07:05:36.809492 2025] [:error] [pid 53837:tid 53849] [client 66.249.64.101:36645] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTITwDbsUyTxys8OiMI5IwAAAAc"]
[Fri Dec 05 07:05:38.315188 2025] [:error] [pid 53923:tid 53943] [client 66.249.64.101:38729] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTITwrl8ebZN0VCAVXAXzwAAANI"]
[Fri Dec 05 07:06:16.459424 2025] [:error] [pid 24010:tid 24020] [client 66.249.64.101:62760] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIT6KtjRoDpxa46mwdJ-QAAAQg"]
[Fri Dec 05 07:06:17.956680 2025] [:error] [pid 53838:tid 53882] [client 66.249.64.101:42735] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIT6Z8M7CH_vMhLrzIXuwAAAE0"]
[Fri Dec 05 07:06:22.979028 2025] [:error] [pid 53838:tid 53877] [client 66.249.64.101:48983] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIT7p8M7CH_vMhLrzIXxAAAAEg"]
[Fri Dec 05 07:06:24.813259 2025] [:error] [pid 53923:tid 53943] [client 66.249.64.101:47240] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIT8Ll8ebZN0VCAVXAYnwAAANI"]
[Fri Dec 05 07:06:26.562737 2025] [:error] [pid 53837:tid 53853] [client 66.249.64.101:42608] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIT8jbsUyTxys8OiMI5kQAAAAs"]
[Fri Dec 05 07:06:28.669401 2025] [:error] [pid 53839:tid 53914] [client 66.249.64.101:50648] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIT9KQOuERg_RN7bn-bYgAAAJI"]
[Fri Dec 05 07:06:30.767496 2025] [:error] [pid 53838:tid 53872] [client 66.249.64.101:43636] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIT9p8M7CH_vMhLrzIX2wAAAEM"]
[Fri Dec 05 07:06:32.270166 2025] [:error] [pid 53839:tid 53916] [client 66.249.64.101:44915] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIT-KQOuERg_RN7bn-bbAAAAJQ"]
[Fri Dec 05 07:06:34.366131 2025] [:error] [pid 53839:tid 53899] [client 66.249.64.101:55095] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIT-qQOuERg_RN7bn-beAAAAIM"]
[Fri Dec 05 07:06:36.472101 2025] [:error] [pid 53923:tid 53936] [client 66.249.64.101:65070] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIT_Ll8ebZN0VCAVXAY0QAAAMs"]
[Fri Dec 05 07:06:38.277532 2025] [:error] [pid 53838:tid 53888] [client 66.249.64.101:60825] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIT_p8M7CH_vMhLrzIX4AAAAFM"]
[Fri Dec 05 07:06:42.154698 2025] [:error] [pid 24010:tid 24030] [client 66.249.64.101:34920] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIUAqtjRoDpxa46mwdKcwAAARI"]
[Fri Dec 05 07:06:44.245314 2025] [:error] [pid 53838:tid 53882] [client 66.249.64.101:39265] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIUBJ8M7CH_vMhLrzIX7QAAAE0"]
[Fri Dec 05 07:06:47.841252 2025] [:error] [pid 53923:tid 53947] [client 66.249.64.101:51086] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIUB7l8ebZN0VCAVXAY8gAAANY"]
[Fri Dec 05 07:06:49.944929 2025] [:error] [pid 53839:tid 53918] [client 66.249.64.101:52446] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIUCaQOuERg_RN7bn-blgAAAJY"]
[Fri Dec 05 07:06:51.746017 2025] [:error] [pid 24010:tid 24028] [client 66.249.64.101:56744] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIUC6tjRoDpxa46mwdKiQAAARA"]
[Fri Dec 05 07:06:55.657818 2025] [:error] [pid 53839:tid 53899] [client 66.249.64.101:54008] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIUD6QOuERg_RN7bn-bpgAAAIM"]
[Fri Dec 05 07:06:57.749086 2025] [:error] [pid 24010:tid 24015] [client 66.249.64.101:49275] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIUEatjRoDpxa46mwdKkAAAAQM"]
[Fri Dec 05 07:06:59.101072 2025] [:error] [pid 24010:tid 24036] [client 66.249.64.101:55843] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIUE6tjRoDpxa46mwdKkwAAARg"]
[Fri Dec 05 07:07:05.104794 2025] [:error] [pid 24010:tid 24031] [client 66.249.64.101:37658] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIUGatjRoDpxa46mwdKrAAAARM"]
[Fri Dec 05 07:07:07.012866 2025] [:error] [pid 24010:tid 24012] [client 66.249.64.101:52468] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIUG6tjRoDpxa46mwdKtAAAAQA"]
[Fri Dec 05 07:07:11.164663 2025] [:error] [pid 53838:tid 53882] [client 66.249.64.101:44407] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIUH58M7CH_vMhLrzIYDgAAAE0"]
[Fri Dec 05 07:07:12.583663 2025] [:error] [pid 53839:tid 53912] [client 66.249.64.101:46571] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIUIKQOuERg_RN7bn-b2wAAAJA"]
[Fri Dec 05 07:07:14.814194 2025] [:error] [pid 24010:tid 24014] [client 66.249.64.101:36022] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIUIqtjRoDpxa46mwdKzQAAAQI"]
[Fri Dec 05 07:07:40.971112 2025] [:error] [pid 53923:tid 53929] [client 66.249.64.101:54788] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIUPLl8ebZN0VCAVXAZnwAAAMQ"]
[Fri Dec 05 07:07:43.772153 2025] [:error] [pid 53923:tid 53925] [client 66.249.64.101:53280] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIUP7l8ebZN0VCAVXAZpAAAAMA"]
[Fri Dec 05 07:07:45.703360 2025] [:error] [pid 53923:tid 53934] [client 66.249.64.101:52366] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIUQbl8ebZN0VCAVXAZrAAAAMk"]
[Fri Dec 05 07:07:47.512678 2025] [:error] [pid 53837:tid 53865] [client 66.249.64.101:41216] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIUQzbsUyTxys8OiMI6GAAAABc"]
[Fri Dec 05 07:07:49.581394 2025] [:error] [pid 53838:tid 53880] [client 66.249.64.101:42064] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIURZ8M7CH_vMhLrzIYYwAAAEs"]
[Fri Dec 05 07:07:51.688812 2025] [:error] [pid 53923:tid 53925] [client 66.249.64.101:46416] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIUR7l8ebZN0VCAVXAZsgAAAMA"]
[Fri Dec 05 07:07:53.198528 2025] [:error] [pid 53837:tid 53852] [client 66.249.64.101:41706] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIUSTbsUyTxys8OiMI6HgAAAAo"]
[Fri Dec 05 07:07:57.391649 2025] [:error] [pid 53837:tid 53866] [client 66.249.64.101:47868] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIUTTbsUyTxys8OiMI6IwAAABg"]
[Fri Dec 05 07:07:59.204649 2025] [:error] [pid 53923:tid 53948] [client 66.249.64.101:45200] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIUT7l8ebZN0VCAVXAZyAAAANc"]
[Fri Dec 05 07:08:01.287996 2025] [:error] [pid 53923:tid 53930] [client 66.249.64.101:54036] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIUUbl8ebZN0VCAVXAZzAAAAMU"]
[Fri Dec 05 07:08:03.080380 2025] [:error] [pid 53838:tid 53883] [client 66.249.64.101:49175] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIUU58M7CH_vMhLrzIYlQAAAE4"]
[Fri Dec 05 07:08:05.184130 2025] [:error] [pid 53838:tid 53877] [client 66.249.64.101:57186] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIUVZ8M7CH_vMhLrzIYnQAAAEg"]
[Fri Dec 05 07:08:06.704003 2025] [:error] [pid 53839:tid 53905] [client 66.249.64.101:52774] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIUVqQOuERg_RN7bn-cYQAAAIk"]
[Fri Dec 05 07:08:08.797020 2025] [:error] [pid 53837:tid 53850] [client 66.249.64.101:41894] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIUWDbsUyTxys8OiMI6PwAAAAg"]
[Fri Dec 05 07:08:10.881618 2025] [:error] [pid 53923:tid 53939] [client 66.249.64.101:52290] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIUWrl8ebZN0VCAVXAZ3gAAAM4"]
[Fri Dec 05 07:08:12.375181 2025] [:error] [pid 53923:tid 53943] [client 66.249.64.101:58754] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIUXLl8ebZN0VCAVXAZ4wAAANI"]
[Fri Dec 05 07:08:12.674207 2025] [:error] [pid 53839:tid 53897] [client 66.249.64.101:51913] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIUXKQOuERg_RN7bn-cdwAAAIE"]
[Fri Dec 05 07:08:16.617455 2025] [:error] [pid 24010:tid 24030] [client 66.249.64.101:54569] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIUYKtjRoDpxa46mwdLWgAAARI"]
[Fri Dec 05 07:08:18.693349 2025] [:error] [pid 24010:tid 24022] [client 66.249.64.101:61502] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIUYqtjRoDpxa46mwdLXwAAAQo"]
[Fri Dec 05 07:08:24.916851 2025] [:error] [pid 53837:tid 53855] [client 66.249.64.101:60431] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIUaDbsUyTxys8OiMI6dgAAAA0"]
[Fri Dec 05 07:08:26.635158 2025] [:error] [pid 24010:tid 24036] [client 66.249.64.101:59841] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIUaqtjRoDpxa46mwdLcQAAARg"]
[Fri Dec 05 07:08:28.726403 2025] [:error] [pid 53838:tid 53889] [client 66.249.64.101:38926] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIUbJ8M7CH_vMhLrzIY3gAAAFQ"]
[Fri Dec 05 07:08:31.806986 2025] [:error] [pid 53839:tid 53917] [client 66.249.64.101:55845] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIUb6QOuERg_RN7bn-clwAAAJU"]
[Fri Dec 05 07:08:33.679728 2025] [:error] [pid 24010:tid 24013] [client 66.249.64.101:46480] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIUcatjRoDpxa46mwdLjQAAAQE"]
[Fri Dec 05 07:08:35.902103 2025] [:error] [pid 53923:tid 53928] [client 66.249.64.101:62905] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIUc7l8ebZN0VCAVXAaHQAAAMM"]
[Fri Dec 05 07:09:02.047431 2025] [:error] [pid 53838:tid 53884] [client 66.249.64.101:36477] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIUjp8M7CH_vMhLrzIZIwAAAE8"]
[Fri Dec 05 07:09:06.471738 2025] [:error] [pid 24010:tid 24030] [client 66.249.64.101:38523] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIUkqtjRoDpxa46mwdL3QAAARI"]
[Fri Dec 05 07:09:08.581489 2025] [:error] [pid 53839:tid 53900] [client 66.249.64.101:50235] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIUlKQOuERg_RN7bn-dAwAAAIQ"]
[Fri Dec 05 07:09:08.932897 2025] [:error] [pid 53838:tid 53889] [client 66.249.64.101:53214] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIUlJ8M7CH_vMhLrzIZMQAAAFQ"]
[Fri Dec 05 07:09:10.231978 2025] [:error] [pid 24010:tid 24034] [client 66.249.64.101:58795] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIUlqtjRoDpxa46mwdL7gAAARY"]
[Fri Dec 05 07:09:12.267285 2025] [:error] [pid 53839:tid 53906] [client 66.249.64.101:44800] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIUmKQOuERg_RN7bn-dBwAAAIo"]
[Fri Dec 05 07:09:14.376137 2025] [:error] [pid 53839:tid 53908] [client 66.249.64.101:52668] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIUmqQOuERg_RN7bn-dDQAAAIw"]
[Fri Dec 05 07:09:16.516852 2025] [:error] [pid 24010:tid 24034] [client 66.249.64.101:55089] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIUnKtjRoDpxa46mwdMAgAAARY"]
[Fri Dec 05 07:09:18.352874 2025] [:error] [pid 24010:tid 24026] [client 66.249.64.101:36940] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIUnqtjRoDpxa46mwdMBwAAAQ4"]
[Fri Dec 05 07:09:19.974137 2025] [:error] [pid 24010:tid 24034] [client 66.249.64.101:60542] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIUn6tjRoDpxa46mwdMEAAAARY"]
[Fri Dec 05 07:09:22.054120 2025] [:error] [pid 53838:tid 53875] [client 66.249.64.101:36840] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIUop8M7CH_vMhLrzIZUwAAAEY"]
[Fri Dec 05 07:09:23.847950 2025] [:error] [pid 53837:tid 53842] [client 66.249.64.101:45985] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIUozbsUyTxys8OiMI64QAAAAA"]
[Fri Dec 05 07:09:25.647367 2025] [:error] [pid 53839:tid 53903] [client 66.249.64.101:47485] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIUpaQOuERg_RN7bn-dHAAAAIc"]
[Fri Dec 05 07:09:27.619203 2025] [:error] [pid 53923:tid 53948] [client 66.249.64.101:56744] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIUp7l8ebZN0VCAVXAamwAAANc"]
[Fri Dec 05 07:09:29.857165 2025] [:error] [pid 24010:tid 24031] [client 66.249.64.101:58832] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIUqatjRoDpxa46mwdMKwAAARM"]
[Fri Dec 05 07:09:31.388123 2025] [:error] [pid 53838:tid 53882] [client 66.249.64.101:42029] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIUq58M7CH_vMhLrzIZdQAAAE0"]
[Fri Dec 05 07:09:36.400793 2025] [:error] [pid 53838:tid 53870] [client 66.249.64.101:54929] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIUsJ8M7CH_vMhLrzIZjAAAAEE"]
[Fri Dec 05 07:09:37.198465 2025] [:error] [pid 53923:tid 53928] [client 66.249.64.101:35850] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIUsbl8ebZN0VCAVXAargAAAMM"]
[Fri Dec 05 07:09:39.153714 2025] [:error] [pid 24010:tid 24035] [client 66.249.64.101:57505] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIUs6tjRoDpxa46mwdMQQAAARc"]
[Fri Dec 05 07:09:41.237629 2025] [:error] [pid 53839:tid 53919] [client 66.249.64.101:41882] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIUtaQOuERg_RN7bn-dNgAAAJc"]
[Fri Dec 05 07:09:43.392776 2025] [:error] [pid 24010:tid 24030] [client 66.249.64.101:60738] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIUt6tjRoDpxa46mwdMXAAAARI"]
[Fri Dec 05 07:09:47.102073 2025] [:error] [pid 53923:tid 53948] [client 66.249.64.101:48912] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIUu7l8ebZN0VCAVXAavAAAANc"]
[Fri Dec 05 07:09:49.124199 2025] [:error] [pid 53839:tid 53905] [client 66.249.64.101:44983] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIUvaQOuERg_RN7bn-dSQAAAIk"]
[Fri Dec 05 07:09:50.962262 2025] [:error] [pid 53839:tid 53918] [client 66.249.64.101:39301] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIUvqQOuERg_RN7bn-dUQAAAJY"]
[Fri Dec 05 07:09:52.673625 2025] [:error] [pid 24010:tid 24020] [client 66.249.64.101:45307] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIUwKtjRoDpxa46mwdMjQAAAQg"]
[Fri Dec 05 07:09:54.720689 2025] [:error] [pid 53839:tid 53898] [client 66.249.64.101:52748] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIUwqQOuERg_RN7bn-dVQAAAII"]
[Fri Dec 05 07:09:56.809021 2025] [:error] [pid 53837:tid 53859] [client 66.249.64.101:38939] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIUxDbsUyTxys8OiMI7FwAAABE"]
[Fri Dec 05 07:09:58.326918 2025] [:error] [pid 24010:tid 24024] [client 66.249.64.101:47006] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIUxqtjRoDpxa46mwdMmwAAAQw"]
[Fri Dec 05 07:10:17.578961 2025] [:error] [pid 24010:tid 24025] [client 66.249.64.101:48044] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIU2atjRoDpxa46mwdMzwAAAQ0"]
[Fri Dec 05 07:10:19.913258 2025] [:error] [pid 24010:tid 24022] [client 66.249.64.101:61761] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIU26tjRoDpxa46mwdM0AAAAQo"]
[Fri Dec 05 07:10:21.401003 2025] [:error] [pid 53837:tid 53861] [client 66.249.64.101:47213] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIU3TbsUyTxys8OiMI7XgAAABM"]
[Fri Dec 05 07:10:22.762747 2025] [:error] [pid 53837:tid 53858] [client 66.249.64.101:56096] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIU3jbsUyTxys8OiMI7ZgAAABA"]
[Fri Dec 05 07:10:24.422670 2025] [:error] [pid 53923:tid 53934] [client 66.249.64.101:41603] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIU4Ll8ebZN0VCAVXAbCgAAAMk"]
[Fri Dec 05 07:10:26.229875 2025] [:error] [pid 53923:tid 53931] [client 66.249.64.101:40497] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIU4rl8ebZN0VCAVXAbEAAAAMY"]
[Fri Dec 05 07:10:27.718762 2025] [:error] [pid 24010:tid 24022] [client 66.249.64.101:52818] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIU46tjRoDpxa46mwdM3QAAAQo"]
[Fri Dec 05 07:10:29.094666 2025] [:error] [pid 53838:tid 53882] [client 66.249.64.101:64555] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIU5Z8M7CH_vMhLrzIZ-wAAAE0"]
[Fri Dec 05 07:10:29.968386 2025] [:error] [pid 53923:tid 53946] [client 66.249.64.101:50024] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIU5bl8ebZN0VCAVXAbHgAAANU"]
[Fri Dec 05 07:10:30.576126 2025] [:error] [pid 53838:tid 53885] [client 66.249.64.101:40336] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIU5p8M7CH_vMhLrzIZ_wAAAFA"]
[Fri Dec 05 07:10:32.514373 2025] [:error] [pid 53838:tid 53881] [client 66.249.64.101:64633] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIU6J8M7CH_vMhLrzIaCQAAAEw"]
[Fri Dec 05 07:10:34.016924 2025] [:error] [pid 24010:tid 24024] [client 66.249.64.101:42062] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIU6qtjRoDpxa46mwdM7AAAAQw"]
[Fri Dec 05 07:10:35.671643 2025] [:error] [pid 53923:tid 53933] [client 66.249.64.101:42055] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIU67l8ebZN0VCAVXAbJwAAAMg"]
[Fri Dec 05 07:10:37.013536 2025] [:error] [pid 24010:tid 24032] [client 66.249.64.101:64160] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIU7atjRoDpxa46mwdM-AAAARQ"]
[Fri Dec 05 07:10:38.485137 2025] [:error] [pid 53923:tid 53938] [client 66.249.64.101:50582] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIU7rl8ebZN0VCAVXAbLgAAAM0"]
[Fri Dec 05 07:10:40.315112 2025] [:error] [pid 53923:tid 53941] [client 66.249.64.101:34995] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIU8Ll8ebZN0VCAVXAbNQAAANA"]
[Fri Dec 05 07:10:41.658781 2025] [:error] [pid 53837:tid 53865] [client 66.249.64.101:45498] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIU8TbsUyTxys8OiMI7uQAAABc"]
[Fri Dec 05 07:10:43.174993 2025] [:error] [pid 53923:tid 53931] [client 66.249.64.101:37034] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIU87l8ebZN0VCAVXAbOwAAAMY"]
[Fri Dec 05 07:10:44.803884 2025] [:error] [pid 53837:tid 53845] [client 66.249.64.101:43555] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIU9DbsUyTxys8OiMI7yAAAAAM"]
[Fri Dec 05 07:10:46.161215 2025] [:error] [pid 53838:tid 53891] [client 66.249.64.101:48718] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIU9p8M7CH_vMhLrzIaGgAAAFY"]
[Fri Dec 05 07:10:48.372749 2025] [:error] [pid 53837:tid 53846] [client 66.249.64.101:46710] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIU-DbsUyTxys8OiMI71gAAAAQ"]
[Fri Dec 05 07:10:49.596742 2025] [:error] [pid 53837:tid 53842] [client 66.249.64.101:39660] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIU-TbsUyTxys8OiMI72QAAAAA"]
[Fri Dec 05 07:10:50.956657 2025] [:error] [pid 53923:tid 53937] [client 66.249.64.101:60499] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIU-rl8ebZN0VCAVXAbRgAAAMw"]
[Fri Dec 05 07:10:52.575253 2025] [:error] [pid 53923:tid 53947] [client 66.249.64.101:39217] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIU_Ll8ebZN0VCAVXAbSQAAANY"]
[Fri Dec 05 07:10:54.088199 2025] [:error] [pid 24010:tid 24013] [client 66.249.64.101:53522] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIU_qtjRoDpxa46mwdNNQAAAQE"]
[Fri Dec 05 07:10:55.897021 2025] [:error] [pid 53923:tid 53931] [client 66.249.64.101:46059] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIU_7l8ebZN0VCAVXAbSgAAAMY"]
[Fri Dec 05 07:10:57.369194 2025] [:error] [pid 24010:tid 24034] [client 66.249.64.101:60391] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIVAatjRoDpxa46mwdNOgAAARY"]
[Fri Dec 05 07:10:58.889492 2025] [:error] [pid 53837:tid 53846] [client 66.249.64.101:64798] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIVAjbsUyTxys8OiMI77AAAAAQ"]
[Fri Dec 05 07:11:00.244072 2025] [:error] [pid 53923:tid 53944] [client 66.249.64.101:40033] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIVBLl8ebZN0VCAVXAbVAAAANM"]
[Fri Dec 05 07:11:01.869499 2025] [:error] [pid 53838:tid 53878] [client 66.249.64.101:58966] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIVBZ8M7CH_vMhLrzIaTAAAAEk"]
[Fri Dec 05 07:11:03.531804 2025] [:error] [pid 53839:tid 53898] [client 66.249.64.101:53027] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIVB6QOuERg_RN7bn-dzwAAAII"]
[Fri Dec 05 07:11:05.238948 2025] [:error] [pid 53839:tid 53903] [client 66.249.64.101:56815] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIVCaQOuERg_RN7bn-d0wAAAIc"]
[Fri Dec 05 07:11:06.533251 2025] [:error] [pid 24010:tid 24033] [client 66.249.64.101:53349] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIVCqtjRoDpxa46mwdNSAAAARU"]
[Fri Dec 05 07:11:08.168835 2025] [:error] [pid 53839:tid 53908] [client 66.249.64.101:49625] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIVDKQOuERg_RN7bn-d1gAAAIw"]
[Fri Dec 05 07:11:09.573532 2025] [:error] [pid 24010:tid 24036] [client 66.249.64.101:41774] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIVDatjRoDpxa46mwdNUQAAARg"]
[Fri Dec 05 07:11:11.332976 2025] [:error] [pid 53837:tid 53842] [client 66.249.64.101:38909] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIVDzbsUyTxys8OiMI7_AAAAAA"]
[Fri Dec 05 07:11:12.814170 2025] [:error] [pid 53837:tid 53844] [client 66.249.64.101:47138] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIVEDbsUyTxys8OiMI8BAAAAAI"]
[Fri Dec 05 07:11:14.335598 2025] [:error] [pid 53839:tid 53902] [client 66.249.64.101:60719] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIVEqQOuERg_RN7bn-d4AAAAIY"]
[Fri Dec 05 07:11:32.214212 2025] [:error] [pid 53837:tid 53858] [client 66.249.64.101:36207] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIVJDbsUyTxys8OiMI8PwAAABA"]
[Fri Dec 05 07:11:34.831667 2025] [:error] [pid 53839:tid 53908] [client 66.249.64.101:34867] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIVJqQOuERg_RN7bn-eFgAAAIw"]
[Fri Dec 05 07:11:36.323099 2025] [:error] [pid 53923:tid 53931] [client 66.249.64.101:64593] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIVKLl8ebZN0VCAVXAbxgAAAMY"]
[Fri Dec 05 07:11:37.690463 2025] [:error] [pid 53837:tid 53851] [client 66.249.64.101:38555] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIVKTbsUyTxys8OiMI8SgAAAAk"]
[Fri Dec 05 07:11:39.544941 2025] [:error] [pid 53923:tid 53943] [client 66.249.64.101:39105] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIVK7l8ebZN0VCAVXAbygAAANI"]
[Fri Dec 05 07:11:40.592995 2025] [:error] [pid 53838:tid 53872] [client 66.249.64.101:64393] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIVLJ8M7CH_vMhLrzIaZAAAAEM"]
[Fri Dec 05 07:11:42.884775 2025] [:error] [pid 53838:tid 53871] [client 66.249.64.101:35673] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIVLp8M7CH_vMhLrzIaawAAAEI"]
[Fri Dec 05 07:11:44.118531 2025] [:error] [pid 24010:tid 24021] [client 66.249.64.101:38491] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIVMKtjRoDpxa46mwdN2QAAAQk"]
[Fri Dec 05 07:11:45.509125 2025] [:error] [pid 24010:tid 24027] [client 66.249.64.101:45342] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIVMatjRoDpxa46mwdN3AAAAQ8"]
[Fri Dec 05 07:11:46.966317 2025] [:error] [pid 53837:tid 53842] [client 66.249.64.101:58959] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIVMjbsUyTxys8OiMI8YgAAAAA"]
[Fri Dec 05 07:11:48.613636 2025] [:error] [pid 24010:tid 24018] [client 66.249.64.101:42543] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIVNKtjRoDpxa46mwdN5AAAAQY"]
[Fri Dec 05 07:11:50.415908 2025] [:error] [pid 53839:tid 53898] [client 66.249.64.101:39350] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIVNqQOuERg_RN7bn-eTgAAAII"]
[Fri Dec 05 07:11:51.774375 2025] [:error] [pid 53839:tid 53900] [client 66.249.64.101:48701] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIVN6QOuERg_RN7bn-eUQAAAIQ"]
[Fri Dec 05 07:11:53.285163 2025] [:error] [pid 53923:tid 53928] [client 66.249.64.101:43230] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIVObl8ebZN0VCAVXAb6AAAAMM"]
[Fri Dec 05 07:11:54.774504 2025] [:error] [pid 24010:tid 24020] [client 66.249.64.101:55814] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIVOqtjRoDpxa46mwdODAAAAQg"]
[Fri Dec 05 07:11:56.389776 2025] [:error] [pid 53838:tid 53877] [client 66.249.64.101:36638] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIVPJ8M7CH_vMhLrzIaeAAAAEg"]
[Fri Dec 05 07:11:58.189961 2025] [:error] [pid 53837:tid 53850] [client 66.249.64.101:36302] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIVPjbsUyTxys8OiMI8jgAAAAg"]
[Fri Dec 05 07:11:59.572206 2025] [:error] [pid 53838:tid 53873] [client 66.249.64.101:37984] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIVP58M7CH_vMhLrzIaewAAAEQ"]
[Fri Dec 05 07:12:01.269705 2025] [:error] [pid 53838:tid 53887] [client 66.249.64.101:51321] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIVQZ8M7CH_vMhLrzIafQAAAFI"]
[Fri Dec 05 07:12:02.682025 2025] [:error] [pid 53837:tid 53863] [client 66.249.64.101:41733] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIVQjbsUyTxys8OiMI8mQAAABU"]
[Fri Dec 05 07:12:04.186667 2025] [:error] [pid 53837:tid 53845] [client 66.249.64.101:63229] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIVRDbsUyTxys8OiMI8nAAAAAM"]
[Fri Dec 05 07:12:05.851934 2025] [:error] [pid 24010:tid 24019] [client 66.249.64.101:42891] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIVRatjRoDpxa46mwdOJAAAAQc"]
[Fri Dec 05 07:12:07.484106 2025] [:error] [pid 24010:tid 24021] [client 66.249.64.101:43114] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIVR6tjRoDpxa46mwdOKQAAAQk"]
[Fri Dec 05 07:12:08.850038 2025] [:error] [pid 24010:tid 24036] [client 66.249.64.101:61288] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIVSKtjRoDpxa46mwdOMAAAARg"]
[Fri Dec 05 07:12:10.488352 2025] [:error] [pid 53839:tid 53913] [client 66.249.64.101:42893] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIVSqQOuERg_RN7bn-ekgAAAJE"]
[Fri Dec 05 07:12:11.983281 2025] [:error] [pid 53839:tid 53897] [client 66.249.64.101:50885] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIVS6QOuERg_RN7bn-emgAAAIE"]
[Fri Dec 05 07:12:13.777821 2025] [:error] [pid 53923:tid 53927] [client 66.249.64.101:40349] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIVTbl8ebZN0VCAVXAcPwAAAMI"]
[Fri Dec 05 07:12:15.143034 2025] [:error] [pid 24010:tid 24015] [client 66.249.64.101:59886] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIVT6tjRoDpxa46mwdOPQAAAQM"]
[Fri Dec 05 07:12:16.764284 2025] [:error] [pid 24010:tid 24013] [client 66.249.64.101:47973] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIVUKtjRoDpxa46mwdOQwAAAQE"]
[Fri Dec 05 07:12:17.007684 2025] [:error] [pid 24010:tid 24035] [client 66.249.64.101:59168] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIVUatjRoDpxa46mwdORQAAARc"]
[Fri Dec 05 07:12:18.277673 2025] [:error] [pid 24010:tid 24017] [client 66.249.64.101:42136] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIVUqtjRoDpxa46mwdOTAAAAQU"]
[Fri Dec 05 07:12:19.761183 2025] [:error] [pid 53839:tid 53896] [client 66.249.64.101:35118] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIVU6QOuERg_RN7bn-esAAAAIA"]
[Fri Dec 05 07:12:21.568088 2025] [:error] [pid 24010:tid 24032] [client 66.249.64.101:49763] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIVVatjRoDpxa46mwdOZgAAARQ"]
[Fri Dec 05 07:12:22.936452 2025] [:error] [pid 53839:tid 53915] [client 66.249.64.101:49928] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIVVqQOuERg_RN7bn-etwAAAJM"]
[Fri Dec 05 07:12:24.551933 2025] [:error] [pid 53923:tid 53946] [client 66.249.64.101:43688] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIVWLl8ebZN0VCAVXAcSgAAANU"]
[Fri Dec 05 07:12:26.058966 2025] [:error] [pid 53839:tid 53896] [client 66.249.64.101:38598] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIVWqQOuERg_RN7bn-evAAAAIA"]
[Fri Dec 05 07:12:27.558497 2025] [:error] [pid 53923:tid 53935] [client 66.249.64.101:47349] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIVW7l8ebZN0VCAVXAcTwAAAMo"]
[Fri Dec 05 07:12:29.374041 2025] [:error] [pid 53837:tid 53865] [client 66.249.64.101:38129] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIVXTbsUyTxys8OiMI8twAAABc"]
[Fri Dec 05 07:12:48.637339 2025] [:error] [pid 24010:tid 24032] [client 66.249.64.101:50351] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIVcKtjRoDpxa46mwdOrAAAARQ"]
[Fri Dec 05 07:12:50.965642 2025] [:error] [pid 53837:tid 53860] [client 66.249.64.101:37861] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIVcjbsUyTxys8OiMI81gAAABI"]
[Fri Dec 05 07:12:52.765193 2025] [:error] [pid 53923:tid 53936] [client 66.249.64.101:36173] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIVdLl8ebZN0VCAVXAcggAAAMs"]
[Fri Dec 05 07:12:54.258222 2025] [:error] [pid 53838:tid 53882] [client 66.249.64.101:44483] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIVdp8M7CH_vMhLrzIbFQAAAE0"]
[Fri Dec 05 07:12:55.772846 2025] [:error] [pid 24010:tid 24024] [client 66.249.64.101:50433] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIVd6tjRoDpxa46mwdOvQAAAQw"]
[Fri Dec 05 07:12:57.251794 2025] [:error] [pid 53839:tid 53918] [client 66.249.64.101:39803] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIVeaQOuERg_RN7bn-fAAAAAJY"]
[Fri Dec 05 07:12:58.762324 2025] [:error] [pid 53838:tid 53892] [client 66.249.64.101:47609] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIVep8M7CH_vMhLrzIbHQAAAFc"]
[Fri Dec 05 07:13:00.570200 2025] [:error] [pid 53838:tid 53890] [client 66.249.64.101:35046] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIVfJ8M7CH_vMhLrzIbIwAAAFU"]
[Fri Dec 05 07:13:02.053435 2025] [:error] [pid 24010:tid 24035] [client 66.249.64.101:63808] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIVfqtjRoDpxa46mwdO6gAAARc"]
[Fri Dec 05 07:13:03.551958 2025] [:error] [pid 53837:tid 53844] [client 66.249.64.101:54763] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIVfzbsUyTxys8OiMI84AAAAAI"]
[Fri Dec 05 07:13:04.916960 2025] [:error] [pid 53923:tid 53932] [client 66.249.64.101:44282] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIVgLl8ebZN0VCAVXAczwAAAMc"]
[Fri Dec 05 07:13:06.550680 2025] [:error] [pid 53837:tid 53853] [client 66.249.64.101:56563] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIVgjbsUyTxys8OiMI85wAAAAs"]
[Fri Dec 05 07:13:08.218030 2025] [:error] [pid 24010:tid 24017] [client 66.249.64.101:61786] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIVhKtjRoDpxa46mwdO_gAAAQU"]
[Fri Dec 05 07:13:11.708714 2025] [:error] [pid 53923:tid 53928] [client 66.249.64.101:40283] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIVh7l8ebZN0VCAVXAc1AAAAMM"]
[Fri Dec 05 07:13:14.831732 2025] [:error] [pid 53838:tid 53883] [client 66.249.64.101:44695] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIVip8M7CH_vMhLrzIbZAAAAE4"]
[Fri Dec 05 07:13:15.976793 2025] [:error] [pid 53923:tid 53948] [client 66.249.64.101:55365] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIVi7l8ebZN0VCAVXAc9AAAANc"]
[Fri Dec 05 07:13:17.759062 2025] [:error] [pid 24010:tid 24031] [client 66.249.64.101:52405] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIVjatjRoDpxa46mwdPIgAAARM"]
[Fri Dec 05 07:13:19.759346 2025] [:error] [pid 53923:tid 53931] [client 66.249.64.101:52766] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIVj7l8ebZN0VCAVXAc_gAAAMY"]
[Fri Dec 05 07:13:21.140893 2025] [:error] [pid 53923:tid 53945] [client 66.249.64.101:40935] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIVkbl8ebZN0VCAVXAdAQAAANQ"]
[Fri Dec 05 07:13:22.522855 2025] [:error] [pid 53837:tid 53857] [client 66.249.64.101:50411] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIVkjbsUyTxys8OiMI9GAAAAA8"]
[Fri Dec 05 07:13:23.915693 2025] [:error] [pid 53837:tid 53864] [client 66.249.64.101:51393] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIVkzbsUyTxys8OiMI9GwAAABY"]
[Fri Dec 05 07:13:25.677162 2025] [:error] [pid 53839:tid 53919] [client 66.249.64.101:59369] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIVlaQOuERg_RN7bn-fagAAAJc"]
[Fri Dec 05 07:13:27.552214 2025] [:error] [pid 53837:tid 53851] [client 66.249.64.101:61631] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIVlzbsUyTxys8OiMI9HwAAAAk"]
[Fri Dec 05 07:13:27.621087 2025] [:error] [pid 53839:tid 53902] [client 66.249.64.101:63787] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIVl6QOuERg_RN7bn-fbgAAAIY"]
[Fri Dec 05 07:13:28.912711 2025] [:error] [pid 53923:tid 53945] [client 66.249.64.101:56486] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIVmLl8ebZN0VCAVXAdGAAAANQ"]
[Fri Dec 05 07:13:30.068371 2025] [:error] [pid 53923:tid 53942] [client 66.249.64.101:61398] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIVmrl8ebZN0VCAVXAdHgAAANE"]
[Fri Dec 05 07:13:31.593951 2025] [:error] [pid 53837:tid 53843] [client 66.249.64.101:52445] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIVmzbsUyTxys8OiMI9KAAAAAE"]
[Fri Dec 05 07:13:33.402954 2025] [:error] [pid 53923:tid 53935] [client 66.249.64.101:35828] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIVnbl8ebZN0VCAVXAdKQAAAMo"]
[Fri Dec 05 07:13:34.963474 2025] [:error] [pid 53838:tid 53887] [client 66.249.64.101:55393] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIVnp8M7CH_vMhLrzIbfAAAAFI"]
[Fri Dec 05 07:13:36.475872 2025] [:error] [pid 53923:tid 53943] [client 66.249.64.101:55346] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIVoLl8ebZN0VCAVXAdWgAAANI"]
[Fri Dec 05 07:13:37.827210 2025] [:error] [pid 53838:tid 53891] [client 66.249.64.101:56222] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIVoZ8M7CH_vMhLrzIbhAAAAFY"]
[Fri Dec 05 07:13:41.158277 2025] [:error] [pid 53923:tid 53932] [client 66.249.64.101:56709] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIVpbl8ebZN0VCAVXAdawAAAMc"]
[Fri Dec 05 07:13:42.752675 2025] [:error] [pid 53923:tid 53949] [client 66.249.64.101:45523] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIVprl8ebZN0VCAVXAdcgAAANg"]
[Fri Dec 05 07:13:44.139525 2025] [:error] [pid 24010:tid 24032] [client 66.249.64.101:54276] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIVqKtjRoDpxa46mwdP3QAAARQ"]
[Fri Dec 05 07:13:45.549626 2025] [:error] [pid 53839:tid 53912] [client 66.249.64.101:58260] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIVqaQOuERg_RN7bn-fkgAAAJA"]
[Fri Dec 05 07:14:03.745114 2025] [:error] [pid 53838:tid 53890] [client 66.249.64.101:45880] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIVu58M7CH_vMhLrzIbogAAAFU"]
[Fri Dec 05 07:14:06.094317 2025] [:error] [pid 53923:tid 53932] [client 66.249.64.101:61155] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIVvrl8ebZN0VCAVXAdvAAAAMc"]
[Fri Dec 05 07:14:08.340770 2025] [:error] [pid 53837:tid 53865] [client 66.249.64.101:56718] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIVwDbsUyTxys8OiMI9cgAAABc"]
[Fri Dec 05 07:14:09.726151 2025] [:error] [pid 53837:tid 53846] [client 66.249.64.101:50052] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIVwTbsUyTxys8OiMI9egAAAAQ"]
[Fri Dec 05 07:14:10.826954 2025] [:error] [pid 24010:tid 24026] [client 66.249.64.101:63616] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIVwqtjRoDpxa46mwdQWgAAAQ4"]
[Fri Dec 05 07:14:12.193101 2025] [:error] [pid 53838:tid 53880] [client 66.249.64.101:59276] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIVxJ8M7CH_vMhLrzIbpgAAAEs"]
[Fri Dec 05 07:14:13.810350 2025] [:error] [pid 24010:tid 24014] [client 66.249.64.101:43463] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIVxatjRoDpxa46mwdQYgAAAQI"]
[Fri Dec 05 07:14:17.001411 2025] [:error] [pid 53923:tid 53947] [client 66.249.64.101:61446] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIVybl8ebZN0VCAVXAdywAAANY"]
[Fri Dec 05 07:14:18.541818 2025] [:error] [pid 24010:tid 24032] [client 66.249.64.101:46058] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIVyqtjRoDpxa46mwdQhwAAARQ"]
[Fri Dec 05 07:14:20.955801 2025] [:error] [pid 53923:tid 53938] [client 66.249.64.101:38609] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIVzLl8ebZN0VCAVXAd2QAAAM0"]
[Fri Dec 05 07:14:21.853006 2025] [:error] [pid 24010:tid 24026] [client 66.249.64.101:49985] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIVzatjRoDpxa46mwdQjwAAAQ4"]
[Fri Dec 05 07:14:23.146200 2025] [:error] [pid 53923:tid 53928] [client 66.249.64.101:59062] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIVz7l8ebZN0VCAVXAd3wAAAMM"]
[Fri Dec 05 07:14:24.782930 2025] [:error] [pid 53838:tid 53890] [client 66.249.64.101:47604] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIV0J8M7CH_vMhLrzIbyQAAAFU"]
[Fri Dec 05 07:14:26.192830 2025] [:error] [pid 24010:tid 24035] [client 66.249.64.101:38621] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIV0qtjRoDpxa46mwdQkwAAARc"]
[Fri Dec 05 07:14:27.933853 2025] [:error] [pid 24010:tid 24012] [client 66.249.64.101:42194] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIV06tjRoDpxa46mwdQpgAAAQA"]
[Fri Dec 05 07:14:29.370947 2025] [:error] [pid 53838:tid 53875] [client 66.249.64.101:40763] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIV1Z8M7CH_vMhLrzIb6AAAAEY"]
[Fri Dec 05 07:14:30.921749 2025] [:error] [pid 53838:tid 53882] [client 66.249.64.101:45821] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIV1p8M7CH_vMhLrzIb8gAAAE0"]
[Fri Dec 05 07:14:32.439460 2025] [:error] [pid 24010:tid 24017] [client 66.249.64.101:39661] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIV2KtjRoDpxa46mwdQuAAAAQU"]
[Fri Dec 05 07:14:33.771689 2025] [:error] [pid 53923:tid 53935] [client 66.249.64.101:47132] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIV2bl8ebZN0VCAVXAd_QAAAMo"]
[Fri Dec 05 07:14:35.727661 2025] [:error] [pid 24010:tid 24019] [client 66.249.64.101:58661] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIV26tjRoDpxa46mwdQwwAAAQc"]
[Fri Dec 05 07:14:37.255773 2025] [:error] [pid 24010:tid 24029] [client 66.249.64.101:42152] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIV3atjRoDpxa46mwdQxgAAARE"]
[Fri Dec 05 07:14:38.600069 2025] [:error] [pid 53838:tid 53879] [client 66.249.64.101:61964] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIV3p8M7CH_vMhLrzIcDwAAAEo"]
[Fri Dec 05 07:14:40.233824 2025] [:error] [pid 53838:tid 53876] [client 66.249.64.101:45762] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIV4J8M7CH_vMhLrzIcGAAAAEc"]
[Fri Dec 05 07:14:41.761464 2025] [:error] [pid 53839:tid 53910] [client 66.249.64.101:51561] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIV4aQOuERg_RN7bn-gHwAAAI4"]
[Fri Dec 05 07:14:43.541189 2025] [:error] [pid 53839:tid 53901] [client 66.249.64.101:63910] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIV46QOuERg_RN7bn-gKgAAAIU"]
[Fri Dec 05 07:14:45.061785 2025] [:error] [pid 53923:tid 53942] [client 66.249.64.101:46883] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIV5bl8ebZN0VCAVXAeFQAAANE"]
[Fri Dec 05 07:14:46.523802 2025] [:error] [pid 24010:tid 24027] [client 66.249.64.101:35385] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIV5qtjRoDpxa46mwdQ4QAAAQ8"]
[Fri Dec 05 07:14:48.063330 2025] [:error] [pid 24010:tid 24026] [client 66.249.64.101:58771] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIV6KtjRoDpxa46mwdQ5gAAAQ4"]
[Fri Dec 05 07:14:49.483135 2025] [:error] [pid 53923:tid 53929] [client 66.249.64.101:57163] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIV6bl8ebZN0VCAVXAeHQAAAMQ"]
[Fri Dec 05 07:14:51.365430 2025] [:error] [pid 24010:tid 24026] [client 66.249.64.101:61236] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIV66tjRoDpxa46mwdQ9AAAAQ4"]
[Fri Dec 05 07:14:52.747691 2025] [:error] [pid 53923:tid 53940] [client 66.249.64.101:58471] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIV7Ll8ebZN0VCAVXAeJgAAAM8"]
[Fri Dec 05 07:14:54.252904 2025] [:error] [pid 53838:tid 53890] [client 66.249.64.101:61108] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIV7p8M7CH_vMhLrzIcOgAAAFU"]
[Fri Dec 05 07:14:55.824891 2025] [:error] [pid 24010:tid 24022] [client 66.249.64.101:42979] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIV76tjRoDpxa46mwdQ_AAAAQo"]
[Fri Dec 05 07:14:59.150313 2025] [:error] [pid 53837:tid 53861] [client 66.249.64.101:35664] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIV8zbsUyTxys8OiMI99wAAABM"]
[Fri Dec 05 07:15:00.558628 2025] [:error] [pid 53923:tid 53936] [client 66.249.64.101:61055] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIV9Ll8ebZN0VCAVXAeNgAAAMs"]
[Fri Dec 05 07:15:18.327900 2025] [:error] [pid 53838:tid 53890] [client 66.249.64.101:36384] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIWBp8M7CH_vMhLrzIcYAAAAFU"]
[Fri Dec 05 07:15:20.706178 2025] [:error] [pid 24010:tid 24022] [client 66.249.64.101:54243] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIWCKtjRoDpxa46mwdRHgAAAQo"]
[Fri Dec 05 07:15:22.477429 2025] [:error] [pid 53839:tid 53910] [client 66.249.64.101:35613] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIWCqQOuERg_RN7bn-gqAAAAI4"]
[Fri Dec 05 07:15:23.933758 2025] [:error] [pid 53839:tid 53903] [client 66.249.64.101:65267] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIWC6QOuERg_RN7bn-grAAAAIc"]
[Fri Dec 05 07:15:31.746015 2025] [:error] [pid 24010:tid 24035] [client 66.249.64.101:54997] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIWE6tjRoDpxa46mwdRMgAAARc"]
[Fri Dec 05 07:15:33.214255 2025] [:error] [pid 24010:tid 24013] [client 66.249.64.101:54464] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIWFatjRoDpxa46mwdRNAAAAQE"]
[Fri Dec 05 07:15:36.227636 2025] [:error] [pid 53923:tid 53929] [client 66.249.64.101:54071] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIWGLl8ebZN0VCAVXAepAAAAMQ"]
[Fri Dec 05 07:15:37.892567 2025] [:error] [pid 24010:tid 24012] [client 66.249.64.101:60438] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIWGatjRoDpxa46mwdRQQAAAQA"]
[Fri Dec 05 07:15:39.380230 2025] [:error] [pid 53839:tid 53911] [client 66.249.64.101:39874] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIWG6QOuERg_RN7bn-gygAAAI8"]
[Fri Dec 05 07:15:42.509608 2025] [:error] [pid 53839:tid 53908] [client 66.249.64.101:48715] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIWHqQOuERg_RN7bn-gywAAAIw"]
[Fri Dec 05 07:15:43.995149 2025] [:error] [pid 53923:tid 53925] [client 66.249.64.101:35641] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIWH7l8ebZN0VCAVXAewAAAAMA"]
[Fri Dec 05 07:15:45.794791 2025] [:error] [pid 24010:tid 24021] [client 66.249.64.101:44637] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIWIatjRoDpxa46mwdRYQAAAQk"]
[Fri Dec 05 07:15:47.165812 2025] [:error] [pid 53837:tid 53861] [client 66.249.64.101:55559] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIWIzbsUyTxys8OiMI-PAAAABM"]
[Fri Dec 05 07:15:48.809197 2025] [:error] [pid 53837:tid 53844] [client 66.249.64.101:44770] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIWJDbsUyTxys8OiMI-RQAAAAI"]
[Fri Dec 05 07:15:50.310838 2025] [:error] [pid 24010:tid 24028] [client 66.249.64.101:55661] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIWJqtjRoDpxa46mwdRcwAAARA"]
[Fri Dec 05 07:15:51.791208 2025] [:error] [pid 53923:tid 53942] [client 66.249.64.101:61039] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIWJ7l8ebZN0VCAVXAe2QAAANE"]
[Fri Dec 05 07:15:53.601360 2025] [:error] [pid 24010:tid 24017] [client 66.249.64.101:35900] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIWKatjRoDpxa46mwdRfwAAAQU"]
[Fri Dec 05 07:15:55.090698 2025] [:error] [pid 53839:tid 53920] [client 66.249.64.101:52878] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIWK6QOuERg_RN7bn-g2QAAAJg"]
[Fri Dec 05 07:15:56.604960 2025] [:error] [pid 53839:tid 53912] [client 66.249.64.101:41891] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIWLKQOuERg_RN7bn-g3QAAAJA"]
[Fri Dec 05 07:15:59.585617 2025] [:error] [pid 53923:tid 53942] [client 66.249.64.101:40887] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIWL7l8ebZN0VCAVXAe7wAAANE"]
[Fri Dec 05 07:16:01.504919 2025] [:error] [pid 53839:tid 53906] [client 66.249.64.101:41707] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIWMaQOuERg_RN7bn-g4wAAAIo"]
[Fri Dec 05 07:16:07.385265 2025] [:error] [pid 53839:tid 53906] [client 66.249.64.101:42530] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIWN6QOuERg_RN7bn-g7AAAAIo"]
[Fri Dec 05 07:16:09.052468 2025] [:error] [pid 24010:tid 24024] [client 66.249.64.101:49555] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIWOatjRoDpxa46mwdRoAAAAQw"]
[Fri Dec 05 07:16:10.668407 2025] [:error] [pid 53839:tid 53918] [client 66.249.64.101:57268] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIWOqQOuERg_RN7bn-g7wAAAJY"]
[Fri Dec 05 07:16:12.181222 2025] [:error] [pid 53838:tid 53877] [client 66.249.64.101:64245] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIWPJ8M7CH_vMhLrzIckQAAAEg"]
[Fri Dec 05 07:16:13.685724 2025] [:error] [pid 53839:tid 53898] [client 66.249.64.101:41717] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIWPaQOuERg_RN7bn-g9AAAAII"]
[Fri Dec 05 07:16:15.150167 2025] [:error] [pid 24010:tid 24021] [client 66.249.64.101:62656] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIWP6tjRoDpxa46mwdRqAAAAQk"]
[Fri Dec 05 07:16:33.205399 2025] [:error] [pid 53923:tid 53930] [client 66.249.64.101:36948] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIWUbl8ebZN0VCAVXAfSwAAAMU"]
[Fri Dec 05 07:16:37.040104 2025] [:error] [pid 53838:tid 53869] [client 66.249.64.101:57626] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIWVZ8M7CH_vMhLrzIcsAAAAEA"]
[Fri Dec 05 07:16:38.841815 2025] [:error] [pid 24010:tid 24027] [client 66.249.64.101:47662] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIWVqtjRoDpxa46mwdR3gAAAQ8"]
[Fri Dec 05 07:16:40.328334 2025] [:error] [pid 24010:tid 24028] [client 66.249.64.101:58824] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIWWKtjRoDpxa46mwdR8QAAARA"]
[Fri Dec 05 07:16:41.826610 2025] [:error] [pid 24010:tid 24017] [client 66.249.64.101:36498] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIWWatjRoDpxa46mwdSBAAAAQU"]
[Fri Dec 05 07:16:43.338914 2025] [:error] [pid 53837:tid 53854] [client 66.249.64.101:37207] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIWWzbsUyTxys8OiMI-_wAAAAw"]
[Fri Dec 05 07:16:44.828596 2025] [:error] [pid 53837:tid 53866] [client 66.249.64.101:53185] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIWXDbsUyTxys8OiMI_BAAAABg"]
[Fri Dec 05 07:16:47.057062 2025] [:error] [pid 53923:tid 53942] [client 66.249.64.101:52104] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIWX7l8ebZN0VCAVXAfdAAAANE"]
[Fri Dec 05 07:16:48.143441 2025] [:error] [pid 24010:tid 24024] [client 66.249.64.101:39999] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIWYKtjRoDpxa46mwdSGgAAAQw"]
[Fri Dec 05 07:16:51.112629 2025] [:error] [pid 53923:tid 53933] [client 66.249.64.101:38717] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIWY7l8ebZN0VCAVXAfewAAAMg"]
[Fri Dec 05 07:16:52.620425 2025] [:error] [pid 53839:tid 53906] [client 66.249.64.101:42354] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIWZKQOuERg_RN7bn-hdgAAAIo"]
[Fri Dec 05 07:16:57.423174 2025] [:error] [pid 24010:tid 24029] [client 66.249.64.101:35944] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIWaatjRoDpxa46mwdSNgAAARE"]
[Fri Dec 05 07:17:00.422344 2025] [:error] [pid 24010:tid 24036] [client 66.249.64.101:42082] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIWbKtjRoDpxa46mwdSPwAAARg"]
[Fri Dec 05 07:17:02.211495 2025] [:error] [pid 53839:tid 53905] [client 66.249.64.101:46318] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIWbqQOuERg_RN7bn-hhQAAAIk"]
[Fri Dec 05 07:17:03.712684 2025] [:error] [pid 24010:tid 24036] [client 66.249.64.101:61061] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIWb6tjRoDpxa46mwdSTgAAARg"]
[Fri Dec 05 07:17:08.277983 2025] [:error] [pid 53923:tid 53930] [client 66.249.64.101:63936] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIWdLl8ebZN0VCAVXAfnwAAAMU"]
[Fri Dec 05 07:17:10.010252 2025] [:error] [pid 53923:tid 53927] [client 66.249.64.101:48561] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIWdrl8ebZN0VCAVXAfoAAAAMI"]
[Fri Dec 05 07:17:11.564639 2025] [:error] [pid 53838:tid 53871] [client 66.249.64.101:65312] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIWd58M7CH_vMhLrzIdEQAAAEI"]
[Fri Dec 05 07:17:16.021834 2025] [:error] [pid 24010:tid 24035] [client 66.249.64.101:51005] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIWfKtjRoDpxa46mwdSfQAAARc"]
[Fri Dec 05 07:17:17.831676 2025] [:error] [pid 53838:tid 53878] [client 66.249.64.101:43272] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIWfZ8M7CH_vMhLrzIdIQAAAEk"]
[Fri Dec 05 07:17:20.841082 2025] [:error] [pid 53837:tid 53859] [client 66.249.64.101:57596] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIWgDbsUyTxys8OiMI_UAAAABE"]
[Fri Dec 05 07:17:22.221019 2025] [:error] [pid 53923:tid 53942] [client 66.249.64.101:63291] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIWgrl8ebZN0VCAVXAfyQAAANE"]
[Fri Dec 05 07:17:23.907752 2025] [:error] [pid 53923:tid 53944] [client 66.249.64.101:52803] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIWg7l8ebZN0VCAVXAf0wAAANM"]
[Fri Dec 05 07:17:25.627435 2025] [:error] [pid 53837:tid 53858] [client 66.249.64.101:56559] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIWhTbsUyTxys8OiMI_YAAAABA"]
[Fri Dec 05 07:17:27.121436 2025] [:error] [pid 24010:tid 24018] [client 66.249.64.101:64285] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIWh6tjRoDpxa46mwdSvgAAAQY"]
[Fri Dec 05 07:17:52.659983 2025] [:error] [pid 53923:tid 53934] [client 66.249.64.101:35835] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIWoLl8ebZN0VCAVXAgWQAAAMk"]
[Fri Dec 05 07:17:54.999829 2025] [:error] [pid 24010:tid 24014] [client 66.249.64.101:48513] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIWoqtjRoDpxa46mwdTAAAAAQI"]
[Fri Dec 05 07:17:56.788977 2025] [:error] [pid 24010:tid 24021] [client 66.249.64.101:56727] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIWpKtjRoDpxa46mwdTBQAAAQk"]
[Fri Dec 05 07:17:58.278978 2025] [:error] [pid 24010:tid 24025] [client 66.249.64.101:50230] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIWpqtjRoDpxa46mwdTBwAAAQ0"]
[Fri Dec 05 07:17:59.779765 2025] [:error] [pid 24010:tid 24014] [client 66.249.64.101:52090] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIWp6tjRoDpxa46mwdTCwAAAQI"]
[Fri Dec 05 07:18:02.771768 2025] [:error] [pid 53839:tid 53918] [client 66.249.64.101:57161] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIWqqQOuERg_RN7bn-iIAAAAJY"]
[Fri Dec 05 07:18:06.096362 2025] [:error] [pid 53839:tid 53897] [client 66.249.64.101:62545] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIWrqQOuERg_RN7bn-iJgAAAIE"]
[Fri Dec 05 07:18:07.575381 2025] [:error] [pid 53923:tid 53935] [client 66.249.64.101:51119] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIWr7l8ebZN0VCAVXAgrwAAAMo"]
[Fri Dec 05 07:18:09.076461 2025] [:error] [pid 53837:tid 53844] [client 66.249.64.101:44690] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIWsTbsUyTxys8OiMI_nAAAAAI"]
[Fri Dec 05 07:18:13.506984 2025] [:error] [pid 53837:tid 53849] [client 66.249.64.101:55686] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIWtTbsUyTxys8OiMI_pAAAAAc"]
[Fri Dec 05 07:18:14.871252 2025] [:error] [pid 53838:tid 53891] [client 66.249.64.101:56934] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIWtp8M7CH_vMhLrzIdewAAAFY"]
[Fri Dec 05 07:18:16.372465 2025] [:error] [pid 53923:tid 53947] [client 66.249.64.101:35881] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIWuLl8ebZN0VCAVXAg0QAAANY"]
[Fri Dec 05 07:18:17.866953 2025] [:error] [pid 53837:tid 53850] [client 66.249.64.101:44307] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIWuTbsUyTxys8OiMI_qwAAAAg"]
[Fri Dec 05 07:18:19.235843 2025] [:error] [pid 53838:tid 53879] [client 66.249.64.101:56470] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIWu58M7CH_vMhLrzIdjAAAAEo"]
[Fri Dec 05 07:18:22.638304 2025] [:error] [pid 53839:tid 53897] [client 66.249.64.101:55673] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIWvqQOuERg_RN7bn-iQQAAAIE"]
[Fri Dec 05 07:18:24.154958 2025] [:error] [pid 53837:tid 53846] [client 66.249.64.101:39378] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIWwDbsUyTxys8OiMI_tQAAAAQ"]
[Fri Dec 05 07:18:25.649413 2025] [:error] [pid 53837:tid 53865] [client 66.249.64.101:54960] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIWwTbsUyTxys8OiMI_vAAAABc"]
[Fri Dec 05 07:18:27.148557 2025] [:error] [pid 53838:tid 53884] [client 66.249.64.101:38017] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIWw58M7CH_vMhLrzIdlQAAAE8"]
[Fri Dec 05 07:18:29.741231 2025] [:error] [pid 53837:tid 53850] [client 66.249.64.101:37556] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIWxTbsUyTxys8OiMI_ygAAAAg"]
[Fri Dec 05 07:18:31.937765 2025] [:error] [pid 24010:tid 24022] [client 66.249.64.101:62400] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIWx6tjRoDpxa46mwdTSwAAAQo"]
[Fri Dec 05 07:18:33.536793 2025] [:error] [pid 53839:tid 53902] [client 66.249.64.101:49962] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIWyaQOuERg_RN7bn-iuAAAAIY"]
[Fri Dec 05 07:18:35.191385 2025] [:error] [pid 53839:tid 53914] [client 66.249.64.101:40169] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIWy6QOuERg_RN7bn-iwgAAAJI"]
[Fri Dec 05 07:18:36.739622 2025] [:error] [pid 53838:tid 53884] [client 66.249.64.101:46774] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIWzJ8M7CH_vMhLrzIdnwAAAE8"]
[Fri Dec 05 07:18:37.492880 2025] [:error] [pid 53839:tid 53904] [client 66.249.64.101:62362] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIWzaQOuERg_RN7bn-iygAAAIg"]
[Fri Dec 05 07:18:38.232492 2025] [:error] [pid 53923:tid 53948] [client 66.249.64.101:62508] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIWzrl8ebZN0VCAVXAhOgAAANc"]
[Fri Dec 05 07:18:39.609643 2025] [:error] [pid 24010:tid 24035] [client 66.249.64.101:63680] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIWz6tjRoDpxa46mwdTXwAAARc"]
[Fri Dec 05 07:18:41.222527 2025] [:error] [pid 53838:tid 53885] [client 66.249.64.101:42039] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIW0Z8M7CH_vMhLrzIdpgAAAFA"]
[Fri Dec 05 07:18:42.734487 2025] [:error] [pid 24010:tid 24027] [client 66.249.64.101:43610] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIW0qtjRoDpxa46mwdTYQAAAQ8"]
[Fri Dec 05 07:18:44.534745 2025] [:error] [pid 53923:tid 53939] [client 66.249.64.101:35465] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIW1Ll8ebZN0VCAVXAhUQAAAM4"]
[Fri Dec 05 07:18:46.049895 2025] [:error] [pid 24010:tid 24012] [client 66.249.64.101:46695] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIW1qtjRoDpxa46mwdTaAAAAQA"]
[Fri Dec 05 07:18:47.383822 2025] [:error] [pid 24010:tid 24016] [client 66.249.64.101:64948] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIW16tjRoDpxa46mwdTbQAAAQQ"]
[Fri Dec 05 07:18:48.891879 2025] [:error] [pid 53839:tid 53906] [client 66.249.64.101:43080] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIW2KQOuERg_RN7bn-i5AAAAIo"]
[Fri Dec 05 07:18:50.522881 2025] [:error] [pid 53923:tid 53939] [client 66.249.64.101:65527] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIW2rl8ebZN0VCAVXAhXQAAAM4"]
[Fri Dec 05 07:19:09.000869 2025] [:error] [pid 53837:tid 53849] [client 66.249.64.101:39986] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIW7DbsUyTxys8OiMJAPQAAAAc"]
[Fri Dec 05 07:19:10.915635 2025] [:error] [pid 24010:tid 24035] [client 66.249.64.101:65386] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIW7qtjRoDpxa46mwdTmgAAARc"]
[Fri Dec 05 07:19:12.428727 2025] [:error] [pid 53837:tid 53854] [client 66.249.64.101:52569] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIW8DbsUyTxys8OiMJAQgAAAAw"]
[Fri Dec 05 07:19:13.933424 2025] [:error] [pid 53839:tid 53904] [client 66.249.64.101:61280] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIW8aQOuERg_RN7bn-jDgAAAIg"]
[Fri Dec 05 07:19:15.715550 2025] [:error] [pid 53837:tid 53865] [client 66.249.64.101:63883] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIW8zbsUyTxys8OiMJARwAAABc"]
[Fri Dec 05 07:19:17.217051 2025] [:error] [pid 53838:tid 53893] [client 66.249.64.101:39975] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIW9Z8M7CH_vMhLrzId4QAAAFg"]
[Fri Dec 05 07:19:20.220081 2025] [:error] [pid 53923:tid 53942] [client 66.249.64.101:46889] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIW-Ll8ebZN0VCAVXAhxgAAANE"]
[Fri Dec 05 07:19:21.738983 2025] [:error] [pid 53923:tid 53944] [client 66.249.64.101:62966] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIW-bl8ebZN0VCAVXAhyQAAANM"]
[Fri Dec 05 07:19:24.533234 2025] [:error] [pid 53839:tid 53897] [client 66.249.64.101:58023] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIW_KQOuERg_RN7bn-jGQAAAIE"]
[Fri Dec 05 07:19:25.017395 2025] [:error] [pid 53839:tid 53900] [client 66.249.64.101:35005] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIW_aQOuERg_RN7bn-jGgAAAIQ"]
[Fri Dec 05 07:19:26.509722 2025] [:error] [pid 53923:tid 53939] [client 66.249.64.101:53653] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIW_rl8ebZN0VCAVXAhzwAAAM4"]
[Fri Dec 05 07:19:28.005197 2025] [:error] [pid 53839:tid 53913] [client 66.249.64.101:64857] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIXAKQOuERg_RN7bn-jIAAAAJE"]
[Fri Dec 05 07:19:29.094445 2025] [:error] [pid 24010:tid 24016] [client 66.249.64.101:47037] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIXAatjRoDpxa46mwdT5gAAAQQ"]
[Fri Dec 05 07:19:29.489090 2025] [:error] [pid 53837:tid 53844] [client 66.249.64.101:51097] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIXATbsUyTxys8OiMJAWQAAAAI"]
[Fri Dec 05 07:19:31.312983 2025] [:error] [pid 53837:tid 53858] [client 66.249.64.101:62005] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIXAzbsUyTxys8OiMJAXAAAABA"]
[Fri Dec 05 07:19:32.678387 2025] [:error] [pid 24010:tid 24034] [client 66.249.64.101:41854] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIXBKtjRoDpxa46mwdT-QAAARY"]
[Fri Dec 05 07:19:34.311224 2025] [:error] [pid 24010:tid 24028] [client 66.249.64.101:57820] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIXBqtjRoDpxa46mwdUBwAAARA"]
[Fri Dec 05 07:19:37.288098 2025] [:error] [pid 53838:tid 53876] [client 66.249.64.101:61647] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIXCZ8M7CH_vMhLrzIeAAAAAEc"]
[Fri Dec 05 07:19:39.076380 2025] [:error] [pid 24010:tid 24023] [client 66.249.64.101:52766] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIXC6tjRoDpxa46mwdUIAAAAQs"]
[Fri Dec 05 07:19:40.586737 2025] [:error] [pid 53839:tid 53914] [client 66.249.64.101:64261] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIXDKQOuERg_RN7bn-jKQAAAJI"]
[Fri Dec 05 07:19:42.075683 2025] [:error] [pid 24010:tid 24022] [client 66.249.64.101:62324] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIXDqtjRoDpxa46mwdUKAAAAQo"]
[Fri Dec 05 07:19:43.590502 2025] [:error] [pid 53837:tid 53851] [client 66.249.64.101:55960] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIXDzbsUyTxys8OiMJAagAAAAk"]
[Fri Dec 05 07:19:45.085651 2025] [:error] [pid 53839:tid 53908] [client 66.249.64.101:36510] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIXEaQOuERg_RN7bn-jMAAAAIw"]
[Fri Dec 05 07:19:47.160772 2025] [:error] [pid 53837:tid 53866] [client 66.249.64.101:48767] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIXEzbsUyTxys8OiMJAcgAAABg"]
[Fri Dec 05 07:19:48.408992 2025] [:error] [pid 53923:tid 53945] [client 66.249.64.101:41100] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIXFLl8ebZN0VCAVXAh9gAAANQ"]
[Fri Dec 05 07:19:49.860629 2025] [:error] [pid 53923:tid 53941] [client 66.249.64.101:63303] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIXFbl8ebZN0VCAVXAiAQAAANA"]
[Fri Dec 05 07:19:51.373510 2025] [:error] [pid 53838:tid 53881] [client 66.249.64.101:40722] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIXF58M7CH_vMhLrzIeFgAAAEw"]
[Fri Dec 05 07:19:52.870697 2025] [:error] [pid 53837:tid 53846] [client 66.249.64.101:65284] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIXGDbsUyTxys8OiMJAdAAAAAQ"]
[Fri Dec 05 07:19:54.664835 2025] [:error] [pid 53838:tid 53888] [client 66.249.64.101:36357] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIXGp8M7CH_vMhLrzIeIAAAAFM"]
[Fri Dec 05 07:19:56.181232 2025] [:error] [pid 24010:tid 24022] [client 66.249.64.101:53907] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIXHKtjRoDpxa46mwdUUwAAAQo"]
[Fri Dec 05 07:19:57.665872 2025] [:error] [pid 53838:tid 53883] [client 66.249.64.101:43763] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIXHZ8M7CH_vMhLrzIeJwAAAE4"]
[Fri Dec 05 07:19:59.172274 2025] [:error] [pid 53923:tid 53933] [client 66.249.64.101:48203] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIXH7l8ebZN0VCAVXAiJgAAAMg"]
[Fri Dec 05 07:20:00.652248 2025] [:error] [pid 24010:tid 24033] [client 66.249.64.101:55475] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIXIKtjRoDpxa46mwdUZQAAARU"]
[Fri Dec 05 07:20:02.448004 2025] [:error] [pid 53837:tid 53864] [client 66.249.64.101:61359] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIXIjbsUyTxys8OiMJAgQAAABY"]
[Fri Dec 05 07:20:03.965681 2025] [:error] [pid 53838:tid 53877] [client 66.249.64.101:51553] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIXI58M7CH_vMhLrzIeLwAAAEg"]
[Fri Dec 05 07:20:05.440469 2025] [:error] [pid 53923:tid 53937] [client 66.249.64.101:52594] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIXJbl8ebZN0VCAVXAiNwAAAMw"]
[Fri Dec 05 07:20:06.959018 2025] [:error] [pid 53838:tid 53875] [client 66.249.64.101:65496] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIXJp8M7CH_vMhLrzIeOwAAAEY"]
[Fri Dec 05 07:20:24.990141 2025] [:error] [pid 24010:tid 24029] [client 66.249.64.101:36931] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIXOKtjRoDpxa46mwdUjgAAARE"]
[Fri Dec 05 07:20:27.317052 2025] [:error] [pid 24010:tid 24034] [client 66.249.64.101:42212] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIXO6tjRoDpxa46mwdUkQAAARY"]
[Fri Dec 05 07:20:28.712283 2025] [:error] [pid 53923:tid 53945] [client 66.249.64.101:52547] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIXPLl8ebZN0VCAVXAiWwAAANQ"]
[Fri Dec 05 07:20:30.296277 2025] [:error] [pid 53838:tid 53874] [client 66.249.64.101:35118] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIXPp8M7CH_vMhLrzIeiAAAAEU"]
[Fri Dec 05 07:20:31.800006 2025] [:error] [pid 53839:tid 53915] [client 66.249.64.101:42276] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIXP6QOuERg_RN7bn-jeAAAAJM"]
[Fri Dec 05 07:20:35.099396 2025] [:error] [pid 53923:tid 53937] [client 66.249.64.101:52376] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIXQ7l8ebZN0VCAVXAijAAAAMw"]
[Fri Dec 05 07:20:36.586077 2025] [:error] [pid 24010:tid 24025] [client 66.249.64.101:47375] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIXRKtjRoDpxa46mwdUwgAAAQ0"]
[Fri Dec 05 07:20:38.087939 2025] [:error] [pid 53923:tid 53932] [client 66.249.64.101:62152] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIXRrl8ebZN0VCAVXAikAAAAMc"]
[Fri Dec 05 07:20:39.586455 2025] [:error] [pid 53839:tid 53898] [client 66.249.64.101:52128] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIXR6QOuERg_RN7bn-jngAAAII"]
[Fri Dec 05 07:20:41.626150 2025] [:error] [pid 53839:tid 53901] [client 66.249.64.101:54017] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIXSaQOuERg_RN7bn-jswAAAIU"]
[Fri Dec 05 07:20:42.894723 2025] [:error] [pid 53838:tid 53893] [client 66.249.64.101:58937] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIXSp8M7CH_vMhLrzIepAAAAFg"]
[Fri Dec 05 07:20:44.399946 2025] [:error] [pid 24010:tid 24035] [client 66.249.64.101:44652] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIXTKtjRoDpxa46mwdU6AAAARc"]
[Fri Dec 05 07:20:45.870982 2025] [:error] [pid 24010:tid 24012] [client 66.249.64.101:40192] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIXTatjRoDpxa46mwdU7AAAAQA"]
[Fri Dec 05 07:20:47.283378 2025] [:error] [pid 24010:tid 24035] [client 66.249.64.101:57204] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIXT6tjRoDpxa46mwdU8gAAARc"]
[Fri Dec 05 07:20:49.180656 2025] [:error] [pid 53837:tid 53861] [client 66.249.64.101:59060] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIXUTbsUyTxys8OiMJA4QAAABM"]
[Fri Dec 05 07:20:50.678607 2025] [:error] [pid 53837:tid 53856] [client 66.249.64.101:37721] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIXUjbsUyTxys8OiMJA5gAAAA4"]
[Fri Dec 05 07:20:52.174081 2025] [:error] [pid 24010:tid 24036] [client 66.249.64.101:45118] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIXVKtjRoDpxa46mwdU_wAAARg"]
[Fri Dec 05 07:20:53.681745 2025] [:error] [pid 53923:tid 53933] [client 66.249.64.101:50743] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIXVbl8ebZN0VCAVXAivwAAAMg"]
[Fri Dec 05 07:20:55.161521 2025] [:error] [pid 24010:tid 24014] [client 66.249.64.101:57452] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIXV6tjRoDpxa46mwdVBAAAAQI"]
[Fri Dec 05 07:20:56.972264 2025] [:error] [pid 53838:tid 53886] [client 66.249.64.101:48148] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIXWJ8M7CH_vMhLrzIexgAAAFE"]
[Fri Dec 05 07:20:58.325931 2025] [:error] [pid 53923:tid 53925] [client 66.249.64.101:52943] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIXWrl8ebZN0VCAVXAixAAAAMA"]
[Fri Dec 05 07:20:59.963021 2025] [:error] [pid 53839:tid 53902] [client 66.249.64.101:39018] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIXW6QOuERg_RN7bn-j3gAAAIY"]
[Fri Dec 05 07:21:01.492096 2025] [:error] [pid 53923:tid 53947] [client 66.249.64.101:58060] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIXXbl8ebZN0VCAVXAixgAAANY"]
[Fri Dec 05 07:21:02.963799 2025] [:error] [pid 24010:tid 24034] [client 66.249.64.101:63707] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIXXqtjRoDpxa46mwdVFwAAARY"]
[Fri Dec 05 07:21:04.662595 2025] [:error] [pid 53837:tid 53856] [client 66.249.64.101:41040] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIXYDbsUyTxys8OiMJA9wAAAA4"]
[Fri Dec 05 07:21:06.263295 2025] [:error] [pid 53923:tid 53948] [client 66.249.64.101:52229] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIXYrl8ebZN0VCAVXAizgAAANc"]
[Fri Dec 05 07:21:07.755393 2025] [:error] [pid 53838:tid 53874] [client 66.249.64.101:35730] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIXY58M7CH_vMhLrzIe7wAAAEU"]
[Fri Dec 05 07:21:09.132148 2025] [:error] [pid 24010:tid 24028] [client 66.249.64.101:55359] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIXZatjRoDpxa46mwdVIAAAARA"]
[Fri Dec 05 07:21:10.640821 2025] [:error] [pid 53923:tid 53932] [client 66.249.64.101:52471] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIXZrl8ebZN0VCAVXAi0AAAAMc"]
[Fri Dec 05 07:21:12.595487 2025] [:error] [pid 24010:tid 24012] [client 66.249.64.101:47629] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIXaKtjRoDpxa46mwdVKwAAAQA"]
[Fri Dec 05 07:21:12.596226 2025] [:error] [pid 24010:tid 24035] [client 66.249.64.101:43972] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIXaKtjRoDpxa46mwdVLAAAARc"]
[Fri Dec 05 07:21:12.861742 2025] [:error] [pid 24010:tid 24028] [client 66.249.64.101:41795] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIXaKtjRoDpxa46mwdVLQAAARA"]
[Fri Dec 05 07:21:14.329761 2025] [:error] [pid 53837:tid 53848] [client 66.249.64.101:57293] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIXajbsUyTxys8OiMJBCQAAAAY"]
[Fri Dec 05 07:21:15.551417 2025] [:error] [pid 53923:tid 53935] [client 66.249.64.101:57619] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIXa7l8ebZN0VCAVXAi1wAAAMo"]
[Fri Dec 05 07:21:16.933101 2025] [:error] [pid 53839:tid 53900] [client 66.249.64.101:48040] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIXbKQOuERg_RN7bn-j-QAAAIQ"]
[Fri Dec 05 07:21:18.584310 2025] [:error] [pid 53839:tid 53904] [client 66.249.64.101:60840] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIXbqQOuERg_RN7bn-j_gAAAIg"]
[Fri Dec 05 07:21:20.226144 2025] [:error] [pid 53838:tid 53883] [client 66.249.64.101:44053] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIXcJ8M7CH_vMhLrzIfFQAAAE4"]
[Fri Dec 05 07:21:21.763339 2025] [:error] [pid 24010:tid 24016] [client 66.249.64.101:47548] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIXcatjRoDpxa46mwdVNgAAAQQ"]
[Fri Dec 05 07:21:42.935306 2025] [:error] [pid 53837:tid 53856] [client 66.249.64.101:46159] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIXhjbsUyTxys8OiMJBNQAAAA4"]
[Fri Dec 05 07:21:45.120019 2025] [:error] [pid 53838:tid 53881] [client 66.249.64.101:58325] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIXiZ8M7CH_vMhLrzIfVAAAAEw"]
[Fri Dec 05 07:21:46.769532 2025] [:error] [pid 24010:tid 24030] [client 66.249.64.101:47888] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIXiqtjRoDpxa46mwdVlwAAARI"]
[Fri Dec 05 07:21:48.114654 2025] [:error] [pid 53838:tid 53878] [client 66.249.64.101:62880] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIXjJ8M7CH_vMhLrzIfWQAAAEk"]
[Fri Dec 05 07:21:49.751880 2025] [:error] [pid 24010:tid 24032] [client 66.249.64.101:38246] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIXjatjRoDpxa46mwdVowAAARQ"]
[Fri Dec 05 07:21:51.543716 2025] [:error] [pid 53839:tid 53910] [client 66.249.64.101:53298] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIXj6QOuERg_RN7bn-kVwAAAI4"]
[Fri Dec 05 07:21:52.925345 2025] [:error] [pid 53837:tid 53846] [client 66.249.64.101:44951] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIXkDbsUyTxys8OiMJBRgAAAAQ"]
[Fri Dec 05 07:21:54.555875 2025] [:error] [pid 53837:tid 53858] [client 66.249.64.101:47485] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIXkjbsUyTxys8OiMJBSwAAABA"]
[Fri Dec 05 07:21:56.050739 2025] [:error] [pid 53923:tid 53926] [client 66.249.64.101:59016] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIXlLl8ebZN0VCAVXAjaAAAAME"]
[Fri Dec 05 07:21:57.550048 2025] [:error] [pid 53923:tid 53948] [client 66.249.64.101:48309] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIXlbl8ebZN0VCAVXAjawAAANc"]
[Fri Dec 05 07:21:59.337034 2025] [:error] [pid 53839:tid 53900] [client 66.249.64.101:46107] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIXl6QOuERg_RN7bn-kZQAAAIQ"]
[Fri Dec 05 07:22:00.837057 2025] [:error] [pid 53839:tid 53912] [client 66.249.64.101:46051] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIXmKQOuERg_RN7bn-kaQAAAJA"]
[Fri Dec 05 07:22:02.211153 2025] [:error] [pid 53839:tid 53908] [client 66.249.64.101:54764] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIXmqQOuERg_RN7bn-kdQAAAIw"]
[Fri Dec 05 07:22:03.736850 2025] [:error] [pid 53837:tid 53856] [client 66.249.64.101:54037] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIXmzbsUyTxys8OiMJBYAAAAA4"]
[Fri Dec 05 07:22:05.345949 2025] [:error] [pid 53838:tid 53878] [client 66.249.64.101:34933] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIXnZ8M7CH_vMhLrzIfdAAAAEk"]
[Fri Dec 05 07:22:06.996930 2025] [:error] [pid 53839:tid 53913] [client 66.249.64.101:51912] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIXnqQOuERg_RN7bn-khgAAAJE"]
[Fri Dec 05 07:22:08.679004 2025] [:error] [pid 24010:tid 24035] [client 66.249.64.101:59803] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIXoKtjRoDpxa46mwdV6wAAARc"]
[Fri Dec 05 07:22:10.122193 2025] [:error] [pid 24010:tid 24026] [client 66.249.64.101:61365] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIXoqtjRoDpxa46mwdV8QAAAQ4"]
[Fri Dec 05 07:22:11.633508 2025] [:error] [pid 53838:tid 53877] [client 66.249.64.101:64075] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIXo58M7CH_vMhLrzIfgAAAAEg"]
[Fri Dec 05 07:22:12.994327 2025] [:error] [pid 24010:tid 24023] [client 66.249.64.101:43379] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIXpKtjRoDpxa46mwdWAAAAAQs"]
[Fri Dec 05 07:22:16.411014 2025] [:error] [pid 53923:tid 53935] [client 66.249.64.101:36927] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIXqLl8ebZN0VCAVXAjkwAAAMo"]
[Fri Dec 05 07:22:17.918763 2025] [:error] [pid 53838:tid 53893] [client 66.249.64.101:54012] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIXqZ8M7CH_vMhLrzIfjAAAAFg"]
[Fri Dec 05 07:22:19.448670 2025] [:error] [pid 53838:tid 53882] [client 66.249.64.101:54472] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIXq58M7CH_vMhLrzIfkAAAAE0"]
[Fri Dec 05 07:22:20.779776 2025] [:error] [pid 53839:tid 53914] [client 66.249.64.101:64659] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIXrKQOuERg_RN7bn-kqQAAAJI"]
[Fri Dec 05 07:22:22.667488 2025] [:error] [pid 53837:tid 53858] [client 66.249.64.101:61154] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIXrjbsUyTxys8OiMJBfwAAABA"]
[Fri Dec 05 07:22:24.075985 2025] [:error] [pid 53923:tid 53927] [client 66.249.64.101:46200] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIXsLl8ebZN0VCAVXAjqAAAAMI"]
[Fri Dec 05 07:22:25.696632 2025] [:error] [pid 53839:tid 53913] [client 66.249.64.101:63876] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIXsaQOuERg_RN7bn-ksQAAAJE"]
[Fri Dec 05 07:22:27.071679 2025] [:error] [pid 53923:tid 53947] [client 66.249.64.101:39953] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIXs7l8ebZN0VCAVXAjrgAAANY"]
[Fri Dec 05 07:22:28.579141 2025] [:error] [pid 53923:tid 53934] [client 66.249.64.101:42348] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIXtLl8ebZN0VCAVXAjswAAAMk"]
[Fri Dec 05 07:22:30.502488 2025] [:error] [pid 24010:tid 24021] [client 66.249.64.101:62812] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIXtqtjRoDpxa46mwdWQQAAAQk"]
[Fri Dec 05 07:22:32.008203 2025] [:error] [pid 53923:tid 53947] [client 66.249.64.101:43873] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIXuLl8ebZN0VCAVXAjvQAAANY"]
[Fri Dec 05 07:22:33.510440 2025] [:error] [pid 53838:tid 53876] [client 66.249.64.101:52682] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIXuZ8M7CH_vMhLrzIfrQAAAEc"]
[Fri Dec 05 07:22:35.029753 2025] [:error] [pid 53838:tid 53883] [client 66.249.64.101:52628] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIXu58M7CH_vMhLrzIfsQAAAE4"]
[Fri Dec 05 07:22:36.493696 2025] [:error] [pid 53837:tid 53854] [client 66.249.64.101:41064] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIXvDbsUyTxys8OiMJBnQAAAAw"]
[Fri Dec 05 07:22:38.291962 2025] [:error] [pid 24010:tid 24021] [client 66.249.64.101:65117] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIXvqtjRoDpxa46mwdWXAAAAQk"]
[Fri Dec 05 07:22:39.771737 2025] [:error] [pid 53839:tid 53912] [client 66.249.64.101:43645] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIXv6QOuERg_RN7bn-kzQAAAJA"]
[Fri Dec 05 07:22:57.533254 2025] [:error] [pid 53923:tid 53933] [client 66.249.64.101:62463] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIX0bl8ebZN0VCAVXAkGQAAAMg"]
[Fri Dec 05 07:22:59.034425 2025] [:error] [pid 53839:tid 53903] [client 66.249.64.101:36069] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIX06QOuERg_RN7bn-lHAAAAIc"]
[Fri Dec 05 07:23:01.643601 2025] [:error] [pid 53839:tid 53898] [client 66.249.64.101:35539] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIX1aQOuERg_RN7bn-lIwAAAII"]
[Fri Dec 05 07:23:03.145871 2025] [:error] [pid 53838:tid 53873] [client 66.249.64.101:55427] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIX158M7CH_vMhLrzIf8AAAAEQ"]
[Fri Dec 05 07:23:04.664893 2025] [:error] [pid 53837:tid 53859] [client 66.249.64.101:65281] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIX2DbsUyTxys8OiMJB1gAAABE"]
[Fri Dec 05 07:23:06.146413 2025] [:error] [pid 53838:tid 53878] [client 66.249.64.101:46182] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIX2p8M7CH_vMhLrzIf9AAAAEk"]
[Fri Dec 05 07:23:07.641064 2025] [:error] [pid 53923:tid 53926] [client 66.249.64.101:45142] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIX27l8ebZN0VCAVXAkLAAAAME"]
[Fri Dec 05 07:23:09.446628 2025] [:error] [pid 53837:tid 53861] [client 66.249.64.101:40113] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIX3TbsUyTxys8OiMJB4AAAABM"]
[Fri Dec 05 07:23:14.515824 2025] [:error] [pid 53923:tid 53940] [client 66.249.64.101:55770] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIX4rl8ebZN0VCAVXAkPgAAAM8"]
[Fri Dec 05 07:23:15.266912 2025] [:error] [pid 53923:tid 53949] [client 66.249.64.101:36643] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIX47l8ebZN0VCAVXAkQwAAANg"]
[Fri Dec 05 07:23:16.326972 2025] [:error] [pid 53839:tid 53904] [client 66.249.64.101:48013] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIX5KQOuERg_RN7bn-lUwAAAIg"]
[Fri Dec 05 07:23:17.695654 2025] [:error] [pid 24010:tid 24025] [client 66.249.64.101:35868] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIX5atjRoDpxa46mwdW9gAAAQ0"]
[Fri Dec 05 07:23:19.642912 2025] [:error] [pid 53837:tid 53863] [client 66.249.64.101:65408] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIX5zbsUyTxys8OiMJB-gAAABU"]
[Fri Dec 05 07:23:21.134644 2025] [:error] [pid 24010:tid 24034] [client 66.249.64.101:51476] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIX6atjRoDpxa46mwdW_gAAARY"]
[Fri Dec 05 07:23:22.485098 2025] [:error] [pid 53923:tid 53932] [client 66.249.64.101:52280] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIX6rl8ebZN0VCAVXAkWAAAAMc"]
[Fri Dec 05 07:23:24.122691 2025] [:error] [pid 53837:tid 53853] [client 66.249.64.101:44166] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIX7DbsUyTxys8OiMJCKQAAAAs"]
[Fri Dec 05 07:23:25.622718 2025] [:error] [pid 53839:tid 53915] [client 66.249.64.101:51139] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIX7aQOuERg_RN7bn-leAAAAJM"]
[Fri Dec 05 07:23:27.458291 2025] [:error] [pid 53923:tid 53939] [client 66.249.64.101:47543] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIX77l8ebZN0VCAVXAkYQAAAM4"]
[Fri Dec 05 07:23:28.789126 2025] [:error] [pid 53839:tid 53903] [client 66.249.64.101:61132] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIX8KQOuERg_RN7bn-lhgAAAIc"]
[Fri Dec 05 07:23:30.405191 2025] [:error] [pid 53838:tid 53887] [client 66.249.64.101:51842] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIX8p8M7CH_vMhLrzIgKgAAAFI"]
[Fri Dec 05 07:23:31.825829 2025] [:error] [pid 53839:tid 53909] [client 66.249.64.101:37294] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIX86QOuERg_RN7bn-ljwAAAI0"]
[Fri Dec 05 07:23:33.300114 2025] [:error] [pid 53837:tid 53846] [client 66.249.64.101:57661] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIX9TbsUyTxys8OiMJCPwAAAAQ"]
[Fri Dec 05 07:23:36.608937 2025] [:error] [pid 53837:tid 53853] [client 66.249.64.101:51732] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIX-DbsUyTxys8OiMJCTAAAAAs"]
[Fri Dec 05 07:23:38.196390 2025] [:error] [pid 53923:tid 53933] [client 66.249.64.101:62891] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIX-rl8ebZN0VCAVXAkdQAAAMg"]
[Fri Dec 05 07:23:39.741678 2025] [:error] [pid 53837:tid 53855] [client 66.249.64.101:44121] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIX-zbsUyTxys8OiMJCUwAAAA0"]
[Fri Dec 05 07:23:41.080518 2025] [:error] [pid 53837:tid 53858] [client 66.249.64.101:54616] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIX_TbsUyTxys8OiMJCVQAAABA"]
[Fri Dec 05 07:23:43.003036 2025] [:error] [pid 53837:tid 53860] [client 66.249.64.101:57830] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIX_zbsUyTxys8OiMJCVwAAABI"]
[Fri Dec 05 07:23:44.500737 2025] [:error] [pid 53923:tid 53949] [client 66.249.64.101:49241] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIYALl8ebZN0VCAVXAkgQAAANg"]
[Fri Dec 05 07:23:46.000678 2025] [:error] [pid 53837:tid 53865] [client 66.249.64.101:42656] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIYATbsUyTxys8OiMJCWgAAABc"]
[Fri Dec 05 07:23:47.597395 2025] [:error] [pid 53923:tid 53937] [client 66.249.64.101:49250] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIYA7l8ebZN0VCAVXAkiQAAAMw"]
[Fri Dec 05 07:23:48.869626 2025] [:error] [pid 53837:tid 53854] [client 66.249.64.101:57881] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIYBDbsUyTxys8OiMJCYAAAAAw"]
[Fri Dec 05 07:23:50.817641 2025] [:error] [pid 53838:tid 53878] [client 66.249.64.101:55593] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIYBp8M7CH_vMhLrzIgPgAAAEk"]
[Fri Dec 05 07:23:52.295044 2025] [:error] [pid 53838:tid 53875] [client 66.249.64.101:37781] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIYCJ8M7CH_vMhLrzIgPwAAAEY"]
[Fri Dec 05 07:23:53.810822 2025] [:error] [pid 53923:tid 53946] [client 66.249.64.101:48987] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIYCbl8ebZN0VCAVXAkkwAAANU"]
[Fri Dec 05 07:23:55.168862 2025] [:error] [pid 53838:tid 53870] [client 66.249.64.101:60194] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIYC58M7CH_vMhLrzIgQgAAAEE"]
[Fri Dec 05 07:24:13.376060 2025] [:error] [pid 53923:tid 53943] [client 66.249.64.101:38901] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIYHbl8ebZN0VCAVXAkyAAAANI"]
[Fri Dec 05 07:24:14.890861 2025] [:error] [pid 53838:tid 53875] [client 66.249.64.101:54062] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIYHp8M7CH_vMhLrzIgagAAAEY"]
[Fri Dec 05 07:24:17.212907 2025] [:error] [pid 53838:tid 53880] [client 66.249.64.101:47755] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIYIZ8M7CH_vMhLrzIgcAAAAEs"]
[Fri Dec 05 07:24:18.728626 2025] [:error] [pid 24010:tid 24031] [client 66.249.64.101:47497] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIYIqtjRoDpxa46mwdX6wAAARM"]
[Fri Dec 05 07:24:20.213319 2025] [:error] [pid 53923:tid 53946] [client 66.249.64.101:53820] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIYJLl8ebZN0VCAVXAk4QAAANU"]
[Fri Dec 05 07:24:21.882132 2025] [:error] [pid 53839:tid 53911] [client 66.249.64.101:37063] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIYJaQOuERg_RN7bn-l3AAAAI8"]
[Fri Dec 05 07:24:23.396483 2025] [:error] [pid 24010:tid 24032] [client 66.249.64.101:47004] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIYJ6tjRoDpxa46mwdX_QAAARQ"]
[Fri Dec 05 07:24:25.023870 2025] [:error] [pid 53837:tid 53843] [client 66.249.64.101:62959] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIYKTbsUyTxys8OiMJClwAAAAE"]
[Fri Dec 05 07:24:26.547488 2025] [:error] [pid 53839:tid 53908] [client 66.249.64.101:45603] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIYKqQOuERg_RN7bn-l6AAAAIw"]
[Fri Dec 05 07:24:28.004619 2025] [:error] [pid 53923:tid 53948] [client 66.249.64.101:59249] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIYLLl8ebZN0VCAVXAk_QAAANc"]
[Fri Dec 05 07:24:29.801169 2025] [:error] [pid 53839:tid 53915] [client 66.249.64.101:58014] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIYLaQOuERg_RN7bn-l8QAAAJM"]
[Fri Dec 05 07:24:31.300030 2025] [:error] [pid 53837:tid 53847] [client 66.249.64.101:38605] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIYLzbsUyTxys8OiMJCugAAAAU"]
[Fri Dec 05 07:24:32.813464 2025] [:error] [pid 53923:tid 53928] [client 66.249.64.101:52527] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIYMLl8ebZN0VCAVXAlDAAAAMM"]
[Fri Dec 05 07:24:34.298974 2025] [:error] [pid 53838:tid 53869] [client 66.249.64.101:61639] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIYMp8M7CH_vMhLrzIghAAAAEA"]
[Fri Dec 05 07:24:35.800068 2025] [:error] [pid 53923:tid 53944] [client 66.249.64.101:56749] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIYM7l8ebZN0VCAVXAlEwAAANM"]
[Fri Dec 05 07:24:37.591547 2025] [:error] [pid 53923:tid 53933] [client 66.249.64.101:47049] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIYNbl8ebZN0VCAVXAlFwAAAMg"]
[Fri Dec 05 07:24:39.102969 2025] [:error] [pid 24010:tid 24030] [client 66.249.64.101:47822] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIYN6tjRoDpxa46mwdYMwAAARI"]
[Fri Dec 05 07:24:39.464493 2025] [:error] [pid 53923:tid 53944] [client 66.249.64.101:63634] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIYN7l8ebZN0VCAVXAlHwAAANM"]
[Fri Dec 05 07:24:40.587228 2025] [:error] [pid 53839:tid 53900] [client 66.249.64.101:35934] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIYOKQOuERg_RN7bn-mEAAAAIQ"]
[Fri Dec 05 07:24:42.082435 2025] [:error] [pid 24010:tid 24021] [client 66.249.64.101:64486] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIYOqtjRoDpxa46mwdYPwAAAQk"]
[Fri Dec 05 07:24:43.583488 2025] [:error] [pid 53923:tid 53926] [client 66.249.64.101:52720] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIYO7l8ebZN0VCAVXAlLQAAAME"]
[Fri Dec 05 07:24:45.391458 2025] [:error] [pid 53923:tid 53938] [client 66.249.64.101:49922] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIYPbl8ebZN0VCAVXAlNAAAAM0"]
[Fri Dec 05 07:24:46.886678 2025] [:error] [pid 53838:tid 53883] [client 66.249.64.101:58865] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIYPp8M7CH_vMhLrzIgkgAAAE4"]
[Fri Dec 05 07:24:48.558801 2025] [:error] [pid 53923:tid 53927] [client 66.249.64.101:48003] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIYQLl8ebZN0VCAVXAlNgAAAMI"]
[Fri Dec 05 07:24:50.403512 2025] [:error] [pid 24010:tid 24021] [client 66.249.64.101:37058] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIYQqtjRoDpxa46mwdYYgAAAQk"]
[Fri Dec 05 07:24:51.580304 2025] [:error] [pid 53837:tid 53860] [client 66.249.64.101:55058] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIYQzbsUyTxys8OiMJCxwAAABI"]
[Fri Dec 05 07:24:53.042732 2025] [:error] [pid 53923:tid 53937] [client 66.249.64.101:42501] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIYRbl8ebZN0VCAVXAlPQAAAMw"]
[Fri Dec 05 07:24:54.675160 2025] [:error] [pid 24010:tid 24021] [client 66.249.64.101:64648] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIYRqtjRoDpxa46mwdYcQAAAQk"]
[Fri Dec 05 07:24:56.185837 2025] [:error] [pid 53923:tid 53947] [client 66.249.64.101:57956] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIYSLl8ebZN0VCAVXAlQwAAANY"]
[Fri Dec 05 07:24:57.669827 2025] [:error] [pid 53837:tid 53855] [client 66.249.64.101:54890] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIYSTbsUyTxys8OiMJC1gAAAA0"]
[Fri Dec 05 07:24:59.451958 2025] [:error] [pid 53923:tid 53948] [client 66.249.64.101:59101] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIYS7l8ebZN0VCAVXAlTwAAANc"]
[Fri Dec 05 07:25:00.949918 2025] [:error] [pid 24010:tid 24018] [client 66.249.64.101:54145] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIYTKtjRoDpxa46mwdYfQAAAQY"]
[Fri Dec 05 07:25:02.454754 2025] [:error] [pid 53839:tid 53911] [client 66.249.64.101:54158] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIYTqQOuERg_RN7bn-mPQAAAI8"]
[Fri Dec 05 07:25:03.955862 2025] [:error] [pid 53923:tid 53926] [client 66.249.64.101:64137] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIYT7l8ebZN0VCAVXAlVwAAAME"]
[Fri Dec 05 07:25:05.453405 2025] [:error] [pid 24010:tid 24028] [client 66.249.64.101:39395] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIYUatjRoDpxa46mwdYjAAAARA"]
[Fri Dec 05 07:25:07.154347 2025] [:error] [pid 53838:tid 53883] [client 66.249.64.101:36853] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIYU58M7CH_vMhLrzIgrAAAAE4"]
[Fri Dec 05 07:25:08.745412 2025] [:error] [pid 53923:tid 53941] [client 66.249.64.101:54056] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIYVLl8ebZN0VCAVXAlWgAAANA"]
[Fri Dec 05 07:25:10.236343 2025] [:error] [pid 24010:tid 24015] [client 66.249.64.101:57518] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIYVqtjRoDpxa46mwdYogAAAQM"]
[Fri Dec 05 07:25:44.386186 2025] [:error] [pid 24010:tid 24020] [client 66.249.64.101:42784] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIYeKtjRoDpxa46mwdZQgAAAQg"]
[Fri Dec 05 07:25:49.062732 2025] [:error] [pid 53837:tid 53848] [client 66.249.64.101:58340] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIYfTbsUyTxys8OiMJDRQAAAAY"]
[Fri Dec 05 07:25:52.655168 2025] [:error] [pid 53839:tid 53906] [client 66.249.64.101:57129] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIYgKQOuERg_RN7bn-m7AAAAIo"]
[Fri Dec 05 07:25:53.996081 2025] [:error] [pid 53838:tid 53879] [client 66.249.64.101:63537] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIYgZ8M7CH_vMhLrzIhDAAAAEo"]
[Fri Dec 05 07:25:55.484726 2025] [:error] [pid 53923:tid 53948] [client 66.249.64.101:36096] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIYg7l8ebZN0VCAVXAmNQAAANc"]
[Fri Dec 05 07:25:56.986844 2025] [:error] [pid 53839:tid 53912] [client 66.249.64.101:61129] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIYhKQOuERg_RN7bn-m-QAAAJA"]
[Fri Dec 05 07:25:58.404977 2025] [:error] [pid 24010:tid 24035] [client 66.249.64.101:44417] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIYhqtjRoDpxa46mwdZdQAAARc"]
[Fri Dec 05 07:25:59.977861 2025] [:error] [pid 53837:tid 53853] [client 66.249.64.101:56256] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIYhzbsUyTxys8OiMJDVwAAAAs"]
[Fri Dec 05 07:26:01.645409 2025] [:error] [pid 53837:tid 53845] [client 66.249.64.101:48951] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIYiTbsUyTxys8OiMJDWgAAAAM"]
[Fri Dec 05 07:26:03.354693 2025] [:error] [pid 53839:tid 53908] [client 66.249.64.101:63080] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIYi6QOuERg_RN7bn-nCQAAAIw"]
[Fri Dec 05 07:26:04.761039 2025] [:error] [pid 53837:tid 53864] [client 66.249.64.101:60717] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIYjDbsUyTxys8OiMJDXwAAABY"]
[Fri Dec 05 07:26:06.151684 2025] [:error] [pid 53837:tid 53859] [client 66.249.64.101:53439] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIYjjbsUyTxys8OiMJDaAAAABE"]
[Fri Dec 05 07:26:07.641399 2025] [:error] [pid 53839:tid 53899] [client 66.249.64.101:60048] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIYj6QOuERg_RN7bn-nHAAAAIM"]
[Fri Dec 05 07:26:09.589821 2025] [:error] [pid 53839:tid 53918] [client 66.249.64.101:48206] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIYkaQOuERg_RN7bn-nJgAAAJY"]
[Fri Dec 05 07:26:11.162769 2025] [:error] [pid 53923:tid 53930] [client 66.249.64.101:39175] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIYk7l8ebZN0VCAVXAmUAAAAMU"]
[Fri Dec 05 07:26:12.642685 2025] [:error] [pid 24010:tid 24032] [client 66.249.64.101:58043] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIYlKtjRoDpxa46mwdZmQAAARQ"]
[Fri Dec 05 07:26:13.840467 2025] [:error] [pid 53838:tid 53871] [client 66.249.64.101:59623] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIYlZ8M7CH_vMhLrzIhMQAAAEI"]
[Fri Dec 05 07:26:15.446250 2025] [:error] [pid 53838:tid 53886] [client 66.249.64.101:65331] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIYl58M7CH_vMhLrzIhNgAAAFE"]
[Fri Dec 05 07:26:17.130639 2025] [:error] [pid 53837:tid 53857] [client 66.249.64.101:64269] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIYmTbsUyTxys8OiMJDgwAAAA8"]
[Fri Dec 05 07:26:18.867900 2025] [:error] [pid 53923:tid 53948] [client 66.249.64.101:56783] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIYmrl8ebZN0VCAVXAmWQAAANc"]
[Fri Dec 05 07:26:20.238023 2025] [:error] [pid 53923:tid 53946] [client 66.249.64.101:46093] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIYnLl8ebZN0VCAVXAmWwAAANU"]
[Fri Dec 05 07:26:21.871005 2025] [:error] [pid 24010:tid 24031] [client 66.249.64.101:63225] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIYnatjRoDpxa46mwdZwAAAARM"]
[Fri Dec 05 07:26:23.375955 2025] [:error] [pid 53923:tid 53944] [client 66.249.64.101:40886] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIYn7l8ebZN0VCAVXAmXQAAANM"]
[Fri Dec 05 07:26:25.127063 2025] [:error] [pid 24010:tid 24018] [client 66.249.64.101:45545] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIYoatjRoDpxa46mwdZ4gAAAQY"]
[Fri Dec 05 07:26:26.577234 2025] [:error] [pid 53838:tid 53874] [client 66.249.64.101:56336] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIYop8M7CH_vMhLrzIhVQAAAEU"]
[Fri Dec 05 07:26:28.561666 2025] [:error] [pid 53923:tid 53947] [client 66.249.64.101:44411] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIYpLl8ebZN0VCAVXAmaAAAANY"]
[Fri Dec 05 07:26:29.674705 2025] [:error] [pid 53838:tid 53876] [client 66.249.64.101:56068] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIYpZ8M7CH_vMhLrzIhYgAAAEc"]
[Fri Dec 05 07:26:31.395416 2025] [:error] [pid 24010:tid 24029] [client 66.249.64.101:53565] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIYp6tjRoDpxa46mwdZ_QAAARE"]
[Fri Dec 05 07:26:33.057060 2025] [:error] [pid 53839:tid 53918] [client 66.249.64.101:40728] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIYqaQOuERg_RN7bn-njgAAAJY"]
[Fri Dec 05 07:26:34.633717 2025] [:error] [pid 53839:tid 53904] [client 66.249.64.101:38476] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIYqqQOuERg_RN7bn-nlwAAAIg"]
[Fri Dec 05 07:26:52.583728 2025] [:error] [pid 53839:tid 53905] [client 66.249.64.101:38767] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIYvKQOuERg_RN7bn-nuQAAAIk"]
[Fri Dec 05 07:26:54.545178 2025] [:error] [pid 53923:tid 53945] [client 66.249.64.101:62674] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIYvrl8ebZN0VCAVXAmmgAAANQ"]
[Fri Dec 05 07:26:56.194983 2025] [:error] [pid 53839:tid 53915] [client 66.249.64.101:48987] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIYwKQOuERg_RN7bn-nzQAAAJM"]
[Fri Dec 05 07:26:57.688439 2025] [:error] [pid 53923:tid 53926] [client 66.249.64.101:64879] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIYwbl8ebZN0VCAVXAmpAAAAME"]
[Fri Dec 05 07:26:59.175213 2025] [:error] [pid 53838:tid 53880] [client 66.249.64.101:63885] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIYw58M7CH_vMhLrzIhwAAAAEs"]
[Fri Dec 05 07:27:00.803624 2025] [:error] [pid 53923:tid 53932] [client 66.249.64.101:55275] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIYxLl8ebZN0VCAVXAmqwAAAMc"]
[Fri Dec 05 07:27:02.320035 2025] [:error] [pid 53923:tid 53925] [client 66.249.64.101:35551] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIYxrl8ebZN0VCAVXAmrgAAAMA"]
[Fri Dec 05 07:27:03.983514 2025] [:error] [pid 53923:tid 53941] [client 66.249.64.101:64290] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIYx7l8ebZN0VCAVXAmtAAAANA"]
[Fri Dec 05 07:27:05.464398 2025] [:error] [pid 53838:tid 53874] [client 66.249.64.101:53087] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIYyZ8M7CH_vMhLrzIhzwAAAEU"]
[Fri Dec 05 07:27:06.979808 2025] [:error] [pid 53923:tid 53928] [client 66.249.64.101:61452] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIYyrl8ebZN0VCAVXAmugAAAMM"]
[Fri Dec 05 07:27:08.592869 2025] [:error] [pid 53923:tid 53946] [client 66.249.64.101:41316] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIYzLl8ebZN0VCAVXAmvgAAANU"]
[Fri Dec 05 07:27:09.975924 2025] [:error] [pid 24010:tid 24032] [client 66.249.64.101:64203] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIYzatjRoDpxa46mwdaywAAARQ"]
[Fri Dec 05 07:27:11.776038 2025] [:error] [pid 53839:tid 53907] [client 66.249.64.101:46247] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIYz6QOuERg_RN7bn-n7wAAAIs"]
[Fri Dec 05 07:27:13.356018 2025] [:error] [pid 53838:tid 53889] [client 66.249.64.101:38465] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIY0Z8M7CH_vMhLrzIh6QAAAFQ"]
[Fri Dec 05 07:27:14.965621 2025] [:error] [pid 53839:tid 53904] [client 66.249.64.101:64839] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIY0qQOuERg_RN7bn-n9AAAAIg"]
[Fri Dec 05 07:27:16.781819 2025] [:error] [pid 53838:tid 53877] [client 66.249.64.101:62769] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIY1J8M7CH_vMhLrzIh9AAAAEg"]
[Fri Dec 05 07:27:18.075622 2025] [:error] [pid 53837:tid 53860] [client 66.249.64.101:57832] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIY1jbsUyTxys8OiMJD_AAAABI"]
[Fri Dec 05 07:27:19.556383 2025] [:error] [pid 53839:tid 53902] [client 66.249.64.101:39007] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIY16QOuERg_RN7bn-n-wAAAIY"]
[Fri Dec 05 07:27:22.560568 2025] [:error] [pid 53837:tid 53854] [client 66.249.64.101:54443] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIY2jbsUyTxys8OiMJEBQAAAAw"]
[Fri Dec 05 07:27:24.190939 2025] [:error] [pid 53837:tid 53865] [client 66.249.64.101:36128] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIY3DbsUyTxys8OiMJEBwAAABc"]
[Fri Dec 05 07:27:25.677729 2025] [:error] [pid 53837:tid 53864] [client 66.249.64.101:34852] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIY3TbsUyTxys8OiMJECgAAABY"]
[Fri Dec 05 07:27:27.480193 2025] [:error] [pid 53837:tid 53844] [client 66.249.64.101:41001] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIY3zbsUyTxys8OiMJEDwAAAAI"]
[Fri Dec 05 07:27:27.956130 2025] [:error] [pid 53923:tid 53943] [client 66.249.64.101:36454] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIY37l8ebZN0VCAVXAm4AAAANI"]
[Fri Dec 05 07:27:28.847816 2025] [:error] [pid 53839:tid 53901] [client 66.249.64.101:55964] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIY4KQOuERg_RN7bn-oAwAAAIU"]
[Fri Dec 05 07:27:31.981351 2025] [:error] [pid 24010:tid 24014] [client 66.249.64.101:62491] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIY46tjRoDpxa46mwdbGwAAAQI"]
[Fri Dec 05 07:27:35.279682 2025] [:error] [pid 53838:tid 53874] [client 66.249.64.101:43513] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIY558M7CH_vMhLrzIiEwAAAEU"]
[Fri Dec 05 07:27:36.791415 2025] [:error] [pid 24010:tid 24034] [client 66.249.64.101:40173] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIY6KtjRoDpxa46mwdbKQAAARY"]
[Fri Dec 05 07:27:38.135667 2025] [:error] [pid 24010:tid 24014] [client 66.249.64.101:54288] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIY6qtjRoDpxa46mwdbKwAAAQI"]
[Fri Dec 05 07:27:39.762224 2025] [:error] [pid 53839:tid 53909] [client 66.249.64.101:52534] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIY66QOuERg_RN7bn-oGAAAAI0"]
[Fri Dec 05 07:27:41.283619 2025] [:error] [pid 53839:tid 53914] [client 66.249.64.101:48680] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIY7aQOuERg_RN7bn-oGwAAAJI"]
[Fri Dec 05 07:27:43.053741 2025] [:error] [pid 53923:tid 53939] [client 66.249.64.101:35786] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIY77l8ebZN0VCAVXAnFwAAAM4"]
[Fri Dec 05 07:27:44.624685 2025] [:error] [pid 24010:tid 24029] [client 66.249.64.101:44382] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIY8KtjRoDpxa46mwdbPgAAARE"]
[Fri Dec 05 07:27:46.066436 2025] [:error] [pid 24010:tid 24019] [client 66.249.64.101:64857] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIY8qtjRoDpxa46mwdbSQAAAQc"]
[Fri Dec 05 07:27:47.556900 2025] [:error] [pid 53923:tid 53932] [client 66.249.64.101:53029] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIY87l8ebZN0VCAVXAnKgAAAMc"]
[Fri Dec 05 07:27:49.074786 2025] [:error] [pid 53923:tid 53927] [client 66.249.64.101:61544] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIY9bl8ebZN0VCAVXAnLwAAAMI"]
[Fri Dec 05 07:28:31.809885 2025] [:error] [pid 53839:tid 53911] [client 66.249.64.101:60443] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIZH6QOuERg_RN7bn-odAAAAI8"]
[Fri Dec 05 07:28:33.162843 2025] [:error] [pid 53923:tid 53943] [client 66.249.64.101:35891] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIZIbl8ebZN0VCAVXAnuwAAANI"]
[Fri Dec 05 07:28:34.781236 2025] [:error] [pid 53923:tid 53941] [client 66.249.64.101:60303] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIZIrl8ebZN0VCAVXAnvAAAANA"]
[Fri Dec 05 07:28:36.294625 2025] [:error] [pid 24010:tid 24035] [client 66.249.64.101:63455] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIZJKtjRoDpxa46mwdb_QAAARc"]
[Fri Dec 05 07:28:37.666781 2025] [:error] [pid 53837:tid 53860] [client 66.249.64.101:56316] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIZJTbsUyTxys8OiMJEvwAAABI"]
[Fri Dec 05 07:28:39.597009 2025] [:error] [pid 53923:tid 53937] [client 66.249.64.101:49737] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIZJ7l8ebZN0VCAVXAnwQAAAMw"]
[Fri Dec 05 07:28:42.477889 2025] [:error] [pid 53923:tid 53944] [client 66.249.64.101:64036] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIZKrl8ebZN0VCAVXAnxQAAANM"]
[Fri Dec 05 07:28:44.141422 2025] [:error] [pid 53838:tid 53873] [client 66.249.64.101:57404] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIZLJ8M7CH_vMhLrzIitwAAAEQ"]
[Fri Dec 05 07:28:45.453687 2025] [:error] [pid 53923:tid 53934] [client 66.249.64.101:44678] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIZLbl8ebZN0VCAVXAnygAAAMk"]
[Fri Dec 05 07:28:47.386717 2025] [:error] [pid 24010:tid 24027] [client 66.249.64.101:53048] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIZL6tjRoDpxa46mwdcEQAAAQ8"]
[Fri Dec 05 07:28:48.902619 2025] [:error] [pid 53923:tid 53944] [client 66.249.64.101:52753] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIZMLl8ebZN0VCAVXAn0AAAANM"]
[Fri Dec 05 07:28:50.245305 2025] [:error] [pid 53838:tid 53877] [client 66.249.64.101:37932] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIZMp8M7CH_vMhLrzIivAAAAEg"]
[Fri Dec 05 07:28:51.885422 2025] [:error] [pid 53838:tid 53871] [client 66.249.64.101:62968] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIZM58M7CH_vMhLrzIivwAAAEI"]
[Fri Dec 05 07:28:53.277134 2025] [:error] [pid 24010:tid 24033] [client 66.249.64.101:44099] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIZNatjRoDpxa46mwdcHwAAARU"]
[Fri Dec 05 07:28:53.452047 2025] [:error] [pid 53838:tid 53885] [client 66.249.64.101:52405] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIZNZ8M7CH_vMhLrzIixQAAAFA"]
[Fri Dec 05 07:28:55.179983 2025] [:error] [pid 53837:tid 53852] [client 66.249.64.101:54775] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIZNzbsUyTxys8OiMJE_wAAAAo"]
[Fri Dec 05 07:28:56.684244 2025] [:error] [pid 53923:tid 53941] [client 66.249.64.101:61785] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIZOLl8ebZN0VCAVXAn2QAAANA"]
[Fri Dec 05 07:28:58.048420 2025] [:error] [pid 53839:tid 53901] [client 66.249.64.101:60163] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIZOqQOuERg_RN7bn-otQAAAIU"]
[Fri Dec 05 07:28:59.547878 2025] [:error] [pid 53839:tid 53919] [client 66.249.64.101:56937] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIZO6QOuERg_RN7bn-ouAAAAJc"]
[Fri Dec 05 07:29:06.661441 2025] [:error] [pid 53839:tid 53915] [client 66.249.64.101:58174] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIZQqQOuERg_RN7bn-oxwAAAJM"]
[Fri Dec 05 07:29:42.593055 2025] [:error] [pid 53923:tid 53926] [client 66.249.64.101:62715] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIZZrl8ebZN0VCAVXAoIwAAAME"]
[Fri Dec 05 07:29:44.930363 2025] [:error] [pid 24010:tid 24033] [client 66.249.64.101:54197] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIZaKtjRoDpxa46mwdcuwAAARU"]
[Fri Dec 05 07:29:47.923621 2025] [:error] [pid 53838:tid 53885] [client 66.249.64.101:51998] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIZa58M7CH_vMhLrzIjFQAAAFA"]
[Fri Dec 05 07:29:49.760725 2025] [:error] [pid 53923:tid 53934] [client 66.249.64.101:57793] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIZbbl8ebZN0VCAVXAoNgAAAMk"]
[Fri Dec 05 07:29:51.106816 2025] [:error] [pid 24010:tid 24019] [client 66.249.64.101:47262] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIZb6tjRoDpxa46mwdc0gAAAQc"]
[Fri Dec 05 07:29:52.768759 2025] [:error] [pid 53839:tid 53915] [client 66.249.64.101:42069] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIZcKQOuERg_RN7bn-pLAAAAJM"]
[Fri Dec 05 07:29:54.354461 2025] [:error] [pid 53837:tid 53848] [client 66.249.64.101:64396] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIZcjbsUyTxys8OiMJFVwAAAAY"]
[Fri Dec 05 07:29:55.901705 2025] [:error] [pid 24010:tid 24035] [client 66.249.64.101:37091] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIZc6tjRoDpxa46mwdc3wAAARc"]
[Fri Dec 05 07:29:57.565901 2025] [:error] [pid 53923:tid 53940] [client 66.249.64.101:35971] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIZdbl8ebZN0VCAVXAoQQAAAM8"]
[Fri Dec 05 07:29:59.018238 2025] [:error] [pid 53923:tid 53931] [client 66.249.64.101:50941] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIZd7l8ebZN0VCAVXAoSAAAAMY"]
[Fri Dec 05 07:30:00.522169 2025] [:error] [pid 24010:tid 24017] [client 66.249.64.101:56242] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIZeKtjRoDpxa46mwdc7QAAAQU"]
[Fri Dec 05 07:30:02.016748 2025] [:error] [pid 53838:tid 53882] [client 66.249.64.101:46293] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIZep8M7CH_vMhLrzIjKQAAAE0"]
[Fri Dec 05 07:30:03.505945 2025] [:error] [pid 53838:tid 53886] [client 66.249.64.101:35374] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIZe58M7CH_vMhLrzIjKgAAAFE"]
[Fri Dec 05 07:30:05.314871 2025] [:error] [pid 53839:tid 53920] [client 66.249.64.101:63320] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIZfaQOuERg_RN7bn-pRAAAAJg"]
[Fri Dec 05 07:30:06.800128 2025] [:error] [pid 53838:tid 53890] [client 66.249.64.101:39780] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIZfp8M7CH_vMhLrzIjLQAAAFU"]
[Fri Dec 05 07:30:08.293026 2025] [:error] [pid 53923:tid 53943] [client 66.249.64.101:37449] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIZgLl8ebZN0VCAVXAoZAAAANI"]
[Fri Dec 05 07:30:08.505049 2025] [:error] [pid 53838:tid 53881] [client 66.249.64.101:41426] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIZgJ8M7CH_vMhLrzIjMAAAAEw"]
[Fri Dec 05 07:30:09.808563 2025] [:error] [pid 53837:tid 53844] [client 66.249.64.101:50316] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIZgTbsUyTxys8OiMJFewAAAAI"]
[Fri Dec 05 07:30:13.099190 2025] [:error] [pid 24010:tid 24026] [client 66.249.64.101:46431] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIZhatjRoDpxa46mwddDwAAAQ4"]
[Fri Dec 05 07:30:14.598560 2025] [:error] [pid 53923:tid 53934] [client 66.249.64.101:37797] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIZhrl8ebZN0VCAVXAoeQAAAMk"]
[Fri Dec 05 07:30:17.602974 2025] [:error] [pid 53839:tid 53906] [client 66.249.64.101:44169] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIZiaQOuERg_RN7bn-pUwAAAIo"]
[Fri Dec 05 07:30:19.098747 2025] [:error] [pid 53837:tid 53849] [client 66.249.64.101:43810] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIZizbsUyTxys8OiMJFjAAAAAc"]
[Fri Dec 05 07:30:20.885459 2025] [:error] [pid 53839:tid 53899] [client 66.249.64.101:42172] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIZjKQOuERg_RN7bn-pYAAAAIM"]
[Fri Dec 05 07:30:22.379830 2025] [:error] [pid 53923:tid 53932] [client 66.249.64.101:61361] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIZjrl8ebZN0VCAVXAokQAAAMc"]
[Fri Dec 05 07:30:26.893002 2025] [:error] [pid 24010:tid 24034] [client 66.249.64.101:61572] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIZkqtjRoDpxa46mwddPAAAARY"]
[Fri Dec 05 07:30:28.673953 2025] [:error] [pid 53839:tid 53896] [client 66.249.64.101:47522] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIZlKQOuERg_RN7bn-pdAAAAIA"]
[Fri Dec 05 07:30:30.176494 2025] [:error] [pid 53837:tid 53844] [client 66.249.64.101:52592] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIZljbsUyTxys8OiMJFnQAAAAI"]
[Fri Dec 05 07:30:31.664556 2025] [:error] [pid 53923:tid 53939] [client 66.249.64.101:42019] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIZl7l8ebZN0VCAVXAopgAAAM4"]
[Fri Dec 05 07:30:33.545838 2025] [:error] [pid 53923:tid 53931] [client 66.249.64.101:56763] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIZmbl8ebZN0VCAVXAoqgAAAMY"]
[Fri Dec 05 07:30:34.682908 2025] [:error] [pid 53923:tid 53949] [client 66.249.64.101:63847] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIZmrl8ebZN0VCAVXAorAAAANg"]
[Fri Dec 05 07:30:36.478253 2025] [:error] [pid 53923:tid 53937] [client 66.249.64.101:50255] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIZnLl8ebZN0VCAVXAorwAAAMw"]
[Fri Dec 05 07:30:37.982611 2025] [:error] [pid 53839:tid 53896] [client 66.249.64.101:62475] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIZnaQOuERg_RN7bn-phAAAAIA"]
[Fri Dec 05 07:30:39.476782 2025] [:error] [pid 24010:tid 24012] [client 66.249.64.101:51931] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIZn6tjRoDpxa46mwdddwAAAQA"]
[Fri Dec 05 07:31:58.619964 2025] [:error] [pid 53839:tid 53916] [client 66.249.64.101:49545] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIZ7qQOuERg_RN7bn-qKwAAAJQ"]
[Fri Dec 05 07:32:00.458638 2025] [:error] [pid 53837:tid 53855] [client 66.249.64.101:62433] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIZ8DbsUyTxys8OiMJGUgAAAA0"]
[Fri Dec 05 07:32:01.324326 2025] [:error] [pid 53838:tid 53888] [client 66.249.64.101:41126] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIZ8Z8M7CH_vMhLrzIj_AAAAFM"]
[Fri Dec 05 07:32:03.783369 2025] [:error] [pid 24010:tid 24022] [client 66.249.64.101:50393] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIZ86tjRoDpxa46mwdevwAAAQo"]
[Fri Dec 05 07:32:04.593765 2025] [:error] [pid 53838:tid 53890] [client 66.249.64.101:42293] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIZ9J8M7CH_vMhLrzIkBQAAAFU"]
[Fri Dec 05 07:32:09.892147 2025] [:error] [pid 53923:tid 53943] [client 66.249.64.101:37389] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIZ-bl8ebZN0VCAVXAptAAAANI"]
[Fri Dec 05 07:32:12.718861 2025] [:error] [pid 24010:tid 24023] [client 66.249.64.101:49338] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIZ_KtjRoDpxa46mwde0AAAAQs"]
[Fri Dec 05 07:32:13.555384 2025] [:error] [pid 53839:tid 53899] [client 66.249.64.101:41037] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIZ_aQOuERg_RN7bn-qPgAAAIM"]
[Fri Dec 05 07:32:14.390101 2025] [:error] [pid 24010:tid 24027] [client 66.249.64.101:38855] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIZ_qtjRoDpxa46mwde1AAAAQ8"]
[Fri Dec 05 07:32:15.040200 2025] [:error] [pid 53839:tid 53912] [client 66.249.64.101:52072] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIZ_6QOuERg_RN7bn-qPwAAAJA"]
[Fri Dec 05 07:32:16.357794 2025] [:error] [pid 53839:tid 53914] [client 66.249.64.101:59307] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIaAKQOuERg_RN7bn-qQAAAAJI"]
[Fri Dec 05 07:32:17.458784 2025] [:error] [pid 53923:tid 53932] [client 66.249.64.101:56216] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIaAbl8ebZN0VCAVXAp1QAAAMc"]
[Fri Dec 05 07:32:18.516857 2025] [:error] [pid 24010:tid 24017] [client 66.249.64.101:47510] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIaAqtjRoDpxa46mwde3wAAAQU"]
[Fri Dec 05 07:32:31.989053 2025] [:error] [pid 24010:tid 24015] [client 66.249.64.101:54757] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIaD6tjRoDpxa46mwde_gAAAQM"]
[Fri Dec 05 07:32:32.840353 2025] [:error] [pid 53838:tid 53881] [client 66.249.64.101:52452] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIaEJ8M7CH_vMhLrzIkPQAAAEw"]
[Fri Dec 05 07:32:34.424816 2025] [:error] [pid 53839:tid 53915] [client 66.249.64.101:56245] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIaEqQOuERg_RN7bn-qfAAAAJM"]
[Fri Dec 05 07:32:35.533092 2025] [:error] [pid 24010:tid 24025] [client 66.249.64.101:52419] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIaE6tjRoDpxa46mwdfBQAAAQ0"]
[Fri Dec 05 07:32:36.891659 2025] [:error] [pid 24010:tid 24033] [client 66.249.64.101:40581] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIaFKtjRoDpxa46mwdfBwAAARU"]
[Fri Dec 05 07:32:38.257651 2025] [:error] [pid 24010:tid 24014] [client 66.249.64.101:46445] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIaFqtjRoDpxa46mwdfCgAAAQI"]
[Fri Dec 05 07:32:39.402663 2025] [:error] [pid 53839:tid 53907] [client 66.249.64.101:56098] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIaF6QOuERg_RN7bn-qjQAAAIs"]
[Fri Dec 05 07:32:41.166287 2025] [:error] [pid 53839:tid 53898] [client 66.249.64.101:41553] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIaGaQOuERg_RN7bn-qkwAAAII"]
[Fri Dec 05 07:32:44.180759 2025] [:error] [pid 53923:tid 53928] [client 66.249.64.101:58631] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIaHLl8ebZN0VCAVXAqEAAAAMM"]
[Fri Dec 05 07:32:45.685713 2025] [:error] [pid 24010:tid 24015] [client 66.249.64.101:43594] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIaHatjRoDpxa46mwdfHgAAAQM"]
[Fri Dec 05 07:32:47.252484 2025] [:error] [pid 53838:tid 53882] [client 66.249.64.101:52310] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIaH58M7CH_vMhLrzIkXAAAAE0"]
[Fri Dec 05 07:32:48.868253 2025] [:error] [pid 24010:tid 24019] [client 66.249.64.101:41771] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIaIKtjRoDpxa46mwdfOwAAAQc"]
[Fri Dec 05 07:32:50.354650 2025] [:error] [pid 53839:tid 53919] [client 66.249.64.101:44514] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIaIqQOuERg_RN7bn-qzQAAAJc"]
[Fri Dec 05 07:32:51.986276 2025] [:error] [pid 53838:tid 53877] [client 66.249.64.101:55588] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIaI58M7CH_vMhLrzIkZQAAAEg"]
[Fri Dec 05 07:32:53.346707 2025] [:error] [pid 53837:tid 53862] [client 66.249.64.101:58526] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIaJTbsUyTxys8OiMJGmAAAABQ"]
[Fri Dec 05 07:32:54.976908 2025] [:error] [pid 53838:tid 53882] [client 66.249.64.101:49560] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIaJp8M7CH_vMhLrzIkawAAAE0"]
[Fri Dec 05 07:32:56.883223 2025] [:error] [pid 53837:tid 53849] [client 66.249.64.101:36526] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIaKDbsUyTxys8OiMJGnQAAAAc"]
[Fri Dec 05 07:32:58.125394 2025] [:error] [pid 53838:tid 53872] [client 66.249.64.101:56256] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIaKp8M7CH_vMhLrzIkdAAAAEM"]
[Fri Dec 05 07:33:00.212907 2025] [:error] [pid 24010:tid 24025] [client 66.249.64.101:44032] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIaLKtjRoDpxa46mwdfgQAAAQ0"]
[Fri Dec 05 07:33:01.332785 2025] [:error] [pid 53837:tid 53865] [client 66.249.64.101:50368] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIaLTbsUyTxys8OiMJGoAAAABc"]
[Fri Dec 05 07:33:02.757752 2025] [:error] [pid 24010:tid 24033] [client 66.249.64.101:65051] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIaLqtjRoDpxa46mwdfiQAAARU"]
[Fri Dec 05 07:33:04.560917 2025] [:error] [pid 24010:tid 24014] [client 66.249.64.101:55909] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIaMKtjRoDpxa46mwdfpAAAAQI"]
[Fri Dec 05 07:33:06.058627 2025] [:error] [pid 53837:tid 53849] [client 66.249.64.101:45035] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIaMjbsUyTxys8OiMJGpQAAAAc"]
[Fri Dec 05 07:33:07.560000 2025] [:error] [pid 53839:tid 53910] [client 66.249.64.101:36991] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIaM6QOuERg_RN7bn-rHgAAAI4"]
[Fri Dec 05 07:33:09.060373 2025] [:error] [pid 53923:tid 53947] [client 66.249.64.101:55377] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIaNbl8ebZN0VCAVXAqaQAAANY"]
[Fri Dec 05 07:33:12.507878 2025] [:error] [pid 24010:tid 24023] [client 66.249.64.101:35360] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIaOKtjRoDpxa46mwdfuAAAAQs"]
[Fri Dec 05 07:33:19.229544 2025] [:error] [pid 24010:tid 24033] [client 66.249.64.101:47683] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIaP6tjRoDpxa46mwdfyQAAARU"]
[Fri Dec 05 07:33:20.377094 2025] [:error] [pid 53837:tid 53853] [client 66.249.64.101:37639] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIaQDbsUyTxys8OiMJGugAAAAs"]
[Fri Dec 05 07:33:22.042851 2025] [:error] [pid 53838:tid 53882] [client 66.249.64.101:35099] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIaQp8M7CH_vMhLrzIkxwAAAE0"]
[Fri Dec 05 07:33:23.702166 2025] [:error] [pid 24010:tid 24020] [client 66.249.64.101:38146] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIaQ6tjRoDpxa46mwdf1QAAAQg"]
[Fri Dec 05 07:33:25.170639 2025] [:error] [pid 53838:tid 53885] [client 66.249.64.101:44779] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIaRZ8M7CH_vMhLrzIkzQAAAFA"]
[Fri Dec 05 07:33:26.659043 2025] [:error] [pid 53837:tid 53853] [client 66.249.64.101:59402] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIaRjbsUyTxys8OiMJGwgAAAAs"]
[Fri Dec 05 07:33:28.177842 2025] [:error] [pid 53923:tid 53944] [client 66.249.64.101:57848] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIaSLl8ebZN0VCAVXAqkQAAANM"]
[Fri Dec 05 07:33:29.972627 2025] [:error] [pid 24010:tid 24015] [client 66.249.64.101:60924] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIaSatjRoDpxa46mwdf4gAAAQM"]
[Fri Dec 05 07:33:47.717035 2025] [:error] [pid 53923:tid 53944] [client 66.249.64.101:53405] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIaW7l8ebZN0VCAVXAqwAAAANM"]
[Fri Dec 05 07:33:50.043879 2025] [:error] [pid 24010:tid 24014] [client 66.249.64.101:63844] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIaXqtjRoDpxa46mwdgEwAAAQI"]
[Fri Dec 05 07:33:51.524990 2025] [:error] [pid 24010:tid 24023] [client 66.249.64.101:46518] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIaX6tjRoDpxa46mwdgHAAAAQs"]
[Fri Dec 05 07:33:53.209302 2025] [:error] [pid 53839:tid 53899] [client 66.249.64.101:42956] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIaYaQOuERg_RN7bn-rpQAAAIM"]
[Fri Dec 05 07:33:54.832332 2025] [:error] [pid 53839:tid 53910] [client 66.249.64.101:61537] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIaYqQOuERg_RN7bn-rqAAAAI4"]
[Fri Dec 05 07:33:56.341594 2025] [:error] [pid 53838:tid 53885] [client 66.249.64.101:42419] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIaZJ8M7CH_vMhLrzIk8AAAAFA"]
[Fri Dec 05 07:33:57.836791 2025] [:error] [pid 53838:tid 53878] [client 66.249.64.101:43343] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIaZZ8M7CH_vMhLrzIk8wAAAEk"]
[Fri Dec 05 07:33:59.376875 2025] [:error] [pid 53923:tid 53936] [client 66.249.64.101:43486] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIaZ7l8ebZN0VCAVXAq0gAAAMs"]
[Fri Dec 05 07:34:04.116624 2025] [:error] [pid 53838:tid 53872] [client 66.249.64.101:41308] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIabJ8M7CH_vMhLrzIlAgAAAEM"]
[Fri Dec 05 07:34:05.692199 2025] [:error] [pid 53837:tid 53843] [client 66.249.64.101:39472] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIabTbsUyTxys8OiMJHAAAAAAE"]
[Fri Dec 05 07:34:07.135011 2025] [:error] [pid 24010:tid 24026] [client 66.249.64.101:50546] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIab6tjRoDpxa46mwdgVQAAAQ4"]
[Fri Dec 05 07:34:08.922167 2025] [:error] [pid 53923:tid 53947] [client 66.249.64.101:54728] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIacLl8ebZN0VCAVXAq6QAAANY"]
[Fri Dec 05 07:34:11.910460 2025] [:error] [pid 53839:tid 53904] [client 66.249.64.101:65361] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIac6QOuERg_RN7bn-rzAAAAIg"]
[Fri Dec 05 07:34:13.271794 2025] [:error] [pid 53839:tid 53912] [client 66.249.64.101:55792] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIadaQOuERg_RN7bn-r0QAAAJA"]
[Fri Dec 05 07:34:14.911418 2025] [:error] [pid 53839:tid 53902] [client 66.249.64.101:58223] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIadqQOuERg_RN7bn-r0gAAAIY"]
[Fri Dec 05 07:34:16.707847 2025] [:error] [pid 53923:tid 53930] [client 66.249.64.101:46815] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIaeLl8ebZN0VCAVXAq9gAAAMU"]
[Fri Dec 05 07:34:18.228004 2025] [:error] [pid 53838:tid 53890] [client 66.249.64.101:60162] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIaep8M7CH_vMhLrzIlGgAAAFU"]
[Fri Dec 05 07:34:19.691495 2025] [:error] [pid 53838:tid 53874] [client 66.249.64.101:64687] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIae58M7CH_vMhLrzIlIAAAAEU"]
[Fri Dec 05 07:34:21.198764 2025] [:error] [pid 24010:tid 24020] [client 66.249.64.101:52549] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIafatjRoDpxa46mwdgkwAAAQg"]
[Fri Dec 05 07:34:22.707408 2025] [:error] [pid 53839:tid 53897] [client 66.249.64.101:47188] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIafqQOuERg_RN7bn-r2gAAAIE"]
[Fri Dec 05 07:34:24.502084 2025] [:error] [pid 24010:tid 24029] [client 66.249.64.101:62526] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIagKtjRoDpxa46mwdgqAAAARE"]
[Fri Dec 05 07:34:26.000821 2025] [:error] [pid 53923:tid 53943] [client 66.249.64.101:64658] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIagbl8ebZN0VCAVXArAQAAANI"]
[Fri Dec 05 07:34:27.540696 2025] [:error] [pid 24010:tid 24027] [client 66.249.64.101:54509] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIag6tjRoDpxa46mwdgsQAAAQ8"]
[Fri Dec 05 07:34:29.011901 2025] [:error] [pid 53837:tid 53843] [client 66.249.64.101:51883] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIahTbsUyTxys8OiMJHHwAAAAE"]
[Fri Dec 05 07:34:30.948946 2025] [:error] [pid 53838:tid 53879] [client 66.249.64.101:35544] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIahp8M7CH_vMhLrzIlLgAAAEo"]
[Fri Dec 05 07:34:33.799611 2025] [:error] [pid 53838:tid 53882] [client 66.249.64.101:45187] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIaiZ8M7CH_vMhLrzIlNQAAAE0"]
[Fri Dec 05 07:34:35.287824 2025] [:error] [pid 24010:tid 24034] [client 66.249.64.101:61751] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIai6tjRoDpxa46mwdgzwAAARY"]
[Fri Dec 05 07:34:36.795811 2025] [:error] [pid 24010:tid 24031] [client 66.249.64.101:45146] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIajKtjRoDpxa46mwdg2AAAARM"]
[Fri Dec 05 07:34:38.296299 2025] [:error] [pid 53837:tid 53854] [client 66.249.64.101:48828] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIajjbsUyTxys8OiMJHLgAAAAw"]
[Fri Dec 05 07:34:40.098638 2025] [:error] [pid 53839:tid 53908] [client 66.249.64.101:59411] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIakKQOuERg_RN7bn-r7gAAAIw"]
[Fri Dec 05 07:34:40.789186 2025] [:error] [pid 24010:tid 24013] [client 66.249.64.101:47855] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIakKtjRoDpxa46mwdg6wAAAQE"]
[Fri Dec 05 07:34:41.580216 2025] [:error] [pid 53923:tid 53931] [client 66.249.64.101:41780] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIakbl8ebZN0VCAVXArHgAAAMY"]
[Fri Dec 05 07:34:43.075168 2025] [:error] [pid 53839:tid 53911] [client 66.249.64.101:47833] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIak6QOuERg_RN7bn-r8QAAAI8"]
[Fri Dec 05 07:34:44.589462 2025] [:error] [pid 53837:tid 53861] [client 66.249.64.101:60195] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIalDbsUyTxys8OiMJHNwAAABM"]
[Fri Dec 05 07:35:07.127968 2025] [:error] [pid 53838:tid 53873] [client 66.249.64.101:64288] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIaq58M7CH_vMhLrzIlYAAAAEQ"]
[Fri Dec 05 07:35:09.663404 2025] [:error] [pid 24010:tid 24026] [client 66.249.64.101:45787] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIaratjRoDpxa46mwdhXQAAAQ4"]
[Fri Dec 05 07:35:11.111426 2025] [:error] [pid 53923:tid 53936] [client 66.249.64.101:62959] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIar7l8ebZN0VCAVXArPQAAAMs"]
[Fri Dec 05 07:35:12.749777 2025] [:error] [pid 53923:tid 53927] [client 66.249.64.101:48535] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIasLl8ebZN0VCAVXArRAAAAMI"]
[Fri Dec 05 07:35:14.018025 2025] [:error] [pid 53838:tid 53887] [client 66.249.64.101:54226] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIasp8M7CH_vMhLrzIlqgAAAFI"]
[Fri Dec 05 07:35:17.122113 2025] [:error] [pid 53923:tid 53946] [client 66.249.64.101:54407] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIatbl8ebZN0VCAVXArSwAAANU"]
[Fri Dec 05 07:35:19.378397 2025] [:error] [pid 53837:tid 53849] [client 66.249.64.101:63608] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIatzbsUyTxys8OiMJHbgAAAAc"]
[Fri Dec 05 07:35:23.535035 2025] [:error] [pid 53923:tid 53940] [client 66.249.64.101:46904] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIau7l8ebZN0VCAVXArUwAAAM8"]
[Fri Dec 05 07:35:28.587373 2025] [:error] [pid 53923:tid 53926] [client 66.249.64.101:65144] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIawLl8ebZN0VCAVXArWAAAAME"]
[Fri Dec 05 07:35:30.419595 2025] [:error] [pid 53837:tid 53851] [client 66.249.64.101:51687] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIawjbsUyTxys8OiMJHhgAAAAk"]
[Fri Dec 05 07:35:31.334878 2025] [:error] [pid 53923:tid 53949] [client 66.249.64.101:36792] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIaw7l8ebZN0VCAVXArYAAAANg"]
[Fri Dec 05 07:35:32.824228 2025] [:error] [pid 53839:tid 53910] [client 66.249.64.101:44418] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIaxKQOuERg_RN7bn-sagAAAI4"]
[Fri Dec 05 07:35:34.613392 2025] [:error] [pid 53839:tid 53896] [client 66.249.64.101:62665] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIaxqQOuERg_RN7bn-sbwAAAIA"]
[Fri Dec 05 07:35:36.139256 2025] [:error] [pid 24010:tid 24026] [client 66.249.64.101:48855] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIayKtjRoDpxa46mwdh1QAAAQ4"]
[Fri Dec 05 07:35:39.312136 2025] [:error] [pid 24010:tid 24036] [client 66.249.64.101:61583] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIay6tjRoDpxa46mwdh9wAAARg"]
[Fri Dec 05 07:35:40.613164 2025] [:error] [pid 24010:tid 24015] [client 66.249.64.101:65054] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIazKtjRoDpxa46mwdh_gAAAQM"]
[Fri Dec 05 07:35:42.430170 2025] [:error] [pid 53839:tid 53906] [client 66.249.64.101:53333] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIazqQOuERg_RN7bn-shgAAAIo"]
[Fri Dec 05 07:35:43.934156 2025] [:error] [pid 53838:tid 53890] [client 66.249.64.101:48925] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIaz58M7CH_vMhLrzImCwAAAFU"]
[Fri Dec 05 07:35:46.895264 2025] [:error] [pid 53923:tid 53929] [client 66.249.64.101:38748] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIa0rl8ebZN0VCAVXArrAAAAMQ"]
[Fri Dec 05 07:35:48.421722 2025] [:error] [pid 53923:tid 53942] [client 66.249.64.101:37865] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIa1Ll8ebZN0VCAVXArrgAAANE"]
[Fri Dec 05 07:35:50.306670 2025] [:error] [pid 53839:tid 53907] [client 66.249.64.101:49702] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIa1qQOuERg_RN7bn-spQAAAIs"]
[Fri Dec 05 07:35:54.745998 2025] [:error] [pid 53838:tid 53872] [client 66.249.64.101:35448] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIa2p8M7CH_vMhLrzImJQAAAEM"]
[Fri Dec 05 07:35:56.184875 2025] [:error] [pid 53839:tid 53920] [client 66.249.64.101:58518] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIa3KQOuERg_RN7bn-srgAAAJg"]
[Fri Dec 05 07:35:57.262404 2025] [:error] [pid 53839:tid 53910] [client 66.249.64.101:55278] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIa3aQOuERg_RN7bn-srwAAAI4"]
[Fri Dec 05 07:35:58.586895 2025] [:error] [pid 53839:tid 53919] [client 66.249.64.101:38520] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIa3qQOuERg_RN7bn-ssQAAAJc"]
[Fri Dec 05 07:35:59.606859 2025] [:error] [pid 53838:tid 53887] [client 66.249.64.101:36689] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIa358M7CH_vMhLrzImOAAAAFI"]
[Fri Dec 05 07:36:47.828055 2025] [:error] [pid 53838:tid 53890] [client 66.249.64.101:63370] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIbD58M7CH_vMhLrzImfwAAAFU"]
[Fri Dec 05 07:36:49.265604 2025] [:error] [pid 53923:tid 53928] [client 66.249.64.101:41541] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIbEbl8ebZN0VCAVXAsMQAAAMM"]
[Fri Dec 05 07:36:50.461019 2025] [:error] [pid 24010:tid 24036] [client 66.249.64.101:62742] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIbEqtjRoDpxa46mwdjAwAAARg"]
[Fri Dec 05 07:36:52.237019 2025] [:error] [pid 53838:tid 53885] [client 66.249.64.101:52372] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIbFJ8M7CH_vMhLrzImiwAAAFA"]
[Fri Dec 05 07:36:53.641547 2025] [:error] [pid 53837:tid 53866] [client 66.249.64.101:64269] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIbFTbsUyTxys8OiMJIFAAAABg"]
[Fri Dec 05 07:36:55.231542 2025] [:error] [pid 53838:tid 53886] [client 66.249.64.101:50272] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIbF58M7CH_vMhLrzImlAAAAFE"]
[Fri Dec 05 07:36:55.470014 2025] [:error] [pid 53923:tid 53944] [client 66.249.64.101:61168] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIbF7l8ebZN0VCAVXAsRAAAANM"]
[Fri Dec 05 07:37:00.036080 2025] [:error] [pid 53838:tid 53878] [client 66.249.64.101:55921] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIbHJ8M7CH_vMhLrzImmwAAAEk"]
[Fri Dec 05 07:37:01.542009 2025] [:error] [pid 53839:tid 53898] [client 66.249.64.101:42073] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIbHaQOuERg_RN7bn-tgQAAAII"]
[Fri Dec 05 07:37:06.322138 2025] [:error] [pid 24010:tid 24034] [client 66.249.64.101:37527] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIbIqtjRoDpxa46mwdjUAAAARY"]
[Fri Dec 05 07:37:08.236804 2025] [:error] [pid 53839:tid 53910] [client 66.249.64.101:36226] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIbJKQOuERg_RN7bn-tiwAAAI4"]
[Fri Dec 05 07:37:09.273699 2025] [:error] [pid 53839:tid 53899] [client 66.249.64.101:43753] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIbJaQOuERg_RN7bn-tjgAAAIM"]
[Fri Dec 05 07:37:10.693700 2025] [:error] [pid 53837:tid 53849] [client 66.249.64.101:61088] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIbJjbsUyTxys8OiMJITQAAAAc"]
[Fri Dec 05 07:37:12.322180 2025] [:error] [pid 53839:tid 53918] [client 66.249.64.101:60510] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIbKKQOuERg_RN7bn-tkgAAAJY"]
[Fri Dec 05 07:37:13.826208 2025] [:error] [pid 53923:tid 53930] [client 66.249.64.101:48930] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIbKbl8ebZN0VCAVXAsdwAAAMU"]
[Fri Dec 05 07:37:15.625530 2025] [:error] [pid 53923:tid 53940] [client 66.249.64.101:62219] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIbK7l8ebZN0VCAVXAsfAAAAM8"]
[Fri Dec 05 07:37:17.129298 2025] [:error] [pid 24010:tid 24035] [client 66.249.64.101:44860] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIbLatjRoDpxa46mwdjbgAAARc"]
[Fri Dec 05 07:37:18.510425 2025] [:error] [pid 24010:tid 24019] [client 66.249.64.101:45577] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIbLqtjRoDpxa46mwdjfQAAAQc"]
[Fri Dec 05 07:37:21.595975 2025] [:error] [pid 53837:tid 53849] [client 66.249.64.101:62028] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIbMTbsUyTxys8OiMJIfwAAAAc"]
[Fri Dec 05 07:37:23.420236 2025] [:error] [pid 53839:tid 53914] [client 66.249.64.101:40701] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIbM6QOuERg_RN7bn-t0gAAAJI"]
[Fri Dec 05 07:37:24.894381 2025] [:error] [pid 53838:tid 53869] [client 66.249.64.101:36009] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIbNJ8M7CH_vMhLrzIm5AAAAEA"]
[Fri Dec 05 07:37:26.400420 2025] [:error] [pid 53838:tid 53889] [client 66.249.64.101:45927] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIbNp8M7CH_vMhLrzIm6gAAAFQ"]
[Fri Dec 05 07:37:27.905859 2025] [:error] [pid 24010:tid 24014] [client 66.249.64.101:48110] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIbN6tjRoDpxa46mwdjnwAAAQI"]
[Fri Dec 05 07:37:31.211450 2025] [:error] [pid 53837:tid 53853] [client 66.249.64.101:55525] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIbOzbsUyTxys8OiMJIkwAAAAs"]
[Fri Dec 05 07:37:33.233460 2025] [:error] [pid 24010:tid 24012] [client 66.249.64.101:63366] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIbPatjRoDpxa46mwdjpgAAAQA"]
[Fri Dec 05 07:37:37.243808 2025] [:error] [pid 53838:tid 53893] [client 66.249.64.101:55870] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIbQZ8M7CH_vMhLrzInFgAAAFg"]
[Fri Dec 05 07:37:38.985610 2025] [:error] [pid 53923:tid 53930] [client 66.249.64.101:58103] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIbQrl8ebZN0VCAVXAsqwAAAMU"]
[Fri Dec 05 07:37:40.481524 2025] [:error] [pid 53923:tid 53926] [client 66.249.64.101:55169] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIbRLl8ebZN0VCAVXAsrQAAAME"]
[Fri Dec 05 07:38:51.509545 2025] [:error] [pid 53837:tid 53863] [client 66.249.64.101:62251] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIbizbsUyTxys8OiMJJSQAAABU"]
[Fri Dec 05 07:38:53.564975 2025] [:error] [pid 24010:tid 24031] [client 66.249.64.101:35605] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIbjatjRoDpxa46mwdkiAAAARM"]
[Fri Dec 05 07:38:54.780758 2025] [:error] [pid 53838:tid 53893] [client 66.249.64.101:63557] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIbjp8M7CH_vMhLrzIn_gAAAFg"]
[Fri Dec 05 07:39:13.357245 2025] [:error] [pid 53837:tid 53857] [client 66.249.64.101:55497] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIboTbsUyTxys8OiMJJdwAAAA8"]
[Fri Dec 05 07:39:17.765084 2025] [:error] [pid 53923:tid 53925] [client 66.249.64.101:41005] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIbpbl8ebZN0VCAVXAtvwAAAMA"]
[Fri Dec 05 07:39:21.054363 2025] [:error] [pid 24010:tid 24035] [client 66.249.64.101:59251] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIbqatjRoDpxa46mwdlIQAAARc"]
[Fri Dec 05 07:39:25.413652 2025] [:error] [pid 53839:tid 53916] [client 66.249.64.101:35945] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIbraQOuERg_RN7bn-vBQAAAJQ"]
[Fri Dec 05 07:39:27.047286 2025] [:error] [pid 53838:tid 53890] [client 66.249.64.101:36516] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIbr58M7CH_vMhLrzIoLAAAAFU"]
[Fri Dec 05 07:39:31.008300 2025] [:error] [pid 53839:tid 53914] [client 66.249.64.101:52612] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIbs6QOuERg_RN7bn-vDQAAAJI"]
[Fri Dec 05 07:40:58.201534 2025] [:error] [pid 53839:tid 53910] [client 66.249.64.101:37599] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIcCqQOuERg_RN7bn-wGwAAAI4"]
[Fri Dec 05 07:41:20.038399 2025] [:error] [pid 24010:tid 24022] [client 66.249.64.101:59187] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIcIKtjRoDpxa46mwdmigAAAQo"]
[Fri Dec 05 07:41:25.692499 2025] [:error] [pid 24010:tid 24021] [client 66.249.64.101:49500] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIcJatjRoDpxa46mwdmmQAAAQk"]
[Fri Dec 05 07:41:28.564647 2025] [:error] [pid 53923:tid 53936] [client 66.249.64.101:53355] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIcKLl8ebZN0VCAVXAvYgAAAMs"]
[Fri Dec 05 07:41:39.545566 2025] [:error] [pid 53838:tid 53893] [client 66.249.64.101:43344] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIcM58M7CH_vMhLrzIpHAAAAFg"]
[Fri Dec 05 07:41:47.100581 2025] [:error] [pid 53837:tid 53854] [client 66.249.64.101:45878] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIcOzbsUyTxys8OiMJKkAAAAAw"]
[Fri Dec 05 07:45:33.159278 2025] [:error] [pid 53838:tid 53880] [client 66.249.64.101:41542] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIdHZ8M7CH_vMhLrzIq2wAAAEs"]
[Fri Dec 05 07:45:45.174657 2025] [:error] [pid 53838:tid 53883] [client 66.249.64.101:58512] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIdKZ8M7CH_vMhLrzIrDAAAAE4"]
[Fri Dec 05 07:46:12.552743 2025] [:error] [pid 53923:tid 53945] [client 66.249.64.101:37756] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIdRLl8ebZN0VCAVXAyQAAAANQ"]
[Fri Dec 05 07:46:14.784876 2025] [:error] [pid 53839:tid 53913] [client 66.249.64.101:36310] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIdRqQOuERg_RN7bn-zFAAAAJE"]
[Fri Dec 05 07:48:41.823237 2025] [:error] [pid 53837:tid 53851] [client 66.249.64.101:64667] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTId2TbsUyTxys8OiMJN5QAAAAk"]
[Fri Dec 05 07:50:32.952799 2025] [:error] [pid 24010:tid 24021] [client 66.249.64.101:44774] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIeSKtjRoDpxa46mwdu1AAAAQk"]
[Fri Dec 05 07:50:35.855317 2025] [:error] [pid 53839:tid 53902] [client 66.249.64.101:58664] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIeS6QOuERg_RN7bn-1BwAAAIY"]
[Fri Dec 05 07:50:37.631250 2025] [:error] [pid 53923:tid 53944] [client 66.249.64.101:44153] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIeTbl8ebZN0VCAVXA0MQAAANM"]
[Fri Dec 05 07:50:44.174024 2025] [:error] [pid 53838:tid 53877] [client 66.249.64.101:57450] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIeVJ8M7CH_vMhLrzIt8QAAAEg"]
[Fri Dec 05 07:50:45.817654 2025] [:error] [pid 24010:tid 24036] [client 66.249.64.101:62202] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIeVatjRoDpxa46mwdu9AAAARg"]
[Fri Dec 05 07:50:47.350601 2025] [:error] [pid 53837:tid 53844] [client 66.249.64.101:45113] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIeVzbsUyTxys8OiMJPUQAAAAI"]
[Fri Dec 05 07:50:49.841524 2025] [:error] [pid 53837:tid 53851] [client 66.249.64.101:39375] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIeWTbsUyTxys8OiMJPWAAAAAk"]
[Fri Dec 05 07:50:51.097786 2025] [:error] [pid 53837:tid 53861] [client 66.249.64.101:55554] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIeWzbsUyTxys8OiMJPWwAAABM"]
[Fri Dec 05 07:50:54.990713 2025] [:error] [pid 53923:tid 53932] [client 66.249.64.101:36320] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIeXrl8ebZN0VCAVXA0RAAAAMc"]
[Fri Dec 05 07:50:56.606593 2025] [:error] [pid 53923:tid 53946] [client 66.249.64.101:63492] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIeYLl8ebZN0VCAVXA0RwAAANU"]
[Fri Dec 05 07:50:58.379353 2025] [:error] [pid 53839:tid 53898] [client 66.249.64.101:50060] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIeYqQOuERg_RN7bn-1OgAAAII"]
[Fri Dec 05 07:51:02.012273 2025] [:error] [pid 53839:tid 53915] [client 66.249.64.101:62134] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIeZqQOuERg_RN7bn-1RgAAAJM"]
[Fri Dec 05 07:51:03.497075 2025] [:error] [pid 53839:tid 53898] [client 66.249.64.101:61940] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIeZ6QOuERg_RN7bn-1SwAAAII"]
[Fri Dec 05 07:51:11.299142 2025] [:error] [pid 53837:tid 53865] [client 66.249.64.101:50978] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIebzbsUyTxys8OiMJPegAAABc"]
[Fri Dec 05 07:51:12.790113 2025] [:error] [pid 53923:tid 53925] [client 66.249.64.101:59980] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIecLl8ebZN0VCAVXA0VQAAAMA"]
[Fri Dec 05 07:51:14.326631 2025] [:error] [pid 53923:tid 53949] [client 66.249.64.101:64111] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIecrl8ebZN0VCAVXA0XQAAANg"]
[Fri Dec 05 07:51:15.970754 2025] [:error] [pid 53838:tid 53887] [client 66.249.64.101:37206] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIec58M7CH_vMhLrzIuJgAAAFI"]
[Fri Dec 05 07:51:17.360479 2025] [:error] [pid 53837:tid 53846] [client 66.249.64.101:56679] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIedTbsUyTxys8OiMJPfgAAAAQ"]
[Fri Dec 05 07:51:23.714471 2025] [:error] [pid 53923:tid 53936] [client 66.249.64.101:47058] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIee7l8ebZN0VCAVXA0bAAAAMs"]
[Fri Dec 05 07:51:26.889710 2025] [:error] [pid 53838:tid 53870] [client 66.249.64.101:60447] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIefp8M7CH_vMhLrzIuOQAAAEE"]
[Fri Dec 05 07:51:28.381096 2025] [:error] [pid 53923:tid 53930] [client 66.249.64.101:64495] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIegLl8ebZN0VCAVXA0dQAAAMU"]
[Fri Dec 05 07:51:29.885147 2025] [:error] [pid 53839:tid 53900] [client 66.249.64.101:54617] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIegaQOuERg_RN7bn-1aQAAAIQ"]
[Fri Dec 05 07:52:16.131205 2025] [:error] [pid 53923:tid 53926] [client 66.249.64.101:38340] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIesLl8ebZN0VCAVXA04QAAAME"]
[Fri Dec 05 07:52:23.519801 2025] [:error] [pid 53837:tid 53857] [client 66.249.64.101:63268] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIetzbsUyTxys8OiMJP6AAAAA8"]
[Fri Dec 05 07:52:26.534766 2025] [:error] [pid 24010:tid 24019] [client 66.249.64.101:47267] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIeuqtjRoDpxa46mwdw4AAAAQc"]
[Fri Dec 05 07:52:29.812392 2025] [:error] [pid 53837:tid 53862] [client 66.249.64.101:37848] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIevTbsUyTxys8OiMJQGAAAABQ"]
[Fri Dec 05 07:52:31.300864 2025] [:error] [pid 53838:tid 53887] [client 66.249.64.101:49096] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIev58M7CH_vMhLrzIvAQAAAFI"]
[Fri Dec 05 07:52:34.438871 2025] [:error] [pid 53923:tid 53935] [client 66.249.64.101:43363] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIewrl8ebZN0VCAVXA09wAAAMo"]
[Fri Dec 05 07:52:48.387931 2025] [:error] [pid 53923:tid 53926] [client 66.249.64.101:55116] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIe0Ll8ebZN0VCAVXA1UQAAAME"]
[Fri Dec 05 07:52:53.186165 2025] [:error] [pid 53838:tid 53878] [client 66.249.64.101:59482] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIe1Z8M7CH_vMhLrzIvLQAAAEk"]
[Fri Dec 05 07:52:56.051085 2025] [:error] [pid 53923:tid 53928] [client 66.249.64.101:45310] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIe2Ll8ebZN0VCAVXA1ZQAAAMM"]
[Fri Dec 05 07:52:59.183927 2025] [:error] [pid 24010:tid 24014] [client 66.249.64.101:51932] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIe26tjRoDpxa46mwdxTwAAAQI"]
[Fri Dec 05 07:53:00.759084 2025] [:error] [pid 53839:tid 53915] [client 66.249.64.101:59296] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIe3KQOuERg_RN7bn-2jgAAAJM"]
[Fri Dec 05 07:53:05.986627 2025] [:error] [pid 53923:tid 53927] [client 66.249.64.101:51654] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIe4bl8ebZN0VCAVXA1dwAAAMI"]
[Fri Dec 05 07:53:27.340500 2025] [:error] [pid 24010:tid 24018] [client 66.249.64.101:54949] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIe96tjRoDpxa46mwdxzgAAAQY"]
[Fri Dec 05 07:53:29.661748 2025] [:error] [pid 53838:tid 53884] [client 66.249.64.101:40182] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIe-Z8M7CH_vMhLrzIvUAAAAE8"]
[Fri Dec 05 07:53:31.032411 2025] [:error] [pid 53838:tid 53880] [client 66.249.64.101:53395] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIe-58M7CH_vMhLrzIvVAAAAEs"]
[Fri Dec 05 07:53:32.670782 2025] [:error] [pid 53837:tid 53857] [client 66.249.64.101:35390] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIe_DbsUyTxys8OiMJQTQAAAA8"]
[Fri Dec 05 07:53:34.461372 2025] [:error] [pid 53838:tid 53879] [client 66.249.64.101:64967] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIe_p8M7CH_vMhLrzIvWQAAAEo"]
[Fri Dec 05 07:53:35.958632 2025] [:error] [pid 53839:tid 53920] [client 66.249.64.101:61751] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIe_6QOuERg_RN7bn-29wAAAJg"]
[Fri Dec 05 07:53:37.325308 2025] [:error] [pid 53839:tid 53919] [client 66.249.64.101:62546] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIfAaQOuERg_RN7bn-2_QAAAJc"]
[Fri Dec 05 07:53:40.335895 2025] [:error] [pid 24010:tid 24027] [client 66.249.64.101:49161] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIfBKtjRoDpxa46mwdx5QAAAQ8"]
[Fri Dec 05 07:53:42.262686 2025] [:error] [pid 53839:tid 53898] [client 66.249.64.101:62940] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIfBqQOuERg_RN7bn-3EAAAAII"]
[Fri Dec 05 07:53:45.273173 2025] [:error] [pid 53839:tid 53897] [client 66.249.64.101:42004] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIfCaQOuERg_RN7bn-3HgAAAIE"]
[Fri Dec 05 07:53:46.745382 2025] [:error] [pid 53838:tid 53883] [client 66.249.64.101:55938] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIfCp8M7CH_vMhLrzIvdgAAAE4"]
[Fri Dec 05 07:53:48.146111 2025] [:error] [pid 53923:tid 53945] [client 66.249.64.101:53451] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIfDLl8ebZN0VCAVXA1uwAAANQ"]
[Fri Dec 05 07:53:50.042982 2025] [:error] [pid 53838:tid 53884] [client 66.249.64.101:63705] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIfDp8M7CH_vMhLrzIvfwAAAE8"]
[Fri Dec 05 07:53:51.535699 2025] [:error] [pid 53923:tid 53937] [client 66.249.64.101:47454] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIfD7l8ebZN0VCAVXA1xAAAAMw"]
[Fri Dec 05 07:53:52.341782 2025] [:error] [pid 53837:tid 53853] [client 66.249.64.101:60489] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIfEDbsUyTxys8OiMJQZAAAAAs"]
[Fri Dec 05 07:53:53.042718 2025] [:error] [pid 53839:tid 53910] [client 66.249.64.101:57359] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIfEaQOuERg_RN7bn-3PQAAAI4"]
[Fri Dec 05 07:53:56.047400 2025] [:error] [pid 24010:tid 24028] [client 66.249.64.101:63615] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIfFKtjRoDpxa46mwdyCQAAARA"]
[Fri Dec 05 07:53:57.835070 2025] [:error] [pid 53839:tid 53918] [client 66.249.64.101:62145] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIfFaQOuERg_RN7bn-3XAAAAJY"]
[Fri Dec 05 07:53:57.995580 2025] [:error] [pid 53923:tid 53927] [client 66.249.64.101:55708] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIfFbl8ebZN0VCAVXA1ywAAAMI"]
[Fri Dec 05 07:53:59.339322 2025] [:error] [pid 53923:tid 53928] [client 66.249.64.101:64607] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIfF7l8ebZN0VCAVXA10AAAAMM"]
[Fri Dec 05 07:54:03.064314 2025] [:error] [pid 53839:tid 53914] [client 66.249.64.101:48674] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIfG6QOuERg_RN7bn-3bwAAAJI"]
[Fri Dec 05 07:54:07.107928 2025] [:error] [pid 53838:tid 53882] [client 66.249.64.101:42403] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIfH58M7CH_vMhLrzIvlAAAAE0"]
[Fri Dec 05 07:54:08.608710 2025] [:error] [pid 24010:tid 24035] [client 66.249.64.101:50445] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIfIKtjRoDpxa46mwdyJAAAARc"]
[Fri Dec 05 07:54:10.114204 2025] [:error] [pid 53837:tid 53853] [client 66.249.64.101:35316] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIfIjbsUyTxys8OiMJQgwAAAAs"]
[Fri Dec 05 07:54:11.622979 2025] [:error] [pid 24010:tid 24018] [client 66.249.64.101:50898] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIfI6tjRoDpxa46mwdyKQAAAQY"]
[Fri Dec 05 07:54:13.404330 2025] [:error] [pid 53838:tid 53893] [client 66.249.64.101:43400] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIfJZ8M7CH_vMhLrzIvmgAAAFg"]
[Fri Dec 05 07:54:14.960919 2025] [:error] [pid 53838:tid 53872] [client 66.249.64.101:41485] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIfJp8M7CH_vMhLrzIvnAAAAEM"]
[Fri Dec 05 07:54:19.278794 2025] [:error] [pid 53837:tid 53864] [client 66.249.64.101:61951] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIfKzbsUyTxys8OiMJQjgAAABY"]
[Fri Dec 05 07:54:48.259836 2025] [:error] [pid 53837:tid 53866] [client 66.249.64.101:38110] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIfSDbsUyTxys8OiMJQsgAAABg"]
[Fri Dec 05 07:54:50.589894 2025] [:error] [pid 53923:tid 53934] [client 66.249.64.101:45318] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIfSrl8ebZN0VCAVXA2MgAAAMk"]
[Fri Dec 05 07:54:53.889377 2025] [:error] [pid 24010:tid 24017] [client 66.249.64.101:39142] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIfTatjRoDpxa46mwdylAAAAQU"]
[Fri Dec 05 07:54:55.382315 2025] [:error] [pid 53923:tid 53930] [client 66.249.64.101:52296] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIfT7l8ebZN0VCAVXA2OwAAAMU"]
[Fri Dec 05 07:54:56.865513 2025] [:error] [pid 53839:tid 53896] [client 66.249.64.101:53842] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIfUKQOuERg_RN7bn-30wAAAIA"]
[Fri Dec 05 07:55:01.668873 2025] [:error] [pid 53839:tid 53913] [client 66.249.64.101:56080] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIfVaQOuERg_RN7bn-35AAAAJE"]
[Fri Dec 05 07:55:07.972751 2025] [:error] [pid 53838:tid 53879] [client 66.249.64.101:56010] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIfW58M7CH_vMhLrzIv3QAAAEo"]
[Fri Dec 05 07:55:10.950568 2025] [:error] [pid 24010:tid 24025] [client 66.249.64.101:57132] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIfXqtjRoDpxa46mwdyxwAAAQ0"]
[Fri Dec 05 07:55:12.456262 2025] [:error] [pid 53839:tid 53918] [client 66.249.64.101:37512] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIfYKQOuERg_RN7bn-39gAAAJY"]
[Fri Dec 05 07:55:13.968728 2025] [:error] [pid 24010:tid 24025] [client 66.249.64.101:50625] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIfYatjRoDpxa46mwdy1gAAAQ0"]
[Fri Dec 05 07:55:15.760167 2025] [:error] [pid 53839:tid 53915] [client 66.249.64.101:43856] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIfY6QOuERg_RN7bn-3-wAAAJM"]
[Fri Dec 05 07:55:17.253103 2025] [:error] [pid 24010:tid 24019] [client 66.249.64.101:39749] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIfZatjRoDpxa46mwdy6QAAAQc"]
[Fri Dec 05 07:55:18.753414 2025] [:error] [pid 53837:tid 53863] [client 66.249.64.101:36971] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIfZjbsUyTxys8OiMJQ4gAAABU"]
[Fri Dec 05 07:55:20.240956 2025] [:error] [pid 53923:tid 53932] [client 66.249.64.101:51381] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIfaLl8ebZN0VCAVXA2dgAAAMc"]
[Fri Dec 05 07:55:21.751980 2025] [:error] [pid 53923:tid 53944] [client 66.249.64.101:54860] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIfabl8ebZN0VCAVXA2eAAAANM"]
[Fri Dec 05 07:55:23.543856 2025] [:error] [pid 53839:tid 53917] [client 66.249.64.101:64708] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIfa6QOuERg_RN7bn-4CQAAAJU"]
[Fri Dec 05 07:55:25.050720 2025] [:error] [pid 53839:tid 53916] [client 66.249.64.101:41731] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIfbaQOuERg_RN7bn-4DQAAAJQ"]
[Fri Dec 05 07:55:26.551880 2025] [:error] [pid 53923:tid 53944] [client 66.249.64.101:51855] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIfbrl8ebZN0VCAVXA2gwAAANM"]
[Fri Dec 05 07:55:29.528531 2025] [:error] [pid 53923:tid 53927] [client 66.249.64.101:65108] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIfcbl8ebZN0VCAVXA2jQAAAMI"]
[Fri Dec 05 07:55:31.322039 2025] [:error] [pid 53839:tid 53904] [client 66.249.64.101:40328] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIfc6QOuERg_RN7bn-4IAAAAIg"]
[Fri Dec 05 07:55:34.324365 2025] [:error] [pid 53837:tid 53865] [client 66.249.64.101:56509] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIfdjbsUyTxys8OiMJRAAAAABc"]
[Fri Dec 05 07:55:35.664718 2025] [:error] [pid 24010:tid 24021] [client 66.249.64.101:39982] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIfd6tjRoDpxa46mwdzLAAAAQk"]
[Fri Dec 05 07:55:39.125904 2025] [:error] [pid 24010:tid 24014] [client 66.249.64.101:52869] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIfe6tjRoDpxa46mwdzPgAAAQI"]
[Fri Dec 05 07:55:40.635657 2025] [:error] [pid 53923:tid 53938] [client 66.249.64.101:36657] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIffLl8ebZN0VCAVXA2vQAAAM0"]
[Fri Dec 05 07:55:42.848340 2025] [:error] [pid 53923:tid 53932] [client 66.249.64.101:61747] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIffrl8ebZN0VCAVXA2wwAAAMc"]
[Fri Dec 05 07:55:44.716720 2025] [:error] [pid 53838:tid 53878] [client 66.249.64.101:36490] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIfgJ8M7CH_vMhLrzIwPgAAAEk"]
[Fri Dec 05 07:56:03.160834 2025] [:error] [pid 24010:tid 24016] [client 66.249.64.101:43115] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIfk6tjRoDpxa46mwdzgQAAAQQ"]
[Fri Dec 05 07:56:06.970488 2025] [:error] [pid 53839:tid 53920] [client 66.249.64.101:52493] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIflqQOuERg_RN7bn-4cQAAAJg"]
[Fri Dec 05 07:56:08.496491 2025] [:error] [pid 53837:tid 53861] [client 66.249.64.101:49261] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIfmDbsUyTxys8OiMJRFAAAABM"]
[Fri Dec 05 07:56:10.279958 2025] [:error] [pid 24010:tid 24023] [client 66.249.64.101:55854] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIfmqtjRoDpxa46mwdzmAAAAQs"]
[Fri Dec 05 07:56:11.646920 2025] [:error] [pid 53838:tid 53892] [client 66.249.64.101:59953] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIfm58M7CH_vMhLrzIwWwAAAFc"]
[Fri Dec 05 07:56:14.754637 2025] [:error] [pid 53837:tid 53843] [client 66.249.64.101:54448] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIfnjbsUyTxys8OiMJRHAAAAAE"]
[Fri Dec 05 07:56:16.564816 2025] [:error] [pid 53923:tid 53936] [client 66.249.64.101:36941] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIfoLl8ebZN0VCAVXA27gAAAMs"]
[Fri Dec 05 07:56:18.122240 2025] [:error] [pid 53839:tid 53915] [client 66.249.64.101:38210] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIfoqQOuERg_RN7bn-4vAAAAJM"]
[Fri Dec 05 07:56:21.166985 2025] [:error] [pid 53923:tid 53935] [client 66.249.64.101:64621] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIfpbl8ebZN0VCAVXA29QAAAMo"]
[Fri Dec 05 07:56:22.572179 2025] [:error] [pid 53923:tid 53939] [client 66.249.64.101:60788] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIfprl8ebZN0VCAVXA2-gAAAM4"]
[Fri Dec 05 07:56:24.775429 2025] [:error] [pid 53839:tid 53907] [client 66.249.64.101:47676] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIfqKQOuERg_RN7bn-41AAAAIs"]
[Fri Dec 05 07:56:25.847263 2025] [:error] [pid 24010:tid 24022] [client 66.249.64.101:35375] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIfqatjRoDpxa46mwdz_AAAAQo"]
[Fri Dec 05 07:56:33.642871 2025] [:error] [pid 53839:tid 53896] [client 66.249.64.101:38625] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIfsaQOuERg_RN7bn-48AAAAIA"]
[Fri Dec 05 07:56:36.645048 2025] [:error] [pid 24010:tid 24035] [client 66.249.64.101:60007] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIftKtjRoDpxa46mwd0EQAAARc"]
[Fri Dec 05 07:56:38.145225 2025] [:error] [pid 24010:tid 24014] [client 66.249.64.101:54105] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIftqtjRoDpxa46mwd0EgAAAQI"]
[Fri Dec 05 07:56:41.460359 2025] [:error] [pid 24010:tid 24015] [client 66.249.64.101:39238] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIfuatjRoDpxa46mwd0GAAAAQM"]
[Fri Dec 05 07:56:45.946914 2025] [:error] [pid 53839:tid 53896] [client 66.249.64.101:44743] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIfvaQOuERg_RN7bn-5UwAAAIA"]
[Fri Dec 05 07:56:49.223410 2025] [:error] [pid 24010:tid 24036] [client 66.249.64.101:61700] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIfwatjRoDpxa46mwd0LgAAARg"]
[Fri Dec 05 07:56:55.525433 2025] [:error] [pid 53923:tid 53946] [client 66.249.64.101:37572] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIfx7l8ebZN0VCAVXA3VgAAANU"]
[Fri Dec 05 07:56:57.005906 2025] [:error] [pid 53923:tid 53927] [client 66.249.64.101:45306] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIfybl8ebZN0VCAVXA3WwAAAMI"]
[Fri Dec 05 07:57:35.148298 2025] [:error] [pid 24010:tid 24033] [client 66.249.64.101:35890] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIf76tjRoDpxa46mwd0fwAAARU"]
[Fri Dec 05 07:57:37.543892 2025] [:error] [pid 53839:tid 53909] [client 66.249.64.101:38396] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIf8aQOuERg_RN7bn-5hgAAAI0"]
[Fri Dec 05 07:57:40.463598 2025] [:error] [pid 53923:tid 53934] [client 66.249.64.101:50326] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIf9Ll8ebZN0VCAVXA3nQAAAMk"]
[Fri Dec 05 07:57:42.280076 2025] [:error] [pid 53838:tid 53883] [client 66.249.64.101:41506] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIf9p8M7CH_vMhLrzIxCAAAAE4"]
[Fri Dec 05 07:57:43.766958 2025] [:error] [pid 24010:tid 24035] [client 66.249.64.101:44834] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIf96tjRoDpxa46mwd0jgAAARc"]
[Fri Dec 05 07:57:45.272206 2025] [:error] [pid 53839:tid 53916] [client 66.249.64.101:51720] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIf-aQOuERg_RN7bn-5jQAAAJQ"]
[Fri Dec 05 07:57:46.787666 2025] [:error] [pid 53839:tid 53899] [client 66.249.64.101:43995] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIf-qQOuERg_RN7bn-5kQAAAIM"]
[Fri Dec 05 07:57:48.265378 2025] [:error] [pid 53839:tid 53897] [client 66.249.64.101:60560] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIf_KQOuERg_RN7bn-5mAAAAIE"]
[Fri Dec 05 07:57:50.069713 2025] [:error] [pid 53839:tid 53918] [client 66.249.64.101:65376] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIf_qQOuERg_RN7bn-5nwAAAJY"]
[Fri Dec 05 07:57:53.085628 2025] [:error] [pid 53837:tid 53848] [client 66.249.64.101:59980] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIgATbsUyTxys8OiMJR9gAAAAY"]
[Fri Dec 05 07:57:54.568772 2025] [:error] [pid 53837:tid 53850] [client 66.249.64.101:44351] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIgAjbsUyTxys8OiMJR_QAAAAg"]
[Fri Dec 05 07:57:56.083023 2025] [:error] [pid 53838:tid 53888] [client 66.249.64.101:60244] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIgBJ8M7CH_vMhLrzIxCgAAAFM"]
[Fri Dec 05 07:58:00.877115 2025] [:error] [pid 24010:tid 24030] [client 66.249.64.101:40757] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIgCKtjRoDpxa46mwd0rAAAARI"]
[Fri Dec 05 07:58:02.352065 2025] [:error] [pid 53838:tid 53892] [client 66.249.64.101:53954] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIgCp8M7CH_vMhLrzIxEgAAAFc"]
[Fri Dec 05 07:58:07.142521 2025] [:error] [pid 53839:tid 53907] [client 66.249.64.101:57860] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIgD6QOuERg_RN7bn-5sAAAAIs"]
[Fri Dec 05 07:58:08.650142 2025] [:error] [pid 53837:tid 53855] [client 66.249.64.101:56905] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIgEDbsUyTxys8OiMJSCwAAAA0"]
[Fri Dec 05 07:58:12.535326 2025] [:error] [pid 24010:tid 24012] [client 66.249.64.101:35723] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIgFKtjRoDpxa46mwd00AAAAQA"]
[Fri Dec 05 07:58:13.772964 2025] [:error] [pid 53923:tid 53945] [client 66.249.64.101:59860] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIgFbl8ebZN0VCAVXA4IwAAANQ"]
[Fri Dec 05 07:58:18.664244 2025] [:error] [pid 53839:tid 53902] [client 66.249.64.101:35453] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIgGqQOuERg_RN7bn-53wAAAIY"]
[Fri Dec 05 07:58:20.162992 2025] [:error] [pid 53837:tid 53850] [client 66.249.64.101:45015] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIgHDbsUyTxys8OiMJSGgAAAAg"]
[Fri Dec 05 07:58:21.977408 2025] [:error] [pid 53923:tid 53932] [client 66.249.64.101:42429] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIgHbl8ebZN0VCAVXA4NwAAAMc"]
[Fri Dec 05 07:58:23.622742 2025] [:error] [pid 53838:tid 53871] [client 66.249.64.101:60738] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIgH58M7CH_vMhLrzIxQwAAAEI"]
[Fri Dec 05 07:58:26.465046 2025] [:error] [pid 53837:tid 53851] [client 66.249.64.101:59333] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIgIjbsUyTxys8OiMJSJQAAAAk"]
[Fri Dec 05 07:58:31.245714 2025] [:error] [pid 53923:tid 53935] [client 66.249.64.101:61539] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIgJ7l8ebZN0VCAVXA4UAAAAMo"]
[Fri Dec 05 07:58:32.767814 2025] [:error] [pid 24010:tid 24012] [client 66.249.64.101:58430] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIgKKtjRoDpxa46mwd1AwAAAQA"]
[Fri Dec 05 07:59:00.916156 2025] [:error] [pid 24010:tid 24021] [client 66.249.64.101:55039] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIgRKtjRoDpxa46mwd1hAAAAQk"]
[Fri Dec 05 07:59:02.416201 2025] [:error] [pid 53839:tid 53902] [client 66.249.64.101:39404] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIgRqQOuERg_RN7bn-6AgAAAIY"]
[Fri Dec 05 07:59:03.925114 2025] [:error] [pid 53838:tid 53891] [client 66.249.64.101:49298] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIgR58M7CH_vMhLrzIxhwAAAFY"]
[Fri Dec 05 07:59:05.404031 2025] [:error] [pid 53838:tid 53875] [client 66.249.64.101:45384] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIgSZ8M7CH_vMhLrzIxiwAAAEY"]
[Fri Dec 05 07:59:06.911778 2025] [:error] [pid 53839:tid 53904] [client 66.249.64.101:54220] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIgSqQOuERg_RN7bn-6BwAAAIg"]
[Fri Dec 05 07:59:08.713973 2025] [:error] [pid 53839:tid 53905] [client 66.249.64.101:41517] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIgTKQOuERg_RN7bn-6CwAAAIk"]
[Fri Dec 05 07:59:10.215962 2025] [:error] [pid 53923:tid 53930] [client 66.249.64.101:35436] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIgTrl8ebZN0VCAVXA4iAAAAMU"]
[Fri Dec 05 07:59:11.702726 2025] [:error] [pid 53837:tid 53862] [client 66.249.64.101:60794] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIgTzbsUyTxys8OiMJSYgAAABQ"]
[Fri Dec 05 07:59:13.201664 2025] [:error] [pid 24010:tid 24013] [client 66.249.64.101:38613] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIgUatjRoDpxa46mwd1xgAAAQE"]
[Fri Dec 05 07:59:14.683488 2025] [:error] [pid 53837:tid 53849] [client 66.249.64.101:59435] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIgUjbsUyTxys8OiMJSawAAAAc"]
[Fri Dec 05 07:59:16.492932 2025] [:error] [pid 53838:tid 53887] [client 66.249.64.101:36230] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIgVJ8M7CH_vMhLrzIxlwAAAFI"]
[Fri Dec 05 07:59:18.009689 2025] [:error] [pid 53839:tid 53911] [client 66.249.64.101:49021] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIgVqQOuERg_RN7bn-6FAAAAI8"]
[Fri Dec 05 07:59:19.498900 2025] [:error] [pid 53923:tid 53945] [client 66.249.64.101:50048] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIgV7l8ebZN0VCAVXA4kgAAANQ"]
[Fri Dec 05 07:59:20.974962 2025] [:error] [pid 53837:tid 53847] [client 66.249.64.101:57731] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIgWDbsUyTxys8OiMJSegAAAAU"]
[Fri Dec 05 07:59:22.498117 2025] [:error] [pid 53923:tid 53937] [client 66.249.64.101:48306] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIgWrl8ebZN0VCAVXA4mQAAAMw"]
[Fri Dec 05 07:59:24.340758 2025] [:error] [pid 53923:tid 53928] [client 66.249.64.101:49396] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIgXLl8ebZN0VCAVXA4nAAAAMM"]
[Fri Dec 05 07:59:25.793850 2025] [:error] [pid 24010:tid 24014] [client 66.249.64.101:42237] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIgXatjRoDpxa46mwd17AAAAQI"]
[Fri Dec 05 07:59:27.291990 2025] [:error] [pid 53838:tid 53881] [client 66.249.64.101:40486] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIgX58M7CH_vMhLrzIxnQAAAEw"]
[Fri Dec 05 07:59:30.264171 2025] [:error] [pid 53839:tid 53918] [client 66.249.64.101:37886] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIgYqQOuERg_RN7bn-6HwAAAJY"]
[Fri Dec 05 07:59:33.577985 2025] [:error] [pid 53837:tid 53845] [client 66.249.64.101:36562] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIgZTbsUyTxys8OiMJSkgAAAAM"]
[Fri Dec 05 07:59:35.104900 2025] [:error] [pid 24010:tid 24033] [client 66.249.64.101:45544] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIgZ6tjRoDpxa46mwd2EgAAARU"]
[Fri Dec 05 07:59:38.673111 2025] [:error] [pid 53923:tid 53939] [client 66.249.64.101:48476] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIgarl8ebZN0VCAVXA4rQAAAM4"]
[Fri Dec 05 07:59:39.917861 2025] [:error] [pid 53923:tid 53947] [client 66.249.64.101:57918] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIga7l8ebZN0VCAVXA4rgAAANY"]
[Fri Dec 05 07:59:41.390931 2025] [:error] [pid 53923:tid 53946] [client 66.249.64.101:39567] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIgbbl8ebZN0VCAVXA4sQAAANU"]
[Fri Dec 05 07:59:47.965100 2025] [:error] [pid 53839:tid 53913] [client 66.249.64.101:36341] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIgc6QOuERg_RN7bn-6LAAAAJE"]
[Fri Dec 05 08:00:12.810996 2025] [:error] [pid 53837:tid 53852] [client 66.249.64.101:60262] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIgjDbsUyTxys8OiMJS_gAAAAo"]
[Fri Dec 05 08:00:13.216333 2025] [:error] [pid 53839:tid 53907] [client 66.249.64.101:39949] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIgjaQOuERg_RN7bn-6QwAAAIs"]
[Fri Dec 05 08:00:15.559643 2025] [:error] [pid 53838:tid 53876] [client 66.249.64.101:39250] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIgj58M7CH_vMhLrzIx9wAAAEc"]
[Fri Dec 05 08:00:17.054989 2025] [:error] [pid 53839:tid 53914] [client 66.249.64.101:53018] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIgkaQOuERg_RN7bn-6RAAAAJI"]
[Fri Dec 05 08:00:18.834190 2025] [:error] [pid 24010:tid 24025] [client 66.249.64.101:44607] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIgkqtjRoDpxa46mwd2gAAAAQ0"]
[Fri Dec 05 08:00:20.334597 2025] [:error] [pid 53923:tid 53944] [client 66.249.64.101:51808] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIglLl8ebZN0VCAVXA5DAAAANM"]
[Fri Dec 05 08:00:23.337966 2025] [:error] [pid 53838:tid 53887] [client 66.249.64.101:52111] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIgl58M7CH_vMhLrzIyAgAAAFI"]
[Fri Dec 05 08:00:25.139673 2025] [:error] [pid 53839:tid 53897] [client 66.249.64.101:64406] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIgmaQOuERg_RN7bn-6SQAAAIE"]
[Fri Dec 05 08:00:27.997522 2025] [:error] [pid 24010:tid 24018] [client 66.249.64.101:44572] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIgm6tjRoDpxa46mwd2jgAAAQY"]
[Fri Dec 05 08:00:29.683111 2025] [:error] [pid 24010:tid 24030] [client 66.249.64.101:39079] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIgnatjRoDpxa46mwd2mAAAARI"]
[Fri Dec 05 08:00:35.265836 2025] [:error] [pid 53923:tid 53948] [client 66.249.64.101:38141] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIgo7l8ebZN0VCAVXA5GgAAANc"]
[Fri Dec 05 08:00:37.413678 2025] [:error] [pid 53839:tid 53896] [client 66.249.64.101:59278] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIgpaQOuERg_RN7bn-6VgAAAIA"]
[Fri Dec 05 08:00:38.913199 2025] [:error] [pid 53838:tid 53880] [client 66.249.64.101:52432] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIgpp8M7CH_vMhLrzIyEwAAAEs"]
[Fri Dec 05 08:00:40.715255 2025] [:error] [pid 53837:tid 53863] [client 66.249.64.101:56043] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIgqDbsUyTxys8OiMJTTAAAABU"]
[Fri Dec 05 08:00:45.304618 2025] [:error] [pid 53923:tid 53939] [client 66.249.64.101:62493] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIgrbl8ebZN0VCAVXA5MgAAAM4"]
[Fri Dec 05 08:00:49.998822 2025] [:error] [pid 53923:tid 53941] [client 66.249.64.101:51541] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIgsbl8ebZN0VCAVXA5OAAAANA"]
[Fri Dec 05 08:00:54.519812 2025] [:error] [pid 24010:tid 24018] [client 66.249.64.101:45182] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIgtqtjRoDpxa46mwd22gAAAQY"]
[Fri Dec 05 08:00:56.298789 2025] [:error] [pid 53923:tid 53949] [client 66.249.64.101:43054] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIguLl8ebZN0VCAVXA5PAAAANg"]
[Fri Dec 05 08:01:59.300918 2025] [:error] [pid 53923:tid 53948] [client 66.249.64.101:64196] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIg97l8ebZN0VCAVXA55gAAANc"]
[Fri Dec 05 08:02:20.201852 2025] [:error] [pid 53923:tid 53947] [client 66.249.64.101:44828] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIhDLl8ebZN0VCAVXA66QAAANY"]
[Fri Dec 05 08:02:22.352218 2025] [:error] [pid 53837:tid 53859] [client 66.249.64.101:41095] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIhDjbsUyTxys8OiMJUcgAAABE"]
[Fri Dec 05 08:02:29.779598 2025] [:error] [pid 53837:tid 53861] [client 66.249.64.101:45007] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIhFTbsUyTxys8OiMJUlAAAABM"]
[Fri Dec 05 08:02:42.566632 2025] [:error] [pid 53839:tid 53912] [client 66.249.64.101:59388] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIhIqQOuERg_RN7bn-7oQAAAJA"]
[Fri Dec 05 08:02:49.465601 2025] [:error] [pid 24010:tid 24019] [client 66.249.64.101:53584] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIhKatjRoDpxa46mwd4uwAAAQc"]
[Fri Dec 05 08:02:51.285670 2025] [:error] [pid 24010:tid 24027] [client 66.249.64.101:62292] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIhK6tjRoDpxa46mwd4vwAAAQ8"]
[Fri Dec 05 08:03:30.754423 2025] [:error] [pid 24010:tid 24023] [client 66.249.64.101:44103] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIhUqtjRoDpxa46mwd5TQAAAQs"]
[Fri Dec 05 08:03:32.631834 2025] [:error] [pid 24010:tid 24022] [client 66.249.64.101:39944] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIhVKtjRoDpxa46mwd5VQAAAQo"]
[Fri Dec 05 08:03:34.130334 2025] [:error] [pid 53837:tid 53858] [client 66.249.64.101:59149] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIhVjbsUyTxys8OiMJVPwAAABA"]
[Fri Dec 05 08:03:38.623233 2025] [:error] [pid 53837:tid 53850] [client 66.249.64.101:62393] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIhWjbsUyTxys8OiMJVSQAAAAg"]
[Fri Dec 05 08:03:53.061026 2025] [:error] [pid 53923:tid 53939] [client 66.249.64.101:43552] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIhabl8ebZN0VCAVXA8HgAAAM4"]
[Fri Dec 05 08:03:57.522098 2025] [:error] [pid 53838:tid 53881] [client 66.249.64.101:46195] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIhbZ8M7CH_vMhLrzIzswAAAEw"]
[Fri Dec 05 08:03:59.024421 2025] [:error] [pid 24010:tid 24018] [client 66.249.64.101:49238] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIhb6tjRoDpxa46mwd5pgAAAQY"]
[Fri Dec 05 08:04:00.524268 2025] [:error] [pid 53838:tid 53890] [client 66.249.64.101:55366] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIhcJ8M7CH_vMhLrzIzvAAAAFU"]
[Fri Dec 05 08:04:00.621797 2025] [:error] [pid 53838:tid 53889] [client 66.249.64.101:44476] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIhcJ8M7CH_vMhLrzIzvQAAAFQ"]
[Fri Dec 05 08:04:01.930828 2025] [:error] [pid 53839:tid 53903] [client 66.249.64.101:55143] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIhcaQOuERg_RN7bn-8NAAAAIc"]
[Fri Dec 05 08:04:02.471164 2025] [:error] [pid 53839:tid 53905] [client 66.249.64.101:39752] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIhcqQOuERg_RN7bn-8NgAAAIk"]
[Fri Dec 05 08:04:03.833830 2025] [:error] [pid 53839:tid 53911] [client 66.249.64.101:44726] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIhc6QOuERg_RN7bn-8OQAAAI8"]
[Fri Dec 05 08:04:05.311347 2025] [:error] [pid 24010:tid 24030] [client 66.249.64.101:36325] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIhdatjRoDpxa46mwd5sQAAARI"]
[Fri Dec 05 08:04:09.832990 2025] [:error] [pid 53837:tid 53843] [client 66.249.64.101:46099] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIheTbsUyTxys8OiMJVcwAAAAE"]
[Fri Dec 05 08:04:16.382651 2025] [:error] [pid 24010:tid 24021] [client 66.249.64.101:52779] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIhgKtjRoDpxa46mwd50wAAAQk"]
[Fri Dec 05 08:04:17.888177 2025] [:error] [pid 53838:tid 53886] [client 66.249.64.101:37808] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIhgZ8M7CH_vMhLrzIz8AAAAFE"]
[Fri Dec 05 08:04:19.889407 2025] [:error] [pid 24010:tid 24036] [client 66.249.64.101:38796] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIhg6tjRoDpxa46mwd59wAAARg"]
[Fri Dec 05 08:04:28.230039 2025] [:error] [pid 53923:tid 53940] [client 66.249.64.101:40080] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIhjLl8ebZN0VCAVXA8rgAAAM8"]
[Fri Dec 05 08:06:53.408018 2025] [:error] [pid 53923:tid 53946] [client 66.249.64.101:62163] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIiHbl8ebZN0VCAVXA_FQAAANU"]
[Fri Dec 05 08:06:56.488699 2025] [:error] [pid 53838:tid 53883] [client 66.249.64.101:47694] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIiIJ8M7CH_vMhLrzI1IwAAAE4"]
[Fri Dec 05 08:06:58.104065 2025] [:error] [pid 24010:tid 24030] [client 66.249.64.101:43711] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIiIqtjRoDpxa46mwd8DQAAARI"]
[Fri Dec 05 08:06:58.430302 2025] [:error] [pid 24010:tid 24022] [client 66.249.64.101:57142] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIiIqtjRoDpxa46mwd8EAAAAQo"]
[Fri Dec 05 08:07:15.478312 2025] [:error] [pid 53838:tid 53886] [client 66.249.64.101:34798] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIiM58M7CH_vMhLrzI1SgAAAFE"]
[Fri Dec 05 08:07:30.216925 2025] [:error] [pid 53923:tid 53925] [client 66.249.64.101:35512] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIiQrl8ebZN0VCAVXA_ZwAAAMA"]
[Fri Dec 05 08:07:44.091185 2025] [:error] [pid 53923:tid 53939] [client 66.249.64.101:63323] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIiULl8ebZN0VCAVXA_hQAAAM4"]
[Fri Dec 05 08:07:47.298659 2025] [:error] [pid 53838:tid 53890] [client 66.249.64.101:58068] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIiU58M7CH_vMhLrzI1igAAAFU"]
[Fri Dec 05 08:07:50.293372 2025] [:error] [pid 53838:tid 53869] [client 66.249.64.101:36516] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIiVp8M7CH_vMhLrzI1kgAAAEA"]
[Fri Dec 05 08:09:02.234331 2025] [:error] [pid 53837:tid 53858] [client 66.249.64.101:38486] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIinjbsUyTxys8OiMJXFwAAABA"]
[Fri Dec 05 08:09:29.101634 2025] [:error] [pid 53837:tid 53864] [client 66.249.64.101:49536] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIiuTbsUyTxys8OiMJXTwAAABY"]
[Fri Dec 05 08:09:33.535750 2025] [:error] [pid 53838:tid 53882] [client 66.249.64.101:51102] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIivZ8M7CH_vMhLrzI20QAAAE0"]
[Fri Dec 05 08:09:38.303250 2025] [:error] [pid 24010:tid 24027] [client 66.249.64.101:49342] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIiwqtjRoDpxa46mwd-OAAAAQ8"]
[Fri Dec 05 08:09:41.355805 2025] [:error] [pid 53838:tid 53883] [client 66.249.64.101:43408] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIixZ8M7CH_vMhLrzI25gAAAE4"]
[Fri Dec 05 08:09:42.910759 2025] [:error] [pid 53923:tid 53949] [client 66.249.64.101:52772] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIixrl8ebZN0VCAVXBAiQAAANg"]
[Fri Dec 05 08:09:55.237867 2025] [:error] [pid 53923:tid 53934] [client 66.249.64.101:62747] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIi07l8ebZN0VCAVXBApAAAAMk"]
[Fri Dec 05 08:10:51.004341 2025] [:error] [pid 24010:tid 24024] [client 66.249.64.101:62095] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIjC6tjRoDpxa46mwd_hwAAAQw"]
[Fri Dec 05 08:10:54.640622 2025] [:error] [pid 53838:tid 53881] [client 66.249.64.101:40212] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIjDp8M7CH_vMhLrzI3VgAAAEw"]
[Fri Dec 05 08:10:55.966751 2025] [:error] [pid 53923:tid 53931] [client 66.249.64.101:52558] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIjD7l8ebZN0VCAVXBBCAAAAMY"]
[Fri Dec 05 08:11:03.776072 2025] [:error] [pid 24010:tid 24019] [client 66.249.64.101:37915] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIjF6tjRoDpxa46mwd_uwAAAQc"]
[Fri Dec 05 08:11:12.016276 2025] [:error] [pid 24010:tid 24025] [client 66.249.64.101:45914] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIjIKtjRoDpxa46mwd_2QAAAQ0"]
[Fri Dec 05 08:11:14.074204 2025] [:error] [pid 53837:tid 53860] [client 66.249.64.101:46977] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIjIjbsUyTxys8OiMJX9gAAABI"]
[Fri Dec 05 08:11:21.502701 2025] [:error] [pid 53838:tid 53880] [client 66.249.64.101:41669] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIjKZ8M7CH_vMhLrzI4AAAAAEs"]
[Fri Dec 05 08:11:27.453326 2025] [:error] [pid 24010:tid 24013] [client 66.249.64.101:63211] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIjL6tjRoDpxa46mwd_-gAAAQE"]
[Fri Dec 05 08:13:22.177496 2025] [:error] [pid 24010:tid 24028] [client 66.249.64.101:46631] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIjoqtjRoDpxa46mweBRQAAARA"]
[Fri Dec 05 08:13:27.943777 2025] [:error] [pid 53839:tid 53906] [client 66.249.64.101:63732] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIjp6QOuERg_RN7bn_AgAAAAIo"]
[Fri Dec 05 08:13:29.509274 2025] [:error] [pid 53923:tid 53932] [client 66.249.64.101:53913] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIjqbl8ebZN0VCAVXBC3QAAAMc"]
[Fri Dec 05 08:13:32.623352 2025] [:error] [pid 53838:tid 53871] [client 66.249.64.101:43104] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIjrJ8M7CH_vMhLrzI5BgAAAEI"]
[Fri Dec 05 08:13:45.972741 2025] [:error] [pid 53838:tid 53880] [client 66.249.64.101:63986] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIjuZ8M7CH_vMhLrzI5JgAAAEs"]
[Fri Dec 05 08:13:49.031966 2025] [:error] [pid 53837:tid 53843] [client 66.249.64.101:39487] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIjvTbsUyTxys8OiMJZCQAAAAE"]
[Fri Dec 05 08:16:04.127992 2025] [:error] [pid 53837:tid 53866] [client 66.249.64.101:59766] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIkRDbsUyTxys8OiMJZvAAAABg"]
[Fri Dec 05 08:16:32.440987 2025] [:error] [pid 53838:tid 53878] [client 66.249.64.101:50963] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIkYJ8M7CH_vMhLrzI6NAAAAEk"]
[Fri Dec 05 08:16:33.645259 2025] [:error] [pid 53838:tid 53885] [client 66.249.64.101:57127] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIkYZ8M7CH_vMhLrzI6RQAAAFA"]
[Fri Dec 05 08:16:40.522439 2025] [:error] [pid 53923:tid 53932] [client 66.249.64.101:55567] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIkaLl8ebZN0VCAVXBERgAAAMc"]
[Fri Dec 05 08:16:41.437525 2025] [:error] [pid 53837:tid 53853] [client 66.249.64.101:53545] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIkaTbsUyTxys8OiMJaKAAAAAs"]
[Fri Dec 05 08:16:41.508338 2025] [:error] [pid 53923:tid 53925] [client 66.249.64.101:44486] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIkabl8ebZN0VCAVXBETAAAAMA"]
[Fri Dec 05 08:16:42.231719 2025] [:error] [pid 53838:tid 53881] [client 66.249.64.101:42830] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIkap8M7CH_vMhLrzI6nQAAAEw"]
[Fri Dec 05 08:16:43.129788 2025] [:error] [pid 53837:tid 53857] [client 66.249.64.101:54621] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIkazbsUyTxys8OiMJaMgAAAA8"]
[Fri Dec 05 08:16:45.883446 2025] [:error] [pid 53839:tid 53904] [client 66.249.64.101:36493] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIkbaQOuERg_RN7bn_B8wAAAIg"]
[Fri Dec 05 08:16:53.668868 2025] [:error] [pid 24010:tid 24032] [client 66.249.64.101:63480] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIkdatjRoDpxa46mweEOgAAARQ"]
[Fri Dec 05 08:18:31.909156 2025] [:error] [pid 24010:tid 24024] [client 66.249.64.101:52669] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIk16tjRoDpxa46mweFcgAAAQw"]
[Fri Dec 05 08:18:33.550364 2025] [:error] [pid 24010:tid 24026] [client 66.249.64.101:41319] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIk2atjRoDpxa46mweFdgAAAQ4"]
[Fri Dec 05 08:18:35.044739 2025] [:error] [pid 53837:tid 53853] [client 66.249.64.101:57433] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIk2zbsUyTxys8OiMJa-AAAAAs"]
[Fri Dec 05 08:18:36.545909 2025] [:error] [pid 53923:tid 53928] [client 66.249.64.101:38545] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIk3Ll8ebZN0VCAVXBFkgAAAMM"]
[Fri Dec 05 08:18:38.030219 2025] [:error] [pid 53923:tid 53941] [client 66.249.64.101:46454] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIk3rl8ebZN0VCAVXBFlwAAANA"]
[Fri Dec 05 08:18:39.857253 2025] [:error] [pid 53839:tid 53900] [client 66.249.64.101:35420] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIk36QOuERg_RN7bn_C7gAAAIQ"]
[Fri Dec 05 08:18:46.335161 2025] [:error] [pid 53923:tid 53928] [client 66.249.64.101:52480] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIk5rl8ebZN0VCAVXBFsgAAAMM"]
[Fri Dec 05 08:18:47.579246 2025] [:error] [pid 53923:tid 53948] [client 66.249.64.101:37342] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIk57l8ebZN0VCAVXBFtQAAANc"]
[Fri Dec 05 08:18:49.143214 2025] [:error] [pid 53923:tid 53926] [client 66.249.64.101:51110] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIk6bl8ebZN0VCAVXBFugAAAME"]
[Fri Dec 05 08:18:50.492167 2025] [:error] [pid 24010:tid 24024] [client 66.249.64.101:65317] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIk6qtjRoDpxa46mweFoQAAAQw"]
[Fri Dec 05 08:18:52.140939 2025] [:error] [pid 53838:tid 53893] [client 66.249.64.101:54435] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIk7J8M7CH_vMhLrzI7sAAAAFg"]
[Fri Dec 05 08:18:53.634520 2025] [:error] [pid 53839:tid 53900] [client 66.249.64.101:62084] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIk7aQOuERg_RN7bn_DAAAAAIQ"]
[Fri Dec 05 08:18:55.432845 2025] [:error] [pid 53923:tid 53942] [client 66.249.64.101:43837] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIk77l8ebZN0VCAVXBF0gAAANE"]
[Fri Dec 05 08:18:56.922672 2025] [:error] [pid 53838:tid 53875] [client 66.249.64.101:39074] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIk8J8M7CH_vMhLrzI7swAAAEY"]
[Fri Dec 05 08:18:58.429776 2025] [:error] [pid 24010:tid 24019] [client 66.249.64.101:64196] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIk8qtjRoDpxa46mweFrwAAAQc"]
[Fri Dec 05 08:19:08.080149 2025] [:error] [pid 53839:tid 53898] [client 66.249.64.101:57329] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIk_KQOuERg_RN7bn_DEQAAAII"]
[Fri Dec 05 08:19:11.005393 2025] [:error] [pid 53923:tid 53930] [client 66.249.64.101:49878] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIk_7l8ebZN0VCAVXBF7gAAAMU"]
[Fri Dec 05 08:19:15.511102 2025] [:error] [pid 53839:tid 53917] [client 66.249.64.101:41673] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIlA6QOuERg_RN7bn_DJgAAAJU"]
[Fri Dec 05 08:19:17.060520 2025] [:error] [pid 53923:tid 53933] [client 66.249.64.101:54932] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIlBbl8ebZN0VCAVXBGCAAAAMg"]
[Fri Dec 05 08:19:55.213403 2025] [:error] [pid 53923:tid 53937] [client 66.249.64.101:44878] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIlK7l8ebZN0VCAVXBGewAAAMw"]
[Fri Dec 05 08:19:57.918981 2025] [:error] [pid 53837:tid 53857] [client 66.249.64.101:37015] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIlLTbsUyTxys8OiMJbqgAAAA8"]
[Fri Dec 05 08:20:07.470913 2025] [:error] [pid 53837:tid 53862] [client 66.249.64.101:37033] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIlNzbsUyTxys8OiMJbwQAAABQ"]
[Fri Dec 05 08:20:26.622864 2025] [:error] [pid 24010:tid 24012] [client 66.249.64.101:38120] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIlSqtjRoDpxa46mweGhAAAAQA"]
[Fri Dec 05 08:20:32.020112 2025] [:error] [pid 53838:tid 53886] [client 66.249.64.101:40067] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIlUJ8M7CH_vMhLrzI8ugAAAFE"]
[Fri Dec 05 08:20:36.734768 2025] [:error] [pid 24010:tid 24015] [client 66.249.64.101:61112] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIlVKtjRoDpxa46mweGrQAAAQM"]
[Fri Dec 05 08:20:43.685513 2025] [:error] [pid 24010:tid 24034] [client 66.249.64.101:43993] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIlW6tjRoDpxa46mweG2QAAARY"]
[Fri Dec 05 08:20:47.493307 2025] [:error] [pid 53923:tid 53929] [client 66.249.64.101:60816] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIlX7l8ebZN0VCAVXBHBQAAAMQ"]
[Fri Dec 05 08:20:47.933656 2025] [:error] [pid 53837:tid 53854] [client 66.249.64.101:53377] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIlXzbsUyTxys8OiMJcNQAAAAw"]
[Fri Dec 05 08:23:32.061807 2025] [:error] [pid 24010:tid 24024] [client 66.249.64.101:57009] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTImBKtjRoDpxa46mweJfAAAAQw"]
[Fri Dec 05 08:26:57.347862 2025] [:error] [pid 53923:tid 53935] [client 66.249.64.101:37064] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIm0bl8ebZN0VCAVXBLBwAAAMo"]
[Fri Dec 05 08:27:38.917614 2025] [:error] [pid 24010:tid 24034] [client 66.249.64.101:44244] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIm-qtjRoDpxa46mweMIgAAARY"]
[Fri Dec 05 08:27:45.000768 2025] [:error] [pid 53839:tid 53905] [client 66.249.64.101:45728] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTInAKQOuERg_RN7bn_HSgAAAIk"]
[Fri Dec 05 08:30:08.274261 2025] [:error] [pid 53839:tid 53912] [client 66.249.64.101:55617] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTInkKQOuERg_RN7bn_I1QAAAJA"]
[Fri Dec 05 08:30:08.938849 2025] [:error] [pid 24010:tid 24035] [client 66.249.64.101:52260] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTInkKtjRoDpxa46mweOUwAAARc"]
[Fri Dec 05 08:30:15.705385 2025] [:error] [pid 53837:tid 53846] [client 66.249.64.101:62022] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTInlzbsUyTxys8OiMJf9wAAAAQ"]
[Fri Dec 05 08:30:23.715533 2025] [:error] [pid 24010:tid 24023] [client 66.249.64.101:53572] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTInn6tjRoDpxa46mweOrwAAAQs"]
[Fri Dec 05 09:20:43.592015 2025] [:error] [pid 53838:tid 53879] [client 66.249.64.101:40841] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIza58M7CH_vMhLrzJVBwAAAEo"]
[Fri Dec 05 09:20:48.807635 2025] [:error] [pid 53837:tid 53843] [client 66.249.64.101:48772] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIzcDbsUyTxys8OiMJzpQAAAAE"]
[Fri Dec 05 09:20:51.665351 2025] [:error] [pid 53923:tid 53928] [client 66.249.64.101:55416] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIzc7l8ebZN0VCAVXBj3AAAAMM"]
[Fri Dec 05 09:21:07.308287 2025] [:error] [pid 35173:tid 35182] [client 66.249.64.101:44524] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIzgzLwYloPE6LF3uBFogAAAUc"]
[Fri Dec 05 09:21:40.422318 2025] [:error] [pid 53838:tid 53886] [client 66.249.64.101:44027] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTIzpJ8M7CH_vMhLrzJVPgAAAFE"]
[Fri Dec 05 10:08:31.640683 2025] [:error] [pid 53839:tid 53910] [client 66.249.64.101:44540] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTI-n6QOuERg_RN7bn_yxAAAAI4"]
[Fri Dec 05 10:08:39.425441 2025] [:error] [pid 53923:tid 53941] [client 66.249.64.101:36825] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTI-p7l8ebZN0VCAVXB39wAAANA"]
[Fri Dec 05 10:08:42.050040 2025] [:error] [pid 62720:tid 62732] [client 66.249.64.101:35320] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTI-qmDTJuF6xQ5UsINyAgAAAYo"]
[Fri Dec 05 10:08:53.128794 2025] [:error] [pid 53838:tid 53879] [client 66.249.64.101:40284] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTI-tZ8M7CH_vMhLrzJn7AAAAEo"]
[Fri Dec 05 10:20:18.757127 2025] [:error] [pid 53839:tid 53913] [client 182.44.2.148:40769] [client 182.44.2.148] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||paramountbaldivis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTJBYqQOuERg_RN7bn_4pwAAAJE"]
[Fri Dec 05 10:26:15.523693 2025] [:error] [pid 62720:tid 62733] [client 54.213.194.96:44560] [client 54.213.194.96] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.paramountbaldivis.com"] [uri "/.git/"] [unique_id "aTJCx2DTJuF6xQ5UsIN4vAAAAYs"]
[Fri Dec 05 10:26:16.438491 2025] [:error] [pid 62720:tid 62739] [client 54.213.194.96:44570] [client 54.213.194.96] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.paramountbaldivis.com"] [uri "/.git/HEAD"] [unique_id "aTJCyGDTJuF6xQ5UsIN4vQAAAZE"]
[Fri Dec 05 10:26:24.548469 2025] [:error] [pid 53838:tid 53882] [client 44.244.220.33:42738] [client 44.244.220.33] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paramountbaldivis.com"] [uri "/.git/"] [unique_id "aTJC0J8M7CH_vMhLrzJuDgAAAE0"]
[Fri Dec 05 10:26:25.276728 2025] [:error] [pid 62720:tid 62731] [client 44.244.220.33:42748] [client 44.244.220.33] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paramountbaldivis.com"] [uri "/.git/HEAD"] [unique_id "aTJC0WDTJuF6xQ5UsIN4xQAAAYk"]
[Fri Dec 05 10:40:54.930309 2025] [:error] [pid 24010:tid 24030] [client 66.249.64.101:41537] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTJGNqtjRoDpxa46mwfMNwAAARI"]
[Fri Dec 05 10:45:33.492518 2025] [:error] [pid 53838:tid 53892] [client 66.249.64.101:54820] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTJHTZ8M7CH_vMhLrzJ4kwAAAFc"]
[Fri Dec 05 10:52:10.706297 2025] [:error] [pid 53837:tid 53863] [client 66.249.64.101:45540] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTJI2jbsUyTxys8OiMKUNAAAABU"]
[Fri Dec 05 10:52:31.676963 2025] [:error] [pid 53923:tid 53941] [client 66.249.64.101:40421] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTJI77l8ebZN0VCAVXCVDQAAANA"]
[Fri Dec 05 10:52:52.955904 2025] [:error] [pid 53839:tid 53901] [client 66.249.64.101:65235] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTJJBKQOuERg_RN7bn8I_QAAAIU"]
[Fri Dec 05 11:02:07.121752 2025] [:error] [pid 24010:tid 24028] [client 66.249.64.101:61161] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTJLL6tjRoDpxa46mwfULgAAARA"]
[Fri Dec 05 11:02:09.893755 2025] [:error] [pid 24010:tid 24020] [client 66.249.64.101:62470] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTJLMatjRoDpxa46mwfUMQAAAQg"]
[Fri Dec 05 11:02:15.097888 2025] [:error] [pid 62720:tid 62727] [client 66.249.64.101:56116] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTJLN2DTJuF6xQ5UsIOHrQAAAYU"]
[Fri Dec 05 11:02:18.618501 2025] [:error] [pid 53837:tid 53865] [client 66.249.64.101:50145] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTJLOjbsUyTxys8OiMKXsgAAABc"]
[Fri Dec 05 11:02:25.372676 2025] [:error] [pid 24010:tid 24035] [client 66.249.64.101:48904] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTJLQatjRoDpxa46mwfUPgAAARc"]
[Fri Dec 05 11:02:30.796641 2025] [:error] [pid 62720:tid 62736] [client 66.249.64.101:41278] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTJLRmDTJuF6xQ5UsIOHwQAAAY4"]
[Fri Dec 05 11:02:31.525776 2025] [:error] [pid 53839:tid 53918] [client 66.249.64.101:41179] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTJLR6QOuERg_RN7bn8NPgAAAJY"]
[Fri Dec 05 11:02:33.676304 2025] [:error] [pid 24010:tid 24015] [client 66.249.64.101:48476] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTJLSatjRoDpxa46mwfURwAAAQM"]
[Fri Dec 05 11:02:38.953439 2025] [:error] [pid 24010:tid 24021] [client 66.249.64.101:47283] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTJLTqtjRoDpxa46mwfUVwAAAQk"]
[Fri Dec 05 11:02:40.020054 2025] [:error] [pid 53923:tid 53926] [client 66.249.64.101:59944] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTJLULl8ebZN0VCAVXCa7AAAAME"]
[Fri Dec 05 11:02:54.991706 2025] [:error] [pid 24010:tid 24020] [client 66.249.64.101:51352] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTJLXqtjRoDpxa46mwfUZQAAAQg"]
[Fri Dec 05 11:02:55.829736 2025] [:error] [pid 53923:tid 53930] [client 66.249.64.101:41409] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTJLX7l8ebZN0VCAVXCbCwAAAMU"]
[Fri Dec 05 11:02:56.103525 2025] [:error] [pid 53839:tid 53913] [client 66.249.64.101:56629] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTJLYKQOuERg_RN7bn8NYAAAAJE"]
[Fri Dec 05 11:04:32.254719 2025] [:error] [pid 53839:tid 53897] [client 66.249.64.101:56629] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTJLwKQOuERg_RN7bn8NrgAAAIE"]
[Fri Dec 05 11:04:43.733704 2025] [:error] [pid 53923:tid 53937] [client 66.249.64.101:42548] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTJLy7l8ebZN0VCAVXCb8AAAAMw"]
[Fri Dec 05 11:04:46.446276 2025] [:error] [pid 62720:tid 62723] [client 66.249.64.101:36440] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTJLzmDTJuF6xQ5UsIOIhAAAAYE"]
[Fri Dec 05 11:04:54.174159 2025] [:error] [pid 35173:tid 35191] [client 66.249.64.101:62687] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTJL1jLwYloPE6LF3uB0qwAAAU8"]
[Fri Dec 05 11:05:08.957733 2025] [:error] [pid 35173:tid 35198] [client 66.249.64.101:38745] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTJL5DLwYloPE6LF3uB0sAAAAVY"]
[Fri Dec 05 11:05:09.893199 2025] [:error] [pid 53923:tid 53944] [client 66.249.64.101:46897] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTJL5bl8ebZN0VCAVXCcHgAAANM"]
[Fri Dec 05 11:05:15.666608 2025] [:error] [pid 62720:tid 62734] [client 66.249.64.101:64424] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTJL62DTJuF6xQ5UsIOIngAAAYw"]
[Fri Dec 05 11:05:26.881824 2025] [:error] [pid 24010:tid 24026] [client 66.249.64.101:55739] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTJL9qtjRoDpxa46mwfVAwAAAQ4"]
[Fri Dec 05 11:06:46.337343 2025] [:error] [pid 35173:tid 35176] [client 66.249.64.101:50111] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTJMRjLwYloPE6LF3uB1JgAAAUE"]
[Fri Dec 05 11:06:51.066227 2025] [:error] [pid 62720:tid 62737] [client 66.249.64.101:41518] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTJMS2DTJuF6xQ5UsIOJCwAAAY8"]
[Fri Dec 05 11:06:52.825741 2025] [:error] [pid 24010:tid 24029] [client 66.249.64.101:50189] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTJMTKtjRoDpxa46mwfVVQAAARE"]
[Fri Dec 05 11:06:57.378629 2025] [:error] [pid 53923:tid 53930] [client 66.249.64.101:52550] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTJMUbl8ebZN0VCAVXCc0wAAAMU"]
[Fri Dec 05 11:06:58.757758 2025] [:error] [pid 62720:tid 62725] [client 66.249.64.101:54818] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTJMUmDTJuF6xQ5UsIOJEwAAAYM"]
[Fri Dec 05 11:07:08.135171 2025] [:error] [pid 62720:tid 62723] [client 66.249.64.101:51125] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTJMXGDTJuF6xQ5UsIOJFwAAAYE"]
[Fri Dec 05 11:07:09.786763 2025] [:error] [pid 24010:tid 24021] [client 66.249.64.101:40550] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTJMXatjRoDpxa46mwfVYAAAAQk"]
[Fri Dec 05 11:07:11.877019 2025] [:error] [pid 24010:tid 24013] [client 66.249.64.101:36538] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTJMX6tjRoDpxa46mwfVYgAAAQE"]
[Fri Dec 05 11:07:19.055634 2025] [:error] [pid 53837:tid 53855] [client 66.249.64.101:40284] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTJMZzbsUyTxys8OiMKYqQAAAA0"]
[Fri Dec 05 11:07:24.021707 2025] [:error] [pid 53923:tid 53935] [client 66.249.64.101:59780] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTJMbLl8ebZN0VCAVXCdFgAAAMo"]
[Fri Dec 05 11:07:25.108641 2025] [:error] [pid 53923:tid 53942] [client 66.249.64.101:63884] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTJMbbl8ebZN0VCAVXCdGwAAANE"]
[Fri Dec 05 11:07:29.984327 2025] [:error] [pid 53838:tid 53872] [client 66.249.64.101:65070] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTJMcZ8M7CH_vMhLrzJ-4AAAAEM"]
[Fri Dec 05 11:07:37.430831 2025] [:error] [pid 53923:tid 53925] [client 66.249.64.101:62309] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTJMebl8ebZN0VCAVXCdTQAAAMA"]
[Fri Dec 05 11:07:39.261327 2025] [:error] [pid 53837:tid 53853] [client 66.249.64.101:62973] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTJMezbsUyTxys8OiMKYuQAAAAs"]
[Fri Dec 05 11:13:16.813698 2025] [:error] [pid 35173:tid 35175] [client 66.249.64.101:51661] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTJNzDLwYloPE6LF3uB3gQAAAUA"]
[Fri Dec 05 11:13:24.510636 2025] [:error] [pid 53923:tid 53931] [client 66.249.64.101:57070] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTJN1Ll8ebZN0VCAVXCikQAAAMY"]
[Fri Dec 05 11:13:31.425617 2025] [:error] [pid 53837:tid 53853] [client 66.249.64.101:51178] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTJN2zbsUyTxys8OiMKamAAAAAs"]
[Fri Dec 05 11:13:32.409085 2025] [:error] [pid 53837:tid 53852] [client 66.249.64.101:50439] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTJN3DbsUyTxys8OiMKamQAAAAo"]
[Fri Dec 05 11:13:37.533039 2025] [:error] [pid 35173:tid 35181] [client 66.249.64.101:41974] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTJN4TLwYloPE6LF3uB3lgAAAUY"]
[Fri Dec 05 11:18:31.655244 2025] [:error] [pid 53838:tid 53875] [client 66.249.64.101:63078] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTJPB58M7CH_vMhLrzKDNgAAAEY"]
[Fri Dec 05 11:32:44.866609 2025] [:error] [pid 62720:tid 62736] [client 66.249.64.101:41490] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTJSXGDTJuF6xQ5UsIOSoQAAAY4"]
[Fri Dec 05 11:33:00.465651 2025] [:error] [pid 24010:tid 24025] [client 66.249.64.101:43584] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTJSbKtjRoDpxa46mwfewAAAAQ0"]
[Fri Dec 05 11:33:05.111170 2025] [:error] [pid 53839:tid 53910] [client 66.249.64.101:61132] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTJScaQOuERg_RN7bn8Z6gAAAI4"]
[Fri Dec 05 11:33:06.145465 2025] [:error] [pid 35173:tid 35177] [client 66.249.64.101:47785] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTJScjLwYloPE6LF3uB7_AAAAUI"]
[Fri Dec 05 11:33:17.576476 2025] [:error] [pid 62720:tid 62743] [client 66.249.64.101:62177] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTJSfWDTJuF6xQ5UsIOS0QAAAZU"]
[Fri Dec 05 11:33:18.201426 2025] [:error] [pid 53839:tid 53906] [client 66.249.64.101:46497] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTJSfqQOuERg_RN7bn8Z-QAAAIo"]
[Fri Dec 05 11:33:34.484349 2025] [:error] [pid 35173:tid 35199] [client 66.249.64.101:43313] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTJSjjLwYloPE6LF3uB8CwAAAVc"]
[Fri Dec 05 11:33:36.376671 2025] [:error] [pid 62720:tid 62746] [client 66.249.64.101:44742] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTJSkGDTJuF6xQ5UsIOS4AAAAZg"]
[Fri Dec 05 11:35:30.869954 2025] [:error] [pid 53923:tid 53930] [client 66.249.64.101:40060] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTJTArl8ebZN0VCAVXCuKAAAAMU"]
[Fri Dec 05 11:35:32.688963 2025] [:error] [pid 24010:tid 24024] [client 66.249.64.101:46731] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTJTBKtjRoDpxa46mwffvAAAAQw"]
[Fri Dec 05 11:35:39.298095 2025] [:error] [pid 53923:tid 53948] [client 66.249.64.101:55489] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTJTC7l8ebZN0VCAVXCuNAAAANc"]
[Fri Dec 05 11:35:39.665677 2025] [:error] [pid 53923:tid 53942] [client 66.249.64.101:65235] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTJTC7l8ebZN0VCAVXCuNwAAANE"]
[Fri Dec 05 11:35:41.398240 2025] [:error] [pid 53923:tid 53929] [client 66.249.64.101:35172] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTJTDbl8ebZN0VCAVXCuOwAAAMQ"]
[Fri Dec 05 11:35:51.715672 2025] [:error] [pid 35173:tid 35177] [client 66.249.64.101:38282] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTJTFzLwYloPE6LF3uB8swAAAUI"]
[Fri Dec 05 11:35:53.355206 2025] [:error] [pid 35173:tid 35197] [client 66.249.64.101:46164] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTJTGTLwYloPE6LF3uB8tQAAAVU"]
[Fri Dec 05 11:35:59.625391 2025] [:error] [pid 53923:tid 53929] [client 66.249.64.101:55001] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTJTH7l8ebZN0VCAVXCuSwAAAMQ"]
[Fri Dec 05 11:36:02.091280 2025] [:error] [pid 62720:tid 62732] [client 66.249.64.101:63713] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTJTImDTJuF6xQ5UsIOTkAAAAYo"]
[Fri Dec 05 11:36:11.459099 2025] [:error] [pid 53839:tid 53905] [client 66.249.64.101:36115] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTJTK6QOuERg_RN7bn8cKwAAAIk"]
[Fri Dec 05 11:38:03.548785 2025] [:error] [pid 62720:tid 62734] [client 66.249.64.101:53943] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTJTm2DTJuF6xQ5UsIOUewAAAYw"]
[Fri Dec 05 11:38:17.116193 2025] [:error] [pid 53837:tid 53851] [client 66.249.64.101:43111] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTJTqTbsUyTxys8OiMKh7gAAAAk"]
[Fri Dec 05 11:38:25.038683 2025] [:error] [pid 53923:tid 53946] [client 66.249.64.101:57372] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTJTsbl8ebZN0VCAVXCv3wAAANU"]
[Fri Dec 05 11:38:36.195169 2025] [:error] [pid 53839:tid 53910] [client 66.249.64.101:52234] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTJTvKQOuERg_RN7bn8dBQAAAI4"]
[Fri Dec 05 11:38:39.079059 2025] [:error] [pid 35173:tid 35175] [client 66.249.64.101:38152] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTJTvzLwYloPE6LF3uB9rgAAAUA"]
[Fri Dec 05 11:38:45.309060 2025] [:error] [pid 53923:tid 53928] [client 66.249.64.101:48313] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTJTxbl8ebZN0VCAVXCwIAAAAMM"]
[Fri Dec 05 11:40:21.209025 2025] [:error] [pid 53837:tid 53849] [client 66.249.64.101:43422] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTJUJTbsUyTxys8OiMKihgAAAAc"]
[Fri Dec 05 11:40:28.281111 2025] [:error] [pid 62720:tid 62724] [client 66.249.64.101:57748] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTJULGDTJuF6xQ5UsIOVfwAAAYI"]
[Fri Dec 05 11:40:30.312727 2025] [:error] [pid 53838:tid 53891] [client 66.249.64.101:55403] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTJULp8M7CH_vMhLrzKKzQAAAFY"]
[Fri Dec 05 11:40:40.487995 2025] [:error] [pid 24010:tid 24032] [client 66.249.64.101:36037] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTJUOKtjRoDpxa46mwfhNAAAARQ"]
[Fri Dec 05 11:40:42.067945 2025] [:error] [pid 53838:tid 53883] [client 66.249.64.101:56693] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTJUOp8M7CH_vMhLrzKK5QAAAE4"]
[Fri Dec 05 11:40:49.585457 2025] [:error] [pid 53839:tid 53898] [client 66.249.64.101:44259] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTJUQaQOuERg_RN7bn8d9QAAAII"]
[Fri Dec 05 11:41:02.541793 2025] [:error] [pid 53838:tid 53884] [client 66.249.64.101:34851] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTJUTp8M7CH_vMhLrzKK-gAAAE8"]
[Fri Dec 05 11:45:19.412288 2025] [:error] [pid 53839:tid 53901] [client 66.249.64.101:64863] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTJVT6QOuERg_RN7bn8fhgAAAIU"]
[Fri Dec 05 11:45:39.359999 2025] [:error] [pid 62720:tid 62724] [client 66.249.64.101:39603] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTJVY2DTJuF6xQ5UsIOXwAAAAYI"]
[Fri Dec 05 11:45:50.352723 2025] [:error] [pid 35173:tid 35196] [client 66.249.64.101:49077] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTJVbjLwYloPE6LF3uB_eAAAAVQ"]
[Fri Dec 05 13:38:35.761506 2025] [:error] [pid 53839:tid 53896] [client 66.249.64.101:51379] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTJv26QOuERg_RN7bn9OXwAAAIA"]
[Fri Dec 05 13:38:38.295161 2025] [:error] [pid 53923:tid 53944] [client 66.249.64.101:50678] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTJv3rl8ebZN0VCAVXDsWgAAANM"]
[Fri Dec 05 13:38:42.238312 2025] [:error] [pid 53923:tid 53926] [client 66.249.64.101:60150] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTJv4rl8ebZN0VCAVXDsZwAAAME"]
[Fri Dec 05 13:38:45.553985 2025] [:error] [pid 53838:tid 53889] [client 66.249.64.101:38701] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTJv5Z8M7CH_vMhLrzKtQAAAAFQ"]
[Fri Dec 05 13:38:48.920972 2025] [:error] [pid 53838:tid 53881] [client 66.249.64.101:58507] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTJv6J8M7CH_vMhLrzKtQwAAAEw"]
[Fri Dec 05 13:38:50.205771 2025] [:error] [pid 53837:tid 53853] [client 66.249.64.101:63450] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTJv6jbsUyTxys8OiMLB_QAAAAs"]
[Fri Dec 05 13:38:51.767067 2025] [:error] [pid 53923:tid 53944] [client 66.249.64.101:41633] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTJv67l8ebZN0VCAVXDscAAAANM"]
[Fri Dec 05 13:38:53.415780 2025] [:error] [pid 24010:tid 24029] [client 66.249.64.101:63312] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTJv7atjRoDpxa46mwcDIgAAARE"]
[Fri Dec 05 13:38:55.747285 2025] [:error] [pid 35173:tid 35183] [client 66.249.64.101:56931] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTJv7zLwYloPE6LF3uCduQAAAUg"]
[Fri Dec 05 13:38:57.688651 2025] [:error] [pid 53837:tid 53852] [client 66.249.64.101:58702] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTJv8TbsUyTxys8OiMLCAQAAAAo"]
[Fri Dec 05 13:38:59.390880 2025] [:error] [pid 24010:tid 24035] [client 66.249.64.101:51250] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTJv86tjRoDpxa46mwcDKAAAARc"]
[Fri Dec 05 13:39:07.947467 2025] [:error] [pid 53923:tid 53939] [client 66.249.64.101:55469] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTJv-7l8ebZN0VCAVXDsfwAAAM4"]
[Fri Dec 05 13:39:12.185149 2025] [:error] [pid 35173:tid 35198] [client 66.249.64.101:55278] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTJwADLwYloPE6LF3uCdwQAAAVY"]
[Fri Dec 05 13:39:14.304269 2025] [:error] [pid 24010:tid 24028] [client 66.249.64.101:44162] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTJwAqtjRoDpxa46mwcDMwAAARA"]
[Fri Dec 05 13:39:15.812915 2025] [:error] [pid 35173:tid 35197] [client 66.249.64.101:58298] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTJwAzLwYloPE6LF3uCdxQAAAVU"]
[Fri Dec 05 13:39:17.511032 2025] [:error] [pid 24010:tid 24021] [client 66.249.64.101:52691] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTJwBatjRoDpxa46mwcDNwAAAQk"]
[Fri Dec 05 13:39:17.782959 2025] [:error] [pid 53923:tid 53941] [client 66.249.64.101:53127] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTJwBbl8ebZN0VCAVXDsiwAAANA"]
[Fri Dec 05 13:39:18.718531 2025] [:error] [pid 53839:tid 53901] [client 66.249.64.101:51043] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTJwBqQOuERg_RN7bn9OkQAAAIU"]
[Fri Dec 05 13:39:20.927126 2025] [:error] [pid 53837:tid 53851] [client 66.249.64.101:55524] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTJwCDbsUyTxys8OiMLCEgAAAAk"]
[Fri Dec 05 13:39:23.407921 2025] [:error] [pid 53838:tid 53880] [client 66.249.64.101:48241] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTJwC58M7CH_vMhLrzKtVgAAAEs"]
[Fri Dec 05 13:39:24.204833 2025] [:error] [pid 53923:tid 53944] [client 66.249.64.101:49531] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTJwDLl8ebZN0VCAVXDsmgAAANM"]
[Fri Dec 05 13:39:27.129564 2025] [:error] [pid 24010:tid 24017] [client 66.249.64.101:60655] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTJwD6tjRoDpxa46mwcDPgAAAQU"]
[Fri Dec 05 14:36:11.472715 2025] [:error] [pid 35173:tid 35183] [client 149.248.45.176:53762] [client 149.248.45.176] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 149.248.45.176, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTJ9WzLwYloPE6LF3uCuRwAAAUg"]
[Fri Dec 05 14:36:16.323603 2025] [:error] [pid 35173:tid 35194] [client 149.248.45.176:53762] [client 149.248.45.176] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 149.248.45.176, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTJ9YDLwYloPE6LF3uCuTgAAAVI"]
[Fri Dec 05 14:54:43.875087 2025] [:error] [pid 62720:tid 62723] [client 66.249.64.101:36479] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKBs2DTJuF6xQ5UsIPXMgAAAYE"]
[Fri Dec 05 14:54:57.457199 2025] [:error] [pid 53837:tid 53863] [client 66.249.64.101:46329] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKBwTbsUyTxys8OiMLXQAAAABU"]
[Fri Dec 05 14:55:07.606679 2025] [:error] [pid 53839:tid 53907] [client 66.249.64.101:64145] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKBy6QOuERg_RN7bn9tuwAAAIs"]
[Fri Dec 05 14:55:29.669127 2025] [:error] [pid 53838:tid 53889] [client 66.249.64.101:36380] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKB4Z8M7CH_vMhLrzLEMAAAAFQ"]
[Fri Dec 05 14:57:56.355646 2025] [:error] [pid 53923:tid 53938] [client 66.249.64.101:62667] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKCdLl8ebZN0VCAVXAYJgAAAM0"]
[Fri Dec 05 14:58:26.645635 2025] [:error] [pid 53923:tid 53934] [client 66.249.64.101:40721] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKCkrl8ebZN0VCAVXAYTgAAAMk"]
[Fri Dec 05 14:58:35.058945 2025] [:error] [pid 53923:tid 53935] [client 66.249.64.101:46509] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKCm7l8ebZN0VCAVXAYUwAAAMo"]
[Fri Dec 05 15:01:07.977982 2025] [:error] [pid 53923:tid 53944] [client 66.249.64.101:48366] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKDM7l8ebZN0VCAVXAY0wAAANM"]
[Fri Dec 05 15:01:17.327488 2025] [:error] [pid 53923:tid 53931] [client 66.249.64.101:55016] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKDPbl8ebZN0VCAVXAY4wAAAMY"]
[Fri Dec 05 15:01:28.158042 2025] [:error] [pid 53839:tid 53896] [client 66.249.64.101:54386] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKDSKQOuERg_RN7bn9vTAAAAIA"]
[Fri Dec 05 15:01:36.613790 2025] [:error] [pid 24010:tid 24022] [client 66.249.64.101:38909] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKDUKtjRoDpxa46mwcZYgAAAQo"]
[Fri Dec 05 15:01:48.650136 2025] [:error] [pid 24010:tid 24013] [client 66.249.64.101:60877] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKDXKtjRoDpxa46mwcZZgAAAQE"]
[Fri Dec 05 15:03:57.691192 2025] [:error] [pid 53839:tid 53904] [client 66.249.64.101:39461] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKD3aQOuERg_RN7bn9weAAAAIg"]
[Fri Dec 05 15:04:06.522663 2025] [:error] [pid 62720:tid 62737] [client 66.249.64.101:52027] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKD5mDTJuF6xQ5UsIPZbgAAAY8"]
[Fri Dec 05 15:04:20.932941 2025] [:error] [pid 24010:tid 24027] [client 66.249.64.101:35933] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKD9KtjRoDpxa46mwcagAAAAQ8"]
[Fri Dec 05 15:04:28.605516 2025] [:error] [pid 53923:tid 53925] [client 66.249.64.101:41912] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKD_Ll8ebZN0VCAVXAaIwAAAMA"]
[Fri Dec 05 15:04:38.472487 2025] [:error] [pid 24010:tid 24023] [client 66.249.64.101:39932] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKEBqtjRoDpxa46mwcamwAAAQs"]
[Fri Dec 05 15:04:43.258368 2025] [:error] [pid 53839:tid 53900] [client 66.249.64.101:65389] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKEC6QOuERg_RN7bn9wrQAAAIQ"]
[Fri Dec 05 15:06:01.370193 2025] [:error] [pid 62720:tid 62740] [client 66.249.64.101:53322] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKEWWDTJuF6xQ5UsIPZ5wAAAZI"]
[Fri Dec 05 15:06:07.858697 2025] [:error] [pid 53923:tid 53925] [client 66.249.64.101:64876] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKEX7l8ebZN0VCAVXAaqgAAAMA"]
[Fri Dec 05 15:06:10.104570 2025] [:error] [pid 24010:tid 24016] [client 66.249.64.101:52470] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKEYqtjRoDpxa46mwca_wAAAQQ"]
[Fri Dec 05 15:06:15.428274 2025] [:error] [pid 62720:tid 62743] [client 66.249.64.101:46056] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKEZ2DTJuF6xQ5UsIPZ-AAAAZU"]
[Fri Dec 05 15:06:21.683387 2025] [:error] [pid 53837:tid 53861] [client 66.249.64.101:52408] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKEbTbsUyTxys8OiMLZuQAAABM"]
[Fri Dec 05 15:06:29.674507 2025] [:error] [pid 53923:tid 53933] [client 66.249.64.101:38108] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKEdbl8ebZN0VCAVXAawQAAAMg"]
[Fri Dec 05 15:06:38.537769 2025] [:error] [pid 53837:tid 53856] [client 66.249.64.101:40497] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKEfjbsUyTxys8OiMLZxQAAAA4"]
[Fri Dec 05 15:06:48.480514 2025] [:error] [pid 53837:tid 53856] [client 66.249.64.101:58771] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKEiDbsUyTxys8OiMLZzQAAAA4"]
[Fri Dec 05 15:08:33.041140 2025] [:error] [pid 53923:tid 53938] [client 66.249.64.101:63533] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKE8bl8ebZN0VCAVXAbZwAAAM0"]
[Fri Dec 05 15:08:40.658213 2025] [:error] [pid 53839:tid 53906] [client 66.249.64.101:58441] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKE-KQOuERg_RN7bn9x8AAAAIo"]
[Fri Dec 05 15:08:47.258049 2025] [:error] [pid 53838:tid 53877] [client 66.249.64.101:59359] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKE_58M7CH_vMhLrzLGtwAAAEg"]
[Fri Dec 05 15:08:52.974707 2025] [:error] [pid 53839:tid 53920] [client 66.249.64.101:42516] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKFBKQOuERg_RN7bn9yBAAAAJg"]
[Fri Dec 05 15:09:01.113706 2025] [:error] [pid 62720:tid 62736] [client 66.249.64.101:42603] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKFDWDTJuF6xQ5UsIParQAAAY4"]
[Fri Dec 05 15:09:09.062779 2025] [:error] [pid 53838:tid 53877] [client 66.249.64.101:43109] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKFFZ8M7CH_vMhLrzLGzQAAAEg"]
[Fri Dec 05 15:09:14.561864 2025] [:error] [pid 35173:tid 35199] [client 66.249.64.101:64849] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKFGjLwYloPE6LF3uC1VAAAAVc"]
[Fri Dec 05 15:09:20.847294 2025] [:error] [pid 24010:tid 24015] [client 66.249.64.101:62268] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKFIKtjRoDpxa46mwcblAAAAQM"]
[Fri Dec 05 15:10:54.926838 2025] [:error] [pid 24010:tid 24030] [client 66.249.64.101:41321] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKFfqtjRoDpxa46mwccMQAAARI"]
[Fri Dec 05 15:11:02.744889 2025] [:error] [pid 53923:tid 53930] [client 66.249.64.101:64508] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKFhrl8ebZN0VCAVXAcggAAAMU"]
[Fri Dec 05 15:11:18.128455 2025] [:error] [pid 53838:tid 53879] [client 66.249.64.101:60870] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKFlp8M7CH_vMhLrzLHOgAAAEo"]
[Fri Dec 05 15:11:24.116059 2025] [:error] [pid 62720:tid 62732] [client 66.249.64.101:52366] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKFnGDTJuF6xQ5UsIPbVQAAAYo"]
[Fri Dec 05 15:11:30.062299 2025] [:error] [pid 53837:tid 53853] [client 66.249.64.101:49496] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKFojbsUyTxys8OiMLa2wAAAAs"]
[Fri Dec 05 15:11:37.119065 2025] [:error] [pid 62720:tid 62724] [client 66.249.64.101:55066] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKFqWDTJuF6xQ5UsIPbXgAAAYI"]
[Fri Dec 05 15:11:42.230203 2025] [:error] [pid 53839:tid 53917] [client 66.249.64.101:46633] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKFrqQOuERg_RN7bn9zTgAAAJU"]
[Fri Dec 05 15:13:06.169582 2025] [:error] [pid 24010:tid 24030] [client 66.249.64.101:35235] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKGAqtjRoDpxa46mwccngAAARI"]
[Fri Dec 05 15:13:13.386180 2025] [:error] [pid 53923:tid 53933] [client 66.249.64.101:52444] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKGCbl8ebZN0VCAVXAdLAAAAMg"]
[Fri Dec 05 16:37:07.037227 2025] [:error] [pid 53838:tid 53870] [client 66.249.64.101:49100] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKZs58M7CH_vMhLrzLcOwAAAEE"]
[Fri Dec 05 16:37:11.551783 2025] [:error] [pid 53923:tid 53937] [client 66.249.64.101:56964] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKZt7l8ebZN0VCAVXBAdQAAAMw"]
[Fri Dec 05 16:37:14.876124 2025] [:error] [pid 53839:tid 53909] [client 66.249.64.101:60880] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKZuqQOuERg_RN7bn-PNgAAAI0"]
[Fri Dec 05 16:37:26.298419 2025] [:error] [pid 24010:tid 24012] [client 66.249.64.101:64208] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKZxqtjRoDpxa46mwcxGQAAAQA"]
[Fri Dec 05 16:37:30.886715 2025] [:error] [pid 53838:tid 53881] [client 66.249.64.101:43595] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKZyp8M7CH_vMhLrzLcWQAAAEw"]
[Fri Dec 05 16:37:35.748930 2025] [:error] [pid 35173:tid 35187] [client 66.249.64.101:61909] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKZzzLwYloPE6LF3uDIRQAAAUs"]
[Fri Dec 05 16:37:39.981183 2025] [:error] [pid 53839:tid 53911] [client 66.249.64.101:46187] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKZ06QOuERg_RN7bn-PUAAAAI8"]
[Fri Dec 05 16:37:46.408071 2025] [:error] [pid 53838:tid 53885] [client 66.249.64.101:55988] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKZ2p8M7CH_vMhLrzLcswAAAFA"]
[Fri Dec 05 16:37:52.461994 2025] [:error] [pid 53839:tid 53896] [client 66.249.64.101:44911] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKZ4KQOuERg_RN7bn-PVQAAAIA"]
[Fri Dec 05 16:37:59.691808 2025] [:error] [pid 53839:tid 53898] [client 66.249.64.101:40891] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKZ56QOuERg_RN7bn-PYAAAAII"]
[Fri Dec 05 16:39:16.237754 2025] [:error] [pid 35173:tid 35194] [client 66.249.64.101:65228] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKaNDLwYloPE6LF3uDIggAAAVI"]
[Fri Dec 05 16:39:22.746830 2025] [:error] [pid 62720:tid 62722] [client 66.249.64.101:37371] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKaOmDTJuF6xQ5UsIP1RQAAAYA"]
[Fri Dec 05 16:39:26.381506 2025] [:error] [pid 53837:tid 53845] [client 66.249.64.101:35694] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKaPjbsUyTxys8OiMLv4AAAAAM"]
[Fri Dec 05 16:39:33.423158 2025] [:error] [pid 53923:tid 53939] [client 66.249.64.101:56956] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKaRbl8ebZN0VCAVXBBjgAAAM4"]
[Fri Dec 05 16:39:38.034745 2025] [:error] [pid 24010:tid 24036] [client 66.249.64.101:62397] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKaSqtjRoDpxa46mwcx2QAAARg"]
[Fri Dec 05 16:39:41.213987 2025] [:error] [pid 53923:tid 53933] [client 66.249.64.101:41275] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKaTbl8ebZN0VCAVXBBkgAAAMg"]
[Fri Dec 05 16:39:48.667667 2025] [:error] [pid 53839:tid 53913] [client 66.249.64.101:51721] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKaVKQOuERg_RN7bn-PrgAAAJE"]
[Fri Dec 05 16:39:57.235810 2025] [:error] [pid 53839:tid 53898] [client 66.249.64.101:35418] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKaXaQOuERg_RN7bn-PsQAAAII"]
[Fri Dec 05 16:41:33.380810 2025] [:error] [pid 35173:tid 35176] [client 66.249.64.101:62381] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKavTLwYloPE6LF3uDIuAAAAUE"]
[Fri Dec 05 16:41:43.507618 2025] [:error] [pid 53839:tid 53918] [client 66.249.64.101:57147] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKax6QOuERg_RN7bn-P6AAAAJY"]
[Fri Dec 05 16:41:48.774688 2025] [:error] [pid 35173:tid 35198] [client 66.249.64.101:44756] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKazDLwYloPE6LF3uDIvwAAAVY"]
[Fri Dec 05 16:41:55.176708 2025] [:error] [pid 53837:tid 53843] [client 66.249.64.101:57153] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKa0zbsUyTxys8OiMLwXwAAAAE"]
[Fri Dec 05 16:42:01.228598 2025] [:error] [pid 53839:tid 53915] [client 66.249.64.101:52558] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKa2aQOuERg_RN7bn-P7gAAAJM"]
[Fri Dec 05 16:42:10.897062 2025] [:error] [pid 53839:tid 53910] [client 66.249.64.101:39022] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKa4qQOuERg_RN7bn-P8gAAAI4"]
[Fri Dec 05 16:42:21.507976 2025] [:error] [pid 53923:tid 53937] [client 66.249.64.101:46416] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKa7bl8ebZN0VCAVXBCLwAAAMw"]
[Fri Dec 05 16:43:36.599853 2025] [:error] [pid 53838:tid 53875] [client 66.249.64.101:50062] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKbOJ8M7CH_vMhLrzLduAAAAEY"]
[Fri Dec 05 16:43:41.605236 2025] [:error] [pid 53923:tid 53929] [client 66.249.64.101:46624] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKbPbl8ebZN0VCAVXBC7gAAAMQ"]
[Fri Dec 05 16:43:44.859255 2025] [:error] [pid 53923:tid 53939] [client 66.249.64.101:39565] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKbQLl8ebZN0VCAVXBC9gAAAM4"]
[Fri Dec 05 16:43:49.168051 2025] [:error] [pid 53838:tid 53877] [client 66.249.64.101:44074] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKbRZ8M7CH_vMhLrzLdywAAAEg"]
[Fri Dec 05 16:43:55.975816 2025] [:error] [pid 53839:tid 53904] [client 66.249.64.101:51381] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKbS6QOuERg_RN7bn-QegAAAIg"]
[Fri Dec 05 16:44:05.625870 2025] [:error] [pid 53839:tid 53917] [client 66.249.64.101:52784] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKbVaQOuERg_RN7bn-QhgAAAJU"]
[Fri Dec 05 16:44:18.262042 2025] [:error] [pid 53923:tid 53925] [client 66.249.64.101:36960] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKbYrl8ebZN0VCAVXBDSgAAAMA"]
[Fri Dec 05 16:44:26.472066 2025] [:error] [pid 62720:tid 62737] [client 66.249.64.101:57508] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKbamDTJuF6xQ5UsIP2HQAAAY8"]
[Fri Dec 05 16:47:19.331418 2025] [:error] [pid 35173:tid 35192] [client 66.249.64.101:45194] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKcFzLwYloPE6LF3uDJbwAAAVA"]
[Fri Dec 05 16:47:21.855154 2025] [:error] [pid 53838:tid 53871] [client 66.249.64.101:57197] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKcGZ8M7CH_vMhLrzLefwAAAEI"]
[Fri Dec 05 16:47:25.869351 2025] [:error] [pid 53923:tid 53949] [client 66.249.64.101:39784] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKcHbl8ebZN0VCAVXBFIwAAANg"]
[Fri Dec 05 16:47:34.252967 2025] [:error] [pid 53839:tid 53901] [client 66.249.64.101:43988] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKcJqQOuERg_RN7bn-RsAAAAIU"]
[Fri Dec 05 16:52:57.262609 2025] [:error] [pid 53837:tid 53855] [client 66.249.64.101:52757] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKdaTbsUyTxys8OiMLyUwAAAA0"]
[Fri Dec 05 16:53:01.468035 2025] [:error] [pid 62720:tid 62723] [client 66.249.64.101:52576] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKdbWDTJuF6xQ5UsIP4YQAAAYE"]
[Fri Dec 05 16:53:12.822540 2025] [:error] [pid 53923:tid 53928] [client 66.249.64.101:52586] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKdeLl8ebZN0VCAVXBH6wAAAMM"]
[Fri Dec 05 16:53:23.563188 2025] [:error] [pid 53837:tid 53866] [client 66.249.64.101:48714] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKdgzbsUyTxys8OiMLyewAAABg"]
[Fri Dec 05 16:53:30.142281 2025] [:error] [pid 53838:tid 53888] [client 66.249.64.101:52446] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKdip8M7CH_vMhLrzLgDwAAAFM"]
[Fri Dec 05 16:53:32.920054 2025] [:error] [pid 24010:tid 24034] [client 66.249.64.101:43226] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKdjKtjRoDpxa46mwc0nwAAARY"]
[Fri Dec 05 16:53:38.497941 2025] [:error] [pid 35173:tid 35176] [client 66.249.64.101:39001] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKdkjLwYloPE6LF3uDKkQAAAUE"]
[Fri Dec 05 16:53:44.513206 2025] [:error] [pid 24010:tid 24033] [client 66.249.64.101:52951] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKdmKtjRoDpxa46mwc0pgAAARU"]
[Fri Dec 05 16:54:57.417808 2025] [:error] [pid 53838:tid 53874] [client 66.249.64.101:64144] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKd4Z8M7CH_vMhLrzLghQAAAEU"]
[Fri Dec 05 16:55:20.049718 2025] [:error] [pid 53838:tid 53879] [client 66.249.64.101:35866] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKd-J8M7CH_vMhLrzLgkwAAAEo"]
[Fri Dec 05 16:55:23.102852 2025] [:error] [pid 53923:tid 53941] [client 66.249.64.101:57982] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKd-7l8ebZN0VCAVXBJHwAAANA"]
[Fri Dec 05 16:55:28.628610 2025] [:error] [pid 53838:tid 53890] [client 66.249.64.101:59841] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKeAJ8M7CH_vMhLrzLglwAAAFU"]
[Fri Dec 05 16:55:31.084657 2025] [:error] [pid 53923:tid 53940] [client 66.249.64.101:59320] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKeA7l8ebZN0VCAVXBJJgAAAM8"]
[Fri Dec 05 16:55:35.700186 2025] [:error] [pid 35173:tid 35195] [client 66.249.64.101:55609] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKeBzLwYloPE6LF3uDLGgAAAVM"]
[Fri Dec 05 16:55:39.167698 2025] [:error] [pid 53839:tid 53897] [client 66.249.64.101:60565] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKeC6QOuERg_RN7bn-UewAAAIE"]
[Fri Dec 05 16:55:45.710304 2025] [:error] [pid 62720:tid 62729] [client 66.249.64.101:57668] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKeEWDTJuF6xQ5UsIP5AAAAAYc"]
[Fri Dec 05 16:55:46.815078 2025] [:error] [pid 53838:tid 53888] [client 66.249.64.101:47719] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKeEp8M7CH_vMhLrzLgsgAAAFM"]
[Fri Dec 05 16:56:08.749685 2025] [:error] [pid 53839:tid 53907] [client 66.249.64.102:56698] [client 66.249.64.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKeKKQOuERg_RN7bn-UiAAAAIs"]
[Fri Dec 05 16:56:51.035841 2025] [:error] [pid 24010:tid 24030] [client 66.249.64.101:40535] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKeU6tjRoDpxa46mwc1zQAAARI"]
[Fri Dec 05 16:56:53.307312 2025] [:error] [pid 53839:tid 53903] [client 66.249.64.101:55295] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKeVaQOuERg_RN7bn-UxwAAAIc"]
[Fri Dec 05 16:56:57.338225 2025] [:error] [pid 53923:tid 53937] [client 66.249.64.101:42361] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKeWbl8ebZN0VCAVXBJvAAAAMw"]
[Fri Dec 05 16:56:59.995794 2025] [:error] [pid 53923:tid 53948] [client 66.249.64.101:63200] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKeW7l8ebZN0VCAVXBJwAAAANc"]
[Fri Dec 05 16:57:05.866492 2025] [:error] [pid 53837:tid 53866] [client 66.249.64.101:39057] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKeYTbsUyTxys8OiMLzmwAAABg"]
[Fri Dec 05 16:57:10.635069 2025] [:error] [pid 62720:tid 62738] [client 66.249.64.101:63608] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKeZmDTJuF6xQ5UsIP5cgAAAZA"]
[Fri Dec 05 16:57:14.568367 2025] [:error] [pid 53839:tid 53912] [client 66.249.64.101:39141] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKeaqQOuERg_RN7bn-U5wAAAJA"]
[Fri Dec 05 16:57:22.444211 2025] [:error] [pid 53839:tid 53918] [client 66.249.64.101:58250] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKecqQOuERg_RN7bn-U9gAAAJY"]
[Fri Dec 05 16:57:30.784335 2025] [:error] [pid 53837:tid 53842] [client 66.249.64.101:50438] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKeejbsUyTxys8OiMLzpgAAAAA"]
[Fri Dec 05 16:57:38.547169 2025] [:error] [pid 53837:tid 53858] [client 66.249.64.101:38720] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKegjbsUyTxys8OiMLzrgAAABA"]
[Fri Dec 05 16:57:42.234141 2025] [:error] [pid 53839:tid 53909] [client 66.249.64.101:40755] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKehqQOuERg_RN7bn-VCgAAAI0"]
[Fri Dec 05 16:58:44.791898 2025] [:error] [pid 62720:tid 62733] [client 66.249.64.101:44586] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKexGDTJuF6xQ5UsIP51QAAAYs"]
[Fri Dec 05 16:58:54.413166 2025] [:error] [pid 53923:tid 53942] [client 66.249.64.101:64262] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKezrl8ebZN0VCAVXBKvQAAANE"]
[Fri Dec 05 16:58:56.036329 2025] [:error] [pid 62720:tid 62724] [client 66.249.64.101:51962] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKe0GDTJuF6xQ5UsIP53QAAAYI"]
[Fri Dec 05 16:59:20.518962 2025] [:error] [pid 53839:tid 53915] [client 66.249.64.101:43968] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKe6KQOuERg_RN7bn-V0gAAAJM"]
[Fri Dec 05 16:59:24.312272 2025] [:error] [pid 24010:tid 24031] [client 66.249.64.101:64056] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKe7KtjRoDpxa46mwc2tAAAARM"]
[Fri Dec 05 16:59:26.590681 2025] [:error] [pid 53837:tid 53853] [client 66.249.64.101:57452] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKe7jbsUyTxys8OiML0KQAAAAs"]
[Fri Dec 05 16:59:33.210454 2025] [:error] [pid 53839:tid 53907] [client 66.249.64.101:63153] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKe9aQOuERg_RN7bn-WBgAAAIs"]
[Fri Dec 05 17:04:12.548840 2025] [:error] [pid 53923:tid 53925] [client 66.249.64.101:52066] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKgDLl8ebZN0VCAVXBM3gAAAMA"]
[Fri Dec 05 17:04:27.414240 2025] [:error] [pid 53839:tid 53920] [client 66.249.64.101:60023] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKgG6QOuERg_RN7bn-XlwAAAJg"]
[Fri Dec 05 17:04:37.692308 2025] [:error] [pid 24010:tid 24031] [client 66.249.64.101:43127] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKgJatjRoDpxa46mwc4KAAAARM"]
[Fri Dec 05 17:05:50.949950 2025] [:error] [pid 53839:tid 53903] [client 66.249.64.101:40507] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKgbqQOuERg_RN7bn-X8AAAAIc"]
[Fri Dec 05 17:05:57.706170 2025] [:error] [pid 35173:tid 35197] [client 66.249.64.101:36955] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKgdTLwYloPE6LF3uDNJgAAAVU"]
[Fri Dec 05 17:06:07.837034 2025] [:error] [pid 62720:tid 62743] [client 66.249.64.101:52634] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKgf2DTJuF6xQ5UsIP7yQAAAZU"]
[Fri Dec 05 17:06:17.709457 2025] [:error] [pid 53839:tid 53903] [client 66.249.64.101:57384] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKgiaQOuERg_RN7bn-YEwAAAIc"]
[Fri Dec 05 17:06:18.040329 2025] [:error] [pid 53839:tid 53910] [client 176.65.132.18:58504] [client 176.65.132.18] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paramountbaldivis.com"] [uri "/.git/config"] [unique_id "aTKgiqQOuERg_RN7bn-YFQAAAI4"]
[Fri Dec 05 17:06:27.262854 2025] [:error] [pid 53923:tid 53948] [client 66.249.64.101:42765] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKgk7l8ebZN0VCAVXBNaAAAANc"]
[Fri Dec 05 17:08:58.911778 2025] [:error] [pid 24010:tid 24030] [client 66.249.64.101:40423] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKhKqtjRoDpxa46mwc4mwAAARI"]
[Fri Dec 05 17:09:14.843720 2025] [:error] [pid 62720:tid 62746] [client 66.249.64.101:35940] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKhOmDTJuF6xQ5UsIP8YgAAAZg"]
[Fri Dec 05 17:09:34.878705 2025] [:error] [pid 53923:tid 53946] [client 66.249.64.101:63350] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKhTrl8ebZN0VCAVXBOhwAAANU"]
[Fri Dec 05 17:09:45.937170 2025] [:error] [pid 35173:tid 35188] [client 66.249.64.101:63141] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKhWTLwYloPE6LF3uDNvgAAAUw"]
[Fri Dec 05 17:13:52.294431 2025] [:error] [pid 35173:tid 35179] [client 66.249.64.101:57466] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKiUDLwYloPE6LF3uDOTwAAAUQ"]
[Fri Dec 05 17:14:00.788414 2025] [:error] [pid 53837:tid 53843] [client 66.249.64.101:53809] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKiWDbsUyTxys8OiML2hgAAAAE"]
[Fri Dec 05 17:14:07.987786 2025] [:error] [pid 53837:tid 53861] [client 66.249.64.101:45999] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKiXzbsUyTxys8OiML2hwAAABM"]
[Fri Dec 05 17:14:23.307765 2025] [:error] [pid 35173:tid 35179] [client 66.249.64.101:62071] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKibzLwYloPE6LF3uDOWwAAAUQ"]
[Fri Dec 05 17:16:23.450307 2025] [:error] [pid 62720:tid 62738] [client 66.249.64.101:44738] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKi52DTJuF6xQ5UsIP-FAAAAZA"]
[Fri Dec 05 17:16:44.384372 2025] [:error] [pid 53837:tid 53861] [client 66.249.64.101:54061] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKi_DbsUyTxys8OiML3NQAAABM"]
[Fri Dec 05 17:16:58.155973 2025] [:error] [pid 53839:tid 53899] [client 66.249.64.101:63243] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKjCqQOuERg_RN7bn-akAAAAIM"]
[Fri Dec 05 17:21:49.051716 2025] [:error] [pid 53838:tid 53884] [client 66.249.64.101:62379] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKkLZ8M7CH_vMhLrzLmdwAAAE8"]
[Fri Dec 05 17:21:51.357854 2025] [:error] [pid 62720:tid 62730] [client 66.249.64.101:42847] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKkL2DTJuF6xQ5UsIP_SQAAAYg"]
[Fri Dec 05 17:21:56.378794 2025] [:error] [pid 53839:tid 53920] [client 66.249.64.101:43751] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKkNKQOuERg_RN7bn-cBgAAAJg"]
[Fri Dec 05 17:22:00.839450 2025] [:error] [pid 53838:tid 53886] [client 66.249.64.101:59747] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKkOJ8M7CH_vMhLrzLmggAAAFE"]
[Fri Dec 05 17:22:05.914328 2025] [:error] [pid 53923:tid 53936] [client 66.249.64.101:46666] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKkPbl8ebZN0VCAVXBS-wAAAMs"]
[Fri Dec 05 17:22:11.538129 2025] [:error] [pid 35173:tid 35194] [client 66.249.64.101:56938] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKkQzLwYloPE6LF3uDQPwAAAVI"]
[Fri Dec 05 17:22:18.570157 2025] [:error] [pid 35173:tid 35186] [client 66.249.64.101:59985] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKkSjLwYloPE6LF3uDQRQAAAUo"]
[Fri Dec 05 17:22:26.262826 2025] [:error] [pid 35173:tid 35197] [client 66.249.64.101:54539] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKkUjLwYloPE6LF3uDQSgAAAVU"]
[Fri Dec 05 17:22:27.277168 2025] [:error] [pid 62720:tid 62730] [client 66.249.64.101:58512] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKkU2DTJuF6xQ5UsIP_bgAAAYg"]
[Fri Dec 05 17:22:34.919203 2025] [:error] [pid 53838:tid 53879] [client 66.249.64.101:59230] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKkWp8M7CH_vMhLrzLmnQAAAEo"]
[Fri Dec 05 17:25:31.525409 2025] [:error] [pid 53839:tid 53904] [client 66.249.64.101:59292] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKlC6QOuERg_RN7bn-dYgAAAIg"]
[Fri Dec 05 17:25:40.818851 2025] [:error] [pid 35173:tid 35189] [client 66.249.64.101:42608] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKlFDLwYloPE6LF3uDREgAAAU0"]
[Fri Dec 05 17:25:46.498729 2025] [:error] [pid 53838:tid 53877] [client 66.249.64.101:48858] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKlGp8M7CH_vMhLrzLnMQAAAEg"]
[Fri Dec 05 17:26:06.532793 2025] [:error] [pid 53839:tid 53912] [client 66.249.64.101:58905] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKlLqQOuERg_RN7bn-diQAAAJA"]
[Fri Dec 05 17:29:13.107015 2025] [:error] [pid 53838:tid 53875] [client 66.249.64.101:46920] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKl6Z8M7CH_vMhLrzLnxQAAAEY"]
[Fri Dec 05 17:29:30.592998 2025] [:error] [pid 53923:tid 53931] [client 66.249.64.101:56017] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKl-rl8ebZN0VCAVXBVJAAAAMY"]
[Fri Dec 05 17:29:38.886419 2025] [:error] [pid 53839:tid 53897] [client 66.249.64.101:54989] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKmAqQOuERg_RN7bn-eyAAAAIE"]
[Fri Dec 05 17:29:51.814762 2025] [:error] [pid 53923:tid 53948] [client 66.249.64.101:52531] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKmD7l8ebZN0VCAVXBVMwAAANc"]
[Fri Dec 05 17:33:56.189357 2025] [:error] [pid 53923:tid 53945] [client 66.249.64.101:54317] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKnBLl8ebZN0VCAVXBWnAAAANQ"]
[Fri Dec 05 17:34:32.315798 2025] [:error] [pid 53923:tid 53936] [client 66.249.64.101:53303] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKnKLl8ebZN0VCAVXBW_gAAAMs"]
[Fri Dec 05 17:38:49.901232 2025] [:error] [pid 53923:tid 53933] [client 66.249.64.101:41938] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKoKbl8ebZN0VCAVXBYyAAAAMg"]
[Fri Dec 05 17:38:56.481490 2025] [:error] [pid 62720:tid 62727] [client 66.249.64.101:61503] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKoMGDTJuF6xQ5UsIMDRgAAAYU"]
[Fri Dec 05 17:39:06.450016 2025] [:error] [pid 53837:tid 53851] [client 66.249.64.101:51895] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKoOjbsUyTxys8OiML8SQAAAAk"]
[Fri Dec 05 17:42:50.961269 2025] [:error] [pid 53839:tid 53909] [client 66.249.64.101:43182] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKpGqQOuERg_RN7bn-jugAAAI0"]
[Fri Dec 05 17:48:35.330447 2025] [:error] [pid 62720:tid 62723] [client 66.249.64.101:35225] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKqc2DTJuF6xQ5UsIMF-AAAAYE"]
[Fri Dec 05 17:48:47.339654 2025] [:error] [pid 35173:tid 35179] [client 66.249.64.101:43581] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKqfzLwYloPE6LF3uDVTgAAAUQ"]
[Fri Dec 05 17:48:49.666216 2025] [:error] [pid 35173:tid 35197] [client 66.249.64.101:38996] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKqgTLwYloPE6LF3uDVUQAAAVU"]
[Fri Dec 05 17:56:42.085732 2025] [:error] [pid 62720:tid 62731] [client 66.249.64.101:49814] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKsWmDTJuF6xQ5UsIMIdAAAAYk"]
[Fri Dec 05 17:57:23.276106 2025] [:error] [pid 24010:tid 24034] [client 66.249.64.101:45411] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKsg6tjRoDpxa46mwdDOQAAARY"]
[Fri Dec 05 18:01:58.506000 2025] [:error] [pid 62720:tid 62744] [client 66.249.64.101:36725] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKtlmDTJuF6xQ5UsIMJZQAAAZY"]
[Fri Dec 05 18:02:12.649889 2025] [:error] [pid 53839:tid 53917] [client 66.249.64.101:38507] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKtpKQOuERg_RN7bn-pEAAAAJU"]
[Fri Dec 05 18:02:43.697217 2025] [:error] [pid 24010:tid 24024] [client 66.249.64.101:56843] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKtw6tjRoDpxa46mwdD7gAAAQw"]
[Fri Dec 05 18:06:43.798769 2025] [:error] [pid 18520:tid 18533] [client 66.249.64.101:58272] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKus4OC8XSo46ZrIeOrXgAAAIk"]
[Fri Dec 05 18:11:28.992450 2025] [:error] [pid 18579:tid 18604] [client 66.249.64.101:39307] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKv0MAUSulJty2JiBpgsAAAABM"]
[Fri Dec 05 18:11:51.675351 2025] [:error] [pid 18579:tid 18602] [client 66.249.64.101:47292] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKv58AUSulJty2JiBpgzQAAABE"]
[Fri Dec 05 18:16:52.364056 2025] [:error] [pid 18614:tid 18638] [client 66.249.64.101:47812] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKxFHHum9jj9plt7MUWswAAAVY"]
[Fri Dec 05 18:17:53.577884 2025] [:error] [pid 18614:tid 18634] [client 66.249.64.101:65112] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKxUXHum9jj9plt7MUXjQAAAVI"]
[Fri Dec 05 18:17:54.307428 2025] [:error] [pid 18520:tid 18546] [client 66.249.64.101:47716] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKxUoOC8XSo46ZrIeOuwAAAAJY"]
[Fri Dec 05 18:17:54.904707 2025] [:error] [pid 18521:tid 18552] [client 66.249.64.101:54045] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKxUk_hJ6r18UnAijxKGgAAAME"]
[Fri Dec 05 18:17:56.885827 2025] [:error] [pid 18614:tid 18634] [client 66.249.64.101:47666] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKxVHHum9jj9plt7MUXmgAAAVI"]
[Fri Dec 05 18:17:57.877850 2025] [:error] [pid 18579:tid 18607] [client 66.249.64.101:37048] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKxVcAUSulJty2JiBpjVgAAABY"]
[Fri Dec 05 18:17:58.960390 2025] [:error] [pid 18614:tid 18617] [client 66.249.64.101:55556] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKxVnHum9jj9plt7MUXnwAAAUE"]
[Fri Dec 05 18:18:00.117623 2025] [:error] [pid 18614:tid 18618] [client 66.249.64.101:65284] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKxWHHum9jj9plt7MUXqwAAAUI"]
[Fri Dec 05 18:18:01.076942 2025] [:error] [pid 18614:tid 18617] [client 66.249.64.101:44064] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKxWXHum9jj9plt7MUXrQAAAUE"]
[Fri Dec 05 18:18:02.191015 2025] [:error] [pid 18614:tid 18630] [client 66.249.64.101:54875] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKxWnHum9jj9plt7MUXtwAAAU4"]
[Fri Dec 05 18:18:03.146878 2025] [:error] [pid 18521:tid 18556] [client 66.249.64.101:54001] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKxW0_hJ6r18UnAijxKJAAAAMU"]
[Fri Dec 05 18:18:04.147274 2025] [:error] [pid 18614:tid 18617] [client 66.249.64.101:46225] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKxXHHum9jj9plt7MUXwQAAAUE"]
[Fri Dec 05 18:18:05.271850 2025] [:error] [pid 18579:tid 18592] [client 66.249.64.101:59353] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKxXcAUSulJty2JiBpjjgAAAAc"]
[Fri Dec 05 18:18:07.920751 2025] [:error] [pid 18520:tid 18542] [client 66.249.64.101:60546] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKxX4OC8XSo46ZrIeOu3gAAAJI"]
[Fri Dec 05 18:18:08.186896 2025] [:error] [pid 18521:tid 18568] [client 66.249.64.101:43561] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKxYE_hJ6r18UnAijxKPQAAANE"]
[Fri Dec 05 18:18:09.791245 2025] [:error] [pid 18579:tid 18591] [client 66.249.64.101:61443] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKxYcAUSulJty2JiBpjoQAAAAY"]
[Fri Dec 05 18:18:10.278005 2025] [:error] [pid 18579:tid 18607] [client 66.249.64.101:63467] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKxYsAUSulJty2JiBpjowAAABY"]
[Fri Dec 05 18:18:10.712680 2025] [:error] [pid 18520:tid 18534] [client 66.249.64.101:51585] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKxYoOC8XSo46ZrIeOu5wAAAIo"]
[Fri Dec 05 18:18:11.354888 2025] [:error] [pid 18521:tid 18572] [client 66.249.64.101:54106] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKxY0_hJ6r18UnAijxKSAAAANU"]
[Fri Dec 05 18:18:12.334335 2025] [:error] [pid 18521:tid 18563] [client 66.249.64.101:47086] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKxZE_hJ6r18UnAijxKTQAAAMw"]
[Fri Dec 05 18:18:13.425441 2025] [:error] [pid 18520:tid 18543] [client 66.249.64.101:55614] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKxZYOC8XSo46ZrIeOu6wAAAJM"]
[Fri Dec 05 18:18:14.527213 2025] [:error] [pid 18614:tid 18635] [client 66.249.64.101:62989] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKxZnHum9jj9plt7MUX3QAAAVM"]
[Fri Dec 05 18:18:22.200769 2025] [:error] [pid 18521:tid 18559] [client 66.249.64.101:64943] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKxbk_hJ6r18UnAijxKVwAAAMg"]
[Fri Dec 05 18:18:23.278492 2025] [:error] [pid 18614:tid 18619] [client 66.249.64.101:36649] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKxb3Hum9jj9plt7MUX9wAAAUM"]
[Fri Dec 05 18:18:23.935870 2025] [:error] [pid 18614:tid 18630] [client 66.249.64.101:59276] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKxb3Hum9jj9plt7MUX-QAAAU4"]
[Fri Dec 05 18:18:24.712269 2025] [:error] [pid 18614:tid 18624] [client 66.249.64.101:61609] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKxcHHum9jj9plt7MUX-wAAAUg"]
[Fri Dec 05 18:18:25.692241 2025] [:error] [pid 18614:tid 18626] [client 66.249.64.101:63882] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKxcXHum9jj9plt7MUYAAAAAUo"]
[Fri Dec 05 18:18:26.700977 2025] [:error] [pid 18579:tid 18591] [client 66.249.64.101:55161] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKxcsAUSulJty2JiBpjswAAAAY"]
[Fri Dec 05 18:18:27.731992 2025] [:error] [pid 18520:tid 18543] [client 66.249.64.101:53157] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKxc4OC8XSo46ZrIeOvAQAAAJM"]
[Fri Dec 05 18:18:27.938559 2025] [:error] [pid 18521:tid 18553] [client 66.249.64.101:46585] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKxc0_hJ6r18UnAijxKZQAAAMI"]
[Fri Dec 05 18:18:28.542233 2025] [:error] [pid 18521:tid 18554] [client 66.249.64.101:53174] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKxdE_hJ6r18UnAijxKawAAAMM"]
[Fri Dec 05 18:18:28.923235 2025] [:error] [pid 18614:tid 18631] [client 66.249.64.101:41276] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKxdHHum9jj9plt7MUYBAAAAU8"]
[Fri Dec 05 18:18:30.051707 2025] [:error] [pid 18520:tid 18524] [client 66.249.64.101:45334] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKxdoOC8XSo46ZrIeOvAwAAAIA"]
[Fri Dec 05 18:18:30.119931 2025] [:error] [pid 18614:tid 18633] [client 66.249.64.101:54115] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKxdnHum9jj9plt7MUYCgAAAVE"]
[Fri Dec 05 18:18:31.030435 2025] [:error] [pid 18614:tid 18617] [client 66.249.64.101:60979] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKxd3Hum9jj9plt7MUYDQAAAUE"]
[Fri Dec 05 18:18:32.046658 2025] [:error] [pid 18579:tid 18595] [client 66.249.64.101:61447] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKxeMAUSulJty2JiBpjuwAAAAo"]
[Fri Dec 05 18:18:34.008195 2025] [:error] [pid 18520:tid 18539] [client 66.249.64.101:46036] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKxeoOC8XSo46ZrIeOvCAAAAI8"]
[Fri Dec 05 18:18:35.165295 2025] [:error] [pid 18614:tid 18628] [client 66.249.64.101:41685] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKxe3Hum9jj9plt7MUYHQAAAUw"]
[Fri Dec 05 18:18:36.274394 2025] [:error] [pid 18520:tid 18548] [client 66.249.64.101:42091] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKxfIOC8XSo46ZrIeOvCgAAAJg"]
[Fri Dec 05 18:18:37.226271 2025] [:error] [pid 18614:tid 18626] [client 66.249.64.101:61920] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKxfXHum9jj9plt7MUYHwAAAUo"]
[Fri Dec 05 18:18:38.208210 2025] [:error] [pid 18579:tid 18609] [client 66.249.64.101:44264] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKxfsAUSulJty2JiBpj0AAAABg"]
[Fri Dec 05 18:18:39.281150 2025] [:error] [pid 18521:tid 18568] [client 66.249.64.101:42793] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKxf0_hJ6r18UnAijxKdgAAANE"]
[Fri Dec 05 18:18:40.193895 2025] [:error] [pid 18579:tid 18600] [client 66.249.64.101:53515] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKxgMAUSulJty2JiBpj1QAAAA8"]
[Fri Dec 05 18:18:41.179684 2025] [:error] [pid 18520:tid 18530] [client 66.249.64.101:50123] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKxgYOC8XSo46ZrIeOvDgAAAIY"]
[Fri Dec 05 18:18:42.261609 2025] [:error] [pid 18614:tid 18629] [client 66.249.64.101:54880] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKxgnHum9jj9plt7MUYKgAAAU0"]
[Fri Dec 05 18:18:43.263364 2025] [:error] [pid 18520:tid 18543] [client 66.249.64.101:59608] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKxg4OC8XSo46ZrIeOvEwAAAJM"]
[Fri Dec 05 18:18:44.309116 2025] [:error] [pid 18614:tid 18626] [client 66.249.64.101:53601] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKxhHHum9jj9plt7MUYMgAAAUo"]
[Fri Dec 05 18:18:45.368968 2025] [:error] [pid 18521:tid 18575] [client 66.249.64.101:45968] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKxhU_hJ6r18UnAijxKgQAAANg"]
[Fri Dec 05 18:18:46.302966 2025] [:error] [pid 18521:tid 18557] [client 66.249.64.101:54262] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKxhk_hJ6r18UnAijxKggAAAMY"]
[Fri Dec 05 18:18:46.787500 2025] [:error] [pid 18520:tid 18535] [client 66.249.64.101:55378] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKxhoOC8XSo46ZrIeOvFwAAAIs"]
[Fri Dec 05 18:18:47.226837 2025] [:error] [pid 18614:tid 18635] [client 66.249.64.101:44137] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKxh3Hum9jj9plt7MUYNwAAAVM"]
[Fri Dec 05 18:18:48.164016 2025] [:error] [pid 18614:tid 18616] [client 66.249.64.101:51298] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKxiHHum9jj9plt7MUYPQAAAUA"]
[Fri Dec 05 18:18:48.564839 2025] [:error] [pid 18614:tid 18626] [client 66.249.64.101:40401] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKxiHHum9jj9plt7MUYQwAAAUo"]
[Fri Dec 05 18:18:49.292502 2025] [:error] [pid 18614:tid 18618] [client 66.249.64.101:56644] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKxiXHum9jj9plt7MUYSQAAAUI"]
[Fri Dec 05 18:18:50.259933 2025] [:error] [pid 18579:tid 18594] [client 66.249.64.101:50605] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKxisAUSulJty2JiBpj9AAAAAk"]
[Fri Dec 05 18:18:51.250936 2025] [:error] [pid 18614:tid 18624] [client 66.249.64.101:41585] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKxi3Hum9jj9plt7MUYUwAAAUg"]
[Fri Dec 05 18:19:02.676337 2025] [:error] [pid 18614:tid 18636] [client 66.249.64.101:47195] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKxlnHum9jj9plt7MUYdAAAAVQ"]
[Fri Dec 05 18:19:04.104576 2025] [:error] [pid 18579:tid 18599] [client 66.249.64.101:49458] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKxmMAUSulJty2JiBpkDwAAAA4"]
[Fri Dec 05 18:19:06.015952 2025] [:error] [pid 18579:tid 18598] [client 66.249.64.101:53525] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKxmsAUSulJty2JiBpkFQAAAA0"]
[Fri Dec 05 18:19:06.970457 2025] [:error] [pid 18521:tid 18557] [client 66.249.64.101:54213] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKxmk_hJ6r18UnAijxKrAAAAMY"]
[Fri Dec 05 18:19:07.972009 2025] [:error] [pid 18614:tid 18631] [client 66.249.64.101:62226] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKxm3Hum9jj9plt7MUYhAAAAU8"]
[Fri Dec 05 18:19:09.057861 2025] [:error] [pid 18520:tid 18539] [client 66.249.64.101:47903] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKxnYOC8XSo46ZrIeOvMwAAAI8"]
[Fri Dec 05 18:19:10.079202 2025] [:error] [pid 18579:tid 18608] [client 66.249.64.101:58719] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKxnsAUSulJty2JiBpkHAAAABc"]
[Fri Dec 05 18:19:11.104923 2025] [:error] [pid 18579:tid 18598] [client 66.249.64.101:62157] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKxn8AUSulJty2JiBpkIQAAAA0"]
[Fri Dec 05 18:19:11.864405 2025] [:error] [pid 18579:tid 18592] [client 66.249.64.101:54081] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKxn8AUSulJty2JiBpkJAAAAAc"]
[Fri Dec 05 18:19:12.871128 2025] [:error] [pid 18614:tid 18621] [client 66.249.64.101:43549] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKxoHHum9jj9plt7MUYigAAAUU"]
[Fri Dec 05 18:19:14.894731 2025] [:error] [pid 18520:tid 18526] [client 66.249.64.101:45896] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKxooOC8XSo46ZrIeOvPQAAAII"]
[Fri Dec 05 18:19:16.080014 2025] [:error] [pid 18521:tid 18567] [client 66.249.64.101:42232] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKxpE_hJ6r18UnAijxKtQAAANA"]
[Fri Dec 05 18:19:16.962384 2025] [:error] [pid 18520:tid 18547] [client 66.249.64.101:63712] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKxpIOC8XSo46ZrIeOvRAAAAJc"]
[Fri Dec 05 18:19:18.047801 2025] [:error] [pid 18614:tid 18620] [client 66.249.64.101:46116] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKxpnHum9jj9plt7MUYjwAAAUQ"]
[Fri Dec 05 18:19:18.630334 2025] [:error] [pid 18614:tid 18624] [client 66.249.64.101:43108] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKxpnHum9jj9plt7MUYkwAAAUg"]
[Fri Dec 05 18:19:19.805269 2025] [:error] [pid 18614:tid 18639] [client 66.249.64.101:47361] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKxp3Hum9jj9plt7MUYlwAAAVc"]
[Fri Dec 05 18:19:20.880495 2025] [:error] [pid 18614:tid 18623] [client 66.249.64.101:54616] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKxqHHum9jj9plt7MUYnAAAAUc"]
[Fri Dec 05 18:19:21.713486 2025] [:error] [pid 18521:tid 18560] [client 66.249.64.101:62870] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKxqU_hJ6r18UnAijxKwgAAAMk"]
[Fri Dec 05 18:19:22.764980 2025] [:error] [pid 18614:tid 18620] [client 66.249.64.101:47692] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKxqnHum9jj9plt7MUYngAAAUQ"]
[Fri Dec 05 18:19:23.873662 2025] [:error] [pid 18521:tid 18553] [client 66.249.64.101:56535] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKxq0_hJ6r18UnAijxKxgAAAMI"]
[Fri Dec 05 18:19:24.872514 2025] [:error] [pid 18579:tid 18593] [client 66.249.64.101:55676] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKxrMAUSulJty2JiBpkLwAAAAg"]
[Fri Dec 05 18:19:25.854486 2025] [:error] [pid 18579:tid 18603] [client 66.249.64.101:53956] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKxrcAUSulJty2JiBpkMgAAABI"]
[Fri Dec 05 18:19:26.848292 2025] [:error] [pid 18520:tid 18543] [client 66.249.64.101:46082] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKxroOC8XSo46ZrIeOvjQAAAJM"]
[Fri Dec 05 18:19:27.827246 2025] [:error] [pid 18579:tid 18604] [client 66.249.64.101:63779] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKxr8AUSulJty2JiBpkNwAAABM"]
[Fri Dec 05 18:19:28.910442 2025] [:error] [pid 18579:tid 18606] [client 66.249.64.101:36341] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKxsMAUSulJty2JiBpkPwAAABU"]
[Fri Dec 05 18:19:29.905588 2025] [:error] [pid 18614:tid 18637] [client 66.249.64.101:56307] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKxsXHum9jj9plt7MUYrAAAAVU"]
[Fri Dec 05 18:19:31.304343 2025] [:error] [pid 18521:tid 18557] [client 66.249.64.101:38880] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKxs0_hJ6r18UnAijxK0wAAAMY"]
[Fri Dec 05 18:19:31.804360 2025] [:error] [pid 18520:tid 18530] [client 66.249.64.101:49846] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKxs4OC8XSo46ZrIeOvlQAAAIY"]
[Fri Dec 05 18:19:32.604464 2025] [:error] [pid 18521:tid 18569] [client 66.249.64.101:56511] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKxtE_hJ6r18UnAijxK1gAAANI"]
[Fri Dec 05 18:19:33.302891 2025] [:error] [pid 18521:tid 18573] [client 66.249.64.101:45008] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKxtU_hJ6r18UnAijxK2AAAANY"]
[Fri Dec 05 18:19:33.571669 2025] [:error] [pid 18579:tid 18587] [client 66.249.64.101:35245] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKxtcAUSulJty2JiBpkRgAAAAI"]
[Fri Dec 05 18:19:34.335408 2025] [:error] [pid 18614:tid 18639] [client 66.249.64.101:45525] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKxtnHum9jj9plt7MUYvAAAAVc"]
[Fri Dec 05 18:19:35.324231 2025] [:error] [pid 18520:tid 18542] [client 66.249.64.101:61155] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKxt4OC8XSo46ZrIeOvmQAAAJI"]
[Fri Dec 05 18:19:35.482763 2025] [:error] [pid 18579:tid 18593] [client 66.249.64.101:49195] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKxt8AUSulJty2JiBpkSQAAAAg"]
[Fri Dec 05 18:19:36.293506 2025] [:error] [pid 18614:tid 18630] [client 66.249.64.101:50644] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKxuHHum9jj9plt7MUYxQAAAU4"]
[Fri Dec 05 18:19:36.852029 2025] [:error] [pid 18521:tid 18564] [client 66.249.64.101:41782] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKxuE_hJ6r18UnAijxK3QAAAM0"]
[Fri Dec 05 18:19:37.405597 2025] [:error] [pid 18579:tid 18603] [client 66.249.64.101:65364] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKxucAUSulJty2JiBpkTAAAABI"]
[Fri Dec 05 18:19:38.318667 2025] [:error] [pid 18520:tid 18524] [client 66.249.64.101:51851] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKxuoOC8XSo46ZrIeOvmgAAAIA"]
[Fri Dec 05 18:19:39.402483 2025] [:error] [pid 18614:tid 18627] [client 66.249.64.101:54234] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKxu3Hum9jj9plt7MUYzAAAAUs"]
[Fri Dec 05 18:19:40.308886 2025] [:error] [pid 18579:tid 18593] [client 66.249.64.101:48201] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKxvMAUSulJty2JiBpkVAAAAAg"]
[Fri Dec 05 18:19:42.386546 2025] [:error] [pid 18520:tid 18531] [client 66.249.64.101:58425] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKxvoOC8XSo46ZrIeOvnQAAAIc"]
[Fri Dec 05 18:19:43.372717 2025] [:error] [pid 18520:tid 18537] [client 66.249.64.101:61777] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKxv4OC8XSo46ZrIeOvngAAAI0"]
[Fri Dec 05 18:19:44.456679 2025] [:error] [pid 18579:tid 18586] [client 66.249.64.101:57146] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKxwMAUSulJty2JiBpkXAAAAAE"]
[Fri Dec 05 18:19:45.359478 2025] [:error] [pid 18520:tid 18530] [client 66.249.64.101:60506] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKxwYOC8XSo46ZrIeOvpQAAAIY"]
[Fri Dec 05 18:19:46.439524 2025] [:error] [pid 18579:tid 18599] [client 66.249.64.101:51110] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKxwsAUSulJty2JiBpkXQAAAA4"]
[Fri Dec 05 18:19:47.332216 2025] [:error] [pid 18520:tid 18531] [client 66.249.64.101:37633] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKxw4OC8XSo46ZrIeOvrwAAAIc"]
[Fri Dec 05 18:19:48.320925 2025] [:error] [pid 18520:tid 18528] [client 66.249.64.101:47330] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKxxIOC8XSo46ZrIeOvsgAAAIQ"]
[Fri Dec 05 18:19:49.304748 2025] [:error] [pid 18521:tid 18559] [client 66.249.64.101:37757] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKxxU_hJ6r18UnAijxK5gAAAMg"]
[Fri Dec 05 18:19:51.329831 2025] [:error] [pid 18614:tid 18639] [client 66.249.64.101:62776] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKxx3Hum9jj9plt7MUY2gAAAVc"]
[Fri Dec 05 18:19:52.299128 2025] [:error] [pid 18579:tid 18608] [client 66.249.64.101:62344] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKxyMAUSulJty2JiBpkZAAAABc"]
[Fri Dec 05 18:19:53.597430 2025] [:error] [pid 18614:tid 18633] [client 66.249.64.101:57347] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKxyXHum9jj9plt7MUY4wAAAVE"]
[Fri Dec 05 18:19:54.376137 2025] [:error] [pid 18521:tid 18562] [client 66.249.64.101:56416] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKxyk_hJ6r18UnAijxK6gAAAMs"]
[Fri Dec 05 18:19:55.465384 2025] [:error] [pid 18521:tid 18566] [client 66.249.64.101:63767] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKxy0_hJ6r18UnAijxK7QAAAM8"]
[Fri Dec 05 18:19:56.360357 2025] [:error] [pid 18521:tid 18551] [client 66.249.64.101:43500] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKxzE_hJ6r18UnAijxK7gAAAMA"]
[Fri Dec 05 18:19:57.443091 2025] [:error] [pid 18579:tid 18606] [client 66.249.64.101:60532] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKxzcAUSulJty2JiBpkawAAABU"]
[Fri Dec 05 18:19:58.523664 2025] [:error] [pid 18579:tid 18591] [client 66.249.64.101:58786] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKxzsAUSulJty2JiBpkbQAAAAY"]
[Fri Dec 05 18:19:59.556696 2025] [:error] [pid 18521:tid 18557] [client 66.249.64.101:57935] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTKxz0_hJ6r18UnAijxK8gAAAMY"]
[Fri Dec 05 18:32:54.996157 2025] [:error] [pid 18521:tid 18560] [client 66.249.64.101:45059] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTK01k_hJ6r18UnAijxPsgAAAMk"]
[Fri Dec 05 18:32:55.483597 2025] [:error] [pid 18614:tid 18624] [client 66.249.64.101:53679] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTK013Hum9jj9plt7MUfDwAAAUg"]
[Fri Dec 05 18:32:56.852876 2025] [:error] [pid 18520:tid 18544] [client 66.249.64.101:45501] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTK02IOC8XSo46ZrIeO0PwAAAJQ"]
[Fri Dec 05 18:32:58.812026 2025] [:error] [pid 18520:tid 18531] [client 66.249.64.101:55017] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTK02oOC8XSo46ZrIeO0QgAAAIc"]
[Fri Dec 05 18:32:59.794647 2025] [:error] [pid 18579:tid 18606] [client 66.249.64.101:63772] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTK028AUSulJty2JiBppZQAAABU"]
[Fri Dec 05 19:03:14.427662 2025] [:error] [pid 18614:tid 18625] [client 66.249.64.101:36435] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTK78nHum9jj9plt7MUyVgAAAUk"]
[Fri Dec 05 19:03:25.705866 2025] [:error] [pid 18579:tid 18604] [client 66.249.64.101:46062] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTK7_cAUSulJty2JiBp5XAAAABM"]
[Fri Dec 05 19:03:37.304367 2025] [:error] [pid 18521:tid 18565] [client 66.249.64.101:61756] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTK8CU_hJ6r18UnAijxeYgAAAM4"]
[Fri Dec 05 19:03:44.173665 2025] [:error] [pid 18521:tid 18566] [client 66.249.64.101:56847] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTK8EE_hJ6r18UnAijxedAAAAM8"]
[Fri Dec 05 19:03:51.887701 2025] [:error] [pid 18579:tid 18586] [client 66.249.64.101:50881] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTK8F8AUSulJty2JiBp5fAAAAAE"]
[Fri Dec 05 19:06:31.604736 2025] [:error] [pid 18579:tid 18600] [client 66.249.64.101:52351] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTK8t8AUSulJty2JiBp6gAAAAA8"]
[Fri Dec 05 19:06:37.027838 2025] [:error] [pid 18614:tid 18637] [client 66.249.64.101:38574] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTK8vXHum9jj9plt7MU0oAAAAVU"]
[Fri Dec 05 19:06:46.312092 2025] [:error] [pid 18520:tid 18538] [client 66.249.64.101:42615] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTK8xoOC8XSo46ZrIePC1QAAAI4"]
[Fri Dec 05 19:06:55.031362 2025] [:error] [pid 18614:tid 18620] [client 66.249.64.101:53214] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTK8z3Hum9jj9plt7MU0ygAAAUQ"]
[Fri Dec 05 19:07:02.167054 2025] [:error] [pid 18521:tid 18572] [client 66.249.64.101:52105] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTK81k_hJ6r18UnAijxfjQAAANU"]
[Fri Dec 05 19:07:14.551769 2025] [:error] [pid 18520:tid 18542] [client 66.249.64.101:39430] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTK84oOC8XSo46ZrIePDGgAAAJI"]
[Fri Dec 05 19:08:41.778232 2025] [:error] [pid 18579:tid 18591] [client 66.249.64.101:63063] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTK9OcAUSulJty2JiBp7rgAAAAY"]
[Fri Dec 05 19:08:47.448954 2025] [:error] [pid 18520:tid 18542] [client 66.249.64.101:57930] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTK9P4OC8XSo46ZrIePDyAAAAJI"]
[Fri Dec 05 19:08:55.202782 2025] [:error] [pid 18579:tid 18591] [client 66.249.64.101:61872] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTK9R8AUSulJty2JiBp70wAAAAY"]
[Fri Dec 05 19:09:01.626701 2025] [:error] [pid 18520:tid 18527] [client 66.249.64.101:41811] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTK9TYOC8XSo46ZrIePD7wAAAIM"]
[Fri Dec 05 19:09:08.982732 2025] [:error] [pid 18614:tid 18630] [client 66.249.64.101:62479] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTK9VHHum9jj9plt7MU2_QAAAU4"]
[Fri Dec 05 19:09:14.988224 2025] [:error] [pid 18520:tid 18543] [client 66.249.64.101:59148] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTK9WoOC8XSo46ZrIePEEgAAAJM"]
[Fri Dec 05 19:09:22.579939 2025] [:error] [pid 18614:tid 18636] [client 66.249.64.101:45899] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTK9YnHum9jj9plt7MU3JAAAAVQ"]
[Fri Dec 05 19:09:27.477158 2025] [:error] [pid 18614:tid 18621] [client 66.249.64.101:51240] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTK9Z3Hum9jj9plt7MU3LgAAAUU"]
[Fri Dec 05 19:09:33.733222 2025] [:error] [pid 18520:tid 18541] [client 66.249.64.101:52413] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTK9bYOC8XSo46ZrIePELQAAAJE"]
[Fri Dec 05 19:10:54.952641 2025] [:error] [pid 18520:tid 18532] [client 66.249.64.101:36271] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTK9voOC8XSo46ZrIePEwwAAAIg"]
[Fri Dec 05 19:11:16.368848 2025] [:error] [pid 18520:tid 18528] [client 66.249.64.101:55901] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTK91IOC8XSo46ZrIePE7gAAAIQ"]
[Fri Dec 05 19:11:22.922429 2025] [:error] [pid 18521:tid 18570] [client 66.249.64.101:48964] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTK92k_hJ6r18UnAijxhQwAAANM"]
[Fri Dec 05 19:11:28.659404 2025] [:error] [pid 18614:tid 18618] [client 66.249.64.101:64037] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTK94HHum9jj9plt7MU4SgAAAUI"]
[Fri Dec 05 19:11:30.925315 2025] [:error] [pid 18521:tid 18556] [client 66.249.64.101:48793] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTK94k_hJ6r18UnAijxhTQAAAMU"]
[Fri Dec 05 19:11:35.825121 2025] [:error] [pid 18614:tid 18626] [client 66.249.64.101:43095] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTK953Hum9jj9plt7MU4UAAAAUo"]
[Fri Dec 05 19:11:41.057199 2025] [:error] [pid 18521:tid 18567] [client 66.249.64.101:59614] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTK97U_hJ6r18UnAijxhXgAAANA"]
[Fri Dec 05 19:12:49.562188 2025] [:error] [pid 18614:tid 18625] [client 66.249.64.101:37334] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTK-MXHum9jj9plt7MU5LQAAAUk"]
[Fri Dec 05 19:13:00.223963 2025] [:error] [pid 18521:tid 18554] [client 66.249.64.101:37618] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTK-PE_hJ6r18UnAijxiLAAAAMM"]
[Fri Dec 05 19:13:05.789156 2025] [:error] [pid 18579:tid 18595] [client 66.249.64.101:47073] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTK-QcAUSulJty2JiBp9nwAAAAo"]
[Fri Dec 05 19:13:10.758193 2025] [:error] [pid 18614:tid 18640] [client 66.249.64.101:60968] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTK-RnHum9jj9plt7MU5cwAAAVg"]
[Fri Dec 05 19:13:14.790542 2025] [:error] [pid 18614:tid 18628] [client 66.249.64.101:60714] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTK-SnHum9jj9plt7MU5fwAAAUw"]
[Fri Dec 05 19:13:23.826395 2025] [:error] [pid 18579:tid 18586] [client 66.249.64.101:39521] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTK-U8AUSulJty2JiBp-BwAAAAE"]
[Fri Dec 05 19:13:32.663539 2025] [:error] [pid 18521:tid 18560] [client 66.249.64.101:44795] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTK-XE_hJ6r18UnAijxingAAAMk"]
[Fri Dec 05 19:13:37.561703 2025] [:error] [pid 18520:tid 18534] [client 66.249.64.101:38286] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTK-YYOC8XSo46ZrIePGjgAAAIo"]
[Fri Dec 05 19:13:42.994093 2025] [:error] [pid 18579:tid 18609] [client 66.249.64.101:43393] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTK-ZsAUSulJty2JiBp-ZAAAABg"]
[Fri Dec 05 19:23:23.948892 2025] [:error] [pid 18579:tid 18585] [client 66.249.64.101:56091] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTLAq8AUSulJty2JiBqEGgAAAAA"]
[Fri Dec 05 19:23:29.042393 2025] [:error] [pid 18579:tid 18598] [client 66.249.64.101:58404] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTLAscAUSulJty2JiBqEKAAAAA0"]
[Fri Dec 05 19:23:33.584097 2025] [:error] [pid 18614:tid 18639] [client 66.249.64.101:60186] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTLAtXHum9jj9plt7MVAXAAAAVc"]
[Fri Dec 05 19:23:39.556685 2025] [:error] [pid 18579:tid 18593] [client 66.249.64.101:51381] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTLAu8AUSulJty2JiBqEVAAAAAg"]
[Fri Dec 05 19:23:44.424416 2025] [:error] [pid 18614:tid 18637] [client 66.249.64.101:56936] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTLAwHHum9jj9plt7MVAcwAAAVU"]
[Fri Dec 05 19:23:52.845421 2025] [:error] [pid 18521:tid 18561] [client 66.249.64.101:57991] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTLAyE_hJ6r18UnAijxpeAAAAMo"]
[Fri Dec 05 19:23:59.132195 2025] [:error] [pid 18521:tid 18556] [client 66.249.64.101:44155] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTLAz0_hJ6r18UnAijxpjgAAAMU"]
[Fri Dec 05 19:24:04.748197 2025] [:error] [pid 18614:tid 18626] [client 66.249.64.101:61570] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTLA1HHum9jj9plt7MVAhAAAAUo"]
[Fri Dec 05 19:24:14.526241 2025] [:error] [pid 18521:tid 18566] [client 66.249.64.101:36420] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTLA3k_hJ6r18UnAijxpuQAAAM8"]
[Fri Dec 05 19:25:38.540236 2025] [:error] [pid 18614:tid 18635] [client 66.249.64.101:62214] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTLBMnHum9jj9plt7MVBZAAAAVM"]
[Fri Dec 05 19:25:44.818674 2025] [:error] [pid 18520:tid 18535] [client 66.249.64.101:60996] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTLBOIOC8XSo46ZrIePM-QAAAIs"]
[Fri Dec 05 19:25:53.261445 2025] [:error] [pid 35962:tid 35969] [client 66.249.64.101:35588] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTLBQZ-hnYjbYINfh7GUHQAAAEU"]
[Fri Dec 05 19:26:05.009995 2025] [:error] [pid 18521:tid 18551] [client 66.249.64.101:59395] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTLBTU_hJ6r18UnAijxqrgAAAMA"]
[Fri Dec 05 19:26:09.661441 2025] [:error] [pid 18520:tid 18547] [client 66.249.64.101:49090] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTLBUYOC8XSo46ZrIePNFwAAAJc"]
[Fri Dec 05 19:26:16.884722 2025] [:error] [pid 35962:tid 35980] [client 66.249.64.101:57241] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTLBWJ-hnYjbYINfh7GUUAAAAFA"]
[Fri Dec 05 19:26:22.300222 2025] [:error] [pid 18614:tid 18628] [client 66.249.64.101:39177] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTLBXnHum9jj9plt7MVBxAAAAUw"]
[Fri Dec 05 19:26:27.172865 2025] [:error] [pid 35962:tid 35985] [client 66.249.64.101:42491] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTLBY5-hnYjbYINfh7GUZgAAAFU"]
[Fri Dec 05 19:27:45.236507 2025] [:error] [pid 18614:tid 18626] [client 66.249.64.101:49228] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTLBsXHum9jj9plt7MVCjQAAAUo"]
[Fri Dec 05 19:27:47.951669 2025] [:error] [pid 18614:tid 18625] [client 66.249.64.101:62651] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTLBs3Hum9jj9plt7MVClAAAAUk"]
[Fri Dec 05 19:27:51.777279 2025] [:error] [pid 18614:tid 18625] [client 66.249.64.101:64423] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTLBt3Hum9jj9plt7MVCogAAAUk"]
[Fri Dec 05 19:27:57.734789 2025] [:error] [pid 18614:tid 18620] [client 66.249.64.101:60544] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTLBvXHum9jj9plt7MVCtQAAAUQ"]
[Fri Dec 05 19:28:01.084784 2025] [:error] [pid 18579:tid 18600] [client 66.249.64.101:64480] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTLBwcAUSulJty2JiBqGpgAAAA8"]
[Fri Dec 05 19:28:09.582733 2025] [:error] [pid 18579:tid 18607] [client 66.249.64.101:54293] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTLBycAUSulJty2JiBqGwAAAABY"]
[Fri Dec 05 19:28:17.782954 2025] [:error] [pid 35962:tid 35986] [client 66.249.64.101:36692] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTLB0Z-hnYjbYINfh7GVfQAAAFY"]
[Fri Dec 05 19:28:22.540979 2025] [:error] [pid 35962:tid 35967] [client 66.249.64.101:49642] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTLB1p-hnYjbYINfh7GViAAAAEM"]
[Fri Dec 05 19:28:25.540443 2025] [:error] [pid 18521:tid 18575] [client 66.249.64.101:53297] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTLB2U_hJ6r18UnAijxryQAAANg"]
[Fri Dec 05 19:28:31.935885 2025] [:error] [pid 18520:tid 18544] [client 66.249.64.101:46841] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTLB34OC8XSo46ZrIePN9wAAAJQ"]
[Fri Dec 05 19:28:35.777099 2025] [:error] [pid 18521:tid 18564] [client 66.249.64.101:39834] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTLB40_hJ6r18UnAijxr2AAAAM0"]
[Fri Dec 05 19:28:40.614004 2025] [:error] [pid 18579:tid 18601] [client 66.249.64.101:39141] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTLB6MAUSulJty2JiBqHEQAAABA"]
[Fri Dec 05 19:35:22.815876 2025] [:error] [pid 18520:tid 18530] [client 66.249.64.101:48540] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTLDeoOC8XSo46ZrIePQ1AAAAIY"]
[Fri Dec 05 19:35:29.704821 2025] [:error] [pid 35962:tid 35979] [client 66.249.64.101:46597] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTLDgZ-hnYjbYINfh7GZsAAAAE8"]
[Fri Dec 05 19:35:31.399870 2025] [:error] [pid 18614:tid 18634] [client 66.249.64.101:37675] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTLDg3Hum9jj9plt7MVGhwAAAVI"]
[Fri Dec 05 19:35:35.633351 2025] [:error] [pid 35962:tid 35978] [client 66.249.64.101:37816] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTLDh5-hnYjbYINfh7GZvgAAAE4"]
[Fri Dec 05 19:35:40.887129 2025] [:error] [pid 18614:tid 18635] [client 66.249.64.101:36078] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTLDjHHum9jj9plt7MVGkwAAAVM"]
[Fri Dec 05 19:35:49.981680 2025] [:error] [pid 18521:tid 18556] [client 66.249.64.101:40731] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTLDlU_hJ6r18UnAijxupwAAAMU"]
[Fri Dec 05 19:35:59.456483 2025] [:error] [pid 18521:tid 18566] [client 66.249.64.101:36519] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTLDn0_hJ6r18UnAijxuxgAAAM8"]
[Fri Dec 05 19:36:12.232864 2025] [:error] [pid 18614:tid 18619] [client 66.249.64.101:56118] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTLDrHHum9jj9plt7MVGxgAAAUM"]
[Fri Dec 05 19:36:17.972302 2025] [:error] [pid 18520:tid 18548] [client 66.249.64.101:36009] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTLDsYOC8XSo46ZrIePRFAAAAJg"]
[Fri Dec 05 19:37:51.255377 2025] [:error] [pid 35962:tid 35978] [client 66.249.64.101:58417] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTLED5-hnYjbYINfh7Ga3QAAAE4"]
[Fri Dec 05 19:37:59.773749 2025] [:error] [pid 18614:tid 18621] [client 66.249.64.101:56554] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTLEF3Hum9jj9plt7MVHjgAAAUU"]
[Fri Dec 05 19:38:22.717194 2025] [:error] [pid 18520:tid 18532] [client 66.249.64.101:62156] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTLELoOC8XSo46ZrIePRmgAAAIg"]
[Fri Dec 05 19:38:30.172739 2025] [:error] [pid 35962:tid 35965] [client 66.249.64.101:54689] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTLENp-hnYjbYINfh7GbCwAAAEE"]
[Fri Dec 05 19:38:36.735200 2025] [:error] [pid 18579:tid 18589] [client 66.249.64.101:63984] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTLEPMAUSulJty2JiBqLeQAAAAQ"]
[Fri Dec 05 19:38:40.284350 2025] [:error] [pid 35962:tid 35986] [client 66.249.64.101:54637] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTLEQJ-hnYjbYINfh7GbHgAAAFY"]
[Fri Dec 05 20:35:42.830397 2025] [:error] [pid 18521:tid 18558] [client 66.249.64.101:39071] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTLRnk_hJ6r18UnAijyB9QAAAMc"]
[Fri Dec 05 20:35:52.054847 2025] [:error] [pid 18520:tid 18540] [client 66.249.64.101:39307] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTLRqIOC8XSo46ZrIePh4wAAAJA"]
[Fri Dec 05 20:36:00.263825 2025] [:error] [pid 18520:tid 18539] [client 66.249.64.101:37122] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTLRsIOC8XSo46ZrIePh5gAAAI8"]
[Fri Dec 05 20:36:04.934594 2025] [:error] [pid 18614:tid 18637] [client 66.249.64.101:53240] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTLRtHHum9jj9plt7MVctwAAAVU"]
[Fri Dec 05 20:36:12.667038 2025] [:error] [pid 18614:tid 18618] [client 66.249.64.101:49215] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTLRvHHum9jj9plt7MVcvQAAAUI"]
[Fri Dec 05 20:36:18.608276 2025] [:error] [pid 18521:tid 18555] [client 66.249.64.101:57941] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTLRwk_hJ6r18UnAijyCJAAAAMQ"]
[Fri Dec 05 20:36:24.937414 2025] [:error] [pid 35962:tid 35981] [client 66.249.64.101:53062] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTLRyJ-hnYjbYINfh7G16AAAAFE"]
[Fri Dec 05 20:38:58.759893 2025] [:error] [pid 18614:tid 18633] [client 66.249.64.101:37968] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTLSYnHum9jj9plt7MVd0wAAAVE"]
[Fri Dec 05 20:39:04.418672 2025] [:error] [pid 18521:tid 18565] [client 66.249.64.101:37365] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTLSaE_hJ6r18UnAijyC3gAAAM4"]
[Fri Dec 05 20:39:08.552424 2025] [:error] [pid 35962:tid 35988] [client 66.249.64.101:51994] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTLSbJ-hnYjbYINfh7G3TwAAAFg"]
[Fri Dec 05 20:39:16.200712 2025] [:error] [pid 18520:tid 18537] [client 66.249.64.101:62435] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTLSdIOC8XSo46ZrIePi6QAAAI0"]
[Fri Dec 05 20:39:22.041456 2025] [:error] [pid 18521:tid 18552] [client 66.249.64.101:58672] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTLSek_hJ6r18UnAijyC5QAAAME"]
[Fri Dec 05 20:39:37.627341 2025] [:error] [pid 18579:tid 18604] [client 66.249.64.101:48398] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTLSicAUSulJty2JiBqf4AAAABM"]
[Fri Dec 05 20:39:48.011031 2025] [:error] [pid 18520:tid 18526] [client 66.249.64.101:38141] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTLSlIOC8XSo46ZrIePi-QAAAII"]
[Fri Dec 05 21:40:22.585727 2025] [:error] [pid 18614:tid 18621] [client 66.249.64.101:35932] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTLgxnHum9jj9plt7MVzhwAAAUU"]
[Fri Dec 05 21:40:40.867807 2025] [:error] [pid 18614:tid 18620] [client 66.249.64.101:65466] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTLg2HHum9jj9plt7MVzmAAAAUQ"]
[Fri Dec 05 21:40:54.910479 2025] [:error] [pid 18614:tid 18621] [client 66.249.64.101:60764] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTLg5nHum9jj9plt7MVztAAAAUU"]
[Fri Dec 05 21:41:02.971476 2025] [:error] [pid 35962:tid 35978] [client 66.249.64.101:56784] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTLg7p-hnYjbYINfh7HTWwAAAE4"]
[Fri Dec 05 21:41:09.752153 2025] [:error] [pid 18521:tid 18569] [client 66.249.64.101:50847] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTLg9U_hJ6r18UnAijyURQAAANI"]
[Fri Dec 05 21:44:32.079419 2025] [:error] [pid 18520:tid 18543] [client 66.249.64.101:46153] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTLhwIOC8XSo46ZrIePz7gAAAJM"]
[Fri Dec 05 22:35:51.213991 2025] [:error] [pid 18520:tid 18526] [client 66.249.64.101:51089] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTLtx4OC8XSo46ZrIeMBAQAAAII"]
[Fri Dec 05 22:35:55.602684 2025] [:error] [pid 35962:tid 35965] [client 66.249.64.101:46803] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTLty5-hnYjbYINfh7HuTQAAAEE"]
[Fri Dec 05 22:36:10.867250 2025] [:error] [pid 18521:tid 18565] [client 66.249.64.101:35896] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTLt2k_hJ6r18UnAijyiKQAAAM4"]
[Fri Dec 05 22:36:17.717172 2025] [:error] [pid 18614:tid 18616] [client 66.249.64.101:39073] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTLt4XHum9jj9plt7MWFmwAAAUA"]
[Fri Dec 05 22:36:32.953706 2025] [:error] [pid 35962:tid 35969] [client 66.249.64.101:34858] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTLt8J-hnYjbYINfh7HuowAAAEU"]
[Sat Dec 06 05:02:31.815959 2025] [:error] [pid 35622:tid 35670] [client 182.42.111.213:57932] [client 182.42.111.213] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.paramountbaldivis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.paramountbaldivis.com"] [uri "/"] [unique_id "aTNIZyOSP_9DVLgFwI4HdwAAAZM"]
[Sat Dec 06 13:01:50.009371 2025] [:error] [pid 35622:tid 35659] [client 66.249.64.101:42846] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTO4viOSP_9DVLgFwI6I-QAAAYg"]
[Sat Dec 06 13:01:57.476678 2025] [:error] [pid 48399:tid 48403] [client 66.249.64.101:45081] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTO4xejNPOrIshd8EweFGQAAAcI"]
[Sat Dec 06 13:02:04.857605 2025] [:error] [pid 52809:tid 52820] [client 66.249.64.101:52471] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTO4zOrRwgsmpIJQ2qY3wQAAAgk"]
[Sat Dec 06 13:02:19.982190 2025] [:error] [pid 35591:tid 35606] [client 66.249.64.101:45675] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTO424bmw-7bFvTxc9PbgwAAAQ0"]
[Sat Dec 06 13:02:24.237016 2025] [:error] [pid 35591:tid 35615] [client 66.249.64.101:45113] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTO44Ibmw-7bFvTxc9PbhQAAARY"]
[Sat Dec 06 13:02:28.770102 2025] [:error] [pid 61216:tid 61264] [client 66.249.64.101:53194] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTO45DHlXXVdP5ewviXK3wAAAFI"]
[Sat Dec 06 13:02:32.994640 2025] [:error] [pid 1727:tid 1743] [client 66.249.64.101:46088] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTO46MD83luYT37-ZaXO-wAAAk4"]
[Sat Dec 06 13:02:37.370304 2025] [:error] [pid 1838:tid 1863] [client 66.249.64.101:62742] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTO47S5zgnu67Yo7vraecAAAApE"]
[Sat Dec 06 17:08:30.018895 2025] [:error] [pid 1838:tid 1852] [client 182.42.110.255:32941] [client 182.42.110.255] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.paramountbaldivis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.paramountbaldivis.com"] [uri "/"] [unique_id "aTPyji5zgnu67Yo7vrbdugAAAoY"]
[Sat Dec 06 20:06:12.893384 2025] [:error] [pid 52809:tid 52825] [client 66.249.64.101:40516] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQcNOrRwgsmpIJQ2qZ8xQAAAg4"]
[Sat Dec 06 20:06:16.222244 2025] [:error] [pid 61216:tid 61268] [client 66.249.64.101:48608] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQcODHlXXVdP5ewviUiCQAAAFY"]
[Sat Dec 06 20:06:19.390852 2025] [:error] [pid 61303:tid 61312] [client 66.249.64.101:39295] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQcO9wK_fe00OH7zy6YwwAAAMY"]
[Sat Dec 06 20:06:22.686599 2025] [:error] [pid 61216:tid 61269] [client 66.249.64.101:58300] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQcPjHlXXVdP5ewviUiDgAAAFc"]
[Sat Dec 06 20:06:26.012460 2025] [:error] [pid 35591:tid 35597] [client 66.249.64.101:59789] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQcQobmw-7bFvTxc9MYlQAAAQQ"]
[Sat Dec 06 20:06:40.601517 2025] [:error] [pid 52809:tid 52835] [client 66.249.64.101:45092] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQcUOrRwgsmpIJQ2qZ80gAAAhg"]
[Sat Dec 06 20:06:43.776047 2025] [:error] [pid 61215:tid 61228] [client 66.249.64.101:55033] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQcU-OOZ8nTCBYuI-xLbAAAAAk"]
[Sat Dec 06 20:06:46.961594 2025] [:error] [pid 61216:tid 61251] [client 66.249.64.101:49294] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQcVjHlXXVdP5ewviUiFAAAAEU"]
[Sat Dec 06 20:06:50.134323 2025] [:error] [pid 1838:tid 1869] [client 66.249.64.101:55892] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQcWi5zgnu67Yo7vrYSCAAAApc"]
[Sat Dec 06 20:06:56.238773 2025] [:error] [pid 48399:tid 48416] [client 66.249.64.101:57101] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQcYOjNPOrIshd8Ewe76gAAAc8"]
[Sat Dec 06 20:10:44.538889 2025] [:error] [pid 1727:tid 1743] [client 66.249.64.101:39869] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQdRMD83luYT37-ZaUM-gAAAk4"]
[Sat Dec 06 20:10:47.841767 2025] [:error] [pid 35591:tid 35606] [client 66.249.64.101:64130] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQdR4bmw-7bFvTxc9MZsgAAAQ0"]
[Sat Dec 06 20:10:51.259146 2025] [:error] [pid 52809:tid 52818] [client 66.249.64.101:61727] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQdS-rRwgsmpIJQ2qZ9ngAAAgc"]
[Sat Dec 06 20:10:54.467403 2025] [:error] [pid 1838:tid 1856] [client 66.249.64.101:57312] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQdTi5zgnu67Yo7vrYTJQAAAoo"]
[Sat Dec 06 20:10:57.767878 2025] [:error] [pid 1838:tid 1853] [client 66.249.64.101:47766] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQdUS5zgnu67Yo7vrYTLQAAAoc"]
[Sat Dec 06 20:10:58.943632 2025] [:error] [pid 61216:tid 61258] [client 66.249.64.101:44777] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQdUjHlXXVdP5ewviUjMAAAAEw"]
[Sat Dec 06 20:11:11.298657 2025] [:error] [pid 61216:tid 61255] [client 66.249.64.101:51475] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQdXzHlXXVdP5ewviUjPAAAAEk"]
[Sat Dec 06 20:11:14.589977 2025] [:error] [pid 35591:tid 35599] [client 66.249.64.101:41400] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQdYobmw-7bFvTxc9MZuwAAAQY"]
[Sat Dec 06 20:11:17.262740 2025] [:error] [pid 48399:tid 48413] [client 66.249.64.101:43854] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQdZejNPOrIshd8Ewe8hAAAAcw"]
[Sat Dec 06 20:11:20.575731 2025] [:error] [pid 61216:tid 61263] [client 66.249.64.101:35504] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQdaDHlXXVdP5ewviUjSAAAAFE"]
[Sat Dec 06 20:11:23.886741 2025] [:error] [pid 35591:tid 35614] [client 66.249.64.101:37675] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQda4bmw-7bFvTxc9MZyAAAARU"]
[Sat Dec 06 20:11:27.090224 2025] [:error] [pid 1727:tid 1736] [client 66.249.64.101:41153] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQdb8D83luYT37-ZaUNFgAAAkc"]
[Sat Dec 06 20:11:28.527068 2025] [:error] [pid 1838:tid 1853] [client 66.249.64.101:56824] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQdcC5zgnu67Yo7vrYTYQAAAoc"]
[Sat Dec 06 20:11:30.281390 2025] [:error] [pid 1838:tid 1850] [client 66.249.64.101:51929] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQdci5zgnu67Yo7vrYTZAAAAoQ"]
[Sat Dec 06 20:11:32.885867 2025] [:error] [pid 1838:tid 1867] [client 66.249.64.101:40751] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQddC5zgnu67Yo7vrYTbgAAApU"]
[Sat Dec 06 20:11:35.360145 2025] [:error] [pid 61215:tid 61233] [client 66.249.64.101:50558] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQdd-OOZ8nTCBYuI-xMHAAAAA4"]
[Sat Dec 06 20:12:37.349886 2025] [:error] [pid 61303:tid 61324] [client 66.249.64.101:39543] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQdtdwK_fe00OH7zy6Z-AAAANE"]
[Sat Dec 06 20:12:40.676945 2025] [:error] [pid 61217:tid 61283] [client 66.249.64.101:61194] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQduFdSKQYfLI3fYo6GkQAAAIo"]
[Sat Dec 06 20:12:43.858768 2025] [:error] [pid 61216:tid 61254] [client 66.249.64.101:48917] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQduzHlXXVdP5ewviUjfwAAAEg"]
[Sat Dec 06 20:12:46.046018 2025] [:error] [pid 48399:tid 48424] [client 66.249.64.101:60741] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQdvujNPOrIshd8Ewe8swAAAdc"]
[Sat Dec 06 20:12:49.472634 2025] [:error] [pid 48399:tid 48410] [client 66.249.64.101:46227] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQdwejNPOrIshd8Ewe8uQAAAck"]
[Sat Dec 06 20:12:52.783562 2025] [:error] [pid 48399:tid 48411] [client 66.249.64.101:58422] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQdxOjNPOrIshd8Ewe8uwAAAco"]
[Sat Dec 06 20:12:56.064740 2025] [:error] [pid 61217:tid 61279] [client 66.249.64.101:52068] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQdyFdSKQYfLI3fYo6GlgAAAIY"]
[Sat Dec 06 20:13:08.271670 2025] [:error] [pid 61215:tid 61222] [client 66.249.64.101:35202] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQd1OOOZ8nTCBYuI-xMeAAAAAM"]
[Sat Dec 06 20:13:12.749933 2025] [:error] [pid 1838:tid 1852] [client 66.249.64.101:40390] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQd2C5zgnu67Yo7vrYT0QAAAoY"]
[Sat Dec 06 20:13:14.188562 2025] [:error] [pid 35591:tid 35613] [client 66.249.64.101:49793] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQd2obmw-7bFvTxc9MaHwAAARQ"]
[Sat Dec 06 20:13:23.275535 2025] [:error] [pid 52809:tid 52821] [client 66.249.64.101:45623] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQd4-rRwgsmpIJQ2qZ-SAAAAgo"]
[Sat Dec 06 20:19:36.910698 2025] [:error] [pid 52809:tid 52831] [client 66.249.64.101:47730] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQfWOrRwgsmpIJQ2qZ_fQAAAhQ"]
[Sat Dec 06 20:19:45.079965 2025] [:error] [pid 48399:tid 48411] [client 66.249.64.101:54134] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQfYejNPOrIshd8Ewe96AAAAco"]
[Sat Dec 06 20:19:55.532668 2025] [:error] [pid 1727:tid 1751] [client 66.249.64.101:50892] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQfa8D83luYT37-ZaUOjwAAAlY"]
[Sat Dec 06 20:20:08.655359 2025] [:error] [pid 61215:tid 61225] [client 66.249.64.101:51096] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQfeOOOZ8nTCBYuI-xNkQAAAAY"]
[Sat Dec 06 20:24:33.509892 2025] [:error] [pid 61303:tid 61308] [client 66.249.64.101:43723] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQggdwK_fe00OH7zy6b8QAAAMI"]
[Sat Dec 06 20:24:36.799427 2025] [:error] [pid 1838:tid 1860] [client 66.249.64.101:57318] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQghC5zgnu67Yo7vrYXEwAAAo4"]
[Sat Dec 06 20:27:40.315347 2025] [:error] [pid 61215:tid 61223] [client 66.249.64.101:61190] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQhPOOOZ8nTCBYuI-xPLwAAAAQ"]
[Sat Dec 06 20:27:43.795593 2025] [:error] [pid 61217:tid 61284] [client 66.249.64.101:45006] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQhP1dSKQYfLI3fYo6IbgAAAIs"]
[Sat Dec 06 20:27:46.377869 2025] [:error] [pid 1838:tid 1861] [client 66.249.64.101:39856] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQhQi5zgnu67Yo7vrYYJwAAAo8"]
[Sat Dec 06 20:27:48.855601 2025] [:error] [pid 61217:tid 61296] [client 66.249.64.101:47921] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQhRFdSKQYfLI3fYo6IdgAAAJc"]
[Sat Dec 06 20:27:51.464720 2025] [:error] [pid 48399:tid 48406] [client 66.249.64.101:47738] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQhR-jNPOrIshd8Ewe-9gAAAcU"]
[Sat Dec 06 20:27:54.058905 2025] [:error] [pid 61303:tid 61318] [client 66.249.64.101:35118] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQhStwK_fe00OH7zy6cywAAAMw"]
[Sat Dec 06 20:27:56.801610 2025] [:error] [pid 35591:tid 35614] [client 66.249.64.101:41771] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQhTIbmw-7bFvTxc9McyAAAARU"]
[Sat Dec 06 20:27:59.419176 2025] [:error] [pid 1838:tid 1859] [client 66.249.64.101:38855] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQhTy5zgnu67Yo7vrYYOAAAAo0"]
[Sat Dec 06 20:28:03.678238 2025] [:error] [pid 61215:tid 61222] [client 66.249.64.101:64203] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQhU-OOZ8nTCBYuI-xPPgAAAAM"]
[Sat Dec 06 20:28:11.592469 2025] [:error] [pid 52809:tid 52833] [client 66.249.64.101:36093] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQhW-rRwgsmpIJQ2qaA4gAAAhY"]
[Sat Dec 06 20:28:14.762927 2025] [:error] [pid 61216:tid 61261] [client 66.249.64.101:35462] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQhXjHlXXVdP5ewviUncgAAAE8"]
[Sat Dec 06 20:28:19.010108 2025] [:error] [pid 35591:tid 35594] [client 66.249.64.101:51385] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQhY4bmw-7bFvTxc9Mc4AAAAQE"]
[Sat Dec 06 20:28:21.446107 2025] [:error] [pid 61303:tid 61328] [client 66.249.64.101:38905] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQhZdwK_fe00OH7zy6c9wAAANU"]
[Sat Dec 06 20:28:24.622952 2025] [:error] [pid 61303:tid 61309] [client 66.249.64.101:62775] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQhaNwK_fe00OH7zy6c-gAAAMM"]
[Sat Dec 06 20:28:27.803057 2025] [:error] [pid 52809:tid 52825] [client 66.249.64.101:63516] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQha-rRwgsmpIJQ2qaA6gAAAg4"]
[Sat Dec 06 20:28:29.859624 2025] [:error] [pid 48399:tid 48411] [client 66.249.64.101:43064] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQhbejNPOrIshd8Ewe_BwAAAco"]
[Sat Dec 06 20:28:33.043185 2025] [:error] [pid 1727:tid 1731] [client 66.249.64.101:56401] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQhccD83luYT37-ZaUP9gAAAkI"]
[Sat Dec 06 20:28:36.278021 2025] [:error] [pid 1838:tid 1870] [client 66.249.64.101:42701] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQhdC5zgnu67Yo7vrYYZQAAApg"]
[Sat Dec 06 20:29:06.472473 2025] [:error] [pid 61303:tid 61314] [client 66.249.64.101:46253] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQhktwK_fe00OH7zy6dEgAAAMg"]
[Sat Dec 06 20:29:09.730717 2025] [:error] [pid 35622:tid 35659] [client 66.249.64.101:44602] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQhlSOSP_9DVLgFwI7EsAAAAYg"]
[Sat Dec 06 20:29:12.908243 2025] [:error] [pid 35591:tid 35595] [client 66.249.64.101:37811] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQhmIbmw-7bFvTxc9Mc-AAAAQI"]
[Sat Dec 06 20:29:14.943760 2025] [:error] [pid 61216:tid 61264] [client 66.249.64.101:36258] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQhmjHlXXVdP5ewviUnpAAAAFI"]
[Sat Dec 06 20:29:18.138528 2025] [:error] [pid 1838:tid 1861] [client 66.249.64.101:37790] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQhni5zgnu67Yo7vrYYjgAAAo8"]
[Sat Dec 06 20:29:21.312826 2025] [:error] [pid 35591:tid 35604] [client 66.249.64.101:39460] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQhoYbmw-7bFvTxc9MdAQAAAQs"]
[Sat Dec 06 20:29:24.639310 2025] [:error] [pid 1727:tid 1731] [client 66.249.64.101:36248] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQhpMD83luYT37-ZaUQFwAAAkI"]
[Sat Dec 06 20:29:27.819943 2025] [:error] [pid 61215:tid 61222] [client 66.249.64.101:49530] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQhp-OOZ8nTCBYuI-xPagAAAAM"]
[Sat Dec 06 20:29:31.156293 2025] [:error] [pid 61217:tid 61289] [client 66.249.64.101:46929] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQhq1dSKQYfLI3fYo6IqQAAAJA"]
[Sat Dec 06 20:29:34.453401 2025] [:error] [pid 61217:tid 61273] [client 66.249.64.101:36961] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQhrldSKQYfLI3fYo6IqwAAAIA"]
[Sat Dec 06 20:29:37.897674 2025] [:error] [pid 61216:tid 61263] [client 66.249.64.101:43947] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQhsTHlXXVdP5ewviUnswAAAFE"]
[Sat Dec 06 20:29:38.943920 2025] [:error] [pid 61216:tid 61259] [client 66.249.64.101:48344] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQhsjHlXXVdP5ewviUntQAAAE0"]
[Sat Dec 06 20:29:42.110663 2025] [:error] [pid 61216:tid 61262] [client 66.249.64.101:43249] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQhtjHlXXVdP5ewviUnuwAAAFA"]
[Sat Dec 06 20:29:45.293125 2025] [:error] [pid 48399:tid 48405] [client 66.249.64.101:35755] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQhuejNPOrIshd8Ewe_KQAAAcQ"]
[Sat Dec 06 20:29:48.605450 2025] [:error] [pid 48399:tid 48420] [client 66.249.64.101:52876] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQhvOjNPOrIshd8Ewe_KgAAAdM"]
[Sat Dec 06 20:29:49.785517 2025] [:error] [pid 1727:tid 1738] [client 66.249.64.101:37708] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQhvcD83luYT37-ZaUQIQAAAkk"]
[Sat Dec 06 20:29:53.091051 2025] [:error] [pid 1727:tid 1733] [client 66.249.64.101:37269] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQhwcD83luYT37-ZaUQIwAAAkQ"]
[Sat Dec 06 20:29:54.388363 2025] [:error] [pid 48399:tid 48404] [client 66.249.64.101:47399] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQhwujNPOrIshd8Ewe_LgAAAcM"]
[Sat Dec 06 20:29:55.554841 2025] [:error] [pid 1838:tid 1852] [client 66.249.64.101:58142] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQhwy5zgnu67Yo7vrYYqAAAAoY"]
[Sat Dec 06 20:29:56.865161 2025] [:error] [pid 1838:tid 1857] [client 66.249.64.101:50879] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQhxC5zgnu67Yo7vrYYrAAAAos"]
[Sat Dec 06 20:29:59.141212 2025] [:error] [pid 1838:tid 1868] [client 66.249.64.101:65005] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQhxy5zgnu67Yo7vrYYrwAAApY"]
[Sat Dec 06 20:30:01.738675 2025] [:error] [pid 35591:tid 35604] [client 66.249.64.101:54095] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQhyYbmw-7bFvTxc9MdGgAAAQs"]
[Sat Dec 06 20:30:35.861706 2025] [:error] [pid 61216:tid 61269] [client 66.249.64.101:63030] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQh6zHlXXVdP5ewviUn-AAAAFc"]
[Sat Dec 06 20:30:39.044464 2025] [:error] [pid 61303:tid 61324] [client 66.249.64.101:44771] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQh79wK_fe00OH7zy6dTAAAANE"]
[Sat Dec 06 20:30:42.228335 2025] [:error] [pid 48399:tid 48407] [client 66.249.64.101:36447] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQh8ujNPOrIshd8Ewe_VQAAAcY"]
[Sat Dec 06 20:30:45.517478 2025] [:error] [pid 61217:tid 61288] [client 66.249.64.101:52338] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQh9VdSKQYfLI3fYo6IxgAAAI8"]
[Sat Dec 06 20:30:48.855201 2025] [:error] [pid 35622:tid 35675] [client 66.249.64.101:43072] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQh-COSP_9DVLgFwI7EyQAAAZg"]
[Sat Dec 06 20:30:52.032092 2025] [:error] [pid 1838:tid 1855] [client 66.249.64.101:62100] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQh_C5zgnu67Yo7vrYYxwAAAok"]
[Sat Dec 06 20:30:55.205191 2025] [:error] [pid 35622:tid 35659] [client 66.249.64.101:59746] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQh_yOSP_9DVLgFwI7E2AAAAYg"]
[Sat Dec 06 20:30:58.514670 2025] [:error] [pid 52809:tid 52828] [client 66.249.64.101:43495] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQiAurRwgsmpIJQ2qaBNAAAAhE"]
[Sat Dec 06 20:31:01.122638 2025] [:error] [pid 61303:tid 61324] [client 66.249.64.101:51827] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQiBdwK_fe00OH7zy6dVQAAANE"]
[Sat Dec 06 20:31:02.456696 2025] [:error] [pid 61216:tid 61270] [client 66.249.64.101:57557] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQiBjHlXXVdP5ewviUoLAAAAFg"]
[Sat Dec 06 20:31:04.256531 2025] [:error] [pid 61216:tid 61262] [client 66.249.64.101:62423] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQiCDHlXXVdP5ewviUoMgAAAFA"]
[Sat Dec 06 20:31:06.853746 2025] [:error] [pid 61303:tid 61321] [client 66.249.64.101:34825] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQiCtwK_fe00OH7zy6dVwAAAM4"]
[Sat Dec 06 20:31:09.451449 2025] [:error] [pid 1838:tid 1860] [client 66.249.64.101:44915] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQiDS5zgnu67Yo7vrYY0AAAAo4"]
[Sat Dec 06 20:31:12.057720 2025] [:error] [pid 61303:tid 61312] [client 66.249.64.101:54635] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQiENwK_fe00OH7zy6dXQAAAMY"]
[Sat Dec 06 20:31:14.786724 2025] [:error] [pid 1838:tid 1846] [client 66.249.64.101:37036] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQiEi5zgnu67Yo7vrYY1AAAAoA"]
[Sat Dec 06 20:31:17.262781 2025] [:error] [pid 1838:tid 1848] [client 66.249.64.101:50634] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQiFS5zgnu67Yo7vrYY4AAAAoI"]
[Sat Dec 06 20:31:19.875280 2025] [:error] [pid 1727:tid 1737] [client 66.249.64.101:43687] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQiF8D83luYT37-ZaUQQAAAAkg"]
[Sat Dec 06 20:31:25.077128 2025] [:error] [pid 1838:tid 1849] [client 66.249.64.101:37374] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQiHS5zgnu67Yo7vrYY9QAAAoM"]
[Sat Dec 06 20:31:27.685996 2025] [:error] [pid 61303:tid 61312] [client 66.249.64.101:35864] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQiH9wK_fe00OH7zy6dZgAAAMY"]
[Sat Dec 06 20:31:30.982810 2025] [:error] [pid 35591:tid 35595] [client 66.249.64.101:59460] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQiIobmw-7bFvTxc9MdSwAAAQI"]
[Sat Dec 06 20:32:15.224522 2025] [:error] [pid 61217:tid 61288] [client 66.249.64.101:39164] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQiT1dSKQYfLI3fYo6I4gAAAI8"]
[Sat Dec 06 20:32:19.536379 2025] [:error] [pid 61303:tid 61330] [client 66.249.64.101:36044] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQiU9wK_fe00OH7zy6dkQAAANc"]
[Sat Dec 06 20:32:20.557423 2025] [:error] [pid 48399:tid 48404] [client 66.249.64.101:61611] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQiVOjNPOrIshd8Ewe_nwAAAcM"]
[Sat Dec 06 20:32:24.096387 2025] [:error] [pid 1727:tid 1733] [client 66.249.64.101:38288] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQiWMD83luYT37-ZaUQXwAAAkQ"]
[Sat Dec 06 20:32:27.441373 2025] [:error] [pid 48399:tid 48417] [client 66.249.64.101:63810] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQiW-jNPOrIshd8Ewe_qgAAAdA"]
[Sat Dec 06 20:32:28.612417 2025] [:error] [pid 1838:tid 1869] [client 66.249.64.101:41300] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQiXC5zgnu67Yo7vrYZSwAAApc"]
[Sat Dec 06 20:32:32.829816 2025] [:error] [pid 52809:tid 52828] [client 66.249.64.101:62213] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQiYOrRwgsmpIJQ2qaBdAAAAhE"]
[Sat Dec 06 20:32:35.428834 2025] [:error] [pid 61215:tid 61229] [client 66.249.64.101:56690] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQiY-OOZ8nTCBYuI-xPvQAAAAo"]
[Sat Dec 06 20:32:38.039791 2025] [:error] [pid 61303:tid 61315] [client 66.249.64.101:37921] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQiZtwK_fe00OH7zy6dpQAAAMk"]
[Sat Dec 06 20:32:40.631916 2025] [:error] [pid 1838:tid 1855] [client 66.249.64.101:44058] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQiaC5zgnu67Yo7vrYZVQAAAok"]
[Sat Dec 06 20:32:45.099515 2025] [:error] [pid 48399:tid 48412] [client 66.249.64.101:42411] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQibejNPOrIshd8Ewe_sgAAAcs"]
[Sat Dec 06 20:32:46.408622 2025] [:error] [pid 35591:tid 35613] [client 66.249.64.101:60574] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQibobmw-7bFvTxc9MdbgAAARQ"]
[Sat Dec 06 20:32:48.444252 2025] [:error] [pid 1838:tid 1859] [client 66.249.64.101:37983] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQicC5zgnu67Yo7vrYZWwAAAo0"]
[Sat Dec 06 20:32:51.050208 2025] [:error] [pid 35591:tid 35597] [client 66.249.64.101:37742] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQic4bmw-7bFvTxc9MddAAAAQQ"]
[Sat Dec 06 20:32:53.664277 2025] [:error] [pid 52809:tid 52832] [client 66.249.64.101:35125] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQiderRwgsmpIJQ2qaBhAAAAhU"]
[Sat Dec 06 20:32:56.266359 2025] [:error] [pid 35622:tid 35657] [client 66.249.64.101:35045] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQieCOSP_9DVLgFwI7FEwAAAYY"]
[Sat Dec 06 20:32:59.442098 2025] [:error] [pid 61303:tid 61331] [client 66.249.64.101:64987] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQie9wK_fe00OH7zy6dtAAAANg"]
[Sat Dec 06 20:33:37.243107 2025] [:error] [pid 61215:tid 61221] [client 66.249.64.101:46491] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQioeOOZ8nTCBYuI-xQCAAAAAI"]
[Sat Dec 06 20:33:40.448850 2025] [:error] [pid 61303:tid 61325] [client 66.249.64.101:41542] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQipNwK_fe00OH7zy6d1wAAANI"]
[Sat Dec 06 20:33:43.715372 2025] [:error] [pid 61303:tid 61309] [client 66.249.64.101:34944] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQip9wK_fe00OH7zy6d2wAAAMM"]
[Sat Dec 06 20:33:46.884045 2025] [:error] [pid 35591:tid 35617] [client 66.249.64.101:64712] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQiqobmw-7bFvTxc9MdngAAARg"]
[Sat Dec 06 20:33:49.962584 2025] [:error] [pid 61303:tid 61318] [client 66.249.64.101:50863] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQirdwK_fe00OH7zy6d5AAAAMw"]
[Sat Dec 06 20:33:53.117460 2025] [:error] [pid 61216:tid 61262] [client 66.249.64.101:59978] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQisTHlXXVdP5ewviUorQAAAFA"]
[Sat Dec 06 20:33:56.297973 2025] [:error] [pid 35591:tid 35598] [client 66.249.64.101:59672] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQitIbmw-7bFvTxc9MdrwAAAQU"]
[Sat Dec 06 20:33:59.478963 2025] [:error] [pid 1838:tid 1865] [client 66.249.64.101:61982] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQity5zgnu67Yo7vrYaBgAAApM"]
[Sat Dec 06 20:34:02.773658 2025] [:error] [pid 61303:tid 61318] [client 66.249.64.101:59887] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQiutwK_fe00OH7zy6eBAAAAMw"]
[Sat Dec 06 20:34:03.858594 2025] [:error] [pid 35622:tid 35652] [client 66.249.64.101:43075] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQiuyOSP_9DVLgFwI7FVAAAAYE"]
[Sat Dec 06 20:34:05.298362 2025] [:error] [pid 35622:tid 35667] [client 66.249.64.101:45653] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQivSOSP_9DVLgFwI7FVQAAAZA"]
[Sat Dec 06 20:34:06.512456 2025] [:error] [pid 35591:tid 35597] [client 66.249.64.101:54564] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQivobmw-7bFvTxc9MdwwAAAQQ"]
[Sat Dec 06 20:34:09.206708 2025] [:error] [pid 48399:tid 48402] [client 66.249.64.101:54883] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQiwejNPOrIshd8Ewe_9wAAAcE"]
[Sat Dec 06 20:34:11.826236 2025] [:error] [pid 61217:tid 61290] [client 66.249.64.101:45017] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQiw1dSKQYfLI3fYo6JIgAAAJE"]
[Sat Dec 06 20:34:14.417721 2025] [:error] [pid 61216:tid 61266] [client 66.249.64.101:44440] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQixjHlXXVdP5ewviUoxQAAAFQ"]
[Sat Dec 06 20:34:17.018685 2025] [:error] [pid 61303:tid 61307] [client 66.249.64.101:60991] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQiydwK_fe00OH7zy6eDwAAAME"]
[Sat Dec 06 20:34:19.628899 2025] [:error] [pid 61303:tid 61315] [client 66.249.64.101:44532] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQiy9wK_fe00OH7zy6eEgAAAMk"]
[Sat Dec 06 20:34:22.233023 2025] [:error] [pid 61216:tid 61254] [client 66.249.64.101:56743] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQizjHlXXVdP5ewviUo5gAAAEg"]
[Sat Dec 06 20:34:24.837645 2025] [:error] [pid 1838:tid 1865] [client 66.249.64.101:65014] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQi0C5zgnu67Yo7vrYaGwAAApM"]
[Sat Dec 06 20:34:27.425728 2025] [:error] [pid 61303:tid 61309] [client 66.249.64.101:50123] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQi09wK_fe00OH7zy6eJAAAAMM"]
[Sat Dec 06 20:34:30.050693 2025] [:error] [pid 35622:tid 35655] [client 66.249.64.101:58615] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQi1iOSP_9DVLgFwI7FaQAAAYQ"]
[Sat Dec 06 20:34:32.648137 2025] [:error] [pid 61303:tid 61325] [client 66.249.64.101:40563] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQi2NwK_fe00OH7zy6eLAAAANI"]
[Sat Dec 06 20:35:03.250004 2025] [:error] [pid 1727:tid 1739] [client 66.249.64.101:65208] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQi98D83luYT37-ZaUQ3wAAAko"]
[Sat Dec 06 20:35:06.504961 2025] [:error] [pid 48399:tid 48418] [client 66.249.64.101:48738] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQi-ujNPOrIshd8EwfAEgAAAdE"]
[Sat Dec 06 20:35:10.258329 2025] [:error] [pid 1727:tid 1750] [client 66.249.64.101:59656] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQi_sD83luYT37-ZaUQ5wAAAlU"]
[Sat Dec 06 20:35:11.857964 2025] [:error] [pid 1727:tid 1736] [client 66.249.64.101:63257] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQi_8D83luYT37-ZaUQ6wAAAkc"]
[Sat Dec 06 20:35:14.320720 2025] [:error] [pid 61216:tid 61259] [client 66.249.64.101:59755] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQjAjHlXXVdP5ewviUpQQAAAE0"]
[Sat Dec 06 20:35:17.064930 2025] [:error] [pid 35591:tid 35611] [client 66.249.64.101:42041] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQjBYbmw-7bFvTxc9MeBQAAARI"]
[Sat Dec 06 20:35:19.533928 2025] [:error] [pid 1838:tid 1846] [client 66.249.64.101:36704] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQjBy5zgnu67Yo7vrYaVQAAAoA"]
[Sat Dec 06 20:35:22.146620 2025] [:error] [pid 1727:tid 1753] [client 66.249.64.101:41550] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQjCsD83luYT37-ZaUQ8wAAAlg"]
[Sat Dec 06 20:35:24.744052 2025] [:error] [pid 61217:tid 61292] [client 66.249.64.101:41427] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQjDFdSKQYfLI3fYo6JWAAAAJM"]
[Sat Dec 06 20:35:27.361402 2025] [:error] [pid 61217:tid 61296] [client 66.249.64.101:57631] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQjD1dSKQYfLI3fYo6JXAAAAJc"]
[Sat Dec 06 20:35:30.094645 2025] [:error] [pid 61217:tid 61273] [client 66.249.64.101:62246] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQjEldSKQYfLI3fYo6JYQAAAIA"]
[Sat Dec 06 20:35:32.690140 2025] [:error] [pid 48399:tid 48409] [client 66.249.64.101:39892] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQjFOjNPOrIshd8EwfANAAAAcg"]
[Sat Dec 06 20:35:35.164973 2025] [:error] [pid 52809:tid 52832] [client 66.249.64.101:65531] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQjF-rRwgsmpIJQ2qaCGAAAAhU"]
[Sat Dec 06 20:35:37.756882 2025] [:error] [pid 1727:tid 1745] [client 66.249.64.101:45560] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQjGcD83luYT37-ZaUQ-QAAAlA"]
[Sat Dec 06 20:35:40.372584 2025] [:error] [pid 1727:tid 1752] [client 66.249.64.101:57690] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQjHMD83luYT37-ZaUQ-wAAAlc"]
[Sat Dec 06 20:35:42.968301 2025] [:error] [pid 61216:tid 61265] [client 66.249.64.101:61693] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQjHjHlXXVdP5ewviUpVgAAAFM"]
[Sat Dec 06 20:35:45.578161 2025] [:error] [pid 61216:tid 61253] [client 66.249.64.101:36349] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQjITHlXXVdP5ewviUpYgAAAEc"]
[Sat Dec 06 20:35:48.320477 2025] [:error] [pid 61217:tid 61288] [client 66.249.64.101:42949] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQjJFdSKQYfLI3fYo6JbgAAAI8"]
[Sat Dec 06 20:35:52.742798 2025] [:error] [pid 61303:tid 61309] [client 66.249.64.101:46455] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQjKNwK_fe00OH7zy6eggAAAMM"]
[Sat Dec 06 20:35:54.029639 2025] [:error] [pid 1838:tid 1850] [client 66.249.64.101:45282] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQjKi5zgnu67Yo7vrYagwAAAoQ"]
[Sat Dec 06 20:35:56.119211 2025] [:error] [pid 1838:tid 1849] [client 66.249.64.101:35665] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQjLC5zgnu67Yo7vrYahwAAAoM"]
[Sat Dec 06 20:35:58.602887 2025] [:error] [pid 1727:tid 1734] [client 66.249.64.101:37567] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQjLsD83luYT37-ZaURBgAAAkU"]
[Sat Dec 06 20:36:36.941275 2025] [:error] [pid 61215:tid 61224] [client 66.249.64.101:35899] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQjVOOOZ8nTCBYuI-xQqAAAAAU"]
[Sat Dec 06 20:36:40.744831 2025] [:error] [pid 1838:tid 1848] [client 66.249.64.101:44227] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQjWC5zgnu67Yo7vrYaugAAAoI"]
[Sat Dec 06 20:36:42.985874 2025] [:error] [pid 61216:tid 61258] [client 66.249.64.101:38104] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQjWjHlXXVdP5ewviUpigAAAEw"]
[Sat Dec 06 20:36:45.475774 2025] [:error] [pid 61215:tid 61225] [client 66.249.64.101:50612] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQjXeOOZ8nTCBYuI-xQrwAAAAY"]
[Sat Dec 06 20:36:48.228758 2025] [:error] [pid 1838:tid 1847] [client 66.249.64.101:56062] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQjYC5zgnu67Yo7vrYa0QAAAoE"]
[Sat Dec 06 20:36:51.432349 2025] [:error] [pid 1727:tid 1750] [client 66.249.64.101:57465] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQjY8D83luYT37-ZaURHAAAAlU"]
[Sat Dec 06 20:36:54.604983 2025] [:error] [pid 1727:tid 1729] [client 66.249.64.101:35729] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQjZsD83luYT37-ZaURHwAAAkA"]
[Sat Dec 06 20:36:57.776852 2025] [:error] [pid 61217:tid 61278] [client 66.249.64.101:52870] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQjaVdSKQYfLI3fYo6JgwAAAIU"]
[Sat Dec 06 20:37:01.064537 2025] [:error] [pid 48399:tid 48416] [client 66.249.64.101:37745] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQjbejNPOrIshd8EwfAcQAAAc8"]
[Sat Dec 06 20:37:04.374919 2025] [:error] [pid 35622:tid 35651] [client 66.249.64.101:39940] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQjcCOSP_9DVLgFwI7F4gAAAYA"]
[Sat Dec 06 20:37:07.555725 2025] [:error] [pid 61215:tid 61226] [client 66.249.64.101:46818] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQjc-OOZ8nTCBYuI-xQuAAAAAc"]
[Sat Dec 06 20:37:10.731176 2025] [:error] [pid 35622:tid 35672] [client 66.249.64.101:61132] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQjdiOSP_9DVLgFwI7F6AAAAZU"]
[Sat Dec 06 20:37:12.180596 2025] [:error] [pid 1838:tid 1855] [client 66.249.64.101:55373] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQjeC5zgnu67Yo7vrYa_QAAAok"]
[Sat Dec 06 20:37:13.472639 2025] [:error] [pid 1727:tid 1738] [client 66.249.64.101:54690] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQjecD83luYT37-ZaURLAAAAkk"]
[Sat Dec 06 20:37:14.791639 2025] [:error] [pid 61216:tid 61261] [client 66.249.64.101:44264] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQjejHlXXVdP5ewviUpqwAAAE8"]
[Sat Dec 06 20:37:16.745132 2025] [:error] [pid 61216:tid 61253] [client 66.249.64.101:54898] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQjfDHlXXVdP5ewviUptgAAAEc"]
[Sat Dec 06 20:37:19.361103 2025] [:error] [pid 1727:tid 1735] [client 66.249.64.101:55024] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQjf8D83luYT37-ZaUROAAAAkY"]
[Sat Dec 06 20:37:21.949911 2025] [:error] [pid 52809:tid 52826] [client 66.249.64.101:53813] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQjgerRwgsmpIJQ2qaCUwAAAg8"]
[Sat Dec 06 20:37:24.551497 2025] [:error] [pid 1838:tid 1848] [client 66.249.64.101:44981] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQjhC5zgnu67Yo7vrYbGQAAAoI"]
[Sat Dec 06 20:37:27.152369 2025] [:error] [pid 61217:tid 61290] [client 66.249.64.101:35164] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQjh1dSKQYfLI3fYo6JjgAAAJE"]
[Sat Dec 06 20:37:29.763810 2025] [:error] [pid 52809:tid 52818] [client 66.249.64.101:59688] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQjierRwgsmpIJQ2qaCWAAAAgc"]
[Sat Dec 06 20:37:32.502696 2025] [:error] [pid 35591:tid 35606] [client 66.249.64.101:63737] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQjjIbmw-7bFvTxc9MeTQAAAQ0"]
[Sat Dec 06 20:38:08.964378 2025] [:error] [pid 61303:tid 61313] [client 66.249.64.101:60655] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQjsNwK_fe00OH7zy6eyQAAAMc"]
[Sat Dec 06 20:38:10.737699 2025] [:error] [pid 61215:tid 61229] [client 66.249.64.101:57157] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQjsuOOZ8nTCBYuI-xQ4QAAAAo"]
[Sat Dec 06 20:38:14.171313 2025] [:error] [pid 1838:tid 1855] [client 66.249.64.101:62739] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQjti5zgnu67Yo7vrYbTgAAAok"]
[Sat Dec 06 20:38:18.516140 2025] [:error] [pid 61216:tid 61267] [client 66.249.64.101:43615] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQjujHlXXVdP5ewviUp7AAAAFU"]
[Sat Dec 06 20:38:23.367543 2025] [:error] [pid 61303:tid 61330] [client 66.249.64.101:36004] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQjv9wK_fe00OH7zy6e5AAAANc"]
[Sat Dec 06 20:38:26.548285 2025] [:error] [pid 61215:tid 61225] [client 66.249.64.101:51771] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQjwuOOZ8nTCBYuI-xQ8gAAAAY"]
[Sat Dec 06 20:38:29.725344 2025] [:error] [pid 61215:tid 61238] [client 66.249.64.101:57798] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQjxeOOZ8nTCBYuI-xQ9QAAABM"]
[Sat Dec 06 20:38:33.024261 2025] [:error] [pid 61215:tid 61223] [client 66.249.64.101:46721] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQjyeOOZ8nTCBYuI-xQ9wAAAAQ"]
[Sat Dec 06 20:38:36.199292 2025] [:error] [pid 52809:tid 52821] [client 66.249.64.101:64799] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQjzOrRwgsmpIJQ2qaCbgAAAgo"]
[Sat Dec 06 20:38:39.507540 2025] [:error] [pid 61217:tid 61283] [client 66.249.64.101:63454] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQjz1dSKQYfLI3fYo6JqwAAAIo"]
[Sat Dec 06 20:38:42.807148 2025] [:error] [pid 35622:tid 35652] [client 66.249.64.101:52300] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQj0iOSP_9DVLgFwI7GBgAAAYE"]
[Sat Dec 06 20:38:46.130245 2025] [:error] [pid 1838:tid 1859] [client 66.249.64.101:49034] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQj1i5zgnu67Yo7vrYbZgAAAo0"]
[Sat Dec 06 20:38:49.316078 2025] [:error] [pid 1838:tid 1848] [client 66.249.64.101:44843] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQj2S5zgnu67Yo7vrYbcAAAAoI"]
[Sat Dec 06 20:38:52.643671 2025] [:error] [pid 61216:tid 61269] [client 66.249.64.101:54811] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQj3DHlXXVdP5ewviUp_gAAAFc"]
[Sat Dec 06 20:38:58.271854 2025] [:error] [pid 52809:tid 52835] [client 66.249.64.101:51307] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQj4urRwgsmpIJQ2qaCfAAAAhg"]
[Sat Dec 06 20:39:01.454943 2025] [:error] [pid 61216:tid 61266] [client 66.249.64.101:65120] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQj5THlXXVdP5ewviUqCgAAAFQ"]
[Sat Dec 06 20:39:04.748482 2025] [:error] [pid 1838:tid 1849] [client 66.249.64.101:37354] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQj6C5zgnu67Yo7vrYbhAAAAoM"]
[Sat Dec 06 20:39:29.845718 2025] [:error] [pid 1838:tid 1868] [client 66.249.64.101:42103] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQkAS5zgnu67Yo7vrYbsgAAApY"]
[Sat Dec 06 20:39:33.152532 2025] [:error] [pid 1727:tid 1742] [client 66.249.64.101:63769] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQkBcD83luYT37-ZaURggAAAk0"]
[Sat Dec 06 20:39:36.453354 2025] [:error] [pid 61303:tid 61321] [client 66.249.64.101:36580] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQkCNwK_fe00OH7zy6fFwAAAM4"]
[Sat Dec 06 20:39:37.643515 2025] [:error] [pid 35591:tid 35597] [client 66.249.64.101:45351] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQkCYbmw-7bFvTxc9MekwAAAQQ"]
[Sat Dec 06 20:39:39.318651 2025] [:error] [pid 35591:tid 35615] [client 66.249.64.101:44818] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQkC4bmw-7bFvTxc9MelQAAARY"]
[Sat Dec 06 20:39:41.790239 2025] [:error] [pid 61303:tid 61313] [client 66.249.64.101:52191] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQkDdwK_fe00OH7zy6fGQAAAMc"]
[Sat Dec 06 20:39:44.404724 2025] [:error] [pid 61216:tid 61253] [client 66.249.64.101:45736] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQkEDHlXXVdP5ewviUqOwAAAEc"]
[Sat Dec 06 20:39:46.998046 2025] [:error] [pid 61216:tid 61249] [client 66.249.64.101:37763] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQkEjHlXXVdP5ewviUqQwAAAEM"]
[Sat Dec 06 20:39:49.612090 2025] [:error] [pid 1838:tid 1849] [client 66.249.64.101:45070] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQkFS5zgnu67Yo7vrYbvAAAAoM"]
[Sat Dec 06 20:39:52.345739 2025] [:error] [pid 48399:tid 48424] [client 66.249.64.101:57798] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQkGOjNPOrIshd8EwfA3AAAAdc"]
[Sat Dec 06 20:39:54.814770 2025] [:error] [pid 1838:tid 1864] [client 66.249.64.101:60182] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQkGi5zgnu67Yo7vrYbwQAAApI"]
[Sat Dec 06 20:39:57.556136 2025] [:error] [pid 52809:tid 52828] [client 66.249.64.101:44659] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQkHerRwgsmpIJQ2qaCogAAAhE"]
[Sat Dec 06 20:40:00.019076 2025] [:error] [pid 1727:tid 1732] [client 66.249.64.101:53589] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQkIMD83luYT37-ZaURigAAAkM"]
[Sat Dec 06 20:40:02.767660 2025] [:error] [pid 1727:tid 1748] [client 66.249.64.101:37681] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQkIsD83luYT37-ZaURjAAAAlM"]
[Sat Dec 06 20:40:05.373053 2025] [:error] [pid 35591:tid 35604] [client 66.249.64.101:50344] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQkJYbmw-7bFvTxc9MemQAAAQs"]
[Sat Dec 06 20:40:07.864038 2025] [:error] [pid 1838:tid 1859] [client 66.249.64.101:58565] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQkJy5zgnu67Yo7vrYbywAAAo0"]
[Sat Dec 06 20:40:10.447302 2025] [:error] [pid 35622:tid 35670] [client 66.249.64.101:37356] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQkKiOSP_9DVLgFwI7GMgAAAZM"]
[Sat Dec 06 20:40:13.189152 2025] [:error] [pid 1838:tid 1862] [client 66.249.64.101:48248] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQkLS5zgnu67Yo7vrYb1QAAApA"]
[Sat Dec 06 20:40:15.776847 2025] [:error] [pid 35622:tid 35652] [client 66.249.64.101:58793] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQkLyOSP_9DVLgFwI7GNQAAAYE"]
[Sat Dec 06 20:40:18.383693 2025] [:error] [pid 1727:tid 1740] [client 66.249.64.101:37341] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQkMsD83luYT37-ZaURlQAAAks"]
[Sat Dec 06 20:40:20.771795 2025] [:error] [pid 1727:tid 1737] [client 66.249.64.101:37809] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQkNMD83luYT37-ZaURmAAAAkg"]
[Sat Dec 06 20:40:23.603889 2025] [:error] [pid 1838:tid 1857] [client 66.249.64.101:44112] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQkNy5zgnu67Yo7vrYb3QAAAos"]
[Sat Dec 06 20:40:53.990030 2025] [:error] [pid 61216:tid 61270] [client 66.249.64.101:64155] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQkVTHlXXVdP5ewviUqiAAAAFg"]
[Sat Dec 06 20:40:57.305844 2025] [:error] [pid 61215:tid 61224] [client 66.249.64.101:60750] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQkWeOOZ8nTCBYuI-xRNgAAAAU"]
[Sat Dec 06 20:41:00.045667 2025] [:error] [pid 61303:tid 61328] [client 66.249.64.101:39360] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQkXNwK_fe00OH7zy6fPgAAANU"]
[Sat Dec 06 20:41:03.410934 2025] [:error] [pid 61303:tid 61326] [client 66.249.64.101:54549] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQkX9wK_fe00OH7zy6fRAAAANM"]
[Sat Dec 06 20:41:06.726297 2025] [:error] [pid 1838:tid 1852] [client 66.249.64.101:37518] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQkYi5zgnu67Yo7vrYcDgAAAoY"]
[Sat Dec 06 20:41:12.198904 2025] [:error] [pid 35591:tid 35606] [client 66.249.64.101:41466] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQkaIbmw-7bFvTxc9Me1wAAAQ0"]
[Sat Dec 06 20:41:14.506838 2025] [:error] [pid 61217:tid 61292] [client 66.249.64.101:62803] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQkaldSKQYfLI3fYo6J5QAAAJM"]
[Sat Dec 06 20:41:17.816248 2025] [:error] [pid 1727:tid 1736] [client 66.249.64.101:62361] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQkbcD83luYT37-ZaURvwAAAkc"]
[Sat Dec 06 20:41:21.001184 2025] [:error] [pid 61215:tid 61227] [client 66.249.64.101:42395] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQkcOOOZ8nTCBYuI-xRQQAAAAg"]
[Sat Dec 06 20:41:24.309907 2025] [:error] [pid 1727:tid 1751] [client 66.249.64.101:65104] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQkdMD83luYT37-ZaURwwAAAlY"]
[Sat Dec 06 20:41:27.612055 2025] [:error] [pid 35591:tid 35613] [client 66.249.64.101:56856] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQkd4bmw-7bFvTxc9Me4AAAARQ"]
[Sat Dec 06 20:41:30.934408 2025] [:error] [pid 1838:tid 1849] [client 66.249.64.101:36595] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQkei5zgnu67Yo7vrYcJAAAAoM"]
[Sat Dec 06 20:41:34.243215 2025] [:error] [pid 1838:tid 1856] [client 66.249.64.101:60105] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQkfi5zgnu67Yo7vrYcKQAAAoo"]
[Sat Dec 06 20:41:37.413919 2025] [:error] [pid 61217:tid 61297] [client 66.249.64.101:41046] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQkgVdSKQYfLI3fYo6J7gAAAJg"]
[Sat Dec 06 20:41:38.864211 2025] [:error] [pid 61217:tid 61296] [client 66.249.64.101:52336] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQkgldSKQYfLI3fYo6J8AAAAJc"]
[Sat Dec 06 20:41:42.117387 2025] [:error] [pid 1727:tid 1748] [client 66.249.64.101:46646] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQkhsD83luYT37-ZaUR6AAAAlM"]
[Sat Dec 06 20:41:45.417896 2025] [:error] [pid 1727:tid 1749] [client 66.249.64.101:43103] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQkicD83luYT37-ZaUR8AAAAlQ"]
[Sat Dec 06 20:41:50.879702 2025] [:error] [pid 48399:tid 48405] [client 66.249.64.101:65532] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQkjujNPOrIshd8EwfBEAAAAcQ"]
[Sat Dec 06 20:42:23.369535 2025] [:error] [pid 61216:tid 61246] [client 66.249.64.101:37907] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQkrzHlXXVdP5ewviUq3gAAAEA"]
[Sat Dec 06 20:42:26.668169 2025] [:error] [pid 35591:tid 35604] [client 66.249.64.101:44481] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQksobmw-7bFvTxc9MfFgAAAQs"]
[Sat Dec 06 20:42:28.490991 2025] [:error] [pid 61216:tid 61253] [client 66.249.64.101:35525] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQktDHlXXVdP5ewviUq4gAAAEc"]
[Sat Dec 06 20:42:31.219889 2025] [:error] [pid 35591:tid 35595] [client 66.249.64.101:37186] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQkt4bmw-7bFvTxc9MfIAAAAQI"]
[Sat Dec 06 20:42:34.537376 2025] [:error] [pid 48399:tid 48422] [client 66.249.64.101:44786] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQkuujNPOrIshd8EwfBKAAAAdU"]
[Sat Dec 06 20:42:36.445139 2025] [:error] [pid 52809:tid 52820] [client 66.249.64.101:55956] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQkvOrRwgsmpIJQ2qaDBgAAAgk"]
[Sat Dec 06 20:42:38.913365 2025] [:error] [pid 1838:tid 1867] [client 66.249.64.101:47418] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQkvi5zgnu67Yo7vrYckgAAApU"]
[Sat Dec 06 20:42:41.657685 2025] [:error] [pid 61303:tid 61306] [client 66.249.64.101:42600] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQkwdwK_fe00OH7zy6fpAAAAMA"]
[Sat Dec 06 20:42:44.125389 2025] [:error] [pid 1727:tid 1751] [client 66.249.64.101:53565] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQkxMD83luYT37-ZaUSPgAAAlY"]
[Sat Dec 06 20:42:47.387351 2025] [:error] [pid 1838:tid 1850] [client 66.249.64.101:63601] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQkxy5zgnu67Yo7vrYc5AAAAoQ"]
[Sat Dec 06 20:42:49.445049 2025] [:error] [pid 1838:tid 1856] [client 66.249.64.101:61920] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQkyS5zgnu67Yo7vrYc6QAAAoo"]
[Sat Dec 06 20:42:52.069338 2025] [:error] [pid 1838:tid 1861] [client 66.249.64.101:64043] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQkzC5zgnu67Yo7vrYc7QAAAo8"]
[Sat Dec 06 20:42:54.670851 2025] [:error] [pid 48399:tid 48416] [client 66.249.64.101:37262] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQkzujNPOrIshd8EwfBQAAAAc8"]
[Sat Dec 06 20:42:57.286288 2025] [:error] [pid 61216:tid 61263] [client 66.249.64.101:43142] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQk0THlXXVdP5ewviUrQwAAAFE"]
[Sat Dec 06 20:42:59.883262 2025] [:error] [pid 61217:tid 61291] [client 66.249.64.101:42826] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQk01dSKQYfLI3fYo6KLAAAAJI"]
[Sat Dec 06 20:43:02.354378 2025] [:error] [pid 35622:tid 35664] [client 66.249.64.101:36677] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQk1iOSP_9DVLgFwI7GvgAAAY0"]
[Sat Dec 06 20:43:05.089928 2025] [:error] [pid 35622:tid 35668] [client 66.249.64.101:37202] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQk2SOSP_9DVLgFwI7GvwAAAZE"]
[Sat Dec 06 20:43:07.688486 2025] [:error] [pid 35622:tid 35652] [client 66.249.64.101:46472] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQk2yOSP_9DVLgFwI7GwwAAAYE"]
[Sat Dec 06 20:43:10.311640 2025] [:error] [pid 52809:tid 52828] [client 66.249.64.101:61232] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQk3urRwgsmpIJQ2qaDOgAAAhE"]
[Sat Dec 06 20:43:12.909561 2025] [:error] [pid 61216:tid 61266] [client 66.249.64.101:47780] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQk4DHlXXVdP5ewviUrXwAAAFQ"]
[Sat Dec 06 20:43:17.033833 2025] [:error] [pid 61303:tid 61321] [client 66.249.64.101:56872] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQk5dwK_fe00OH7zy6fzgAAAM4"]
[Sat Dec 06 20:43:48.529825 2025] [:error] [pid 1838:tid 1856] [client 66.249.64.101:40518] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQlBC5zgnu67Yo7vrYdNgAAAoo"]
[Sat Dec 06 20:43:51.957993 2025] [:error] [pid 52809:tid 52826] [client 66.249.64.101:47402] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQlB-rRwgsmpIJQ2qaDVQAAAg8"]
[Sat Dec 06 20:43:54.555506 2025] [:error] [pid 1727:tid 1747] [client 66.249.64.101:54856] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQlCsD83luYT37-ZaUSZgAAAlI"]
[Sat Dec 06 20:43:57.166707 2025] [:error] [pid 61216:tid 61253] [client 66.249.64.101:35524] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQlDTHlXXVdP5ewviUrkgAAAEc"]
[Sat Dec 06 20:43:59.684520 2025] [:error] [pid 48399:tid 48404] [client 66.249.64.101:54656] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQlD-jNPOrIshd8EwfBbgAAAcM"]
[Sat Dec 06 20:44:02.367934 2025] [:error] [pid 61216:tid 61255] [client 66.249.64.101:53372] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQlEjHlXXVdP5ewviUrmgAAAEk"]
[Sat Dec 06 20:44:04.967921 2025] [:error] [pid 52809:tid 52821] [client 66.249.64.101:40074] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQlFOrRwgsmpIJQ2qaDWwAAAgo"]
[Sat Dec 06 20:44:07.452058 2025] [:error] [pid 61216:tid 61256] [client 66.249.64.101:43124] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQlFzHlXXVdP5ewviUroAAAAEo"]
[Sat Dec 06 20:44:10.781573 2025] [:error] [pid 35591:tid 35593] [client 66.249.64.101:64103] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQlGobmw-7bFvTxc9MfggAAAQA"]
[Sat Dec 06 20:44:13.965376 2025] [:error] [pid 52809:tid 52820] [client 66.249.64.101:38736] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQlHerRwgsmpIJQ2qaDXwAAAgk"]
[Sat Dec 06 20:44:17.267953 2025] [:error] [pid 1727:tid 1742] [client 66.249.64.101:43981] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQlIcD83luYT37-ZaUSdAAAAk0"]
[Sat Dec 06 20:44:20.442691 2025] [:error] [pid 35591:tid 35600] [client 66.249.64.101:43300] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQlJIbmw-7bFvTxc9MfkAAAAQc"]
[Sat Dec 06 20:44:23.765815 2025] [:error] [pid 35622:tid 35658] [client 66.249.64.101:40181] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQlJyOSP_9DVLgFwI7G_gAAAYc"]
[Sat Dec 06 20:44:26.067824 2025] [:error] [pid 1838:tid 1865] [client 66.249.64.101:42135] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQlKi5zgnu67Yo7vrYdYAAAApM"]
[Sat Dec 06 20:44:27.378772 2025] [:error] [pid 35622:tid 35670] [client 66.249.64.101:58553] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQlKyOSP_9DVLgFwI7HBQAAAZM"]
[Sat Dec 06 20:44:28.673190 2025] [:error] [pid 61303:tid 61329] [client 66.249.64.101:38826] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQlLNwK_fe00OH7zy6f8AAAANY"]
[Sat Dec 06 20:44:32.993911 2025] [:error] [pid 1727:tid 1741] [client 66.249.64.101:38381] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQlMMD83luYT37-ZaUSdwAAAkw"]
[Sat Dec 06 20:44:36.448803 2025] [:error] [pid 61303:tid 61321] [client 66.249.64.101:64468] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQlNNwK_fe00OH7zy6f-wAAAM4"]
[Sat Dec 06 20:44:37.607401 2025] [:error] [pid 61303:tid 61310] [client 66.249.64.101:45295] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQlNdwK_fe00OH7zy6f_QAAAMQ"]
[Sat Dec 06 20:44:38.928509 2025] [:error] [pid 1727:tid 1750] [client 66.249.64.101:37215] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQlNsD83luYT37-ZaUSeAAAAlU"]
[Sat Dec 06 20:44:41.467892 2025] [:error] [pid 35622:tid 35664] [client 66.249.64.101:54468] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQlOSOSP_9DVLgFwI7HDgAAAY0"]
[Sat Dec 06 20:44:43.916543 2025] [:error] [pid 61217:tid 61291] [client 66.249.64.101:64987] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQlO1dSKQYfLI3fYo6KTgAAAJI"]
[Sat Dec 06 20:45:15.372312 2025] [:error] [pid 48399:tid 48403] [client 66.249.64.101:40140] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQlW-jNPOrIshd8EwfBjgAAAcI"]
[Sat Dec 06 20:45:18.685504 2025] [:error] [pid 1727:tid 1737] [client 66.249.64.101:37487] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQlXsD83luYT37-ZaUSkQAAAkg"]
[Sat Dec 06 20:45:21.998779 2025] [:error] [pid 61216:tid 61247] [client 66.249.64.101:47882] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQlYTHlXXVdP5ewviUr4QAAAEE"]
[Sat Dec 06 20:45:25.210662 2025] [:error] [pid 61217:tid 61274] [client 66.249.64.101:54338] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQlZVdSKQYfLI3fYo6KZQAAAIE"]
[Sat Dec 06 20:45:28.660868 2025] [:error] [pid 35591:tid 35616] [client 66.249.64.101:44090] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQlaIbmw-7bFvTxc9MfxwAAARc"]
[Sat Dec 06 20:45:30.298404 2025] [:error] [pid 61216:tid 61253] [client 66.249.64.101:63956] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQlajHlXXVdP5ewviUr6QAAAEc"]
[Sat Dec 06 20:45:31.481988 2025] [:error] [pid 61216:tid 61268] [client 66.249.64.101:41074] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQlazHlXXVdP5ewviUr7AAAAFY"]
[Sat Dec 06 20:45:33.556116 2025] [:error] [pid 61215:tid 61237] [client 66.249.64.101:53696] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQlbeOOZ8nTCBYuI-xSHQAAABI"]
[Sat Dec 06 20:45:36.149292 2025] [:error] [pid 48399:tid 48405] [client 66.249.64.101:62996] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQlcOjNPOrIshd8EwfBmAAAAcQ"]
[Sat Dec 06 20:45:38.750502 2025] [:error] [pid 61303:tid 61323] [client 66.249.64.101:55358] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQlctwK_fe00OH7zy6gFAAAANA"]
[Sat Dec 06 20:45:42.076714 2025] [:error] [pid 61217:tid 61286] [client 66.249.64.101:50516] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQldldSKQYfLI3fYo6KbwAAAI0"]
[Sat Dec 06 20:45:45.394870 2025] [:error] [pid 35591:tid 35596] [client 66.249.64.101:64143] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQleYbmw-7bFvTxc9MfzwAAAQM"]
[Sat Dec 06 20:45:46.689477 2025] [:error] [pid 61303:tid 61310] [client 66.249.64.101:58214] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQletwK_fe00OH7zy6gGwAAAMQ"]
[Sat Dec 06 20:45:49.189667 2025] [:error] [pid 1838:tid 1864] [client 66.249.64.101:45382] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQlfS5zgnu67Yo7vrYdqwAAApI"]
[Sat Dec 06 20:45:51.781396 2025] [:error] [pid 61216:tid 61251] [client 66.249.64.101:60372] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQlfzHlXXVdP5ewviUsBAAAAEU"]
[Sat Dec 06 20:45:54.389309 2025] [:error] [pid 35591:tid 35598] [client 66.249.64.101:53068] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQlgobmw-7bFvTxc9Mf0gAAAQU"]
[Sat Dec 06 20:45:56.991392 2025] [:error] [pid 61216:tid 61261] [client 66.249.64.101:57717] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQlhDHlXXVdP5ewviUsDQAAAE8"]
[Sat Dec 06 20:45:59.593984 2025] [:error] [pid 61216:tid 61270] [client 66.249.64.101:60966] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQlhzHlXXVdP5ewviUsEgAAAFg"]
[Sat Dec 06 20:46:04.804122 2025] [:error] [pid 1727:tid 1732] [client 66.249.64.101:54580] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQljMD83luYT37-ZaUSrQAAAkM"]
[Sat Dec 06 20:46:09.888295 2025] [:error] [pid 35622:tid 35655] [client 66.249.64.101:52031] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQlkSOSP_9DVLgFwI7HJQAAAYQ"]
[Sat Dec 06 20:46:40.407968 2025] [:error] [pid 1838:tid 1855] [client 66.249.64.101:60296] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQlsC5zgnu67Yo7vrYd6wAAAok"]
[Sat Dec 06 20:46:43.875770 2025] [:error] [pid 1838:tid 1859] [client 66.249.64.101:35629] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQlsy5zgnu67Yo7vrYd7gAAAo0"]
[Sat Dec 06 20:46:46.467588 2025] [:error] [pid 52809:tid 52835] [client 66.249.64.101:40272] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQlturRwgsmpIJQ2qaDpgAAAhg"]
[Sat Dec 06 20:46:49.076772 2025] [:error] [pid 61216:tid 61251] [client 66.249.64.101:54589] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQluTHlXXVdP5ewviUsQQAAAEU"]
[Sat Dec 06 20:46:51.683828 2025] [:error] [pid 52809:tid 52831] [client 66.249.64.101:59094] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQlu-rRwgsmpIJQ2qaDqAAAAhQ"]
[Sat Dec 06 20:46:54.281627 2025] [:error] [pid 1838:tid 1861] [client 66.249.64.101:44360] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQlvi5zgnu67Yo7vrYeAwAAAo8"]
[Sat Dec 06 20:46:56.888141 2025] [:error] [pid 61217:tid 61288] [client 66.249.64.101:45384] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQlwFdSKQYfLI3fYo6KmgAAAI8"]
[Sat Dec 06 20:46:59.499249 2025] [:error] [pid 35622:tid 35653] [client 66.249.64.101:50618] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQlwyOSP_9DVLgFwI7HSQAAAYI"]
[Sat Dec 06 20:47:02.084499 2025] [:error] [pid 61215:tid 61238] [client 66.249.64.101:64423] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQlxuOOZ8nTCBYuI-xSRQAAABM"]
[Sat Dec 06 20:47:04.711164 2025] [:error] [pid 52809:tid 52834] [client 66.249.64.101:47479] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQlyOrRwgsmpIJQ2qaDsQAAAhc"]
[Sat Dec 06 20:47:07.285477 2025] [:error] [pid 61215:tid 61221] [client 66.249.64.101:53081] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQly-OOZ8nTCBYuI-xSTAAAAAI"]
[Sat Dec 06 20:47:09.913293 2025] [:error] [pid 1838:tid 1854] [client 66.249.64.101:38262] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQlzS5zgnu67Yo7vrYeDQAAAog"]
[Sat Dec 06 20:47:12.490656 2025] [:error] [pid 61216:tid 61266] [client 66.249.64.101:42542] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQl0DHlXXVdP5ewviUsVgAAAFQ"]
[Sat Dec 06 20:47:15.122832 2025] [:error] [pid 61215:tid 61220] [client 66.249.64.101:40512] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQl0-OOZ8nTCBYuI-xSYwAAAAE"]
[Sat Dec 06 20:47:18.440966 2025] [:error] [pid 61216:tid 61251] [client 66.249.64.101:55595] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQl1jHlXXVdP5ewviUsWwAAAEU"]
[Sat Dec 06 20:47:21.762210 2025] [:error] [pid 1838:tid 1867] [client 66.249.64.101:41741] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQl2S5zgnu67Yo7vrYeHgAAApU"]
[Sat Dec 06 20:47:25.083364 2025] [:error] [pid 61216:tid 61252] [client 66.249.64.101:58494] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQl3THlXXVdP5ewviUsXQAAAEY"]
[Sat Dec 06 20:47:28.397781 2025] [:error] [pid 1838:tid 1863] [client 66.249.64.101:59753] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQl4C5zgnu67Yo7vrYeIwAAApE"]
[Sat Dec 06 20:47:31.711482 2025] [:error] [pid 52809:tid 52823] [client 66.249.64.101:63995] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQl4-rRwgsmpIJQ2qaDuwAAAgw"]
[Sat Dec 06 20:47:35.032061 2025] [:error] [pid 61303:tid 61311] [client 66.249.64.101:42789] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQl59wK_fe00OH7zy6gRQAAAMU"]
[Sat Dec 06 20:48:01.171620 2025] [:error] [pid 61303:tid 61312] [client 66.249.64.101:38798] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQmAdwK_fe00OH7zy6gbQAAAMY"]
[Sat Dec 06 20:48:04.611739 2025] [:error] [pid 52809:tid 52828] [client 66.249.64.101:62036] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQmBOrRwgsmpIJQ2qaDzwAAAhE"]
[Sat Dec 06 20:48:07.206626 2025] [:error] [pid 1838:tid 1856] [client 66.249.64.101:47417] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQmBy5zgnu67Yo7vrYeQwAAAoo"]
[Sat Dec 06 20:48:09.800875 2025] [:error] [pid 52809:tid 52812] [client 66.249.64.101:39318] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQmCerRwgsmpIJQ2qaD0wAAAgE"]
[Sat Dec 06 20:48:12.419499 2025] [:error] [pid 1727:tid 1737] [client 66.249.64.101:58345] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQmDMD83luYT37-ZaUS2gAAAkg"]
[Sat Dec 06 20:48:16.436926 2025] [:error] [pid 1727:tid 1740] [client 66.249.64.101:50126] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQmEMD83luYT37-ZaUS4gAAAks"]
[Sat Dec 06 20:48:18.796181 2025] [:error] [pid 1727:tid 1733] [client 66.249.64.101:41394] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQmEsD83luYT37-ZaUS5wAAAkQ"]
[Sat Dec 06 20:48:20.221851 2025] [:error] [pid 52809:tid 52827] [client 66.249.64.101:45779] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQmFOrRwgsmpIJQ2qaD3AAAAhA"]
[Sat Dec 06 20:48:24.866811 2025] [:error] [pid 61216:tid 61251] [client 66.249.64.101:59570] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQmGDHlXXVdP5ewviUsawAAAEU"]
[Sat Dec 06 20:48:26.301813 2025] [:error] [pid 61303:tid 61328] [client 66.249.64.101:62210] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQmGtwK_fe00OH7zy6gdAAAANU"]
[Sat Dec 06 20:48:27.916633 2025] [:error] [pid 61303:tid 61310] [client 66.249.64.101:60593] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQmG9wK_fe00OH7zy6gdwAAAMQ"]
[Sat Dec 06 20:48:31.230449 2025] [:error] [pid 35622:tid 35653] [client 66.249.64.101:45125] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQmHyOSP_9DVLgFwI7HcwAAAYI"]
[Sat Dec 06 20:48:34.543907 2025] [:error] [pid 61216:tid 61268] [client 66.249.64.101:55869] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQmIjHlXXVdP5ewviUsbwAAAFY"]
[Sat Dec 06 20:48:36.846153 2025] [:error] [pid 61303:tid 61326] [client 66.249.64.101:63062] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQmJNwK_fe00OH7zy6gfQAAANM"]
[Sat Dec 06 20:48:40.163616 2025] [:error] [pid 1838:tid 1870] [client 66.249.64.101:46326] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQmKC5zgnu67Yo7vrYeVwAAApg"]
[Sat Dec 06 20:48:43.474826 2025] [:error] [pid 61216:tid 61253] [client 66.249.64.101:52418] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQmKzHlXXVdP5ewviUseAAAAEc"]
[Sat Dec 06 20:48:46.654651 2025] [:error] [pid 61217:tid 61274] [client 66.249.64.101:62021] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQmLldSKQYfLI3fYo6K2wAAAIE"]
[Sat Dec 06 20:48:48.966658 2025] [:error] [pid 61217:tid 61297] [client 66.249.64.101:47629] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQmMFdSKQYfLI3fYo6K3AAAAJg"]
[Sat Dec 06 20:48:52.290230 2025] [:error] [pid 35622:tid 35674] [client 66.249.64.101:57963] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQmNCOSP_9DVLgFwI7HeQAAAZc"]
[Sat Dec 06 20:48:55.607008 2025] [:error] [pid 61215:tid 61220] [client 66.249.64.101:47696] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQmN-OOZ8nTCBYuI-xShQAAAAE"]
[Sat Dec 06 20:49:21.930436 2025] [:error] [pid 61216:tid 61269] [client 66.249.64.101:46344] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQmUTHlXXVdP5ewviUslwAAAFc"]
[Sat Dec 06 20:49:26.415056 2025] [:error] [pid 1727:tid 1751] [client 66.249.64.101:37057] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQmVsD83luYT37-ZaUS-gAAAlY"]
[Sat Dec 06 20:49:30.062102 2025] [:error] [pid 61215:tid 61235] [client 66.249.64.101:40230] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQmWuOOZ8nTCBYuI-xSlwAAABA"]
[Sat Dec 06 20:49:33.706667 2025] [:error] [pid 48399:tid 48402] [client 66.249.64.101:48802] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQmXejNPOrIshd8EwfB0AAAAcE"]
[Sat Dec 06 20:49:37.349693 2025] [:error] [pid 61216:tid 61263] [client 66.249.64.101:35337] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQmYTHlXXVdP5ewviUsngAAAFE"]
[Sat Dec 06 20:49:41.003625 2025] [:error] [pid 48399:tid 48411] [client 66.249.64.101:58219] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQmZejNPOrIshd8EwfB0wAAAco"]
[Sat Dec 06 20:49:44.634738 2025] [:error] [pid 35622:tid 35658] [client 66.249.64.101:46951] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQmaCOSP_9DVLgFwI7HkgAAAYc"]
[Sat Dec 06 20:49:48.302203 2025] [:error] [pid 61303:tid 61327] [client 66.249.64.101:64313] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQmbNwK_fe00OH7zy6goQAAANQ"]
[Sat Dec 06 20:49:51.937358 2025] [:error] [pid 61216:tid 61252] [client 66.249.64.101:60417] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQmbzHlXXVdP5ewviUspQAAAEY"]
[Sat Dec 06 20:49:55.581072 2025] [:error] [pid 61217:tid 61285] [client 66.249.64.101:46901] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQmc1dSKQYfLI3fYo6K8QAAAIw"]
[Sat Dec 06 20:49:59.115696 2025] [:error] [pid 1838:tid 1847] [client 66.249.64.101:50537] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQmdy5zgnu67Yo7vrYenAAAAoE"]
[Sat Dec 06 20:50:02.902063 2025] [:error] [pid 61216:tid 61265] [client 66.249.64.101:54725] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQmejHlXXVdP5ewviUssAAAAFM"]
[Sat Dec 06 20:50:17.470720 2025] [:error] [pid 61216:tid 61264] [client 66.249.64.101:48404] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQmiTHlXXVdP5ewviUsswAAAFI"]
[Sat Dec 06 20:51:00.443350 2025] [:error] [pid 35591:tid 35604] [client 66.249.64.101:49472] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQmtIbmw-7bFvTxc9MgbwAAAQs"]
[Sat Dec 06 20:51:05.939104 2025] [:error] [pid 61303:tid 61306] [client 66.249.64.101:39946] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQmudwK_fe00OH7zy6gzQAAAMA"]
[Sat Dec 06 20:51:10.433409 2025] [:error] [pid 1838:tid 1850] [client 66.249.64.101:57199] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQmvi5zgnu67Yo7vrYfEQAAAoQ"]
[Sat Dec 06 20:51:14.742727 2025] [:error] [pid 52809:tid 52817] [client 66.249.64.101:42732] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQmwurRwgsmpIJQ2qaEMwAAAgY"]
[Sat Dec 06 20:51:18.896841 2025] [:error] [pid 1838:tid 1864] [client 66.249.64.101:60110] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQmxi5zgnu67Yo7vrYfGwAAApI"]
[Sat Dec 06 20:51:23.122019 2025] [:error] [pid 61216:tid 61269] [client 66.249.64.101:59419] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQmyzHlXXVdP5ewviUs6gAAAFc"]
[Sat Dec 06 20:51:27.179879 2025] [:error] [pid 61216:tid 61259] [client 66.249.64.101:47686] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQmzzHlXXVdP5ewviUs7AAAAE0"]
[Sat Dec 06 20:51:31.519028 2025] [:error] [pid 61303:tid 61311] [client 66.249.64.101:46193] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQm09wK_fe00OH7zy6g6QAAAMU"]
[Sat Dec 06 20:51:33.261029 2025] [:error] [pid 61216:tid 61252] [client 66.249.64.101:36096] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQm1THlXXVdP5ewviUs7gAAAEY"]
[Sat Dec 06 20:51:35.073410 2025] [:error] [pid 48399:tid 48406] [client 66.249.64.101:61083] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQm1-jNPOrIshd8EwfCEgAAAcU"]
[Sat Dec 06 20:51:37.772513 2025] [:error] [pid 35591:tid 35597] [client 66.249.64.101:65212] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQm2Ybmw-7bFvTxc9MgfwAAAQQ"]
[Sat Dec 06 20:51:41.429153 2025] [:error] [pid 61215:tid 61233] [client 66.249.64.101:52062] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQm3eOOZ8nTCBYuI-xS0QAAAA4"]
[Sat Dec 06 20:51:45.087837 2025] [:error] [pid 1838:tid 1857] [client 66.249.64.101:47036] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQm4S5zgnu67Yo7vrYfNwAAAos"]
[Sat Dec 06 20:51:49.293848 2025] [:error] [pid 35622:tid 35670] [client 66.249.64.101:61225] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQm5SOSP_9DVLgFwI7H0gAAAZM"]
[Sat Dec 06 20:51:53.642191 2025] [:error] [pid 52809:tid 52828] [client 66.249.64.101:42231] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQm6erRwgsmpIJQ2qaEQgAAAhE"]
[Sat Dec 06 20:52:40.754733 2025] [:error] [pid 1838:tid 1867] [client 66.249.64.101:52228] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQnGC5zgnu67Yo7vrYfgQAAApU"]
[Sat Dec 06 20:52:43.164450 2025] [:error] [pid 61215:tid 61238] [client 66.249.64.101:63604] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQnG-OOZ8nTCBYuI-xS7wAAABM"]
[Sat Dec 06 20:52:45.641973 2025] [:error] [pid 61303:tid 61315] [client 66.249.64.101:64621] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQnHdwK_fe00OH7zy6hMgAAAMk"]
[Sat Dec 06 20:52:47.238521 2025] [:error] [pid 52809:tid 52819] [client 66.249.64.101:58617] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQnH-rRwgsmpIJQ2qaEYQAAAgg"]
[Sat Dec 06 20:52:50.657793 2025] [:error] [pid 35591:tid 35613] [client 66.249.64.101:50138] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQnIobmw-7bFvTxc9MgogAAARQ"]
[Sat Dec 06 20:52:54.447183 2025] [:error] [pid 61215:tid 61232] [client 66.249.64.101:40502] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQnJuOOZ8nTCBYuI-xS_AAAAA0"]
[Sat Dec 06 20:52:58.077510 2025] [:error] [pid 61217:tid 61284] [client 66.249.64.101:51293] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQnKldSKQYfLI3fYo6LZwAAAIs"]
[Sat Dec 06 20:53:01.754860 2025] [:error] [pid 61303:tid 61308] [client 66.249.64.101:42443] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQnLdwK_fe00OH7zy6hSAAAAMI"]
[Sat Dec 06 20:53:05.387215 2025] [:error] [pid 61303:tid 61313] [client 66.249.64.101:57381] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQnMdwK_fe00OH7zy6hSwAAAMc"]
[Sat Dec 06 20:53:08.900157 2025] [:error] [pid 35622:tid 35662] [client 66.249.64.101:60384] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQnNCOSP_9DVLgFwI7IAQAAAYs"]
[Sat Dec 06 20:53:12.698370 2025] [:error] [pid 35591:tid 35608] [client 66.249.64.101:54742] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQnOIbmw-7bFvTxc9MgqgAAAQ8"]
[Sat Dec 06 20:53:16.828410 2025] [:error] [pid 61215:tid 61222] [client 66.249.64.101:52715] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQnPOOOZ8nTCBYuI-xTDAAAAAM"]
[Sat Dec 06 20:53:19.999376 2025] [:error] [pid 61216:tid 61248] [client 66.249.64.101:65215] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQnPzHlXXVdP5ewviUtQQAAAEI"]
[Sat Dec 06 20:53:23.634052 2025] [:error] [pid 35622:tid 35672] [client 66.249.64.101:39834] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQnQyOSP_9DVLgFwI7ICQAAAZU"]
[Sat Dec 06 20:53:27.283256 2025] [:error] [pid 35591:tid 35594] [client 66.249.64.101:54739] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQnR4bmw-7bFvTxc9MguAAAAQE"]
[Sat Dec 06 20:53:30.935750 2025] [:error] [pid 35591:tid 35605] [client 66.249.64.101:40460] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQnSobmw-7bFvTxc9MguQAAAQw"]
[Sat Dec 06 20:53:34.579628 2025] [:error] [pid 1838:tid 1850] [client 66.249.64.101:59832] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQnTi5zgnu67Yo7vrYf7gAAAoQ"]
[Sat Dec 06 20:54:17.533426 2025] [:error] [pid 48399:tid 48414] [client 66.249.64.101:56354] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQneejNPOrIshd8EwfCXQAAAc0"]
[Sat Dec 06 20:54:22.015853 2025] [:error] [pid 61303:tid 61328] [client 66.249.64.101:38749] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQnftwK_fe00OH7zy6hggAAANU"]
[Sat Dec 06 20:54:25.665897 2025] [:error] [pid 61303:tid 61310] [client 66.249.64.101:47426] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQngdwK_fe00OH7zy6hgwAAAMQ"]
[Sat Dec 06 20:54:30.483643 2025] [:error] [pid 61216:tid 61265] [client 66.249.64.101:56047] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQnhjHlXXVdP5ewviUtaQAAAFM"]
[Sat Dec 06 20:54:34.828992 2025] [:error] [pid 61216:tid 61246] [client 66.249.64.101:62234] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQnijHlXXVdP5ewviUtbgAAAEA"]
[Sat Dec 06 20:54:36.607918 2025] [:error] [pid 52809:tid 52825] [client 66.249.64.101:35950] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQnjOrRwgsmpIJQ2qaEkgAAAg4"]
[Sat Dec 06 20:54:40.246405 2025] [:error] [pid 1838:tid 1853] [client 66.249.64.101:45817] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQnkC5zgnu67Yo7vrYgKQAAAoc"]
[Sat Dec 06 20:54:43.096078 2025] [:error] [pid 1838:tid 1847] [client 66.249.64.101:45202] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQnky5zgnu67Yo7vrYgLwAAAoE"]
[Sat Dec 06 21:01:32.650697 2025] [:error] [pid 35622:tid 35671] [client 66.249.64.101:48009] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQpLCOSP_9DVLgFwI7I3gAAAZQ"]
[Sat Dec 06 21:01:36.389070 2025] [:error] [pid 48399:tid 48403] [client 66.249.64.101:39358] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQpMOjNPOrIshd8EwfDCwAAAcI"]
[Sat Dec 06 21:01:40.038626 2025] [:error] [pid 52809:tid 52818] [client 66.249.64.101:39021] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQpNOrRwgsmpIJQ2qaFYQAAAgc"]
[Sat Dec 06 21:01:50.867540 2025] [:error] [pid 48399:tid 48422] [client 66.249.64.101:46943] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQpPujNPOrIshd8EwfDDgAAAdU"]
[Sat Dec 06 21:01:54.648528 2025] [:error] [pid 35622:tid 35669] [client 66.249.64.101:39225] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQpQiOSP_9DVLgFwI7I5QAAAZI"]
[Sat Dec 06 21:01:59.469352 2025] [:error] [pid 35622:tid 35671] [client 66.249.64.101:59883] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQpRyOSP_9DVLgFwI7I6AAAAZQ"]
[Sat Dec 06 21:02:01.791798 2025] [:error] [pid 61216:tid 61269] [client 66.249.64.101:50371] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQpSTHlXXVdP5ewviUulwAAAFc"]
[Sat Dec 06 21:02:05.563895 2025] [:error] [pid 61216:tid 61248] [client 66.249.64.101:60838] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQpTTHlXXVdP5ewviUunwAAAEI"]
[Sat Dec 06 21:02:09.218841 2025] [:error] [pid 48399:tid 48423] [client 66.249.64.101:46853] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQpUejNPOrIshd8EwfDGgAAAdY"]
[Sat Dec 06 21:02:17.105192 2025] [:error] [pid 61215:tid 61228] [client 66.249.64.101:58019] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQpWeOOZ8nTCBYuI-xT5AAAAAk"]
[Sat Dec 06 21:02:24.112797 2025] [:error] [pid 35622:tid 35668] [client 66.249.64.101:47468] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQpYCOSP_9DVLgFwI7I7wAAAZE"]
[Sat Dec 06 21:03:39.749504 2025] [:error] [pid 61303:tid 61327] [client 66.249.64.101:64043] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQpq9wK_fe00OH7zy6ijwAAANQ"]
[Sat Dec 06 21:03:44.037956 2025] [:error] [pid 35622:tid 35663] [client 66.249.64.101:41891] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQpsCOSP_9DVLgFwI7JFQAAAYw"]
[Sat Dec 06 21:03:48.244223 2025] [:error] [pid 61217:tid 61278] [client 66.249.64.101:49864] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQptFdSKQYfLI3fYo6MYwAAAIU"]
[Sat Dec 06 21:03:56.566835 2025] [:error] [pid 35591:tid 35600] [client 66.249.64.101:47188] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQpvIbmw-7bFvTxc9MhygAAAQc"]
[Sat Dec 06 21:04:00.780512 2025] [:error] [pid 35622:tid 35668] [client 66.249.64.101:58868] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQpwCOSP_9DVLgFwI7JGgAAAZE"]
[Sat Dec 06 21:04:04.980358 2025] [:error] [pid 52809:tid 52834] [client 66.249.64.101:57310] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQpxOrRwgsmpIJQ2qaF1gAAAhc"]
[Sat Dec 06 21:04:07.417679 2025] [:error] [pid 61217:tid 61296] [client 66.249.64.101:40079] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQpx1dSKQYfLI3fYo6McQAAAJc"]
[Sat Dec 06 21:04:10.217857 2025] [:error] [pid 35591:tid 35611] [client 66.249.64.101:41478] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQpyobmw-7bFvTxc9Mh8AAAARI"]
[Sat Dec 06 21:04:10.353333 2025] [:error] [pid 1727:tid 1746] [client 66.249.64.101:51755] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQpysD83luYT37-ZaUUtgAAAlE"]
[Sat Dec 06 21:04:13.871071 2025] [:error] [pid 61217:tid 61297] [client 66.249.64.101:49226] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQpzVdSKQYfLI3fYo6MdAAAAJg"]
[Sat Dec 06 21:04:15.702171 2025] [:error] [pid 61216:tid 61260] [client 66.249.64.101:56984] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQpzzHlXXVdP5ewviUu9AAAAE4"]
[Sat Dec 06 21:04:19.921453 2025] [:error] [pid 1838:tid 1868] [client 66.249.64.101:38542] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQp0y5zgnu67Yo7vrYiOwAAApY"]
[Sat Dec 06 21:04:24.305392 2025] [:error] [pid 35591:tid 35601] [client 66.249.64.101:48229] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQp2Ibmw-7bFvTxc9Mh-AAAAQg"]
[Sat Dec 06 21:04:27.938639 2025] [:error] [pid 61216:tid 61246] [client 66.249.64.101:64943] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQp2zHlXXVdP5ewviUu-wAAAEA"]
[Sat Dec 06 21:05:27.628236 2025] [:error] [pid 1727:tid 1746] [client 66.249.64.101:64331] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQqF8D83luYT37-ZaUU7wAAAlE"]
[Sat Dec 06 21:05:31.946623 2025] [:error] [pid 52809:tid 52814] [client 66.249.64.101:39997] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQqG-rRwgsmpIJQ2qaGDwAAAgM"]
[Sat Dec 06 21:05:34.380487 2025] [:error] [pid 52809:tid 52821] [client 66.249.64.101:35493] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQqHurRwgsmpIJQ2qaGFQAAAgo"]
[Sat Dec 06 21:05:38.600532 2025] [:error] [pid 61217:tid 61295] [client 66.249.64.101:48549] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQqIldSKQYfLI3fYo6MmwAAAJY"]
[Sat Dec 06 21:05:47.161046 2025] [:error] [pid 61217:tid 61278] [client 66.249.64.101:43938] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQqK1dSKQYfLI3fYo6MtAAAAIU"]
[Sat Dec 06 21:05:51.374851 2025] [:error] [pid 61303:tid 61324] [client 66.249.64.101:35082] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQqL9wK_fe00OH7zy6iyAAAANE"]
[Sat Dec 06 21:05:55.588091 2025] [:error] [pid 61216:tid 61249] [client 66.249.64.101:49444] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQqMzHlXXVdP5ewviUvKQAAAEM"]
[Sat Dec 06 21:05:59.789122 2025] [:error] [pid 48399:tid 48404] [client 66.249.64.101:35598] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQqN-jNPOrIshd8EwfDogAAAcM"]
[Sat Dec 06 21:06:11.278911 2025] [:error] [pid 35591:tid 35596] [client 66.249.64.101:43868] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQqQ4bmw-7bFvTxc9MiQgAAAQM"]
[Sat Dec 06 21:06:15.497988 2025] [:error] [pid 61215:tid 61236] [client 66.249.64.101:36664] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQqR-OOZ8nTCBYuI-xUaQAAABE"]
[Sat Dec 06 21:06:21.206976 2025] [:error] [pid 1838:tid 1864] [client 66.249.64.101:39739] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQqTS5zgnu67Yo7vrYipAAAApI"]
[Sat Dec 06 21:07:48.039236 2025] [:error] [pid 1727:tid 1749] [client 66.249.64.101:57392] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQqpMD83luYT37-ZaUVOQAAAlQ"]
[Sat Dec 06 21:07:48.588623 2025] [:error] [pid 61217:tid 61282] [client 66.249.64.101:43152] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQqpFdSKQYfLI3fYo6M-AAAAIk"]
[Sat Dec 06 21:07:52.381132 2025] [:error] [pid 61303:tid 61311] [client 66.249.64.101:35072] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQqqNwK_fe00OH7zy6jJQAAAMU"]
[Sat Dec 06 21:07:53.026209 2025] [:error] [pid 48399:tid 48412] [client 66.249.64.101:60076] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQqqejNPOrIshd8EwfD5gAAAcs"]
[Sat Dec 06 21:07:53.480195 2025] [:error] [pid 1838:tid 1865] [client 66.249.64.101:41518] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQqqS5zgnu67Yo7vrYi9AAAApM"]
[Sat Dec 06 21:07:59.803004 2025] [:error] [pid 61217:tid 61286] [client 66.249.64.101:60955] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQqr1dSKQYfLI3fYo6M-wAAAI0"]
[Sat Dec 06 21:08:11.220969 2025] [:error] [pid 48399:tid 48409] [client 66.249.64.101:37061] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQqu-jNPOrIshd8EwfD8QAAAcg"]
[Sat Dec 06 21:08:18.527747 2025] [:error] [pid 61215:tid 61232] [client 66.249.64.101:41022] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQqwuOOZ8nTCBYuI-xUzgAAAA0"]
[Sat Dec 06 21:08:22.285808 2025] [:error] [pid 1727:tid 1738] [client 66.249.64.101:50111] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQqxsD83luYT37-ZaUVaQAAAkk"]
[Sat Dec 06 21:08:23.898907 2025] [:error] [pid 61303:tid 61322] [client 66.249.64.101:45508] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQqx9wK_fe00OH7zy6jUQAAAM8"]
[Sat Dec 06 21:08:26.175055 2025] [:error] [pid 61217:tid 61297] [client 66.249.64.101:51937] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQqyldSKQYfLI3fYo6NDwAAAJg"]
[Sat Dec 06 21:08:32.497062 2025] [:error] [pid 61217:tid 61277] [client 66.249.64.101:65114] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQq0FdSKQYfLI3fYo6NEQAAAIQ"]
[Sat Dec 06 21:08:36.135663 2025] [:error] [pid 1727:tid 1734] [client 66.249.64.101:45479] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQq1MD83luYT37-ZaUVcQAAAkU"]
[Sat Dec 06 21:08:39.792627 2025] [:error] [pid 1727:tid 1745] [client 66.249.64.101:55465] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQq18D83luYT37-ZaUVcgAAAlA"]
[Sat Dec 06 21:09:48.016224 2025] [:error] [pid 52809:tid 52814] [client 66.249.64.101:52596] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQrHOrRwgsmpIJQ2qaGpQAAAgM"]
[Sat Dec 06 21:09:52.276363 2025] [:error] [pid 1838:tid 1856] [client 66.249.64.101:51766] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQrIC5zgnu67Yo7vrYjYwAAAoo"]
[Sat Dec 06 21:10:00.717265 2025] [:error] [pid 52809:tid 52827] [client 66.249.64.101:42858] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQrKOrRwgsmpIJQ2qaGtQAAAhA"]
[Sat Dec 06 21:10:04.945944 2025] [:error] [pid 61303:tid 61308] [client 66.249.64.101:61743] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQrLNwK_fe00OH7zy6kFQAAAMI"]
[Sat Dec 06 21:10:07.275216 2025] [:error] [pid 61216:tid 61257] [client 66.249.64.101:52848] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQrLzHlXXVdP5ewviUwDwAAAEs"]
[Sat Dec 06 21:10:15.708855 2025] [:error] [pid 61303:tid 61328] [client 66.249.64.101:51550] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQrN9wK_fe00OH7zy6kJAAAANU"]
[Sat Dec 06 21:10:19.794080 2025] [:error] [pid 61216:tid 61259] [client 66.249.64.101:60952] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQrOzHlXXVdP5ewviUwJAAAAE0"]
[Sat Dec 06 21:10:22.095881 2025] [:error] [pid 1838:tid 1862] [client 66.249.64.101:44640] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQrPi5zgnu67Yo7vrYjoAAAApA"]
[Sat Dec 06 21:10:26.411166 2025] [:error] [pid 1838:tid 1852] [client 66.249.64.101:64020] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQrQi5zgnu67Yo7vrYjqgAAAoY"]
[Sat Dec 06 21:10:29.953055 2025] [:error] [pid 35622:tid 35661] [client 66.249.64.101:40520] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQrRSOSP_9DVLgFwI7J7wAAAYo"]
[Sat Dec 06 21:10:32.982831 2025] [:error] [pid 35591:tid 35602] [client 66.249.64.101:43050] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQrSIbmw-7bFvTxc9Mi9wAAAQk"]
[Sat Dec 06 21:10:36.602428 2025] [:error] [pid 61215:tid 61221] [client 66.249.64.101:53348] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQrTOOOZ8nTCBYuI-xVUgAAAAI"]
[Sat Dec 06 21:10:43.933238 2025] [:error] [pid 52809:tid 52834] [client 66.249.64.101:62796] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQrU-rRwgsmpIJQ2qaG2AAAAhc"]
[Sat Dec 06 21:11:46.800717 2025] [:error] [pid 1838:tid 1858] [client 66.249.64.101:59612] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQrki5zgnu67Yo7vrYkYwAAAow"]
[Sat Dec 06 21:11:51.052948 2025] [:error] [pid 1727:tid 1740] [client 66.249.64.101:41011] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQrl8D83luYT37-ZaUWIgAAAks"]
[Sat Dec 06 21:11:55.276529 2025] [:error] [pid 61217:tid 61284] [client 66.249.64.101:55850] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQrm1dSKQYfLI3fYo6N0QAAAIs"]
[Sat Dec 06 21:12:03.741261 2025] [:error] [pid 1838:tid 1859] [client 66.249.64.101:56464] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQroy5zgnu67Yo7vrYkkgAAAo0"]
[Sat Dec 06 21:12:07.980999 2025] [:error] [pid 61303:tid 61321] [client 66.249.64.101:53715] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQrp9wK_fe00OH7zy6kvQAAAM4"]
[Sat Dec 06 21:12:12.191629 2025] [:error] [pid 52809:tid 52832] [client 66.249.64.101:43929] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQrrOrRwgsmpIJQ2qaHUAAAAhU"]
[Sat Dec 06 21:12:20.689222 2025] [:error] [pid 48399:tid 48407] [client 66.249.64.101:63391] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQrtOjNPOrIshd8EwfErwAAAcY"]
[Sat Dec 06 21:12:23.006447 2025] [:error] [pid 48399:tid 48416] [client 66.249.64.101:53421] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQrt-jNPOrIshd8EwfEsQAAAc8"]
[Sat Dec 06 21:12:27.317495 2025] [:error] [pid 1838:tid 1859] [client 66.249.64.101:47805] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQruy5zgnu67Yo7vrYkpAAAAo0"]
[Sat Dec 06 21:12:29.662751 2025] [:error] [pid 52809:tid 52813] [client 66.249.64.101:50067] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQrverRwgsmpIJQ2qaHWQAAAgI"]
[Sat Dec 06 21:12:33.905046 2025] [:error] [pid 1838:tid 1869] [client 66.249.64.101:62822] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQrwS5zgnu67Yo7vrYkxgAAApc"]
[Sat Dec 06 21:13:31.802857 2025] [:error] [pid 1838:tid 1856] [client 66.249.64.101:39413] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQr-y5zgnu67Yo7vrYlAQAAAoo"]
[Sat Dec 06 21:13:35.476319 2025] [:error] [pid 61216:tid 61259] [client 66.249.64.101:43580] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQr_zHlXXVdP5ewviUxRAAAAE0"]
[Sat Dec 06 21:13:39.110679 2025] [:error] [pid 35591:tid 35600] [client 66.249.64.101:48120] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQsA4bmw-7bFvTxc9MjgQAAAQc"]
[Sat Dec 06 21:13:46.280388 2025] [:error] [pid 61216:tid 61247] [client 66.249.64.101:49198] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQsCjHlXXVdP5ewviUxSAAAAEE"]
[Sat Dec 06 21:13:50.049468 2025] [:error] [pid 1838:tid 1862] [client 66.249.64.101:60525] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQsDi5zgnu67Yo7vrYlQQAAApA"]
[Sat Dec 06 21:13:53.716782 2025] [:error] [pid 52809:tid 52824] [client 66.249.64.101:59275] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQsEerRwgsmpIJQ2qaHewAAAg0"]
[Sat Dec 06 21:14:03.764720 2025] [:error] [pid 35622:tid 35660] [client 66.249.64.101:42335] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQsGyOSP_9DVLgFwI7KlgAAAYk"]
[Sat Dec 06 21:14:12.871681 2025] [:error] [pid 48399:tid 48412] [client 66.249.64.101:50649] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQsJOjNPOrIshd8EwfE4wAAAcs"]
[Sat Dec 06 21:14:20.569159 2025] [:error] [pid 61216:tid 61255] [client 66.249.64.101:62690] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQsLDHlXXVdP5ewviUxZQAAAEk"]
[Sat Dec 06 21:15:13.173981 2025] [:error] [pid 61217:tid 61285] [client 66.249.64.101:44177] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQsYVdSKQYfLI3fYo6ONgAAAIw"]
[Sat Dec 06 21:15:17.779682 2025] [:error] [pid 35591:tid 35597] [client 66.249.64.101:49054] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQsZYbmw-7bFvTxc9Mj0gAAAQQ"]
[Sat Dec 06 21:15:24.955777 2025] [:error] [pid 61216:tid 61262] [client 66.249.64.101:39479] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQsbDHlXXVdP5ewviUxqQAAAFA"]
[Sat Dec 06 21:15:28.589189 2025] [:error] [pid 48399:tid 48411] [client 66.249.64.101:64525] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQscOjNPOrIshd8EwfFCgAAAco"]
[Sat Dec 06 21:15:32.247141 2025] [:error] [pid 61216:tid 61270] [client 66.249.64.101:43267] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQsdDHlXXVdP5ewviUxrwAAAFg"]
[Sat Dec 06 21:15:40.141153 2025] [:error] [pid 48399:tid 48403] [client 66.249.64.101:59693] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQsfOjNPOrIshd8EwfFEgAAAcI"]
[Sat Dec 06 21:15:44.361632 2025] [:error] [pid 52809:tid 52834] [client 66.249.64.101:37915] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQsgOrRwgsmpIJQ2qaH7gAAAhc"]
[Sat Dec 06 21:15:48.600162 2025] [:error] [pid 1838:tid 1852] [client 66.249.64.101:38653] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQshC5zgnu67Yo7vrYmLgAAAoY"]
[Sat Dec 06 21:15:52.851994 2025] [:error] [pid 61303:tid 61329] [client 66.249.64.101:56377] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQsiNwK_fe00OH7zy6llQAAANY"]
[Sat Dec 06 21:16:00.608766 2025] [:error] [pid 61217:tid 61297] [client 66.249.64.101:52130] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQskFdSKQYfLI3fYo6OggAAAJg"]
[Sat Dec 06 21:16:04.864703 2025] [:error] [pid 48399:tid 48407] [client 66.249.64.101:35739] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQslOjNPOrIshd8EwfFJgAAAcY"]
[Sat Dec 06 21:16:09.086255 2025] [:error] [pid 52809:tid 52826] [client 66.249.64.101:42663] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQsmerRwgsmpIJQ2qaIAgAAAg8"]
[Sat Dec 06 21:17:18.124176 2025] [:error] [pid 61216:tid 61267] [client 66.249.64.101:62438] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQs3jHlXXVdP5ewviUyHAAAAFU"]
[Sat Dec 06 21:17:21.762643 2025] [:error] [pid 35622:tid 35652] [client 66.249.64.101:64049] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQs4SOSP_9DVLgFwI7LSgAAAYE"]
[Sat Dec 06 21:17:25.972626 2025] [:error] [pid 61216:tid 61270] [client 66.249.64.101:60080] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQs5THlXXVdP5ewviUyJAAAAFg"]
[Sat Dec 06 21:17:32.715621 2025] [:error] [pid 1838:tid 1847] [client 66.249.64.101:61400] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQs7C5zgnu67Yo7vrYmsQAAAoE"]
[Sat Dec 06 21:17:36.368508 2025] [:error] [pid 35591:tid 35599] [client 66.249.64.101:52142] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQs8Ibmw-7bFvTxc9MkRgAAAQY"]
[Sat Dec 06 21:17:39.997448 2025] [:error] [pid 1838:tid 1855] [client 66.249.64.101:61003] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQs8y5zgnu67Yo7vrYmtAAAAok"]
[Sat Dec 06 21:17:48.768501 2025] [:error] [pid 1838:tid 1863] [client 66.249.64.101:40336] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQs_C5zgnu67Yo7vrYmwAAAApE"]
[Sat Dec 06 21:17:52.890455 2025] [:error] [pid 1838:tid 1850] [client 66.249.64.101:49523] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQtAC5zgnu67Yo7vrYmwwAAAoQ"]
[Sat Dec 06 21:17:54.829681 2025] [:error] [pid 1727:tid 1735] [client 66.249.64.101:47472] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQtAsD83luYT37-ZaUXmgAAAkY"]
[Sat Dec 06 21:18:48.537736 2025] [:error] [pid 1838:tid 1847] [client 66.249.64.101:35027] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQtOC5zgnu67Yo7vrYm8gAAAoE"]
[Sat Dec 06 21:18:56.660369 2025] [:error] [pid 61216:tid 61261] [client 66.249.64.101:36666] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQtQDHlXXVdP5ewviUyggAAAE8"]
[Sat Dec 06 21:19:00.334100 2025] [:error] [pid 48399:tid 48417] [client 66.249.64.101:38265] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQtROjNPOrIshd8EwfFpwAAAdA"]
[Sat Dec 06 21:19:04.578736 2025] [:error] [pid 61215:tid 61237] [client 66.249.64.101:42335] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQtSOOOZ8nTCBYuI-xW4gAAABI"]
[Sat Dec 06 21:19:12.906679 2025] [:error] [pid 48399:tid 48403] [client 66.249.64.101:54633] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQtUOjNPOrIshd8EwfFrQAAAcI"]
[Sat Dec 06 21:19:17.134410 2025] [:error] [pid 52809:tid 52816] [client 66.249.64.101:48122] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQtVerRwgsmpIJQ2qaI1wAAAgU"]
[Sat Dec 06 21:19:21.473928 2025] [:error] [pid 61303:tid 61328] [client 66.249.64.101:65066] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQtWdwK_fe00OH7zy6mfAAAANU"]
[Sat Dec 06 21:19:23.771276 2025] [:error] [pid 48399:tid 48408] [client 66.249.64.101:57509] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQtW-jNPOrIshd8EwfFswAAAcc"]
[Sat Dec 06 21:19:27.988121 2025] [:error] [pid 48399:tid 48403] [client 66.249.64.101:54514] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQtX-jNPOrIshd8EwfFtgAAAcI"]
[Sat Dec 06 21:19:36.429182 2025] [:error] [pid 61215:tid 61224] [client 66.249.64.101:36198] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQtaOOOZ8nTCBYuI-xW9AAAAAU"]
[Sat Dec 06 21:19:40.633408 2025] [:error] [pid 48399:tid 48418] [client 66.249.64.101:42232] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQtbOjNPOrIshd8EwfFuQAAAdE"]
[Sat Dec 06 21:20:55.321067 2025] [:error] [pid 61303:tid 61319] [client 66.249.64.101:40855] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQtt9wK_fe00OH7zy6mxgAAAM0"]
[Sat Dec 06 21:20:59.545844 2025] [:error] [pid 1838:tid 1849] [client 66.249.64.101:61969] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQtuy5zgnu67Yo7vrYnUwAAAoM"]
[Sat Dec 06 21:21:03.760022 2025] [:error] [pid 61216:tid 61256] [client 66.249.64.101:40741] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQtvzHlXXVdP5ewviUzBwAAAEo"]
[Sat Dec 06 21:21:08.084734 2025] [:error] [pid 61303:tid 61326] [client 66.249.64.101:49015] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQtxNwK_fe00OH7zy6m3QAAANM"]
[Sat Dec 06 21:21:14.848711 2025] [:error] [pid 1727:tid 1734] [client 66.249.64.101:39122] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQtysD83luYT37-ZaUYIAAAAkU"]
[Sat Dec 06 21:21:18.927859 2025] [:error] [pid 1838:tid 1863] [client 66.249.64.101:51557] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQtzi5zgnu67Yo7vrYndwAAApE"]
[Sat Dec 06 21:21:20.911080 2025] [:error] [pid 61217:tid 61275] [client 66.249.64.101:40854] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQt0FdSKQYfLI3fYo6PZwAAAII"]
[Sat Dec 06 21:21:24.439828 2025] [:error] [pid 61303:tid 61312] [client 66.249.64.101:52219] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQt1NwK_fe00OH7zy6m7wAAAMY"]
[Sat Dec 06 21:21:26.447800 2025] [:error] [pid 1838:tid 1850] [client 66.249.64.101:36744] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQt1i5zgnu67Yo7vrYnjAAAAoQ"]
[Sat Dec 06 21:21:29.981117 2025] [:error] [pid 61216:tid 61253] [client 66.249.64.101:50098] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQt2THlXXVdP5ewviUzIAAAAEc"]
[Sat Dec 06 21:21:37.293489 2025] [:error] [pid 61216:tid 61264] [client 66.249.64.101:63243] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQt4THlXXVdP5ewviUzJQAAAFI"]
[Sat Dec 06 21:21:40.805992 2025] [:error] [pid 48399:tid 48420] [client 66.249.64.101:37522] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQt5OjNPOrIshd8EwfF3gAAAdM"]
[Sat Dec 06 21:22:47.748484 2025] [:error] [pid 61303:tid 61316] [client 66.249.64.101:55203] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQuJ9wK_fe00OH7zy6nGAAAAMo"]
[Sat Dec 06 21:22:51.974517 2025] [:error] [pid 61216:tid 61251] [client 66.249.64.101:45676] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQuKzHlXXVdP5ewviUzbgAAAEU"]
[Sat Dec 06 21:22:56.052792 2025] [:error] [pid 48399:tid 48424] [client 66.249.64.101:36339] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQuMOjNPOrIshd8EwfGCQAAAdc"]
[Sat Dec 06 21:23:09.721503 2025] [:error] [pid 61303:tid 61323] [client 66.249.64.101:57859] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQuPdwK_fe00OH7zy6nIwAAANA"]
[Sat Dec 06 21:23:19.993727 2025] [:error] [pid 1838:tid 1848] [client 66.249.64.101:42142] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQuRy5zgnu67Yo7vrYoBAAAAoI"]
[Sat Dec 06 21:23:22.005336 2025] [:error] [pid 61216:tid 61270] [client 66.249.64.101:47362] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQuSjHlXXVdP5ewviUzjAAAAFg"]
[Sat Dec 06 21:23:24.307559 2025] [:error] [pid 1838:tid 1862] [client 66.249.64.101:40037] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQuTC5zgnu67Yo7vrYoDAAAApA"]
[Sat Dec 06 21:23:28.645210 2025] [:error] [pid 61216:tid 61265] [client 66.249.64.101:40192] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQuUDHlXXVdP5ewviUzmgAAAFM"]
[Sat Dec 06 21:23:32.878839 2025] [:error] [pid 1838:tid 1862] [client 66.249.64.101:49213] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQuVC5zgnu67Yo7vrYoFQAAApA"]
[Sat Dec 06 21:24:35.042260 2025] [:error] [pid 61303:tid 61310] [client 66.249.64.101:45178] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQuk9wK_fe00OH7zy6nYAAAAMQ"]
[Sat Dec 06 21:24:43.341665 2025] [:error] [pid 1727:tid 1738] [client 66.249.64.101:35831] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQum8D83luYT37-ZaUYngAAAkk"]
[Sat Dec 06 21:24:47.560128 2025] [:error] [pid 61215:tid 61227] [client 66.249.64.101:57903] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQun-OOZ8nTCBYuI-xXngAAAAg"]
[Sat Dec 06 21:24:51.635265 2025] [:error] [pid 61217:tid 61284] [client 66.249.64.101:60788] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQuo1dSKQYfLI3fYo6P2wAAAIs"]
[Sat Dec 06 21:24:59.789678 2025] [:error] [pid 1838:tid 1860] [client 66.249.64.101:57640] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQuqy5zgnu67Yo7vrYomAAAAo4"]
[Sat Dec 06 21:25:11.308861 2025] [:error] [pid 35591:tid 35599] [client 66.249.64.101:58117] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQut4bmw-7bFvTxc9MlUgAAAQY"]
[Sat Dec 06 21:25:25.458842 2025] [:error] [pid 61303:tid 61319] [client 66.249.64.101:40923] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQuxdwK_fe00OH7zy6ngwAAAM0"]
[Sat Dec 06 21:26:28.373765 2025] [:error] [pid 61303:tid 61312] [client 66.249.64.101:60969] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQvBNwK_fe00OH7zy6nvwAAAMY"]
[Sat Dec 06 21:26:32.464011 2025] [:error] [pid 61216:tid 61255] [client 66.249.64.101:39688] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQvCDHlXXVdP5ewviU0VQAAAEk"]
[Sat Dec 06 21:26:36.600498 2025] [:error] [pid 52809:tid 52815] [client 66.249.64.101:58452] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQvDOrRwgsmpIJQ2qaKSQAAAgQ"]
[Sat Dec 06 21:26:45.098841 2025] [:error] [pid 48399:tid 48408] [client 66.249.64.101:54777] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQvFejNPOrIshd8EwfGuAAAAcc"]
[Sat Dec 06 21:26:49.417094 2025] [:error] [pid 1727:tid 1751] [client 66.249.64.101:41718] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQvGcD83luYT37-ZaUZGgAAAlY"]
[Sat Dec 06 21:26:53.880938 2025] [:error] [pid 1838:tid 1849] [client 66.249.64.101:36952] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQvHS5zgnu67Yo7vrYppgAAAoM"]
[Sat Dec 06 21:26:58.093454 2025] [:error] [pid 35622:tid 35672] [client 66.249.64.101:64382] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQvIiOSP_9DVLgFwI7MuQAAAZU"]
[Sat Dec 06 21:27:02.418850 2025] [:error] [pid 48399:tid 48413] [client 66.249.64.101:51215] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQvJujNPOrIshd8EwfGwAAAAcw"]
[Sat Dec 06 21:27:13.961405 2025] [:error] [pid 1838:tid 1858] [client 66.249.64.101:46711] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQvMS5zgnu67Yo7vrYptQAAAow"]
[Sat Dec 06 21:27:18.512567 2025] [:error] [pid 61303:tid 61311] [client 66.249.64.101:47209] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQvNtwK_fe00OH7zy6oEQAAAMU"]
[Sat Dec 06 21:28:03.473327 2025] [:error] [pid 61216:tid 61267] [client 66.249.64.101:56894] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQvYzHlXXVdP5ewviU05gAAAFU"]
[Sat Dec 06 21:28:14.729621 2025] [:error] [pid 35622:tid 35670] [client 66.249.64.101:51740] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQvbiOSP_9DVLgFwI7M7gAAAZM"]
[Sat Dec 06 21:28:19.152078 2025] [:error] [pid 61217:tid 61292] [client 66.249.64.101:43170] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQvc1dSKQYfLI3fYo6QRAAAAJM"]
[Sat Dec 06 21:28:21.439358 2025] [:error] [pid 35591:tid 35616] [client 66.249.64.101:36054] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQvdYbmw-7bFvTxc9MlxgAAARc"]
[Sat Dec 06 21:28:27.628136 2025] [:error] [pid 61303:tid 61313] [client 66.249.64.101:36617] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQve9wK_fe00OH7zy6oRAAAAMc"]
[Sat Dec 06 21:28:29.688252 2025] [:error] [pid 35591:tid 35598] [client 66.249.64.101:60670] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQvfYbmw-7bFvTxc9MlyQAAAQU"]
[Sat Dec 06 21:28:33.343780 2025] [:error] [pid 35591:tid 35596] [client 66.249.64.101:46253] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQvgYbmw-7bFvTxc9MlywAAAQM"]
[Sat Dec 06 21:28:37.118191 2025] [:error] [pid 52809:tid 52830] [client 66.249.64.101:45106] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQvherRwgsmpIJQ2qaKjwAAAhM"]
[Sat Dec 06 21:28:44.416373 2025] [:error] [pid 61303:tid 61311] [client 66.249.64.101:37476] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQvjNwK_fe00OH7zy6oSQAAAMU"]
[Sat Dec 06 21:28:47.935217 2025] [:error] [pid 52809:tid 52822] [client 66.249.64.101:43706] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQvj-rRwgsmpIJQ2qaKlAAAAgs"]
[Sat Dec 06 21:28:51.586222 2025] [:error] [pid 35591:tid 35613] [client 66.249.64.101:56463] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQvk4bmw-7bFvTxc9Ml0QAAARQ"]
[Sat Dec 06 21:28:59.018631 2025] [:error] [pid 1727:tid 1734] [client 66.249.64.101:58146] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQvm8D83luYT37-ZaUZjgAAAkU"]
[Sat Dec 06 21:29:51.773786 2025] [:error] [pid 1838:tid 1860] [client 66.249.64.101:54593] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQvzy5zgnu67Yo7vrYqWwAAAo4"]
[Sat Dec 06 21:29:56.603094 2025] [:error] [pid 35622:tid 35652] [client 66.249.64.101:43878] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQv1COSP_9DVLgFwI7NSwAAAYE"]
[Sat Dec 06 21:30:08.292389 2025] [:error] [pid 48399:tid 48408] [client 66.249.64.101:62938] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQv4OjNPOrIshd8EwfHIwAAAcc"]
[Sat Dec 06 21:30:19.367871 2025] [:error] [pid 61217:tid 61284] [client 66.249.64.101:62068] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQv61dSKQYfLI3fYo6QYgAAAIs"]
[Sat Dec 06 21:30:22.839507 2025] [:error] [pid 61216:tid 61249] [client 66.249.64.101:60466] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQv7jHlXXVdP5ewviU1QQAAAEM"]
[Sat Dec 06 21:30:26.599241 2025] [:error] [pid 61303:tid 61310] [client 66.249.64.101:62258] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQv8twK_fe00OH7zy6ooQAAAMQ"]
[Sat Dec 06 21:30:33.789321 2025] [:error] [pid 1838:tid 1847] [client 66.249.64.101:55721] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQv-S5zgnu67Yo7vrYqrAAAAoE"]
[Sat Dec 06 21:30:37.453450 2025] [:error] [pid 61216:tid 61255] [client 66.249.64.101:50801] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQv_THlXXVdP5ewviU1UQAAAEk"]
[Sat Dec 06 21:30:43.619124 2025] [:error] [pid 1727:tid 1752] [client 66.249.64.101:47372] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQwA8D83luYT37-ZaUZzQAAAlc"]
[Sat Dec 06 21:31:38.767898 2025] [:error] [pid 1727:tid 1735] [client 66.249.64.101:42601] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQwOsD83luYT37-ZaUZ7wAAAkY"]
[Sat Dec 06 21:31:43.045913 2025] [:error] [pid 61303:tid 61330] [client 66.249.64.101:51015] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQwP9wK_fe00OH7zy6ozgAAANc"]
[Sat Dec 06 21:31:50.439427 2025] [:error] [pid 61215:tid 61222] [client 66.249.64.101:39688] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQwRuOOZ8nTCBYuI-xYrgAAAAM"]
[Sat Dec 06 21:31:57.014690 2025] [:error] [pid 1838:tid 1863] [client 66.249.64.101:55580] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQwTS5zgnu67Yo7vrYq7wAAApE"]
[Sat Dec 06 21:32:12.656778 2025] [:error] [pid 61216:tid 61267] [client 66.249.64.101:43422] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQwXDHlXXVdP5ewviU1kQAAAFU"]
[Sat Dec 06 21:32:16.639941 2025] [:error] [pid 48399:tid 48408] [client 66.249.64.101:58526] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQwYOjNPOrIshd8EwfHXgAAAcc"]
[Sat Dec 06 21:32:20.820783 2025] [:error] [pid 61303:tid 61312] [client 66.249.64.101:64153] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQwZNwK_fe00OH7zy6o_wAAAMY"]
[Sat Dec 06 21:32:28.988284 2025] [:error] [pid 1727:tid 1729] [client 66.249.64.101:56452] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQwbMD83luYT37-ZaUaBQAAAkA"]
[Sat Dec 06 21:32:33.205462 2025] [:error] [pid 1838:tid 1865] [client 66.249.64.101:53173] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQwcS5zgnu67Yo7vrYrEwAAApM"]
[Sat Dec 06 21:33:24.674737 2025] [:error] [pid 61215:tid 61238] [client 66.249.64.101:64967] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQwpOOOZ8nTCBYuI-xY5gAAABM"]
[Sat Dec 06 21:33:29.136140 2025] [:error] [pid 61303:tid 61317] [client 66.249.64.101:64878] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQwqdwK_fe00OH7zy6pIAAAAMs"]
[Sat Dec 06 21:33:36.355344 2025] [:error] [pid 1727:tid 1740] [client 66.249.64.101:64363] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQwsMD83luYT37-ZaUaPwAAAks"]
[Sat Dec 06 21:33:42.088587 2025] [:error] [pid 35622:tid 35661] [client 66.249.64.101:37097] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQwtiOSP_9DVLgFwI7OGwAAAYo"]
[Sat Dec 06 21:33:46.311431 2025] [:error] [pid 1838:tid 1858] [client 66.249.64.101:55752] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQwui5zgnu67Yo7vrYrRQAAAow"]
[Sat Dec 06 21:33:50.390190 2025] [:error] [pid 61215:tid 61226] [client 66.249.64.101:41750] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQwvuOOZ8nTCBYuI-xY6gAAAAc"]
[Sat Dec 06 21:33:58.616950 2025] [:error] [pid 61216:tid 61266] [client 66.249.64.101:62421] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQwxjHlXXVdP5ewviU1ywAAAFQ"]
[Sat Dec 06 21:34:13.850206 2025] [:error] [pid 35591:tid 35604] [client 66.249.64.101:54341] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQw1Ybmw-7bFvTxc9MmiAAAAQs"]
[Sat Dec 06 21:34:17.931657 2025] [:error] [pid 61216:tid 61259] [client 66.249.64.101:49168] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQw2THlXXVdP5ewviU13AAAAE0"]
[Sat Dec 06 21:34:19.756936 2025] [:error] [pid 48399:tid 48423] [client 66.249.64.101:65109] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQw2-jNPOrIshd8EwfHmAAAAdY"]
[Sat Dec 06 21:35:12.057751 2025] [:error] [pid 35591:tid 35595] [client 66.249.64.101:56585] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQxEIbmw-7bFvTxc9MmowAAAQI"]
[Sat Dec 06 21:35:15.364911 2025] [:error] [pid 1727:tid 1748] [client 66.249.64.101:50316] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQxE8D83luYT37-ZaUaawAAAlM"]
[Sat Dec 06 21:35:18.606003 2025] [:error] [pid 1727:tid 1746] [client 66.249.64.101:54812] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQxFsD83luYT37-ZaUabAAAAlE"]
[Sat Dec 06 21:35:29.389231 2025] [:error] [pid 35591:tid 35611] [client 66.249.64.101:51071] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQxIYbmw-7bFvTxc9MmtgAAARI"]
[Sat Dec 06 21:35:33.471982 2025] [:error] [pid 35591:tid 35606] [client 66.249.64.101:56354] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQxJYbmw-7bFvTxc9MmuwAAAQ0"]
[Sat Dec 06 21:35:37.570542 2025] [:error] [pid 1838:tid 1857] [client 66.249.64.101:51730] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQxKS5zgnu67Yo7vrYr1wAAAos"]
[Sat Dec 06 21:35:45.872792 2025] [:error] [pid 61215:tid 61231] [client 66.249.64.101:38883] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQxMeOOZ8nTCBYuI-xZOAAAAAw"]
[Sat Dec 06 21:35:49.961722 2025] [:error] [pid 61215:tid 61237] [client 66.249.64.101:53911] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQxNeOOZ8nTCBYuI-xZOgAAABI"]
[Sat Dec 06 21:35:54.058863 2025] [:error] [pid 52809:tid 52815] [client 66.249.64.101:57007] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQxOurRwgsmpIJQ2qaLqAAAAgQ"]
[Sat Dec 06 21:35:58.146150 2025] [:error] [pid 61215:tid 61243] [client 66.249.64.101:43344] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQxPuOOZ8nTCBYuI-xZPQAAABg"]
[Sat Dec 06 21:37:00.001310 2025] [:error] [pid 35591:tid 35603] [client 66.249.64.101:55084] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQxfIbmw-7bFvTxc9Mm3wAAAQo"]
[Sat Dec 06 21:37:04.377939 2025] [:error] [pid 48399:tid 48422] [client 66.249.64.101:45419] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQxgOjNPOrIshd8EwfIIAAAAdU"]
[Sat Dec 06 21:37:08.018671 2025] [:error] [pid 1727:tid 1736] [client 66.249.64.101:40114] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQxhMD83luYT37-ZaUazQAAAkc"]
[Sat Dec 06 21:37:15.477165 2025] [:error] [pid 61216:tid 61248] [client 66.249.64.101:49454] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQxizHlXXVdP5ewviU2bwAAAEI"]
[Sat Dec 06 21:37:19.573676 2025] [:error] [pid 61217:tid 61289] [client 66.249.64.101:40172] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQxj1dSKQYfLI3fYo6ROwAAAJA"]
[Sat Dec 06 21:37:23.771598 2025] [:error] [pid 48399:tid 48414] [client 66.249.64.101:52738] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQxk-jNPOrIshd8EwfIKwAAAc0"]
[Sat Dec 06 21:37:26.285029 2025] [:error] [pid 52809:tid 52832] [client 66.249.64.101:37377] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQxlurRwgsmpIJQ2qaL6QAAAhU"]
[Sat Dec 06 21:37:33.580773 2025] [:error] [pid 52809:tid 52835] [client 66.249.64.101:63831] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQxnerRwgsmpIJQ2qaL8gAAAhg"]
[Sat Dec 06 21:37:37.214023 2025] [:error] [pid 35622:tid 35663] [client 66.249.64.101:41174] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQxoSOSP_9DVLgFwI7OlAAAAYw"]
[Sat Dec 06 21:37:41.008968 2025] [:error] [pid 1838:tid 1857] [client 66.249.64.101:35525] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQxpS5zgnu67Yo7vrYsXAAAAos"]
[Sat Dec 06 21:37:48.172538 2025] [:error] [pid 61216:tid 61266] [client 66.249.64.101:36747] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQxrDHlXXVdP5ewviU2twAAAFQ"]
[Sat Dec 06 21:37:51.856782 2025] [:error] [pid 1838:tid 1854] [client 66.249.64.101:53641] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQxry5zgnu67Yo7vrYscgAAAog"]
[Sat Dec 06 21:38:51.138664 2025] [:error] [pid 61303:tid 61327] [client 66.249.64.101:60551] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQx69wK_fe00OH7zy6qagAAANQ"]
[Sat Dec 06 21:38:57.666890 2025] [:error] [pid 61216:tid 61269] [client 66.249.64.101:39750] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQx8THlXXVdP5ewviU3KgAAAFc"]
[Sat Dec 06 21:39:06.103147 2025] [:error] [pid 61216:tid 61262] [client 66.249.64.101:58860] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQx-jHlXXVdP5ewviU3QQAAAFA"]
[Sat Dec 06 21:39:19.573653 2025] [:error] [pid 61215:tid 61219] [client 66.249.64.101:55894] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQyB-OOZ8nTCBYuI-xZ4wAAAAA"]
[Sat Dec 06 21:39:26.860271 2025] [:error] [pid 48399:tid 48413] [client 66.249.64.101:61927] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQyDujNPOrIshd8EwfIlAAAAcw"]
[Sat Dec 06 21:39:31.687183 2025] [:error] [pid 1727:tid 1743] [client 66.249.64.101:52493] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQyE8D83luYT37-ZaUbbgAAAk4"]
[Sat Dec 06 21:39:36.000590 2025] [:error] [pid 52809:tid 52821] [client 66.249.64.101:53665] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQyF-rRwgsmpIJQ2qaMaQAAAgo"]
[Sat Dec 06 21:39:38.295762 2025] [:error] [pid 35622:tid 35654] [client 66.249.64.101:62137] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQyGiOSP_9DVLgFwI7O4wAAAYM"]
[Sat Dec 06 21:39:46.474428 2025] [:error] [pid 61303:tid 61324] [client 66.249.64.101:45785] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQyItwK_fe00OH7zy6qmgAAANE"]
[Sat Dec 06 21:40:39.884676 2025] [:error] [pid 35591:tid 35599] [client 66.249.64.101:61561] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQyV4bmw-7bFvTxc9MnvgAAAQY"]
[Sat Dec 06 21:40:47.178511 2025] [:error] [pid 1838:tid 1856] [client 66.249.64.101:58173] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQyXy5zgnu67Yo7vrYtlwAAAoo"]
[Sat Dec 06 21:40:50.576120 2025] [:error] [pid 61217:tid 61278] [client 66.249.64.101:36449] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQyYldSKQYfLI3fYo6SOgAAAIU"]
[Sat Dec 06 21:40:54.469233 2025] [:error] [pid 35622:tid 35651] [client 66.249.64.101:63435] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQyZiOSP_9DVLgFwI7PTgAAAYA"]
[Sat Dec 06 21:41:16.376340 2025] [:error] [pid 61303:tid 61309] [client 66.249.64.101:49427] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQyfNwK_fe00OH7zy6rXwAAAMM"]
[Sat Dec 06 21:41:23.534719 2025] [:error] [pid 61216:tid 61261] [client 66.249.64.101:45103] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQygzHlXXVdP5ewviU4XQAAAE8"]
[Sat Dec 06 21:41:30.812664 2025] [:error] [pid 61215:tid 61220] [client 66.249.64.101:64829] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQyiuOOZ8nTCBYuI-xajAAAAAE"]
[Sat Dec 06 21:42:40.283141 2025] [:error] [pid 1727:tid 1741] [client 66.249.64.101:54114] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQy0MD83luYT37-ZaUcUQAAAkw"]
[Sat Dec 06 21:42:41.377803 2025] [:error] [pid 35591:tid 35615] [client 66.249.64.101:35172] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQy0Ybmw-7bFvTxc9MoSQAAARY"]
[Sat Dec 06 21:42:44.056802 2025] [:error] [pid 48399:tid 48408] [client 66.249.64.101:63621] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQy1OjNPOrIshd8EwfJhQAAAcc"]
[Sat Dec 06 21:42:51.269785 2025] [:error] [pid 61303:tid 61319] [client 66.249.64.101:41229] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQy29wK_fe00OH7zy6r3wAAAM0"]
[Sat Dec 06 21:42:54.933375 2025] [:error] [pid 61303:tid 61306] [client 66.249.64.101:63298] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQy3twK_fe00OH7zy6r5gAAAMA"]
[Sat Dec 06 21:42:58.434559 2025] [:error] [pid 35591:tid 35607] [client 66.249.64.101:43047] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQy4obmw-7bFvTxc9MoUAAAAQ4"]
[Sat Dec 06 21:43:05.861983 2025] [:error] [pid 61215:tid 61243] [client 66.249.64.101:53348] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQy6eOOZ8nTCBYuI-xbFAAAABg"]
[Sat Dec 06 21:43:14.303451 2025] [:error] [pid 35591:tid 35606] [client 66.249.64.101:60214] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQy8obmw-7bFvTxc9MoaQAAAQ0"]
[Sat Dec 06 21:43:21.186591 2025] [:error] [pid 1838:tid 1851] [client 66.249.64.101:37872] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQy-S5zgnu67Yo7vrYvjAAAAoU"]
[Sat Dec 06 21:43:21.190363 2025] [:error] [pid 35591:tid 35604] [client 66.249.64.101:55826] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQy-Ybmw-7bFvTxc9MobwAAAQs"]
[Sat Dec 06 21:43:23.079660 2025] [:error] [pid 1727:tid 1742] [client 66.249.64.101:48951] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQy-8D83luYT37-ZaUcewAAAk0"]
[Sat Dec 06 21:43:27.632711 2025] [:error] [pid 61303:tid 61323] [client 66.249.64.101:44925] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQy_9wK_fe00OH7zy6sAwAAANA"]
[Sat Dec 06 21:43:31.418221 2025] [:error] [pid 61303:tid 61309] [client 66.249.64.101:52040] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQzA9wK_fe00OH7zy6sDQAAAMM"]
[Sat Dec 06 21:43:35.074399 2025] [:error] [pid 52809:tid 52815] [client 66.249.64.101:41004] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQzB-rRwgsmpIJQ2qaNnwAAAgQ"]
[Sat Dec 06 21:44:44.288677 2025] [:error] [pid 61216:tid 61259] [client 66.249.64.101:37788] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQzTDHlXXVdP5ewviU58QAAAE0"]
[Sat Dec 06 21:44:47.927941 2025] [:error] [pid 35591:tid 35604] [client 66.249.64.101:61324] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQzT4bmw-7bFvTxc9MooQAAAQs"]
[Sat Dec 06 21:44:51.712925 2025] [:error] [pid 35591:tid 35596] [client 66.249.64.101:52207] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQzU4bmw-7bFvTxc9MopAAAAQM"]
[Sat Dec 06 21:45:02.542450 2025] [:error] [pid 1727:tid 1745] [client 66.249.64.101:56924] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQzXsD83luYT37-ZaUcuwAAAlA"]
[Sat Dec 06 21:45:09.828595 2025] [:error] [pid 1838:tid 1850] [client 66.249.64.101:45945] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQzZS5zgnu67Yo7vrYwKwAAAoQ"]
[Sat Dec 06 21:45:20.765150 2025] [:error] [pid 48399:tid 48409] [client 66.249.64.101:65358] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQzcOjNPOrIshd8EwfKBAAAAcg"]
[Sat Dec 06 21:45:24.468179 2025] [:error] [pid 1838:tid 1854] [client 66.249.64.101:37491] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQzdC5zgnu67Yo7vrYwPQAAAog"]
[Sat Dec 06 21:45:31.813748 2025] [:error] [pid 61217:tid 61290] [client 66.249.64.101:39436] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQze1dSKQYfLI3fYo6TKAAAAJE"]
[Sat Dec 06 21:47:58.062156 2025] [:error] [pid 1838:tid 1869] [client 66.249.64.101:48769] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ0Di5zgnu67Yo7vrYw8gAAApc"]
[Sat Dec 06 21:48:03.972232 2025] [:error] [pid 61216:tid 61248] [client 66.249.64.101:39482] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ0EzHlXXVdP5ewviU6owAAAEI"]
[Sat Dec 06 21:48:05.799264 2025] [:error] [pid 48399:tid 48406] [client 66.249.64.101:60290] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ0FejNPOrIshd8EwfKWwAAAcU"]
[Sat Dec 06 21:48:12.336582 2025] [:error] [pid 35622:tid 35660] [client 66.249.64.101:63330] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ0HCOSP_9DVLgFwI7QagAAAYk"]
[Sat Dec 06 21:48:20.780261 2025] [:error] [pid 61216:tid 61250] [client 66.249.64.101:50940] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ0JDHlXXVdP5ewviU6qgAAAEQ"]
[Sat Dec 06 21:48:34.221642 2025] [:error] [pid 1727:tid 1739] [client 66.249.64.101:55768] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ0MsD83luYT37-ZaUdJQAAAko"]
[Sat Dec 06 21:48:45.325201 2025] [:error] [pid 61303:tid 61308] [client 66.249.64.101:51438] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ0PdwK_fe00OH7zy6s8wAAAMI"]
[Sat Dec 06 21:50:11.557706 2025] [:error] [pid 1838:tid 1856] [client 66.249.64.101:63559] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ0ky5zgnu67Yo7vrYxgwAAAoo"]
[Sat Dec 06 21:50:19.979937 2025] [:error] [pid 61217:tid 61282] [client 66.249.64.101:43768] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ0m1dSKQYfLI3fYo6TtAAAAIk"]
[Sat Dec 06 21:50:24.205882 2025] [:error] [pid 1727:tid 1737] [client 66.249.64.101:51187] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ0oMD83luYT37-ZaUdcgAAAkg"]
[Sat Dec 06 21:50:28.409883 2025] [:error] [pid 61216:tid 61265] [client 66.249.64.101:63467] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ0pDHlXXVdP5ewviU7OAAAAFM"]
[Sat Dec 06 21:50:32.495636 2025] [:error] [pid 1838:tid 1862] [client 66.249.64.101:37882] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ0qC5zgnu67Yo7vrYxlAAAApA"]
[Sat Dec 06 21:50:45.043514 2025] [:error] [pid 1727:tid 1747] [client 66.249.64.101:58817] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ0tcD83luYT37-ZaUdhgAAAlI"]
[Sat Dec 06 21:50:53.354650 2025] [:error] [pid 35591:tid 35608] [client 66.249.64.101:63427] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ0vYbmw-7bFvTxc9MpZwAAAQ8"]
[Sat Dec 06 21:51:59.503187 2025] [:error] [pid 48399:tid 48418] [client 66.249.64.101:61700] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ0_-jNPOrIshd8EwfK3gAAAdE"]
[Sat Dec 06 21:52:25.596919 2025] [:error] [pid 61303:tid 61312] [client 66.249.64.101:59758] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ1GdwK_fe00OH7zy6tegAAAMY"]
[Sat Dec 06 21:52:42.212062 2025] [:error] [pid 61216:tid 61246] [client 66.249.64.101:56854] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ1KjHlXXVdP5ewviU73wAAAEA"]
[Sat Dec 06 21:52:46.419448 2025] [:error] [pid 1838:tid 1857] [client 66.249.64.101:36293] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ1Li5zgnu67Yo7vrYysQAAAos"]
[Sat Dec 06 21:54:04.542065 2025] [:error] [pid 61215:tid 61223] [client 66.249.64.101:54692] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ1fOOOZ8nTCBYuI-xdMgAAAAQ"]
[Sat Dec 06 21:54:08.203873 2025] [:error] [pid 1838:tid 1862] [client 66.249.64.101:55048] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ1gC5zgnu67Yo7vrYzJwAAApA"]
[Sat Dec 06 21:54:17.003132 2025] [:error] [pid 48399:tid 48409] [client 66.249.64.101:39261] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ1iejNPOrIshd8EwfLQwAAAcg"]
[Sat Dec 06 21:54:22.891569 2025] [:error] [pid 52809:tid 52814] [client 66.249.64.101:59726] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ1jurRwgsmpIJQ2qaP4gAAAgM"]
[Sat Dec 06 21:54:25.823214 2025] [:error] [pid 35591:tid 35598] [client 66.249.64.101:53625] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ1kYbmw-7bFvTxc9MqCQAAAQU"]
[Sat Dec 06 21:54:28.760990 2025] [:error] [pid 52809:tid 52814] [client 66.249.64.101:37792] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ1lOrRwgsmpIJQ2qaP9QAAAgM"]
[Sat Dec 06 21:54:34.622383 2025] [:error] [pid 52809:tid 52826] [client 66.249.64.101:62245] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ1murRwgsmpIJQ2qaP_wAAAg8"]
[Sat Dec 06 21:54:37.701885 2025] [:error] [pid 35591:tid 35609] [client 66.249.64.101:50088] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ1nYbmw-7bFvTxc9MqEgAAARA"]
[Sat Dec 06 21:54:52.252403 2025] [:error] [pid 61216:tid 61246] [client 66.249.64.101:59192] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ1rDHlXXVdP5ewviU8XgAAAEA"]
[Sat Dec 06 21:54:55.191520 2025] [:error] [pid 61216:tid 61260] [client 66.249.64.101:49592] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ1rzHlXXVdP5ewviU8YgAAAE4"]
[Sat Dec 06 21:54:58.121798 2025] [:error] [pid 1727:tid 1734] [client 66.249.64.101:55270] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ1ssD83luYT37-ZaUeSQAAAkU"]
[Sat Dec 06 21:56:22.735962 2025] [:error] [pid 35591:tid 35607] [client 66.249.64.101:57763] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ2Bobmw-7bFvTxc9MqVAAAAQ4"]
[Sat Dec 06 21:56:29.977220 2025] [:error] [pid 1727:tid 1751] [client 66.249.64.101:65520] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ2DcD83luYT37-ZaUeiAAAAlY"]
[Sat Dec 06 21:56:33.561726 2025] [:error] [pid 52809:tid 52817] [client 66.249.64.101:59746] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ2EerRwgsmpIJQ2qaQYAAAAgY"]
[Sat Dec 06 21:56:42.298284 2025] [:error] [pid 61303:tid 61325] [client 66.249.64.101:48211] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ2GtwK_fe00OH7zy6ufgAAANI"]
[Sat Dec 06 21:56:45.979479 2025] [:error] [pid 61216:tid 61248] [client 66.249.64.101:45570] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ2HTHlXXVdP5ewviU89wAAAEI"]
[Sat Dec 06 21:56:53.602914 2025] [:error] [pid 61216:tid 61268] [client 66.249.64.101:60988] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ2JTHlXXVdP5ewviU8_QAAAFY"]
[Sat Dec 06 21:56:57.823366 2025] [:error] [pid 1727:tid 1740] [client 66.249.64.101:56582] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ2KcD83luYT37-ZaUepAAAAks"]
[Sat Dec 06 21:56:59.708621 2025] [:error] [pid 1838:tid 1868] [client 66.249.64.101:63494] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ2Ky5zgnu67Yo7vrY0SAAAApY"]
[Sat Dec 06 21:58:30.038838 2025] [:error] [pid 61215:tid 61240] [client 66.249.64.101:45028] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ2huOOZ8nTCBYuI-xd5AAAABU"]
[Sat Dec 06 21:58:30.683445 2025] [:error] [pid 1838:tid 1849] [client 66.249.64.101:48712] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ2hi5zgnu67Yo7vrY0zwAAAoM"]
[Sat Dec 06 21:58:35.672670 2025] [:error] [pid 61216:tid 61260] [client 66.249.64.101:45516] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ2izHlXXVdP5ewviU9bAAAAE4"]
[Sat Dec 06 21:58:38.472887 2025] [:error] [pid 1838:tid 1858] [client 66.249.64.101:52718] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ2ji5zgnu67Yo7vrY03QAAAow"]
[Sat Dec 06 21:58:41.540654 2025] [:error] [pid 61215:tid 61234] [client 66.249.64.101:59048] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ2keOOZ8nTCBYuI-xd7QAAAA8"]
[Sat Dec 06 21:58:48.785354 2025] [:error] [pid 61303:tid 61327] [client 66.249.64.101:62710] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ2mNwK_fe00OH7zy6u1gAAANQ"]
[Sat Dec 06 21:58:58.366479 2025] [:error] [pid 1838:tid 1866] [client 66.249.64.101:63485] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ2oi5zgnu67Yo7vrY06wAAApQ"]
[Sat Dec 06 21:59:02.058021 2025] [:error] [pid 1838:tid 1868] [client 66.249.64.101:50383] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ2pi5zgnu67Yo7vrY08AAAApY"]
[Sat Dec 06 21:59:09.726794 2025] [:error] [pid 48399:tid 48412] [client 66.249.64.101:53929] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ2rejNPOrIshd8EwfMUgAAAcs"]
[Sat Dec 06 21:59:13.290754 2025] [:error] [pid 61216:tid 61259] [client 66.249.64.101:43526] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ2sTHlXXVdP5ewviU9lAAAAE0"]
[Sat Dec 06 21:59:16.981847 2025] [:error] [pid 61216:tid 61269] [client 66.249.64.101:62641] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ2tDHlXXVdP5ewviU9lgAAAFc"]
[Sat Dec 06 21:59:24.596329 2025] [:error] [pid 61303:tid 61312] [client 66.249.64.101:57489] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ2vNwK_fe00OH7zy6u9gAAAMY"]
[Sat Dec 06 22:00:21.192883 2025] [:error] [pid 1838:tid 1868] [client 66.249.64.101:34831] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ29S5zgnu67Yo7vrY1OAAAApY"]
[Sat Dec 06 22:00:27.265168 2025] [:error] [pid 35622:tid 35667] [client 66.249.64.101:37080] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ2-yOSP_9DVLgFwI7SOwAAAZA"]
[Sat Dec 06 22:00:30.213134 2025] [:error] [pid 52809:tid 52812] [client 66.249.64.101:55753] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ2_urRwgsmpIJQ2qaQ8wAAAgE"]
[Sat Dec 06 22:00:36.265566 2025] [:error] [pid 1838:tid 1847] [client 66.249.64.101:63313] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ3BC5zgnu67Yo7vrY1SgAAAoE"]
[Sat Dec 06 22:00:45.035160 2025] [:error] [pid 1838:tid 1863] [client 66.249.64.101:42826] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ3DS5zgnu67Yo7vrY1VQAAApE"]
[Sat Dec 06 22:00:47.875827 2025] [:error] [pid 35591:tid 35610] [client 66.249.64.101:54622] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ3D4bmw-7bFvTxc9MrdgAAARE"]
[Sat Dec 06 22:00:50.806051 2025] [:error] [pid 1838:tid 1865] [client 66.249.64.101:47830] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ3Ei5zgnu67Yo7vrY1cgAAApM"]
[Sat Dec 06 22:00:57.274776 2025] [:error] [pid 61217:tid 61282] [client 66.249.64.101:45700] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ3GVdSKQYfLI3fYo6VFQAAAIk"]
[Sat Dec 06 22:01:01.344951 2025] [:error] [pid 61215:tid 61227] [client 66.249.64.101:54844] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ3HeOOZ8nTCBYuI-xeTAAAAAg"]
[Sat Dec 06 22:02:32.673574 2025] [:error] [pid 61217:tid 61286] [client 66.249.64.101:57918] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ3eFdSKQYfLI3fYo6VQQAAAI0"]
[Sat Dec 06 22:02:36.382903 2025] [:error] [pid 35591:tid 35593] [client 66.249.64.101:64436] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ3fIbmw-7bFvTxc9MrzAAAAQA"]
[Sat Dec 06 22:02:39.963491 2025] [:error] [pid 61303:tid 61329] [client 66.249.64.101:36909] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ3f9wK_fe00OH7zy6vcgAAANY"]
[Sat Dec 06 22:02:47.316409 2025] [:error] [pid 61215:tid 61231] [client 66.249.64.101:63105] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ3h-OOZ8nTCBYuI-xecgAAAAw"]
[Sat Dec 06 22:02:50.881618 2025] [:error] [pid 1838:tid 1850] [client 66.249.64.101:58523] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ3ii5zgnu67Yo7vrY1wgAAAoQ"]
[Sat Dec 06 22:02:53.211859 2025] [:error] [pid 52809:tid 52817] [client 66.249.64.101:59836] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ3jerRwgsmpIJQ2qaRMwAAAgY"]
[Sat Dec 06 22:02:56.035630 2025] [:error] [pid 1727:tid 1729] [client 66.249.64.101:47614] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ3kMD83luYT37-ZaUffAAAAkA"]
[Sat Dec 06 22:02:57.647958 2025] [:error] [pid 1727:tid 1753] [client 66.249.64.101:55174] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ3kcD83luYT37-ZaUffQAAAlg"]
[Sat Dec 06 22:03:02.970682 2025] [:error] [pid 61216:tid 61257] [client 66.249.64.101:45395] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ3ljHlXXVdP5ewviU-YwAAAEs"]
[Sat Dec 06 22:03:08.861758 2025] [:error] [pid 48399:tid 48422] [client 66.249.64.101:62303] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ3nOjNPOrIshd8EwfMqgAAAdU"]
[Sat Dec 06 22:03:14.229454 2025] [:error] [pid 52809:tid 52832] [client 66.249.64.101:61397] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ3ourRwgsmpIJQ2qaROgAAAhU"]
[Sat Dec 06 22:03:21.382879 2025] [:error] [pid 48399:tid 48420] [client 66.249.64.101:60759] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ3qejNPOrIshd8EwfMsAAAAdM"]
[Sat Dec 06 22:03:23.748370 2025] [:error] [pid 1727:tid 1740] [client 66.249.64.101:35707] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ3q8D83luYT37-ZaUfkgAAAks"]
[Sat Dec 06 22:04:09.821699 2025] [:error] [pid 61216:tid 61249] [client 66.249.64.101:62575] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ32THlXXVdP5ewviU-fwAAAEM"]
[Sat Dec 06 22:04:16.599942 2025] [:error] [pid 1838:tid 1849] [client 66.249.64.101:39643] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ34C5zgnu67Yo7vrY19QAAAoM"]
[Sat Dec 06 22:04:19.362016 2025] [:error] [pid 35591:tid 35608] [client 66.249.64.101:60617] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ344bmw-7bFvTxc9MsFAAAAQ8"]
[Sat Dec 06 22:04:25.233074 2025] [:error] [pid 52809:tid 52817] [client 66.249.64.101:48236] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ36erRwgsmpIJQ2qaRXAAAAgY"]
[Sat Dec 06 22:04:28.167433 2025] [:error] [pid 61216:tid 61255] [client 66.249.64.101:41002] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ37DHlXXVdP5ewviU-jAAAAEk"]
[Sat Dec 06 22:04:34.032543 2025] [:error] [pid 48399:tid 48416] [client 66.249.64.101:44477] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ38ujNPOrIshd8EwfMzgAAAc8"]
[Sat Dec 06 22:04:37.111228 2025] [:error] [pid 1727:tid 1731] [client 66.249.64.101:57284] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ39cD83luYT37-ZaUfrgAAAkI"]
[Sat Dec 06 22:04:39.906773 2025] [:error] [pid 61216:tid 61249] [client 66.249.64.101:63513] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ39zHlXXVdP5ewviU-mwAAAEM"]
[Sat Dec 06 22:04:46.265552 2025] [:error] [pid 61217:tid 61295] [client 66.249.64.101:35546] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ3_ldSKQYfLI3fYo6VaAAAAJY"]
[Sat Dec 06 22:04:48.801139 2025] [:error] [pid 61303:tid 61306] [client 66.249.64.101:62373] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ4ANwK_fe00OH7zy6vtwAAAMA"]
[Sat Dec 06 22:04:51.669789 2025] [:error] [pid 35591:tid 35614] [client 66.249.64.101:35007] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ4A4bmw-7bFvTxc9MsKAAAARU"]
[Sat Dec 06 22:04:59.656633 2025] [:error] [pid 61216:tid 61267] [client 66.249.64.101:51353] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ4CzHlXXVdP5ewviU-sgAAAFU"]
[Sat Dec 06 22:05:03.218655 2025] [:error] [pid 1727:tid 1748] [client 66.249.64.101:40227] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ4D8D83luYT37-ZaUfwgAAAlM"]
[Sat Dec 06 22:05:54.334803 2025] [:error] [pid 1838:tid 1863] [client 66.249.64.101:41205] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ4Qi5zgnu67Yo7vrY2cQAAApE"]
[Sat Dec 06 22:06:01.814426 2025] [:error] [pid 48399:tid 48411] [client 66.249.64.101:50622] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ4SejNPOrIshd8EwfM7AAAAco"]
[Sat Dec 06 22:06:13.996222 2025] [:error] [pid 1727:tid 1736] [client 66.249.64.101:56784] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ4VcD83luYT37-ZaUf6QAAAkc"]
[Sat Dec 06 22:06:17.687404 2025] [:error] [pid 61217:tid 61292] [client 66.249.64.101:60289] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ4WVdSKQYfLI3fYo6ViwAAAJM"]
[Sat Dec 06 22:06:22.719201 2025] [:error] [pid 61217:tid 61278] [client 66.249.64.101:47810] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ4XldSKQYfLI3fYo6VkAAAAIU"]
[Sat Dec 06 22:06:24.192342 2025] [:error] [pid 61303:tid 61319] [client 66.249.64.101:43047] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ4YNwK_fe00OH7zy6wEQAAAM0"]
[Sat Dec 06 22:06:25.657886 2025] [:error] [pid 35622:tid 35665] [client 66.249.64.101:56134] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ4YSOSP_9DVLgFwI7SxAAAAY4"]
[Sat Dec 06 22:06:40.370324 2025] [:error] [pid 52809:tid 52811] [client 66.249.64.101:39390] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ4cOrRwgsmpIJQ2qaRrwAAAgA"]
[Sat Dec 06 22:06:47.997772 2025] [:error] [pid 35591:tid 35610] [client 66.249.64.101:49666] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ4d4bmw-7bFvTxc9MsvQAAARE"]
[Sat Dec 06 22:06:51.705608 2025] [:error] [pid 1838:tid 1855] [client 66.249.64.101:53811] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ4ey5zgnu67Yo7vrY20wAAAok"]
[Sat Dec 06 22:07:46.444877 2025] [:error] [pid 48399:tid 48425] [client 66.249.64.101:64981] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ4sujNPOrIshd8EwfNPQAAAdg"]
[Sat Dec 06 22:07:54.100618 2025] [:error] [pid 61217:tid 61287] [client 66.249.64.101:37758] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ4uldSKQYfLI3fYo6VxgAAAI4"]
[Sat Dec 06 22:07:55.342597 2025] [:error] [pid 35622:tid 35653] [client 66.249.64.101:48018] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ4uyOSP_9DVLgFwI7S-QAAAYI"]
[Sat Dec 06 22:07:56.807715 2025] [:error] [pid 48399:tid 48418] [client 66.249.64.101:36350] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ4vOjNPOrIshd8EwfNQQAAAdE"]
[Sat Dec 06 22:08:13.093971 2025] [:error] [pid 61215:tid 61231] [client 66.249.64.101:59747] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ4zeOOZ8nTCBYuI-xfOwAAAAw"]
[Sat Dec 06 22:08:18.489630 2025] [:error] [pid 35622:tid 35653] [client 66.249.64.101:35710] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ40iOSP_9DVLgFwI7TCgAAAYI"]
[Sat Dec 06 22:08:25.585088 2025] [:error] [pid 35622:tid 35654] [client 66.249.64.101:49117] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ42SOSP_9DVLgFwI7TEAAAAYM"]
[Sat Dec 06 22:09:47.633630 2025] [:error] [pid 1838:tid 1855] [client 66.249.64.101:59959] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ5Ky5zgnu67Yo7vrY3xwAAAok"]
[Sat Dec 06 22:09:54.230613 2025] [:error] [pid 61217:tid 61284] [client 66.249.64.101:43938] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ5MldSKQYfLI3fYo6WBAAAAIs"]
[Sat Dec 06 22:10:00.250792 2025] [:error] [pid 61215:tid 61241] [client 66.249.64.101:55921] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ5OOOOZ8nTCBYuI-xfjwAAABY"]
[Sat Dec 06 22:10:09.041505 2025] [:error] [pid 35622:tid 35663] [client 66.249.64.101:37024] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ5QSOSP_9DVLgFwI7TRAAAAYw"]
[Sat Dec 06 22:10:11.994639 2025] [:error] [pid 35622:tid 35673] [client 66.249.64.101:62494] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ5QyOSP_9DVLgFwI7TRwAAAZY"]
[Sat Dec 06 22:10:17.737572 2025] [:error] [pid 48399:tid 48408] [client 66.249.64.101:61619] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ5SejNPOrIshd8EwfNngAAAcc"]
[Sat Dec 06 22:10:26.673961 2025] [:error] [pid 61303:tid 61325] [client 66.249.64.101:57612] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ5UtwK_fe00OH7zy6xEQAAANI"]
[Sat Dec 06 22:10:29.507536 2025] [:error] [pid 1838:tid 1866] [client 66.249.64.101:37156] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ5VS5zgnu67Yo7vrY34gAAApQ"]
[Sat Dec 06 22:10:35.477442 2025] [:error] [pid 1838:tid 1859] [client 66.249.64.101:52776] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ5Wy5zgnu67Yo7vrY37gAAAo0"]
[Sat Dec 06 22:10:38.336398 2025] [:error] [pid 61216:tid 61269] [client 66.249.64.101:39954] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ5XjHlXXVdP5ewviU_0AAAAFc"]
[Sat Dec 06 22:10:41.228321 2025] [:error] [pid 35591:tid 35608] [client 66.249.64.101:61265] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ5YYbmw-7bFvTxc9MtKQAAAQ8"]
[Sat Dec 06 22:11:30.448497 2025] [:error] [pid 1838:tid 1861] [client 66.249.64.101:40558] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ5ki5zgnu67Yo7vrY4BgAAAo8"]
[Sat Dec 06 22:11:31.480839 2025] [:error] [pid 61216:tid 61258] [client 66.249.64.101:54538] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ5kzHlXXVdP5ewviU_-AAAAEw"]
[Sat Dec 06 22:11:35.172616 2025] [:error] [pid 35622:tid 35659] [client 66.249.64.101:41564] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ5lyOSP_9DVLgFwI7TWwAAAYg"]
[Sat Dec 06 22:11:40.264886 2025] [:error] [pid 35591:tid 35617] [client 66.249.64.101:52988] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ5nIbmw-7bFvTxc9MtLQAAARg"]
[Sat Dec 06 22:11:43.982338 2025] [:error] [pid 61216:tid 61252] [client 66.249.64.101:35098] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ5nzHlXXVdP5ewviU__AAAAEY"]
[Sat Dec 06 22:11:51.457378 2025] [:error] [pid 1838:tid 1858] [client 66.249.64.101:62941] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ5py5zgnu67Yo7vrY4EAAAAow"]
[Sat Dec 06 22:11:55.062133 2025] [:error] [pid 52809:tid 52834] [client 66.249.64.101:45673] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ5q-rRwgsmpIJQ2qaSIwAAAhc"]
[Sat Dec 06 22:11:58.650161 2025] [:error] [pid 61216:tid 61247] [client 66.249.64.101:56374] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ5rjHlXXVdP5ewviVABgAAAEE"]
[Sat Dec 06 22:12:05.897755 2025] [:error] [pid 48399:tid 48411] [client 66.249.64.101:35855] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ5tejNPOrIshd8EwfN8wAAAco"]
[Sat Dec 06 22:12:09.462689 2025] [:error] [pid 52809:tid 52816] [client 66.249.64.101:48813] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ5uerRwgsmpIJQ2qaSLgAAAgU"]
[Sat Dec 06 22:12:17.058668 2025] [:error] [pid 52809:tid 52820] [client 66.249.64.101:36841] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ5werRwgsmpIJQ2qaSNAAAAgk"]
[Sat Dec 06 22:12:18.249147 2025] [:error] [pid 1838:tid 1858] [client 66.249.64.101:47249] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ5wi5zgnu67Yo7vrY4MAAAAow"]
[Sat Dec 06 22:12:21.841459 2025] [:error] [pid 1838:tid 1865] [client 66.249.64.101:36411] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ5xS5zgnu67Yo7vrY4OQAAApM"]
[Sat Dec 06 22:13:14.153097 2025] [:error] [pid 52809:tid 52822] [client 66.249.64.101:43997] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ5-urRwgsmpIJQ2qaSUQAAAgs"]
[Sat Dec 06 22:13:16.948698 2025] [:error] [pid 61215:tid 61234] [client 66.249.64.101:63266] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ5_OOOZ8nTCBYuI-xf0QAAAA8"]
[Sat Dec 06 22:13:23.627547 2025] [:error] [pid 61303:tid 61321] [client 66.249.64.101:54548] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ6A9wK_fe00OH7zy6xbgAAAM4"]
[Sat Dec 06 22:13:28.832078 2025] [:error] [pid 61303:tid 61308] [client 66.249.64.101:35853] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ6CNwK_fe00OH7zy6xcwAAAMI"]
[Sat Dec 06 22:13:31.777627 2025] [:error] [pid 52809:tid 52825] [client 66.249.64.101:56658] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ6C-rRwgsmpIJQ2qaSWQAAAg4"]
[Sat Dec 06 22:13:37.647941 2025] [:error] [pid 61217:tid 61288] [client 66.249.64.101:43874] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ6EVdSKQYfLI3fYo6WTwAAAI8"]
[Sat Dec 06 22:13:40.451844 2025] [:error] [pid 61303:tid 61319] [client 66.249.64.101:55887] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ6FNwK_fe00OH7zy6xgAAAAM0"]
[Sat Dec 06 22:13:48.677069 2025] [:error] [pid 1838:tid 1869] [client 66.249.64.101:62916] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ6HC5zgnu67Yo7vrY4fQAAApc"]
[Sat Dec 06 22:13:52.258713 2025] [:error] [pid 52809:tid 52814] [client 66.249.64.101:38083] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ6IOrRwgsmpIJQ2qaSagAAAgM"]
[Sat Dec 06 22:13:59.556944 2025] [:error] [pid 52809:tid 52824] [client 66.249.64.101:55076] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ6J-rRwgsmpIJQ2qaScgAAAg0"]
[Sat Dec 06 22:14:03.317415 2025] [:error] [pid 61215:tid 61240] [client 66.249.64.101:37915] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ6K-OOZ8nTCBYuI-xf8AAAABU"]
[Sat Dec 06 22:14:06.887905 2025] [:error] [pid 52809:tid 52816] [client 66.249.64.101:55060] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ6LurRwgsmpIJQ2qaSgwAAAgU"]
[Sat Dec 06 22:14:54.537114 2025] [:error] [pid 61215:tid 61234] [client 66.249.64.101:43136] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ6XuOOZ8nTCBYuI-xgDAAAAA8"]
[Sat Dec 06 22:15:01.822711 2025] [:error] [pid 61215:tid 61242] [client 66.249.64.101:61421] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ6ZeOOZ8nTCBYuI-xgDQAAABc"]
[Sat Dec 06 22:15:11.520863 2025] [:error] [pid 61303:tid 61316] [client 66.249.64.101:53547] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ6b9wK_fe00OH7zy6xzgAAAMo"]
[Sat Dec 06 22:15:21.569698 2025] [:error] [pid 61216:tid 61264] [client 66.249.64.101:47397] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ6eTHlXXVdP5ewviVAiAAAAFI"]
[Sat Dec 06 22:15:23.448119 2025] [:error] [pid 61216:tid 61255] [client 66.249.64.101:50050] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ6ezHlXXVdP5ewviVAigAAAEk"]
[Sat Dec 06 22:15:26.450334 2025] [:error] [pid 48399:tid 48425] [client 66.249.64.101:46703] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ6fujNPOrIshd8EwfOWgAAAdg"]
[Sat Dec 06 22:15:29.536364 2025] [:error] [pid 1838:tid 1850] [client 66.249.64.101:60652] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ6gS5zgnu67Yo7vrY41AAAAoQ"]
[Sat Dec 06 22:15:35.194084 2025] [:error] [pid 1838:tid 1870] [client 66.249.64.101:36336] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ6hy5zgnu67Yo7vrY42QAAApg"]
[Sat Dec 06 22:15:38.258642 2025] [:error] [pid 1727:tid 1741] [client 66.249.64.101:50537] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ6isD83luYT37-ZaUhNgAAAkw"]
[Sat Dec 06 22:15:43.811427 2025] [:error] [pid 61217:tid 61277] [client 66.249.64.101:63961] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ6j1dSKQYfLI3fYo6WeQAAAIQ"]
[Sat Dec 06 22:17:51.021247 2025] [:error] [pid 1838:tid 1856] [client 66.249.64.101:63729] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ7Dy5zgnu67Yo7vrY5vgAAAoo"]
[Sat Dec 06 22:17:58.598944 2025] [:error] [pid 1838:tid 1870] [client 66.249.64.101:64453] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ7Fi5zgnu67Yo7vrY5xgAAApg"]
[Sat Dec 06 22:18:02.150895 2025] [:error] [pid 1838:tid 1868] [client 66.249.64.101:56315] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ7Gi5zgnu67Yo7vrY5yAAAApY"]
[Sat Dec 06 22:18:07.188838 2025] [:error] [pid 1838:tid 1869] [client 66.249.64.101:52387] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ7Hy5zgnu67Yo7vrY5zgAAApc"]
[Sat Dec 06 22:18:08.639265 2025] [:error] [pid 61216:tid 61253] [client 66.249.64.101:49188] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ7IDHlXXVdP5ewviVBXAAAAEc"]
[Sat Dec 06 22:18:10.958235 2025] [:error] [pid 61216:tid 61253] [client 66.249.64.101:49188] [client 66.249.64.101] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "144.48.38.20_2ca49c4672a94f29d94f0ea4a10a635afad5a86a"): Internal error (specific information not available) [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ7IDHlXXVdP5ewviVBXAAAAEc"]
[Sat Dec 06 22:18:16.575644 2025] [:error] [pid 61216:tid 61251] [client 66.249.64.101:58773] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ7KDHlXXVdP5ewviVBawAAAEU"]
[Sat Dec 06 22:18:19.641985 2025] [:error] [pid 52809:tid 52818] [client 66.249.64.101:41278] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ7K-rRwgsmpIJQ2qaTRgAAAgc"]
[Sat Dec 06 22:18:28.392695 2025] [:error] [pid 61217:tid 61277] [client 66.249.64.101:46027] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ7NFdSKQYfLI3fYo6XAQAAAIQ"]
[Sat Dec 06 22:18:34.223936 2025] [:error] [pid 61303:tid 61329] [client 66.249.64.101:61355] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ7OtwK_fe00OH7zy6yygAAANY"]
[Sat Dec 06 22:18:37.159368 2025] [:error] [pid 1727:tid 1743] [client 66.249.64.101:45173] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ7PcD83luYT37-ZaUh9AAAAk4"]
[Sat Dec 06 22:23:31.655802 2025] [:error] [pid 61216:tid 61247] [client 66.249.64.101:59801] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ8YzHlXXVdP5ewviVCcQAAAEE"]
[Sat Dec 06 22:23:35.215688 2025] [:error] [pid 61303:tid 61331] [client 66.249.64.101:59767] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ8Z9wK_fe00OH7zy6zkQAAANg"]
[Sat Dec 06 22:23:42.338791 2025] [:error] [pid 61215:tid 61241] [client 66.249.64.101:44207] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ8buOOZ8nTCBYuI-xhHQAAABY"]
[Sat Dec 06 22:23:46.004679 2025] [:error] [pid 61303:tid 61323] [client 66.249.64.101:56888] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ8ctwK_fe00OH7zy6zkwAAANA"]
[Sat Dec 06 22:23:49.590617 2025] [:error] [pid 61303:tid 61313] [client 66.249.64.101:61511] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ8ddwK_fe00OH7zy6zlgAAAMc"]
[Sat Dec 06 22:23:53.257456 2025] [:error] [pid 61216:tid 61248] [client 66.249.64.101:51512] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ8eTHlXXVdP5ewviVCgQAAAEI"]
[Sat Dec 06 22:23:56.080892 2025] [:error] [pid 61215:tid 61238] [client 66.249.64.101:56486] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ8fOOOZ8nTCBYuI-xhJQAAABM"]
[Sat Dec 06 22:23:57.554087 2025] [:error] [pid 61303:tid 61321] [client 66.249.64.101:43098] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ8fdwK_fe00OH7zy6zmQAAAM4"]
[Sat Dec 06 22:24:12.012678 2025] [:error] [pid 52809:tid 52821] [client 66.249.64.101:41743] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ8jOrRwgsmpIJQ2qaULAAAAgo"]
[Sat Dec 06 22:24:15.078084 2025] [:error] [pid 61215:tid 61221] [client 66.249.64.101:60084] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ8j-OOZ8nTCBYuI-xhMAAAAAI"]
[Sat Dec 06 22:24:18.003648 2025] [:error] [pid 35622:tid 35669] [client 66.249.64.101:35258] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ8kiOSP_9DVLgFwI7VRwAAAZI"]
[Sat Dec 06 22:24:23.760324 2025] [:error] [pid 61217:tid 61290] [client 66.249.64.101:52727] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ8l1dSKQYfLI3fYo6XlQAAAJE"]
[Sat Dec 06 22:25:18.828333 2025] [:error] [pid 61303:tid 61317] [client 66.249.64.101:44234] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ8ztwK_fe00OH7zy6z_wAAAMs"]
[Sat Dec 06 22:25:25.447620 2025] [:error] [pid 48399:tid 48417] [client 66.249.64.101:41988] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ81ejNPOrIshd8EwfPugAAAdA"]
[Sat Dec 06 22:25:28.375622 2025] [:error] [pid 35591:tid 35611] [client 66.249.64.101:56392] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ82Ibmw-7bFvTxc9MvIQAAARI"]
[Sat Dec 06 22:25:34.240990 2025] [:error] [pid 61216:tid 61249] [client 66.249.64.101:63571] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ83jHlXXVdP5ewviVC_AAAAEM"]
[Sat Dec 06 22:25:37.187672 2025] [:error] [pid 61216:tid 61256] [client 66.249.64.101:40684] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ84THlXXVdP5ewviVDAQAAAEo"]
[Sat Dec 06 22:25:44.795116 2025] [:error] [pid 35591:tid 35609] [client 66.249.64.101:55150] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ86Ibmw-7bFvTxc9MvLQAAARA"]
[Sat Dec 06 22:25:48.345974 2025] [:error] [pid 61216:tid 61253] [client 66.249.64.101:58766] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ87DHlXXVdP5ewviVDDgAAAEc"]
[Sat Dec 06 22:25:51.912316 2025] [:error] [pid 1838:tid 1856] [client 66.249.64.101:41033] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ87y5zgnu67Yo7vrY8QQAAAoo"]
[Sat Dec 06 22:25:56.964723 2025] [:error] [pid 61216:tid 61263] [client 66.249.64.101:36536] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ89DHlXXVdP5ewviVDGgAAAFE"]
[Sat Dec 06 22:26:00.633122 2025] [:error] [pid 35591:tid 35593] [client 66.249.64.101:42210] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ8-Ibmw-7bFvTxc9MvNwAAAQA"]
[Sat Dec 06 22:26:14.322645 2025] [:error] [pid 1727:tid 1747] [client 66.249.64.101:49317] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ9BsD83luYT37-ZaUjMgAAAlI"]
[Sat Dec 06 22:27:01.149368 2025] [:error] [pid 1838:tid 1860] [client 66.249.64.101:54802] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ9NS5zgnu67Yo7vrY8qAAAAo4"]
[Sat Dec 06 22:27:17.067946 2025] [:error] [pid 35591:tid 35594] [client 66.249.64.101:36870] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ9RYbmw-7bFvTxc9MvfAAAAQE"]
[Sat Dec 06 22:27:20.139767 2025] [:error] [pid 61303:tid 61316] [client 66.249.64.101:44184] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ9SNwK_fe00OH7zy60gAAAAMo"]
[Sat Dec 06 22:27:25.889630 2025] [:error] [pid 1838:tid 1862] [client 66.249.64.101:62152] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ9TS5zgnu67Yo7vrY8xAAAApA"]
[Sat Dec 06 22:27:28.816483 2025] [:error] [pid 48399:tid 48418] [client 66.249.64.101:46312] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ9UOjNPOrIshd8EwfQDAAAAdE"]
[Sat Dec 06 22:27:31.880976 2025] [:error] [pid 61216:tid 61270] [client 66.249.64.101:39038] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ9UzHlXXVdP5ewviVDjAAAAFg"]
[Sat Dec 06 22:27:40.699014 2025] [:error] [pid 61303:tid 61330] [client 66.249.64.101:42098] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ9XNwK_fe00OH7zy60hwAAANc"]
[Sat Dec 06 22:27:46.434491 2025] [:error] [pid 61303:tid 61318] [client 66.249.64.101:42200] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ9YtwK_fe00OH7zy60jgAAAMw"]
[Sat Dec 06 22:27:50.488322 2025] [:error] [pid 35591:tid 35605] [client 66.249.64.101:44404] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ9Zobmw-7bFvTxc9MvmwAAAQw"]
[Sat Dec 06 22:27:54.157326 2025] [:error] [pid 61215:tid 61227] [client 66.249.64.101:49871] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ9auOOZ8nTCBYuI-xh6wAAAAg"]
[Sat Dec 06 22:28:58.664334 2025] [:error] [pid 1838:tid 1850] [client 66.249.64.101:61594] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ9qi5zgnu67Yo7vrY9QAAAAoQ"]
[Sat Dec 06 22:29:30.849285 2025] [:error] [pid 48399:tid 48416] [client 66.249.64.101:63232] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ9yujNPOrIshd8EwfQSwAAAc8"]
[Sat Dec 06 22:29:40.758622 2025] [:error] [pid 61303:tid 61315] [client 66.249.64.101:51271] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ91NwK_fe00OH7zy60-QAAAMk"]
[Sat Dec 06 22:29:44.313932 2025] [:error] [pid 52809:tid 52825] [client 66.249.64.101:40072] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ92OrRwgsmpIJQ2qaVVQAAAg4"]
[Sat Dec 06 22:29:51.589264 2025] [:error] [pid 1838:tid 1846] [client 66.249.64.101:44606] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ93y5zgnu67Yo7vrY9dwAAAoA"]
[Sat Dec 06 22:29:53.298042 2025] [:error] [pid 48399:tid 48409] [client 66.249.64.101:60589] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ94ejNPOrIshd8EwfQXQAAAcg"]
[Sat Dec 06 22:30:38.921684 2025] [:error] [pid 1838:tid 1847] [client 66.249.64.101:60009] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ-Di5zgnu67Yo7vrY93gAAAoE"]
[Sat Dec 06 22:30:43.099001 2025] [:error] [pid 1838:tid 1865] [client 66.249.64.101:39305] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ-Ey5zgnu67Yo7vrY96QAAApM"]
[Sat Dec 06 22:30:51.518382 2025] [:error] [pid 1727:tid 1741] [client 66.249.64.101:39810] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ-G8D83luYT37-ZaUj2wAAAkw"]
[Sat Dec 06 22:31:03.275184 2025] [:error] [pid 52809:tid 52833] [client 66.249.64.101:45806] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ-J-rRwgsmpIJQ2qaVugAAAhY"]
[Sat Dec 06 22:31:17.979222 2025] [:error] [pid 61217:tid 61292] [client 66.249.64.101:49378] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ-NVdSKQYfLI3fYo6YjAAAAJM"]
[Sat Dec 06 22:31:20.890853 2025] [:error] [pid 61303:tid 61330] [client 66.249.64.101:41081] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ-ONwK_fe00OH7zy61SAAAANc"]
[Sat Dec 06 22:31:26.759426 2025] [:error] [pid 61303:tid 61326] [client 66.249.64.101:56514] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ-PtwK_fe00OH7zy61dgAAANM"]
[Sat Dec 06 22:31:29.601636 2025] [:error] [pid 35622:tid 35665] [client 66.249.64.101:42844] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ-QSOSP_9DVLgFwI7WWQAAAY4"]
[Sat Dec 06 22:32:41.160392 2025] [:error] [pid 61215:tid 61228] [client 66.249.64.101:63103] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ-ieOOZ8nTCBYuI-xilgAAAAk"]
[Sat Dec 06 22:32:44.706971 2025] [:error] [pid 61215:tid 61233] [client 66.249.64.101:61371] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ-jOOOZ8nTCBYuI-xinAAAAA4"]
[Sat Dec 06 22:32:52.071162 2025] [:error] [pid 61303:tid 61328] [client 66.249.64.101:60967] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ-lNwK_fe00OH7zy62AQAAANU"]
[Sat Dec 06 22:32:55.776818 2025] [:error] [pid 52809:tid 52835] [client 66.249.64.101:47164] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ-l-rRwgsmpIJQ2qaWBQAAAhg"]
[Sat Dec 06 22:33:05.700725 2025] [:error] [pid 61215:tid 61222] [client 66.249.64.101:61216] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ-oeOOZ8nTCBYuI-xipwAAAAM"]
[Sat Dec 06 22:33:10.556510 2025] [:error] [pid 48399:tid 48420] [client 66.249.64.101:35678] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ-pujNPOrIshd8EwfRDgAAAdM"]
[Sat Dec 06 22:33:18.326101 2025] [:error] [pid 1727:tid 1737] [client 66.249.64.101:43377] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ-rsD83luYT37-ZaUkaQAAAkg"]
[Sat Dec 06 22:33:20.724326 2025] [:error] [pid 61303:tid 61310] [client 66.249.64.101:59956] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ-sNwK_fe00OH7zy62IAAAAMQ"]
[Sat Dec 06 22:33:23.670744 2025] [:error] [pid 1727:tid 1745] [client 66.249.64.101:62341] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ-s8D83luYT37-ZaUkbAAAAlA"]
[Sat Dec 06 22:33:27.335096 2025] [:error] [pid 61216:tid 61252] [client 66.249.64.101:37966] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ-tzHlXXVdP5ewviVFegAAAEY"]
[Sat Dec 06 22:35:01.488770 2025] [:error] [pid 1727:tid 1737] [client 66.249.64.101:56272] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ_FcD83luYT37-ZaUkqwAAAkg"]
[Sat Dec 06 22:35:08.744589 2025] [:error] [pid 1838:tid 1869] [client 66.249.64.101:43376] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ_HC5zgnu67Yo7vrY_sAAAApc"]
[Sat Dec 06 22:35:17.315727 2025] [:error] [pid 52809:tid 52816] [client 66.249.64.101:47442] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ_JerRwgsmpIJQ2qaWbQAAAgU"]
[Sat Dec 06 22:35:21.116024 2025] [:error] [pid 61216:tid 61270] [client 66.249.64.101:35384] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ_KTHlXXVdP5ewviVGVAAAAFg"]
[Sat Dec 06 22:35:22.487713 2025] [:error] [pid 61216:tid 61254] [client 66.249.64.101:34786] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ_KjHlXXVdP5ewviVGWQAAAEg"]
[Sat Dec 06 22:35:27.643451 2025] [:error] [pid 1727:tid 1730] [client 66.249.64.101:43970] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ_L8D83luYT37-ZaUkwgAAAkE"]
[Sat Dec 06 22:35:31.208141 2025] [:error] [pid 1838:tid 1859] [client 66.249.64.101:42259] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ_My5zgnu67Yo7vrY_0gAAAo0"]
[Sat Dec 06 22:35:43.722091 2025] [:error] [pid 61303:tid 61325] [client 66.249.64.101:39371] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ_P9wK_fe00OH7zy622wAAANI"]
[Sat Dec 06 22:35:49.663181 2025] [:error] [pid 48399:tid 48403] [client 66.249.64.101:61026] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ_RejNPOrIshd8EwfRrQAAAcI"]
[Sat Dec 06 22:35:53.227021 2025] [:error] [pid 61217:tid 61283] [client 66.249.64.101:60083] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ_SVdSKQYfLI3fYo6ZbgAAAIo"]
[Sat Dec 06 22:35:56.917988 2025] [:error] [pid 61303:tid 61317] [client 66.249.64.101:42940] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTQ_TNwK_fe00OH7zy626gAAAMs"]
[Sat Dec 06 22:39:52.889328 2025] [:error] [pid 61216:tid 61254] [client 66.249.64.101:41213] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTRAODHlXXVdP5ewviVHvAAAAEg"]
[Sat Dec 06 22:39:54.265175 2025] [:error] [pid 61303:tid 61311] [client 66.249.64.101:55085] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTRAOtwK_fe00OH7zy631QAAAMU"]
[Sat Dec 06 22:40:03.931840 2025] [:error] [pid 61216:tid 61269] [client 66.249.64.101:37961] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTRAQzHlXXVdP5ewviVHygAAAFc"]
[Sat Dec 06 22:40:15.517216 2025] [:error] [pid 61303:tid 61322] [client 66.249.64.101:57377] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTRAT9wK_fe00OH7zy634gAAAM8"]
[Sat Dec 06 22:40:33.124329 2025] [:error] [pid 61216:tid 61262] [client 66.249.64.101:64001] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTRAYTHlXXVdP5ewviVH6wAAAFA"]
[Sat Dec 06 22:40:47.203310 2025] [:error] [pid 1838:tid 1867] [client 66.249.64.101:37725] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTRAby5zgnu67Yo7vrZB_QAAApU"]
[Sat Dec 06 22:40:50.897662 2025] [:error] [pid 1838:tid 1859] [client 66.249.64.101:48195] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTRAci5zgnu67Yo7vrZCBgAAAo0"]
[Sat Dec 06 22:43:19.199459 2025] [:error] [pid 61303:tid 61331] [client 66.249.64.101:37159] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTRBB9wK_fe00OH7zy64lAAAANg"]
[Sat Dec 06 22:43:23.779989 2025] [:error] [pid 61216:tid 61260] [client 66.249.64.101:60736] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTRBCzHlXXVdP5ewviVIiQAAAE4"]
[Sat Dec 06 22:43:25.248792 2025] [:error] [pid 1838:tid 1861] [client 66.249.64.101:36389] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTRBDS5zgnu67Yo7vrZC2QAAAo8"]
[Sat Dec 06 22:43:32.352949 2025] [:error] [pid 52809:tid 52827] [client 66.249.64.101:40377] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTRBFOrRwgsmpIJQ2qaYOAAAAhA"]
[Sat Dec 06 22:57:55.095891 2025] [:error] [pid 1727:tid 1731] [client 66.249.64.101:63119] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTREc8D83luYT37-ZaUoTwAAAkI"]
[Sat Dec 06 22:58:20.990070 2025] [:error] [pid 61216:tid 61261] [client 66.249.64.101:48819] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTREjDHlXXVdP5ewviVMggAAAE8"]
[Sat Dec 06 22:58:36.094397 2025] [:error] [pid 48399:tid 48421] [client 66.249.64.101:56252] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTREnOjNPOrIshd8EwfUkgAAAdQ"]
[Sat Dec 06 23:00:43.186419 2025] [:error] [pid 35622:tid 35657] [client 66.249.64.101:61763] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTRFGyOSP_9DVLgFwI7bKQAAAYY"]
[Sat Dec 06 23:01:33.454902 2025] [:error] [pid 61303:tid 61310] [client 66.249.64.101:54318] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTRFTdwK_fe00OH7zy68VAAAAMQ"]
[Sat Dec 06 23:04:54.112398 2025] [:error] [pid 61215:tid 61239] [client 66.249.64.101:57196] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTRGFuOOZ8nTCBYuI-xnXwAAABQ"]
[Sat Dec 06 23:05:08.835104 2025] [:error] [pid 61217:tid 61292] [client 66.249.64.101:43407] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTRGJFdSKQYfLI3fYo6d0wAAAJM"]
[Sat Dec 06 23:05:13.868694 2025] [:error] [pid 52809:tid 52832] [client 66.249.64.101:65217] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTRGKerRwgsmpIJQ2qabrQAAAhU"]
[Sat Dec 06 23:05:23.933637 2025] [:error] [pid 61215:tid 61234] [client 66.249.64.101:37829] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTRGM-OOZ8nTCBYuI-xncgAAAA8"]
[Sat Dec 06 23:14:12.608188 2025] [:error] [pid 61303:tid 61326] [client 66.249.64.101:48683] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTRIRNwK_fe00OH7zy6-kAAAANM"]
[Sat Dec 06 23:14:17.652526 2025] [:error] [pid 52809:tid 52823] [client 66.249.64.101:49611] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTRISerRwgsmpIJQ2qadSQAAAgw"]
[Sat Dec 06 23:14:27.838345 2025] [:error] [pid 35591:tid 35593] [client 66.249.64.101:57597] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTRIU4bmw-7bFvTxc9M2NQAAAQA"]
[Sat Dec 06 23:14:47.849088 2025] [:error] [pid 52809:tid 52814] [client 66.249.64.101:45882] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTRIZ-rRwgsmpIJQ2qadWwAAAgM"]
[Sat Dec 06 23:21:17.922699 2025] [:error] [pid 1727:tid 1732] [client 66.249.64.101:57631] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTRJ7cD83luYT37-ZaUtzgAAAkM"]
[Sat Dec 06 23:21:23.011742 2025] [:error] [pid 1838:tid 1860] [client 66.249.64.101:46224] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTRJ8y5zgnu67Yo7vrZL2QAAAo4"]
[Sat Dec 06 23:21:33.863011 2025] [:error] [pid 48399:tid 48423] [client 66.249.64.101:45671] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTRJ_ejNPOrIshd8EwfXXwAAAdY"]
[Sat Dec 06 23:21:33.975646 2025] [:error] [pid 61217:tid 61292] [client 66.249.64.101:65294] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTRJ_VdSKQYfLI3fYo6gLAAAAJM"]
[Sat Dec 06 23:21:45.759044 2025] [:error] [pid 61216:tid 61255] [client 66.249.64.101:49152] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTRKCTHlXXVdP5ewviVQ1gAAAEk"]
[Sat Dec 06 23:25:01.766334 2025] [:error] [pid 52809:tid 52819] [client 101.91.148.219:54555] [client 101.91.148.219] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||paramountbaldivis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTRKzerRwgsmpIJQ2qafQAAAAgg"]
[Sat Dec 06 23:29:13.855574 2025] [:error] [pid 61216:tid 61270] [client 66.249.64.101:43951] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTRLyTHlXXVdP5ewviVSTwAAAFg"]
[Sat Dec 06 23:29:23.929626 2025] [:error] [pid 61217:tid 61283] [client 66.249.64.101:38537] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTRL01dSKQYfLI3fYo6g3gAAAIo"]
[Sat Dec 06 23:29:38.624976 2025] [:error] [pid 52809:tid 52811] [client 66.249.64.101:40831] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTRL4urRwgsmpIJQ2qaf-AAAAgA"]
[Sat Dec 06 23:29:39.650438 2025] [:error] [pid 61215:tid 61221] [client 66.249.64.101:35196] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTRL4-OOZ8nTCBYuI-xqQAAAAAI"]
[Sat Dec 06 23:34:35.362854 2025] [:error] [pid 61216:tid 61258] [client 66.249.64.101:50861] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTRNCzHlXXVdP5ewviVTiwAAAEw"]
[Sat Dec 06 23:40:03.515884 2025] [:error] [pid 1727:tid 1747] [client 66.249.64.101:52132] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTROU8D83luYT37-ZaUzIwAAAlI"]
[Sat Dec 06 23:40:08.416459 2025] [:error] [pid 1727:tid 1731] [client 66.249.64.101:52772] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTROWMD83luYT37-ZaUzLAAAAkI"]
[Sat Dec 06 23:40:20.525608 2025] [:error] [pid 1838:tid 1861] [client 34.210.68.50:36948] [client 34.210.68.50] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paramountbaldivis.com"] [uri "/.git/"] [unique_id "aTROZC5zgnu67Yo7vrZPRQAAAo8"]
[Sat Dec 06 23:40:21.298319 2025] [:error] [pid 1727:tid 1738] [client 34.210.68.50:36956] [client 34.210.68.50] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paramountbaldivis.com"] [uri "/.git/HEAD"] [unique_id "aTROZcD83luYT37-ZaUzQwAAAkk"]
[Sun Dec 07 02:01:18.456361 2025] [:error] [pid 44908:tid 44916] [client 3.90.175.187:52399] [client 3.90.175.187] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 3.90.175.187, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTRvbsodqHTdtmkcdXDZEAAAAMY"]
[Sun Dec 07 03:05:06.439379 2025] [:error] [pid 44817:tid 44842] [client 104.28.201.38:24977] [client 104.28.201.38] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.28.201.38, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aTR-Yoq9cLyU8e8Cr9hbmgAAABM"]
[Sun Dec 07 03:05:15.781804 2025] [:error] [pid 44819:tid 44879] [client 49.47.155.98:1035] [client 49.47.155.98] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.47.155.98, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aTR-awOul9Pv7KHTFsiTMgAAAIE"]
[Sun Dec 07 03:57:36.862774 2025] [:error] [pid 15505:tid 15535] [client 141.95.126.177:45312] [client 141.95.126.177] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.95.126.177, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTSKsCD6yRXNZgo1RIxLfgAAABg"]
[Sun Dec 07 05:05:45.654105 2025] [:error] [pid 7273:tid 7299] [client 138.201.61.84:53974] [client 138.201.61.84] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 138.201.61.84, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTSaqfpR7YTD7JcHjhGFkAAAAVg"]
[Sun Dec 07 05:11:24.079359 2025] [:error] [pid 7273:tid 7296] [client 45.146.55.17:58657] [client 45.146.55.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aTSb_PpR7YTD7JcHjhGYtQAAAVU"]
[Sun Dec 07 05:11:42.264336 2025] [:error] [pid 13234:tid 13253] [client 45.146.55.23:33313] [client 45.146.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aTScDu6_dquQqQ60IZ-gPAAAAYw"]
[Sun Dec 07 05:12:16.238115 2025] [:error] [pid 7273:tid 7277] [client 45.146.55.25:26289] [client 45.146.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "paramountbaldivis.com"] [uri "/tinyfilemanager.php"] [unique_id "aTScMPpR7YTD7JcHjhGbugAAAUI"]
[Sun Dec 07 05:12:32.644185 2025] [:error] [pid 34109:tid 34141] [client 45.146.55.19:31511] [client 45.146.55.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/js/index.php"] [unique_id "aTScQIjE_vucgM_xD4T8HwAAAEE"]
[Sun Dec 07 05:13:01.045856 2025] [:error] [pid 34109:tid 34151] [client 45.146.55.26:65269] [client 45.146.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aTScXYjE_vucgM_xD4T9cQAAAEs"]
[Sun Dec 07 05:13:06.474287 2025] [:error] [pid 13234:tid 13241] [client 45.146.55.56:44631] [client 45.146.55.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aTScYu6_dquQqQ60IZ-kmQAAAYE"]
[Sun Dec 07 05:13:07.317907 2025] [:error] [pid 34110:tid 34181] [client 45.146.55.16:64977] [client 45.146.55.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aTScYwndtmtsHiXHBO2dTwAAAI4"]
[Sun Dec 07 05:13:08.168814 2025] [:error] [pid 34109:tid 34163] [client 45.146.55.51:40479] [client 45.146.55.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aTScZIjE_vucgM_xD4T9sQAAAFc"]
[Sun Dec 07 05:13:09.014662 2025] [:error] [pid 7273:tid 7282] [client 45.146.55.28:60477] [client 45.146.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aTScZfpR7YTD7JcHjhGd4gAAAUc"]
[Sun Dec 07 05:13:09.862736 2025] [:error] [pid 34108:tid 34134] [client 45.146.55.38:46995] [client 45.146.55.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aTScZaLvdvAppF-gXosvdwAAABU"]
[Sun Dec 07 05:13:15.340018 2025] [:error] [pid 34109:tid 34149] [client 45.146.55.52:42247] [client 45.146.55.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aTSca4jE_vucgM_xD4T97wAAAEk"]
[Sun Dec 07 05:13:21.217459 2025] [:error] [pid 34109:tid 34163] [client 45.146.55.44:59741] [client 45.146.55.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "paramountbaldivis.com"] [uri "/filemanager.php"] [unique_id "aTSccYjE_vucgM_xD4T-HAAAAFc"]
[Sun Dec 07 05:13:30.277634 2025] [:error] [pid 34195:tid 34209] [client 45.146.55.55:34425] [client 45.146.55.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aTScehrSxOOdwv3vX3xgAgAAAMs"]
[Sun Dec 07 05:13:34.519581 2025] [:error] [pid 7273:tid 7278] [client 45.146.55.60:31813] [client 45.146.55.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aTScfvpR7YTD7JcHjhGe2AAAAUM"]
[Sun Dec 07 05:13:38.960972 2025] [:error] [pid 7273:tid 7278] [client 45.146.55.41:63825] [client 45.146.55.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aTScgvpR7YTD7JcHjhGfDwAAAUM"]
[Sun Dec 07 05:14:03.021729 2025] [:error] [pid 34110:tid 34176] [client 45.146.55.29:43897] [client 45.146.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aTScmwndtmtsHiXHBO2e_gAAAIk"]
[Sun Dec 07 05:14:06.047905 2025] [:error] [pid 7273:tid 7292] [client 45.146.55.36:51871] [client 45.146.55.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aTScnvpR7YTD7JcHjhGgEgAAAVE"]
[Sun Dec 07 05:14:11.058239 2025] [:error] [pid 34195:tid 34206] [client 45.146.55.45:24579] [client 45.146.55.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/defaults.php"] [unique_id "aTScoxrSxOOdwv3vX3xhQwAAAMg"]
[Sun Dec 07 05:14:13.778725 2025] [:error] [pid 34109:tid 34144] [client 45.146.55.36:56349] [client 45.146.55.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/customize/index.php"] [unique_id "aTScpYjE_vucgM_xD4QAFQAAAEQ"]
[Sun Dec 07 05:14:24.891682 2025] [:error] [pid 34110:tid 34184] [client 45.146.55.43:59987] [client 45.146.55.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aTScsAndtmtsHiXHBO2fwwAAAJE"]
[Sun Dec 07 05:14:30.646848 2025] [:error] [pid 13234:tid 13244] [client 45.146.55.24:27525] [client 45.146.55.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aTSctu6_dquQqQ60IZ-oLgAAAYM"]
[Sun Dec 07 05:14:36.059948 2025] [:error] [pid 34195:tid 34200] [client 45.146.55.22:36779] [client 45.146.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/Requests/index.php"] [unique_id "aTScvBrSxOOdwv3vX3xiSgAAAMI"]
[Sun Dec 07 05:14:36.906997 2025] [:error] [pid 34108:tid 34115] [client 45.146.55.20:21151] [client 45.146.55.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aTScvKLvdvAppF-gXosyIQAAAAI"]
[Sun Dec 07 05:14:37.757983 2025] [:error] [pid 13234:tid 13246] [client 45.146.55.39:46811] [client 45.146.55.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aTScve6_dquQqQ60IZ-ojQAAAYU"]
[Sun Dec 07 05:14:48.735602 2025] [:error] [pid 34195:tid 34199] [client 45.146.55.57:37359] [client 45.146.55.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/assets/info.php"] [unique_id "aTScyBrSxOOdwv3vX3xiwwAAAME"]
[Sun Dec 07 05:14:49.579562 2025] [:error] [pid 7089:tid 7097] [client 45.146.55.38:54639] [client 45.146.55.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/class.api.php"] [unique_id "aTScyYJPZ-pZM-y51NHz5gAAAQY"]
[Sun Dec 07 05:14:50.425957 2025] [:error] [pid 7089:tid 7093] [client 45.146.55.39:21333] [client 45.146.55.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "aTScyoJPZ-pZM-y51NHz7wAAAQI"]
[Sun Dec 07 05:15:19.904973 2025] [:error] [pid 7089:tid 7104] [client 45.146.55.20:38437] [client 45.146.55.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/admin.php"] [unique_id "aTSc54JPZ-pZM-y51NH0uAAAAQ0"]
[Sun Dec 07 05:15:28.296009 2025] [:error] [pid 34195:tid 34199] [client 45.146.55.24:20809] [client 45.146.55.24] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.55.24, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aTSc8BrSxOOdwv3vX3xkrAAAAME"]
[Sun Dec 07 05:15:51.425915 2025] [:error] [pid 34195:tid 34206] [client 45.146.55.24:20809] [client 45.146.55.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aTSdBxrSxOOdwv3vX3xlYgAAAMg"]
[Sun Dec 07 05:15:55.684143 2025] [:error] [pid 7089:tid 7100] [client 45.146.55.34:44537] [client 45.146.55.34] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.55.34, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aTSdC4JPZ-pZM-y51NH2HAAAAQk"]
[Sun Dec 07 05:15:59.402907 2025] [:error] [pid 7089:tid 7101] [client 45.146.55.34:44537] [client 45.146.55.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/item.php"] [unique_id "aTSdD4JPZ-pZM-y51NH2SAAAAQo"]
[Sun Dec 07 05:16:14.910651 2025] [:error] [pid 7273:tid 7294] [client 45.146.55.62:28355] [client 45.146.55.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aTSdHvpR7YTD7JcHjhGkhgAAAVM"]
[Sun Dec 07 05:16:29.143651 2025] [:error] [pid 7273:tid 7297] [client 45.146.55.19:47689] [client 45.146.55.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aTSdLfpR7YTD7JcHjhGk9QAAAVY"]
[Sun Dec 07 05:16:33.038350 2025] [:error] [pid 13234:tid 13261] [client 45.146.55.18:58447] [client 45.146.55.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aTSdMe6_dquQqQ60IZ-suAAAAZQ"]
[Sun Dec 07 05:16:38.755475 2025] [:error] [pid 7089:tid 7105] [client 45.146.55.41:37105] [client 45.146.55.41] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.55.41, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/wp-login.php"] [unique_id "aTSdNoJPZ-pZM-y51NH3aQAAAQ4"]
[Sun Dec 07 05:16:40.275898 2025] [:error] [pid 7089:tid 7101] [client 45.146.55.41:37105] [client 45.146.55.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aTSdOIJPZ-pZM-y51NH3bQAAAQo"]
[Sun Dec 07 05:17:10.425069 2025] [:error] [pid 7273:tid 7275] [client 45.146.55.59:50671] [client 45.146.55.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aTSdVvpR7YTD7JcHjhGlvAAAAUA"]
[Sun Dec 07 05:17:16.010921 2025] [:error] [pid 34110:tid 34175] [client 45.146.55.57:57219] [client 45.146.55.57] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.55.57, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aTSdXAndtmtsHiXHBO2jBgAAAIg"]
[Sun Dec 07 05:17:23.889109 2025] [:error] [pid 34110:tid 34171] [client 45.146.55.57:57219] [client 45.146.55.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/assets/about.php"] [unique_id "aTSdYwndtmtsHiXHBO2jNAAAAIQ"]
[Sun Dec 07 05:17:27.068631 2025] [:error] [pid 34195:tid 34211] [client 45.146.55.26:61853] [client 45.146.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/infi.php"] [unique_id "aTSdZxrSxOOdwv3vX3xnaQAAAM0"]
[Sun Dec 07 05:17:32.086753 2025] [:error] [pid 7089:tid 7098] [client 45.146.55.40:55373] [client 45.146.55.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/IXR/index.php"] [unique_id "aTSdbIJPZ-pZM-y51NH4KgAAAQc"]
[Sun Dec 07 05:17:38.309989 2025] [:error] [pid 13234:tid 13253] [client 45.146.55.41:36329] [client 45.146.55.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/pomo/about.php"] [unique_id "aTSdcu6_dquQqQ60IZ-u9gAAAYw"]
[Sun Dec 07 05:17:39.130956 2025] [:error] [pid 13234:tid 13250] [client 45.146.55.19:44223] [client 45.146.55.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/pomo/index.php"] [unique_id "aTSdc-6_dquQqQ60IZ-u_gAAAYk"]
[Sun Dec 07 05:17:47.858712 2025] [:error] [pid 7273:tid 7283] [client 45.146.55.25:31103] [client 45.146.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aTSde_pR7YTD7JcHjhGmfwAAAUg"]
[Sun Dec 07 05:17:50.331607 2025] [:error] [pid 34195:tid 34206] [client 45.146.55.51:58087] [client 45.146.55.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/certificates/about.php"] [unique_id "aTSdfhrSxOOdwv3vX3xnxwAAAMg"]
[Sun Dec 07 05:17:57.408650 2025] [:error] [pid 34108:tid 34121] [client 45.146.55.18:60025] [client 45.146.55.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/edit.php"] [unique_id "aTSdhaLvdvAppF-gXos3UQAAAAg"]
[Sun Dec 07 05:18:03.089398 2025] [:error] [pid 34195:tid 34211] [client 45.146.55.17:26177] [client 45.146.55.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aTSdixrSxOOdwv3vX3xoDAAAAM0"]
[Sun Dec 07 05:18:07.007445 2025] [:error] [pid 34109:tid 34140] [client 45.146.55.36:37819] [client 45.146.55.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/click.php"] [unique_id "aTSdj4jE_vucgM_xD4QG8wAAAEA"]
[Sun Dec 07 05:18:12.412501 2025] [:error] [pid 34110:tid 34182] [client 45.146.55.34:26421] [client 45.146.55.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aTSdlAndtmtsHiXHBO2kKwAAAI8"]
[Sun Dec 07 05:18:23.653871 2025] [:error] [pid 7273:tid 7295] [client 45.146.55.48:33075] [client 45.146.55.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aTSdn_pR7YTD7JcHjhGnzAAAAVQ"]
[Sun Dec 07 05:18:24.475361 2025] [:error] [pid 7273:tid 7290] [client 45.146.55.24:53259] [client 45.146.55.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/xl2023.php"] [unique_id "aTSdoPpR7YTD7JcHjhGn0QAAAU8"]
[Sun Dec 07 05:18:25.323248 2025] [:error] [pid 34195:tid 34218] [client 45.146.55.20:34553] [client 45.146.55.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aTSdoRrSxOOdwv3vX3xoXwAAANQ"]
[Sun Dec 07 05:18:26.141651 2025] [:error] [pid 13234:tid 13242] [client 45.146.55.30:20005] [client 45.146.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aTSdou6_dquQqQ60IZ-wewAAAYI"]
[Sun Dec 07 05:18:28.614409 2025] [:error] [pid 34108:tid 34121] [client 45.146.55.60:57221] [client 45.146.55.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aTSdpKLvdvAppF-gXos3yQAAAAg"]
[Sun Dec 07 05:18:29.433911 2025] [:error] [pid 34110:tid 34172] [client 45.146.55.37:38693] [client 45.146.55.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/assets/index.php"] [unique_id "aTSdpQndtmtsHiXHBO2kUwAAAIU"]
[Sun Dec 07 05:18:34.103241 2025] [:error] [pid 34110:tid 34172] [client 45.146.55.57:30993] [client 45.146.55.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/css/index.php"] [unique_id "aTSdqgndtmtsHiXHBO2kYgAAAIU"]
[Sun Dec 07 05:18:35.937090 2025] [:error] [pid 13234:tid 13250] [client 45.146.55.51:48551] [client 45.146.55.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "aTSdq-6_dquQqQ60IZ-wkgAAAYk"]
[Sun Dec 07 05:18:36.774517 2025] [:error] [pid 7089:tid 7104] [client 45.146.55.57:31321] [client 45.146.55.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aTSdrIJPZ-pZM-y51NH5FgAAAQ0"]
[Sun Dec 07 05:18:37.600593 2025] [:error] [pid 34108:tid 34125] [client 45.146.55.25:39943] [client 45.146.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/IXR/security.php"] [unique_id "aTSdraLvdvAppF-gXos38gAAAAw"]
[Sun Dec 07 05:18:40.398798 2025] [:error] [pid 7089:tid 7103] [client 45.146.55.54:61071] [client 45.146.55.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aTSdsIJPZ-pZM-y51NH5KwAAAQw"]
[Sun Dec 07 05:18:44.473779 2025] [:error] [pid 7273:tid 7278] [client 45.146.55.23:23263] [client 45.146.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/fonts/about.php"] [unique_id "aTSdtPpR7YTD7JcHjhGoSgAAAUM"]
[Sun Dec 07 05:18:51.564290 2025] [:error] [pid 34108:tid 34135] [client 45.146.55.41:37847] [client 45.146.55.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aTSdu6LvdvAppF-gXos4FAAAABY"]
[Sun Dec 07 05:19:03.380885 2025] [:error] [pid 34110:tid 34190] [client 45.146.55.60:50057] [client 45.146.55.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/assets/file.php"] [unique_id "aTSdxwndtmtsHiXHBO2kywAAAJc"]
[Sun Dec 07 05:19:08.792720 2025] [:error] [pid 7273:tid 7287] [client 45.146.55.23:35943] [client 45.146.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aTSdzPpR7YTD7JcHjhGoqwAAAUw"]
[Sun Dec 07 05:19:09.614399 2025] [:error] [pid 7089:tid 7094] [client 45.146.55.59:60401] [client 45.146.55.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aTSdzYJPZ-pZM-y51NH5jQAAAQM"]
[Sun Dec 07 05:19:16.670245 2025] [:error] [pid 34195:tid 34210] [client 45.146.55.49:64561] [client 45.146.55.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aTSd1BrSxOOdwv3vX3xo4wAAAMw"]
[Sun Dec 07 05:19:21.936976 2025] [proxy_fcgi:error] [pid 13234:tid 13247] [client 45.146.55.44:40665] AH01071: Got error 'Primary script unknown'
[Sun Dec 07 05:19:22.349280 2025] [proxy_fcgi:error] [pid 13234:tid 13259] [client 45.146.55.44:40665] AH01071: Got error 'Primary script unknown'
[Sun Dec 07 05:19:22.760691 2025] [proxy_fcgi:error] [pid 13234:tid 13242] [client 45.146.55.44:40665] AH01071: Got error 'Primary script unknown'
[Sun Dec 07 05:19:28.029693 2025] [:error] [pid 13234:tid 13252] [client 45.146.55.44:40665] [client 45.146.55.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "aTSd4O6_dquQqQ60IZ-xMgAAAYs"]
[Sun Dec 07 05:19:28.848998 2025] [:error] [pid 34109:tid 34146] [client 45.146.55.54:29361] [client 45.146.55.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aTSd4IjE_vucgM_xD4QIKgAAAEY"]
[Sun Dec 07 05:19:29.675691 2025] [:error] [pid 34109:tid 34144] [client 45.146.55.59:32161] [client 45.146.55.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aTSd4YjE_vucgM_xD4QILAAAAEQ"]
[Sun Dec 07 05:19:30.505873 2025] [:error] [pid 7089:tid 7102] [client 45.146.55.33:38491] [client 45.146.55.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aTSd4oJPZ-pZM-y51NH51AAAAQs"]
[Sun Dec 07 05:19:31.376180 2025] [:error] [pid 13234:tid 13248] [client 45.146.55.41:64665] [client 45.146.55.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aTSd4-6_dquQqQ60IZ-xPwAAAYc"]
[Sun Dec 07 05:19:32.197105 2025] [:error] [pid 13234:tid 13249] [client 45.146.55.34:24073] [client 45.146.55.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aTSd5O6_dquQqQ60IZ-xRAAAAYg"]
[Sun Dec 07 05:19:34.510454 2025] [:error] [pid 7273:tid 7298] [client 45.146.55.20:26371] [client 45.146.55.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/images/media/index.php"] [unique_id "aTSd5vpR7YTD7JcHjhGpHwAAAVc"]
[Sun Dec 07 05:19:35.369243 2025] [:error] [pid 13234:tid 13244] [client 45.146.55.15:33257] [client 45.146.55.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aTSd5-6_dquQqQ60IZ-xVQAAAYM"]
[Sun Dec 07 05:19:36.231745 2025] [:error] [pid 7089:tid 7102] [client 45.146.55.28:58343] [client 45.146.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aTSd6IJPZ-pZM-y51NH54QAAAQs"]
[Sun Dec 07 05:19:37.079305 2025] [:error] [pid 13234:tid 13259] [client 45.146.55.26:47281] [client 45.146.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aTSd6e6_dquQqQ60IZ-xYwAAAZI"]
[Sun Dec 07 05:19:40.970610 2025] [:error] [pid 7273:tid 7277] [client 45.146.55.58:32017] [client 45.146.55.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aTSd7PpR7YTD7JcHjhGpQgAAAUI"]
[Sun Dec 07 05:19:43.324627 2025] [:error] [pid 34109:tid 34163] [client 45.146.55.14:39893] [client 45.146.55.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/certificates/index.php"] [unique_id "aTSd74jE_vucgM_xD4QITgAAAFc"]
[Sun Dec 07 05:19:47.417894 2025] [:error] [pid 13234:tid 13247] [client 45.146.55.29:40713] [client 45.146.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aTSd8-6_dquQqQ60IZ-xjgAAAYY"]
[Sun Dec 07 05:19:51.418385 2025] [:error] [pid 7089:tid 7115] [client 45.146.55.53:23719] [client 45.146.55.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/css/about.php"] [unique_id "aTSd94JPZ-pZM-y51NH6EwAAARg"]
[Sun Dec 07 05:19:57.390828 2025] [:error] [pid 34109:tid 34144] [client 45.146.55.47:56653] [client 45.146.55.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aTSd_YjE_vucgM_xD4QIcgAAAEQ"]
[Sun Dec 07 05:20:04.398759 2025] [:error] [pid 34108:tid 34136] [client 45.146.55.21:41585] [client 45.146.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/blocks/about.php"] [unique_id "aTSeBKLvdvAppF-gXos5AQAAABc"]
[Sun Dec 07 05:20:06.721167 2025] [:error] [pid 13234:tid 13249] [client 45.146.55.46:62271] [client 45.146.55.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/wp-class.php"] [unique_id "aTSeBu6_dquQqQ60IZ-yBwAAAYg"]
[Sun Dec 07 05:20:33.746734 2025] [:error] [pid 7273:tid 7298] [client 45.146.55.25:40833] [client 45.146.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aTSeIfpR7YTD7JcHjhGpyQAAAVc"]
[Sun Dec 07 05:20:34.583185 2025] [:error] [pid 34108:tid 34122] [client 45.146.55.47:49043] [client 45.146.55.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aTSeIqLvdvAppF-gXos5bQAAAAk"]
[Sun Dec 07 05:20:35.425161 2025] [:error] [pid 34109:tid 34156] [client 45.146.55.18:33435] [client 45.146.55.18] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.55.18, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTSeI4jE_vucgM_xD4QIwAAAAFA"]
[Sun Dec 07 05:20:38.368282 2025] [:error] [pid 34109:tid 34158] [client 45.146.55.18:33435] [client 45.146.55.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aTSeJojE_vucgM_xD4QIxQAAAFI"]
[Sun Dec 07 05:20:42.023821 2025] [:error] [pid 34195:tid 34206] [client 45.146.55.13:30317] [client 45.146.55.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aTSeKhrSxOOdwv3vX3xpwgAAAMg"]
[Sun Dec 07 05:20:42.839195 2025] [:error] [pid 34109:tid 34159] [client 45.146.55.34:61765] [client 45.146.55.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aTSeKojE_vucgM_xD4QIygAAAFM"]
[Sun Dec 07 05:20:49.833666 2025] [:error] [pid 34195:tid 34208] [client 45.146.55.47:21743] [client 45.146.55.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aTSeMRrSxOOdwv3vX3xp4gAAAMo"]
[Sun Dec 07 05:20:50.665669 2025] [:error] [pid 34109:tid 34146] [client 45.146.55.61:40047] [client 45.146.55.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "paramountbaldivis.com"] [uri "/fm.php"] [unique_id "aTSeMojE_vucgM_xD4QI0gAAAEY"]
[Sun Dec 07 05:20:59.983081 2025] [:error] [pid 34109:tid 34143] [client 45.146.55.17:64175] [client 45.146.55.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aTSeO4jE_vucgM_xD4QI7wAAAEM"]
[Sun Dec 07 05:21:03.885413 2025] [proxy_fcgi:error] [pid 7089:tid 7108] [client 45.146.55.34:57939] AH01071: Got error 'Primary script unknown'
[Sun Dec 07 05:21:05.791173 2025] [:error] [pid 7089:tid 7115] [client 45.146.55.34:57939] [client 45.146.55.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/function.php"] [unique_id "aTSeQYJPZ-pZM-y51NH6wAAAARg"]
[Sun Dec 07 05:21:06.617994 2025] [:error] [pid 34108:tid 34135] [client 45.146.55.60:23109] [client 45.146.55.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/plugins.php"] [unique_id "aTSeQqLvdvAppF-gXos6DQAAABY"]
[Sun Dec 07 05:21:10.461319 2025] [:error] [pid 34109:tid 34160] [client 45.146.55.48:45357] [client 45.146.55.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/css/chosen.php"] [unique_id "aTSeRojE_vucgM_xD4QJBQAAAFQ"]
[Sun Dec 07 05:21:11.345259 2025] [:error] [pid 7089:tid 7113] [client 45.146.55.11:56815] [client 45.146.55.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "aTSeR4JPZ-pZM-y51NH65AAAARY"]
[Sun Dec 07 05:21:22.951393 2025] [:error] [pid 7089:tid 7100] [client 45.146.55.54:44181] [client 45.146.55.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/atomlib.php"] [unique_id "aTSeUoJPZ-pZM-y51NH7QAAAAQk"]
[Sun Dec 07 05:21:23.783813 2025] [:error] [pid 34195:tid 34221] [client 45.146.55.13:28919] [client 45.146.55.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aTSeUxrSxOOdwv3vX3xqFAAAANc"]
[Sun Dec 07 05:21:30.673602 2025] [:error] [pid 13234:tid 13262] [client 45.146.55.46:49773] [client 45.146.55.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/index.php"] [unique_id "aTSeWu6_dquQqQ60IZ-zKgAAAZU"]
[Sun Dec 07 05:21:31.537405 2025] [:error] [pid 34108:tid 34136] [client 45.146.55.25:25371] [client 45.146.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aTSeW6LvdvAppF-gXos6VAAAABc"]
[Sun Dec 07 05:21:32.406802 2025] [:error] [pid 34109:tid 34140] [client 45.146.55.59:52515] [client 45.146.55.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aTSeXIjE_vucgM_xD4QJMQAAAEA"]
[Sun Dec 07 05:21:40.718017 2025] [:error] [pid 7089:tid 7103] [client 45.146.55.52:57613] [client 45.146.55.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "aTSeZIJPZ-pZM-y51NH7oQAAAQw"]
[Sun Dec 07 05:21:43.097125 2025] [:error] [pid 13234:tid 13244] [client 45.146.55.38:51665] [client 45.146.55.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aTSeZ-6_dquQqQ60IZ-zXAAAAYM"]
[Sun Dec 07 05:21:53.054570 2025] [:error] [pid 7089:tid 7094] [client 45.146.55.20:59471] [client 45.146.55.20] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.55.20, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/js/wp-login.php"] [unique_id "aTSecYJPZ-pZM-y51NH7yAAAAQM"]
[Sun Dec 07 05:22:02.516893 2025] [:error] [pid 7089:tid 7101] [client 45.146.55.20:59471] [client 45.146.55.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/bk/index.php"] [unique_id "aTSeeoJPZ-pZM-y51NH72wAAAQo"]
[Sun Dec 07 05:22:03.373844 2025] [:error] [pid 7089:tid 7109] [client 45.146.55.52:36059] [client 45.146.55.52] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.55.52, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aTSee4JPZ-pZM-y51NH73gAAARI"]
[Sun Dec 07 05:22:20.798634 2025] [proxy_fcgi:error] [pid 7089:tid 7092] [client 45.146.55.52:36059] AH01071: Got error 'Primary script unknown'
[Sun Dec 07 05:22:42.299086 2025] [:error] [pid 7089:tid 7091] [client 45.146.55.52:36059] [client 45.146.55.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/Text/about.php"] [unique_id "aTSeooJPZ-pZM-y51NH8MwAAAQA"]
[Sun Dec 07 05:22:47.565346 2025] [:error] [pid 7273:tid 7291] [client 45.146.55.53:56973] [client 45.146.55.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aTSep_pR7YTD7JcHjhGrkAAAAVA"]
[Sun Dec 07 05:22:51.379965 2025] [:error] [pid 7273:tid 7293] [client 45.146.55.16:59841] [client 45.146.55.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/css/atomlib.php"] [unique_id "aTSeq_pR7YTD7JcHjhGrogAAAVI"]
[Sun Dec 07 05:23:05.635524 2025] [:error] [pid 7273:tid 7281] [client 45.146.55.35:32667] [client 45.146.55.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aTSeufpR7YTD7JcHjhGr6AAAAUY"]
[Sun Dec 07 05:23:09.622937 2025] [:error] [pid 7089:tid 7094] [client 45.146.55.18:45399] [client 45.146.55.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aTSevYJPZ-pZM-y51NH8cAAAAQM"]
[Sun Dec 07 05:23:11.908510 2025] [:error] [pid 34195:tid 34199] [client 45.146.55.36:39733] [client 45.146.55.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aTSevxrSxOOdwv3vX3xq1AAAAME"]
[Sun Dec 07 05:23:18.888584 2025] [proxy_fcgi:error] [pid 7273:tid 7294] [client 45.146.55.61:33321] AH01071: Got error 'Primary script unknown'
[Sun Dec 07 05:23:19.308669 2025] [proxy_fcgi:error] [pid 7273:tid 7292] [client 45.146.55.61:33321] AH01071: Got error 'Primary script unknown'
[Sun Dec 07 05:23:19.723622 2025] [:error] [pid 7273:tid 7278] [client 45.146.55.61:33321] [client 45.146.55.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aTSex_pR7YTD7JcHjhGsGwAAAUM"]
[Sun Dec 07 05:23:20.546909 2025] [:error] [pid 34110:tid 34183] [client 45.146.55.28:40285] [client 45.146.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aTSeyAndtmtsHiXHBO2nxQAAAJA"]
[Sun Dec 07 05:23:33.570172 2025] [:error] [pid 7273:tid 7291] [client 45.146.55.51:51119] [client 45.146.55.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/js/dist/default.php"] [unique_id "aTSe1fpR7YTD7JcHjhGsTAAAAVA"]
[Sun Dec 07 05:23:35.919670 2025] [:error] [pid 13234:tid 13249] [client 45.146.55.49:30013] [client 45.146.55.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "paramountbaldivis.com"] [uri "/tiny.php"] [unique_id "aTSe1-6_dquQqQ60IZ-0jAAAAYg"]
[Sun Dec 07 05:23:41.229839 2025] [:error] [pid 7273:tid 7295] [client 45.146.55.35:43831] [client 45.146.55.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aTSe3fpR7YTD7JcHjhGsbAAAAVQ"]
[Sun Dec 07 05:23:52.410120 2025] [:error] [pid 7089:tid 7098] [client 45.146.55.54:27965] [client 45.146.55.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "aTSe6IJPZ-pZM-y51NH82QAAAQc"]
[Sun Dec 07 05:23:53.296375 2025] [proxy_fcgi:error] [pid 13234:tid 13262] [client 45.146.55.51:47553] AH01071: Got error 'Primary script unknown'
[Sun Dec 07 05:23:56.665644 2025] [:error] [pid 13234:tid 13264] [client 45.146.55.51:47553] [client 45.146.55.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aTSe7O6_dquQqQ60IZ-0tQAAAZc"]
[Sun Dec 07 05:24:05.381089 2025] [proxy_fcgi:error] [pid 34110:tid 34178] [client 45.146.55.54:38547] AH01071: Got error 'Primary script unknown'
[Sun Dec 07 05:24:07.362151 2025] [:error] [pid 34110:tid 34168] [client 45.146.55.54:38547] [client 45.146.55.54] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.55.54, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "aTSe9wndtmtsHiXHBO2oHwAAAIE"]
[Sun Dec 07 05:24:14.740924 2025] [:error] [pid 34110:tid 34172] [client 45.146.55.54:38547] [client 45.146.55.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "aTSe_gndtmtsHiXHBO2oMgAAAIU"]
[Sun Dec 07 05:24:17.148144 2025] [:error] [pid 7273:tid 7294] [client 45.146.55.57:31631] [client 45.146.55.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "aTSfAfpR7YTD7JcHjhGsugAAAVM"]
[Sun Dec 07 05:24:25.007021 2025] [:error] [pid 7273:tid 7295] [client 45.146.55.44:40837] [client 45.146.55.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "aTSfCfpR7YTD7JcHjhGs3gAAAVQ"]
[Sun Dec 07 05:24:31.761370 2025] [:error] [pid 34195:tid 34202] [client 45.146.55.27:28151] [client 45.146.55.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "aTSfDxrSxOOdwv3vX3xrtAAAAMQ"]
[Sun Dec 07 05:24:34.051630 2025] [:error] [pid 34108:tid 34115] [client 45.146.55.55:60511] [client 45.146.55.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aTSfEqLvdvAppF-gXos8SAAAAAI"]
[Sun Dec 07 05:24:39.408339 2025] [:error] [pid 34109:tid 34141] [client 45.146.55.45:42377] [client 45.146.55.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/class-feed-index.php"] [unique_id "aTSfF4jE_vucgM_xD4QKMAAAAEE"]
[Sun Dec 07 05:24:43.156845 2025] [proxy_fcgi:error] [pid 7273:tid 7299] [client 45.146.55.52:22963] AH01071: Got error 'Primary script unknown'
[Sun Dec 07 05:24:43.568633 2025] [:error] [pid 7273:tid 7281] [client 45.146.55.52:22963] [client 45.146.55.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "aTSfG_pR7YTD7JcHjhGtHwAAAUY"]
[Sun Dec 07 05:24:46.032032 2025] [:error] [pid 7273:tid 7283] [client 45.146.55.36:30681] [client 45.146.55.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/db.php"] [unique_id "aTSfHvpR7YTD7JcHjhGtLQAAAUg"]
[Sun Dec 07 05:24:46.898142 2025] [:error] [pid 7273:tid 7282] [client 45.146.55.62:62121] [client 45.146.55.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "aTSfHvpR7YTD7JcHjhGtMgAAAUc"]
[Sun Dec 07 05:24:47.755284 2025] [:error] [pid 7273:tid 7289] [client 45.146.55.45:31065] [client 45.146.55.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aTSfH_pR7YTD7JcHjhGtOAAAAU4"]
[Sun Dec 07 05:24:48.586310 2025] [:error] [pid 7273:tid 7283] [client 45.146.55.62:33869] [client 45.146.55.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "aTSfIPpR7YTD7JcHjhGtPAAAAUg"]
[Sun Dec 07 05:24:49.475032 2025] [:error] [pid 34110:tid 34177] [client 45.146.55.31:30395] [client 45.146.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "aTSfIQndtmtsHiXHBO2oXAAAAIo"]
[Sun Dec 07 05:24:50.338577 2025] [:error] [pid 34110:tid 34184] [client 45.146.55.21:23923] [client 45.146.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/l10n/class-wp-widddget-pages.php"] [unique_id "aTSfIgndtmtsHiXHBO2oXQAAAJE"]
[Sun Dec 07 05:24:54.225250 2025] [:error] [pid 7273:tid 7278] [client 45.146.55.40:61139] [client 45.146.55.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "aTSfJvpR7YTD7JcHjhGtWQAAAUM"]
[Sun Dec 07 05:24:56.870192 2025] [:error] [pid 13234:tid 13248] [client 45.146.55.23:55009] [client 45.146.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "aTSfKO6_dquQqQ60IZ-1SAAAAYc"]
[Sun Dec 07 05:24:57.734295 2025] [:error] [pid 13234:tid 13264] [client 45.146.55.26:64261] [client 45.146.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/ID3/module.audio-video.riff-set.php"] [unique_id "aTSfKe6_dquQqQ60IZ-1SQAAAZc"]
[Sun Dec 07 05:25:00.200990 2025] [:error] [pid 34109:tid 34144] [client 45.146.55.11:43257] [client 45.146.55.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "aTSfLIjE_vucgM_xD4QKPwAAAEQ"]
[Sun Dec 07 05:25:05.643970 2025] [:error] [pid 13234:tid 13258] [client 45.146.55.31:56019] [client 45.146.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/Text/options.php"] [unique_id "aTSfMe6_dquQqQ60IZ-1YAAAAZE"]
[Sun Dec 07 05:25:06.512929 2025] [proxy_fcgi:error] [pid 34110:tid 34177] [client 45.146.55.27:44751] AH01071: Got error 'Primary script unknown'
[Sun Dec 07 05:25:11.648478 2025] [:error] [pid 34110:tid 34189] [client 45.146.55.27:44751] [client 45.146.55.27] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.55.27, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "aTSfNwndtmtsHiXHBO2ohAAAAJY"]
[Sun Dec 07 05:25:22.387014 2025] [:error] [pid 34110:tid 34177] [client 45.146.55.27:44751] [client 45.146.55.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/feed-rsss.php"] [unique_id "aTSfQQndtmtsHiXHBO2olAAAAIo"]
[Sun Dec 07 05:25:23.277751 2025] [:error] [pid 34108:tid 34135] [client 45.146.55.11:43493] [client 45.146.55.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/IXR/goto.php"] [unique_id "aTSfQ6LvdvAppF-gXos8ywAAABY"]
[Sun Dec 07 05:25:49.529011 2025] [:error] [pid 34109:tid 34163] [client 45.146.55.49:46467] [client 45.146.55.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aTSfXYjE_vucgM_xD4QKrgAAAFc"]
[Sun Dec 07 05:25:50.359181 2025] [:error] [pid 34109:tid 34162] [client 45.146.55.41:60539] [client 45.146.55.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "aTSfXojE_vucgM_xD4QKrwAAAFY"]
[Sun Dec 07 05:25:52.744899 2025] [:error] [pid 34110:tid 34181] [client 45.146.55.23:25473] [client 45.146.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "aTSfYAndtmtsHiXHBO2o4gAAAI4"]
[Sun Dec 07 05:26:02.502406 2025] [:error] [pid 7273:tid 7281] [client 45.146.55.52:22671] [client 45.146.55.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/SimplePie/Registry-private.php"] [unique_id "aTSfavpR7YTD7JcHjhGuXgAAAUY"]
[Sun Dec 07 05:26:03.358964 2025] [:error] [pid 34110:tid 34177] [client 45.146.55.20:48133] [client 45.146.55.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/assets/script-modules-packages.min-meta.php"] [unique_id "aTSfawndtmtsHiXHBO2o8AAAAIo"]
[Sun Dec 07 05:26:04.221079 2025] [:error] [pid 7273:tid 7281] [client 45.146.55.26:27257] [client 45.146.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/widgets/bypass.php"] [unique_id "aTSfbPpR7YTD7JcHjhGubAAAAUY"]
[Sun Dec 07 05:26:10.924215 2025] [:error] [pid 13234:tid 13251] [client 45.146.55.51:24019] [client 45.146.55.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/style-engine/adminfus.php"] [unique_id "aTSfcu6_dquQqQ60IZ-16wAAAYo"]
[Sun Dec 07 05:26:13.325799 2025] [:error] [pid 34108:tid 34122] [client 45.146.55.42:24849] [client 45.146.55.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/blocks/group/wp-style.php"] [unique_id "aTSfdaLvdvAppF-gXos9TAAAAAk"]
[Sun Dec 07 05:26:17.172262 2025] [:error] [pid 13234:tid 13244] [client 45.146.55.29:55329] [client 45.146.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "aTSfee6_dquQqQ60IZ-19QAAAYM"]
[Sun Dec 07 05:26:34.329492 2025] [:error] [pid 7273:tid 7296] [client 45.146.55.37:44103] [client 45.146.55.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/Text/index.php"] [unique_id "aTSfivpR7YTD7JcHjhGuxwAAAVU"]
[Sun Dec 07 05:26:38.144976 2025] [:error] [pid 34108:tid 34122] [client 45.146.55.29:49645] [client 45.146.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/about.php"] [unique_id "aTSfjqLvdvAppF-gXos9awAAAAk"]
[Sun Dec 07 05:26:48.449720 2025] [:error] [pid 34195:tid 34205] [client 45.146.55.46:22667] [client 45.146.55.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/wp-sup.php"] [unique_id "aTSfmBrSxOOdwv3vX3xsXwAAAMc"]
[Sun Dec 07 05:26:52.253944 2025] [:error] [pid 7273:tid 7297] [client 45.146.55.41:29747] [client 45.146.55.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/widgets/class-t.api.php"] [unique_id "aTSfnPpR7YTD7JcHjhGu7wAAAVY"]
[Sun Dec 07 05:26:58.867031 2025] [:error] [pid 34109:tid 34144] [client 45.146.55.12:26155] [client 45.146.55.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/css/dist/require-dynamic-blocks.php"] [unique_id "aTSfoojE_vucgM_xD4QK7AAAAEQ"]
[Sun Dec 07 05:27:06.978134 2025] [:error] [pid 7273:tid 7279] [client 45.146.55.32:48763] [client 45.146.55.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/widgets/class-wp-widget-rss-database.php"] [unique_id "aTSfqvpR7YTD7JcHjhGvFwAAAUQ"]
[Sun Dec 07 05:27:10.633116 2025] [:error] [pid 34108:tid 34129] [client 45.146.55.44:46771] [client 45.146.55.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/class-wp-customize-manager-client.php"] [unique_id "aTSfrqLvdvAppF-gXos9kQAAABA"]
[Sun Dec 07 05:27:11.490675 2025] [:error] [pid 34109:tid 34145] [client 45.146.55.12:37593] [client 45.146.55.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/assets/script-modules-packages.min-boolean.php"] [unique_id "aTSfr4jE_vucgM_xD4QK8wAAAEU"]
[Sun Dec 07 05:27:19.433163 2025] [:error] [pid 7089:tid 7092] [client 45.146.55.21:51053] [client 45.146.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/images/smilies/simi.php"] [unique_id "aTSft4JPZ-pZM-y51NH-TQAAAQE"]
[Sun Dec 07 05:27:28.711351 2025] [:error] [pid 7273:tid 7293] [client 45.146.55.57:29469] [client 45.146.55.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/style-engine-session.php"] [unique_id "aTSfwPpR7YTD7JcHjhGvUQAAAVI"]
[Sun Dec 07 05:27:35.288831 2025] [:error] [pid 7089:tid 7102] [client 45.146.55.48:39161] [client 45.146.55.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aTSfx4JPZ-pZM-y51NH-bAAAAQs"]
[Sun Dec 07 05:27:36.189021 2025] [:error] [pid 34108:tid 34113] [client 45.146.55.50:27681] [client 45.146.55.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/blocks/file/wp-style.php"] [unique_id "aTSfyKLvdvAppF-gXos9wQAAAAA"]
[Sun Dec 07 05:27:39.906349 2025] [:error] [pid 7273:tid 7292] [client 45.146.55.18:61153] [client 45.146.55.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/IXR/class-IXR-cilent.php"] [unique_id "aTSfy_pR7YTD7JcHjhGvlgAAAVE"]
[Sun Dec 07 05:27:45.306287 2025] [:error] [pid 34110:tid 34185] [client 45.146.55.33:57345] [client 45.146.55.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/images/install.php"] [unique_id "aTSf0QndtmtsHiXHBO2pXwAAAJI"]
[Sun Dec 07 05:27:46.204276 2025] [:error] [pid 7273:tid 7280] [client 45.146.55.54:38793] [client 45.146.55.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/PHPMailer/xleet.php"] [unique_id "aTSf0vpR7YTD7JcHjhGvsgAAAUU"]
[Sun Dec 07 05:27:55.884747 2025] [:error] [pid 34110:tid 34176] [client 45.146.55.39:49517] [client 45.146.55.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/category-double.php"] [unique_id "aTSf2wndtmtsHiXHBO2pbAAAAIk"]
[Sun Dec 07 05:28:01.098526 2025] [:error] [pid 34195:tid 34198] [client 45.146.55.45:44837] [client 45.146.55.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/assets/db.php"] [unique_id "aTSf4RrSxOOdwv3vX3xsoQAAAMA"]
[Sun Dec 07 05:28:02.031022 2025] [:error] [pid 7089:tid 7104] [client 45.146.55.62:30195] [client 45.146.55.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/widgets/security.php"] [unique_id "aTSf4oJPZ-pZM-y51NH-jgAAAQ0"]
[Sun Dec 07 05:28:05.761228 2025] [:error] [pid 13234:tid 13240] [client 45.146.55.29:25437] [client 45.146.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/class-wp-language-pack.php"] [unique_id "aTSf5e6_dquQqQ60IZ-2dQAAAYA"]
[Sun Dec 07 05:28:08.031981 2025] [:error] [pid 7089:tid 7114] [client 45.146.55.16:62657] [client 45.146.55.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/class-walker-comment-client.php"] [unique_id "aTSf6IJPZ-pZM-y51NH-mwAAARc"]
[Sun Dec 07 05:28:15.939339 2025] [:error] [pid 34195:tid 34218] [client 45.146.55.39:35553] [client 45.146.55.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/class-wp-network-query-stat.php"] [unique_id "aTSf7xrSxOOdwv3vX3xsuwAAANQ"]
[Sun Dec 07 05:28:19.582725 2025] [:error] [pid 7273:tid 7296] [client 45.146.55.29:54487] [client 45.146.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/class-wp-session-tokens-https.php"] [unique_id "aTSf8_pR7YTD7JcHjhGwBwAAAVU"]
[Sun Dec 07 05:28:23.381078 2025] [:error] [pid 7089:tid 7094] [client 45.146.55.40:38305] [client 45.146.55.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/images/crystal/lrs_dage.php"] [unique_id "aTSf94JPZ-pZM-y51NH-rQAAAQM"]
[Sun Dec 07 05:28:25.711927 2025] [:error] [pid 34110:tid 34170] [client 45.146.55.31:45843] [client 45.146.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/as.php"] [unique_id "aTSf-QndtmtsHiXHBO2pggAAAIM"]
[Sun Dec 07 05:28:28.184080 2025] [:error] [pid 34110:tid 34188] [client 45.146.55.39:55161] [client 45.146.55.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/certificates/wp-conflg.php"] [unique_id "aTSf_AndtmtsHiXHBO2pigAAAJU"]
[Sun Dec 07 05:28:29.050000 2025] [:error] [pid 34110:tid 34180] [client 45.146.55.23:38017] [client 45.146.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/install.php"] [unique_id "aTSf_QndtmtsHiXHBO2pjQAAAI0"]
[Sun Dec 07 05:28:29.903475 2025] [:error] [pid 34195:tid 34216] [client 45.146.55.31:29045] [client 45.146.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/customize/db.php"] [unique_id "aTSf_RrSxOOdwv3vX3xs0AAAANI"]
[Sun Dec 07 05:28:39.464083 2025] [:error] [pid 34108:tid 34122] [client 45.146.55.62:23647] [client 45.146.55.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/js/thickbox/about.php"] [unique_id "aTSgB6LvdvAppF-gXos-FgAAAAk"]
[Sun Dec 07 05:28:44.657513 2025] [:error] [pid 34195:tid 34220] [client 45.146.55.17:28889] [client 45.146.55.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/rk2.php"] [unique_id "aTSgDBrSxOOdwv3vX3xs6gAAANY"]
[Sun Dec 07 05:28:51.476278 2025] [:error] [pid 7089:tid 7098] [client 45.146.55.35:43347] [client 45.146.55.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/certificates/past.php"] [unique_id "aTSgE4JPZ-pZM-y51NH-0QAAAQc"]
[Sun Dec 07 05:28:57.892383 2025] [:error] [pid 13234:tid 13263] [client 45.146.55.14:43831] [client 45.146.55.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/edit-tags.php"] [unique_id "aTSgGe6_dquQqQ60IZ-2sAAAAZY"]
[Sun Dec 07 05:29:07.659592 2025] [:error] [pid 34108:tid 34117] [client 45.146.55.56:22397] [client 45.146.55.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/css/dist/footer-default.php"] [unique_id "aTSgI6LvdvAppF-gXos-RAAAAAQ"]
[Sun Dec 07 05:29:09.998287 2025] [:error] [pid 7089:tid 7112] [client 45.146.55.15:37589] [client 45.146.55.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/widgets/class-wp-widget-meta-request.php"] [unique_id "aTSgJYJPZ-pZM-y51NH-5gAAARU"]
[Sun Dec 07 05:29:12.240144 2025] [:error] [pid 34108:tid 34126] [client 45.146.55.29:46271] [client 45.146.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/css/dist/edit-widgets/bypass.php"] [unique_id "aTSgKKLvdvAppF-gXos-UgAAAA0"]
[Sun Dec 07 05:29:19.509221 2025] [:error] [pid 7089:tid 7112] [client 45.146.55.36:59963] [client 45.146.55.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/l10n/wp-login.php"] [unique_id "aTSgL4JPZ-pZM-y51NH-7gAAARU"]
[Sun Dec 07 05:29:31.936726 2025] [:error] [pid 7273:tid 7289] [client 45.146.55.14:22833] [client 45.146.55.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/widgets/wp-ss.php"] [unique_id "aTSgO_pR7YTD7JcHjhGw1gAAAU4"]
[Sun Dec 07 05:29:32.787164 2025] [:error] [pid 7089:tid 7097] [client 45.146.55.38:59871] [client 45.146.55.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/IXR/xsec1.php"] [unique_id "aTSgPIJPZ-pZM-y51NH-_gAAAQY"]
[Sun Dec 07 05:29:37.969691 2025] [:error] [pid 7273:tid 7297] [client 45.146.55.42:27103] [client 45.146.55.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/images/crystal/sad.php"] [unique_id "aTSgQfpR7YTD7JcHjhGw6wAAAVY"]
[Sun Dec 07 05:29:38.865400 2025] [:error] [pid 13234:tid 13264] [client 45.146.55.30:20121] [client 45.146.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aTSgQu6_dquQqQ60IZ-21gAAAZc"]
[Sun Dec 07 05:29:42.548450 2025] [:error] [pid 7273:tid 7293] [client 45.146.55.59:29407] [client 45.146.55.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/class-phpmailer-beta.php"] [unique_id "aTSgRvpR7YTD7JcHjhGw9gAAAVI"]
[Sun Dec 07 05:29:43.411902 2025] [:error] [pid 34110:tid 34174] [client 45.146.55.44:48421] [client 45.146.55.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/ms-file.php"] [unique_id "aTSgRwndtmtsHiXHBO2ptwAAAIc"]
[Sun Dec 07 05:29:44.256079 2025] [:error] [pid 34109:tid 34153] [client 45.146.55.48:40481] [client 45.146.55.48] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.55.48, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aTSgSIjE_vucgM_xD4QLpQAAAE0"]
[Sun Dec 07 05:29:44.260345 2025] [proxy_fcgi:error] [pid 34109:tid 34153] [client 45.146.55.48:40481] AH01071: Got error 'Primary script unknown'
[Sun Dec 07 05:29:44.680462 2025] [:error] [pid 34109:tid 34152] [client 45.146.55.48:40481] [client 45.146.55.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/widgets/av.php"] [unique_id "aTSgSIjE_vucgM_xD4QLpgAAAEw"]
[Sun Dec 07 05:29:49.787476 2025] [:error] [pid 7273:tid 7291] [client 45.146.55.61:58973] [client 45.146.55.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aTSgTfpR7YTD7JcHjhGxBwAAAVA"]
[Sun Dec 07 05:29:50.646885 2025] [:error] [pid 34110:tid 34167] [client 45.146.55.12:58665] [client 45.146.55.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/network.php"] [unique_id "aTSgTgndtmtsHiXHBO2pvAAAAIA"]
[Sun Dec 07 05:30:01.744785 2025] [:error] [pid 13234:tid 13260] [client 45.146.55.42:53105] [client 45.146.55.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/SimplePie/XML/content.php"] [unique_id "aTSgWe6_dquQqQ60IZ-3GgAAAZM"]
[Sun Dec 07 05:30:03.624174 2025] [:error] [pid 34109:tid 34141] [client 45.146.55.51:46407] [client 45.146.55.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/pomo/item.php"] [unique_id "aTSgW4jE_vucgM_xD4QL5wAAAEE"]
[Sun Dec 07 05:30:07.470866 2025] [:error] [pid 34108:tid 34130] [client 45.146.55.20:24975] [client 45.146.55.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/pomo/plugins.php"] [unique_id "aTSgX6LvdvAppF-gXos_DAAAABE"]
[Sun Dec 07 05:30:10.501339 2025] [:error] [pid 13234:tid 13240] [client 45.146.55.49:41721] [client 45.146.55.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/assets/install.php"] [unique_id "aTSgYu6_dquQqQ60IZ-3HwAAAYA"]
[Sun Dec 07 05:30:11.378690 2025] [proxy_fcgi:error] [pid 7273:tid 7287] [client 45.146.55.34:30907] AH01071: Got error 'Primary script unknown'
[Sun Dec 07 05:30:11.811642 2025] [:error] [pid 7273:tid 7277] [client 45.146.55.34:30907] [client 45.146.55.34] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.55.34, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aTSgY_pR7YTD7JcHjhGxPwAAAUI"]
[Sun Dec 07 05:30:14.669808 2025] [:error] [pid 7273:tid 7279] [client 45.146.55.34:30907] [client 45.146.55.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/widgets/class-wp-nav-widgets.php"] [unique_id "aTSgZvpR7YTD7JcHjhGxSQAAAUQ"]
[Sun Dec 07 05:30:20.815483 2025] [:error] [pid 7273:tid 7282] [client 45.146.55.14:59933] [client 45.146.55.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/sitemaps/providers/doc.php"] [unique_id "aTSgbPpR7YTD7JcHjhGxWAAAAUc"]
[Sun Dec 07 05:30:23.109711 2025] [:error] [pid 13234:tid 13265] [client 45.146.55.15:40929] [client 45.146.55.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/rest-api/1.php"] [unique_id "aTSgb-6_dquQqQ60IZ-3JwAAAZg"]
[Sun Dec 07 05:30:23.963524 2025] [:error] [pid 34109:tid 34164] [client 45.146.55.49:54781] [client 45.146.55.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/fonts/class_api.php"] [unique_id "aTSgb4jE_vucgM_xD4QL9wAAAFg"]
[Sun Dec 07 05:30:29.201641 2025] [:error] [pid 7089:tid 7112] [client 45.146.55.56:47517] [client 45.146.55.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/images/smilies/admin.php"] [unique_id "aTSgdYJPZ-pZM-y51NH_fQAAARU"]
[Sun Dec 07 05:30:32.908328 2025] [:error] [pid 34195:tid 34217] [client 45.146.55.25:62679] [client 45.146.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/IXR/about.php"] [unique_id "aTSgeBrSxOOdwv3vX3xtdgAAANM"]
[Sun Dec 07 05:30:39.928529 2025] [:error] [pid 13234:tid 13265] [client 45.146.55.56:53805] [client 45.146.55.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/class-wp-customize-manager-interpreter.php"] [unique_id "aTSgf-6_dquQqQ60IZ-3OQAAAZg"]
[Sun Dec 07 05:30:40.815036 2025] [:error] [pid 34110:tid 34169] [client 45.146.55.52:57991] [client 45.146.55.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/bypass.php"] [unique_id "aTSggAndtmtsHiXHBO2p-QAAAII"]
[Sun Dec 07 05:30:43.110905 2025] [:error] [pid 34109:tid 34159] [client 45.146.55.29:21829] [client 45.146.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/count.php"] [unique_id "aTSgg4jE_vucgM_xD4QMCgAAAFM"]
[Sun Dec 07 05:30:53.021111 2025] [:error] [pid 34108:tid 34133] [client 45.146.55.30:44259] [client 45.146.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aTSgjaLvdvAppF-gXos_XAAAABQ"]
[Sun Dec 07 05:30:56.856023 2025] [:error] [pid 7089:tid 7098] [client 45.146.55.31:44329] [client 45.146.55.31] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/usr/local/apache/modsecurity-cwaf/rules/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||paramountbaldivis.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "paramountbaldivis.com"] [uri "/images/stories/themes.php"] [unique_id "aTSgkIJPZ-pZM-y51NH_tgAAAQc"]
[Sun Dec 07 05:30:57.281722 2025] [:error] [pid 7089:tid 7111] [client 45.146.55.31:44329] [client 45.146.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/theme-compat/footer-embed-function.php"] [unique_id "aTSgkYJPZ-pZM-y51NH_twAAARQ"]
[Sun Dec 07 05:31:01.125564 2025] [:error] [pid 7089:tid 7105] [client 45.146.55.23:23701] [client 45.146.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/l10n/class-wp-translation-file-mo-event.php"] [unique_id "aTSglYJPZ-pZM-y51NH_wQAAAQ4"]
[Sun Dec 07 05:31:01.973112 2025] [:error] [pid 7273:tid 7292] [client 45.146.55.14:55911] [client 45.146.55.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/vars-soap.php"] [unique_id "aTSglfpR7YTD7JcHjhGxmQAAAVE"]
[Sun Dec 07 05:31:11.794924 2025] [:error] [pid 34108:tid 34115] [client 45.146.55.54:47021] [client 45.146.55.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/id3/wp-work.php"] [unique_id "aTSgn6LvdvAppF-gXos_dgAAAAI"]
[Sun Dec 07 05:31:16.741722 2025] [:error] [pid 7273:tid 7292] [client 45.146.55.17:29559] [client 45.146.55.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/class-wp-taxonomy.editor.php"] [unique_id "aTSgpPpR7YTD7JcHjhGxvwAAAVE"]
[Sun Dec 07 05:31:19.096609 2025] [:error] [pid 34108:tid 34119] [client 45.146.55.45:36379] [client 45.146.55.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/js/wp-conflg.php"] [unique_id "aTSgp6LvdvAppF-gXos_hgAAAAY"]
[Sun Dec 07 05:31:27.098721 2025] [:error] [pid 7089:tid 7103] [client 45.146.55.59:50209] [client 45.146.55.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/interactivity-api/interactivity-api-xml.php"] [unique_id "aTSgr4JPZ-pZM-y51NH_4QAAAQw"]
[Sun Dec 07 05:31:29.360460 2025] [:error] [pid 34110:tid 34181] [client 45.146.55.43:55339] [client 45.146.55.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/colour.php"] [unique_id "aTSgsQndtmtsHiXHBO2qVQAAAI4"]
[Sun Dec 07 05:31:31.651098 2025] [:error] [pid 34109:tid 34152] [client 45.146.55.22:51085] [client 45.146.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/customize/class-wp-customize-background-position-control-variable.php"] [unique_id "aTSgs4jE_vucgM_xD4QMNgAAAEw"]
[Sun Dec 07 05:31:32.491788 2025] [:error] [pid 34108:tid 34132] [client 45.146.55.61:57299] [client 45.146.55.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/images/include.php"] [unique_id "aTSgtKLvdvAppF-gXos_ngAAABM"]
[Sun Dec 07 05:31:37.256630 2025] [:error] [pid 7273:tid 7281] [client 45.146.55.29:47335] [client 45.146.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/js/imgareaselect/wp-login.php"] [unique_id "aTSgufpR7YTD7JcHjhGx2wAAAUY"]
[Sun Dec 07 05:31:44.018940 2025] [:error] [pid 34109:tid 34147] [client 45.146.55.30:32941] [client 45.146.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/l10n/class-wp-translations-interface.php"] [unique_id "aTSgwIjE_vucgM_xD4QMQwAAAEc"]
[Sun Dec 07 05:31:44.909965 2025] [:error] [pid 7273:tid 7282] [client 45.146.55.47:48791] [client 45.146.55.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/assets/about5.php"] [unique_id "aTSgwPpR7YTD7JcHjhGx5gAAAUc"]
[Sun Dec 07 05:31:53.149297 2025] [:error] [pid 13234:tid 13250] [client 45.146.55.20:45107] [client 45.146.55.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/ID3/db.php"] [unique_id "aTSgye6_dquQqQ60IZ-3iwAAAYk"]
[Sun Dec 07 05:31:56.920310 2025] [:error] [pid 34195:tid 34216] [client 45.146.55.30:35967] [client 45.146.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/js/dist/bypass.php"] [unique_id "aTSgzBrSxOOdwv3vX3xt-gAAANI"]
[Sun Dec 07 05:32:02.339945 2025] [:error] [pid 34195:tid 34216] [client 45.146.55.46:39685] [client 45.146.55.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/sitemaps/wp-conflg.php"] [unique_id "aTSg0hrSxOOdwv3vX3xuBQAAANI"]
[Sun Dec 07 05:32:03.204491 2025] [:error] [pid 34195:tid 34222] [client 45.146.55.48:21283] [client 45.146.55.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.php"] [unique_id "aTSg0xrSxOOdwv3vX3xuBwAAANg"]
[Sun Dec 07 05:32:14.054603 2025] [autoindex:error] [pid 34110:tid 34177] [client 45.146.55.40:49031] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 07 05:32:14.488935 2025] [autoindex:error] [pid 34110:tid 34181] [client 45.146.55.40:49031] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 07 05:32:14.918967 2025] [autoindex:error] [pid 34110:tid 34185] [client 45.146.55.40:49031] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 07 05:32:15.352430 2025] [autoindex:error] [pid 34110:tid 34187] [client 45.146.55.40:49031] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 07 05:32:18.639694 2025] [autoindex:error] [pid 34110:tid 34171] [client 45.146.55.40:49031] AH01276: Cannot serve directory /home/baldivis/public_html/wp-content/uploads/2023/11/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 07 05:32:19.069481 2025] [autoindex:error] [pid 34110:tid 34181] [client 45.146.55.40:49031] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/sodium_compat/lib/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 07 05:32:19.502473 2025] [autoindex:error] [pid 34110:tid 34183] [client 45.146.55.40:49031] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/blocks/file/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 07 05:32:19.940229 2025] [autoindex:error] [pid 34110:tid 34180] [client 45.146.55.40:49031] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 07 05:32:22.219024 2025] [autoindex:error] [pid 34110:tid 34182] [client 45.146.55.40:49031] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 07 05:32:24.376349 2025] [autoindex:error] [pid 34110:tid 34170] [client 45.146.55.40:49031] AH01276: Cannot serve directory /home/baldivis/public_html/wp-admin/css/colors/sunrise/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 07 05:32:24.801725 2025] [autoindex:error] [pid 34110:tid 34189] [client 45.146.55.40:49031] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/theme-compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 07 05:32:28.176465 2025] [autoindex:error] [pid 34110:tid 34188] [client 45.146.55.40:49031] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/blocks/query/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 07 05:32:28.600984 2025] [autoindex:error] [pid 34110:tid 34181] [client 45.146.55.40:49031] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/js/tinymce/langs/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 07 05:32:29.026139 2025] [autoindex:error] [pid 34110:tid 34183] [client 45.146.55.40:49031] AH01276: Cannot serve directory /home/baldivis/public_html/wp-admin/css/colors/ectoplasm/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 07 05:32:29.456979 2025] [autoindex:error] [pid 34110:tid 34186] [client 45.146.55.40:49031] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/blocks/group/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 07 05:32:35.632796 2025] [autoindex:error] [pid 34110:tid 34173] [client 45.146.55.40:49031] AH01276: Cannot serve directory /home/baldivis/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 07 05:32:38.935387 2025] [autoindex:error] [pid 34110:tid 34184] [client 45.146.55.40:49031] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 07 05:32:39.361613 2025] [autoindex:error] [pid 34110:tid 34175] [client 45.146.55.40:49031] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 07 05:32:39.789480 2025] [autoindex:error] [pid 34110:tid 34181] [client 45.146.55.40:49031] AH01276: Cannot serve directory /home/baldivis/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 07 05:32:44.484022 2025] [autoindex:error] [pid 34110:tid 34181] [client 45.146.55.40:49031] AH01276: Cannot serve directory /home/baldivis/public_html/wp-content/uploads/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 07 05:32:49.667961 2025] [autoindex:error] [pid 34110:tid 34174] [client 45.146.55.40:49031] AH01276: Cannot serve directory /home/baldivis/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 07 05:32:51.498744 2025] [autoindex:error] [pid 34110:tid 34176] [client 45.146.55.40:49031] AH01276: Cannot serve directory /home/baldivis/public_html/wp-admin/css/colors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 07 05:32:51.929710 2025] [autoindex:error] [pid 34110:tid 34179] [client 45.146.55.40:49031] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 07 05:32:52.790355 2025] [proxy_fcgi:error] [pid 34110:tid 34169] [client 45.146.55.40:49031] AH01071: Got error 'PHP message: PHP Warning: Use of undefined constant ABSPATH - assumed 'ABSPATH' (this will throw an Error in a future version of PHP) in /home/baldivis/public_html/wp-includes/blocks/index.php on line 9PHP message: PHP Warning: Use of undefined constant WPINC - assumed 'WPINC' (this will throw an Error in a future version of PHP) in /home/baldivis/public_html/wp-includes/blocks/index.php on line 9PHP message: PHP Warning: require(ABSPATHWPINC/blocks/archives.php): failed to open stream: No such file or directory in /home/baldivis/public_html/wp-includes/blocks/index.php on line 9PHP message: PHP Warning: require(ABSPATHWPINC/blocks/archives.php): failed to open stream: No such file or directory in /home/baldivis/public_html/wp-includes/blocks/index.php on line 9PHP message: PHP Fatal error: require(): Failed opening required 'ABSPATHWPINC/blocks/archives.php' (include_path='.:') in /home/baldivis/public_html/wp-includes/blocks/index.php on line 9'
[Sun Dec 07 05:32:53.646049 2025] [autoindex:error] [pid 34109:tid 34143] [client 45.146.55.26:54817] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 07 05:32:54.113419 2025] [autoindex:error] [pid 34109:tid 34149] [client 45.146.55.26:54817] AH01276: Cannot serve directory /home/baldivis/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 07 05:32:54.572458 2025] [autoindex:error] [pid 34109:tid 34161] [client 45.146.55.26:54817] AH01276: Cannot serve directory /home/baldivis/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 07 05:32:59.734653 2025] [autoindex:error] [pid 34109:tid 34151] [client 45.146.55.26:54817] AH01276: Cannot serve directory /home/baldivis/public_html/wp-content/uploads/2021/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 07 05:33:01.595323 2025] [autoindex:error] [pid 34109:tid 34164] [client 45.146.55.26:54817] AH01276: Cannot serve directory /home/baldivis/public_html/wp-content/mu-plugins/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 07 05:33:38.025031 2025] [autoindex:error] [pid 34109:tid 34146] [client 45.146.55.26:54817] AH01276: Cannot serve directory /home/baldivis/public_html/wp-admin/css/colors/light/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 07 05:33:38.471288 2025] [autoindex:error] [pid 34109:tid 34157] [client 45.146.55.26:54817] AH01276: Cannot serve directory /home/baldivis/public_html/wp-admin/css/colors/midnight/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 07 05:33:38.895695 2025] [autoindex:error] [pid 34109:tid 34155] [client 45.146.55.26:54817] AH01276: Cannot serve directory /home/baldivis/public_html/wp-admin/css/colors/modern/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 07 05:33:39.327610 2025] [autoindex:error] [pid 34109:tid 34149] [client 45.146.55.26:54817] AH01276: Cannot serve directory /home/baldivis/public_html/wp-admin/css/colors/ocean/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 07 05:33:41.208148 2025] [autoindex:error] [pid 34109:tid 34153] [client 45.146.55.26:54817] AH01276: Cannot serve directory /home/baldivis/public_html/wp-content/uploads/2022/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 07 05:33:41.641288 2025] [autoindex:error] [pid 34109:tid 34152] [client 45.146.55.26:54817] AH01276: Cannot serve directory /home/baldivis/public_html/wp-content/uploads/2023/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 07 05:33:42.066315 2025] [autoindex:error] [pid 34109:tid 34161] [client 45.146.55.26:54817] AH01276: Cannot serve directory /home/baldivis/public_html/wp-content/uploads/2024/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 07 05:33:43.953713 2025] [autoindex:error] [pid 34109:tid 34163] [client 45.146.55.26:54817] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 07 05:33:45.864756 2025] [autoindex:error] [pid 34109:tid 34158] [client 45.146.55.26:54817] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/images/crystal/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 07 05:33:46.294869 2025] [autoindex:error] [pid 34109:tid 34162] [client 45.146.55.26:54817] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/images/media/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 07 05:33:46.787503 2025] [autoindex:error] [pid 34109:tid 34164] [client 45.146.55.26:54817] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/images/smilies/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 07 05:33:47.214338 2025] [autoindex:error] [pid 34109:tid 34152] [client 45.146.55.26:54817] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/images/wlw/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 07 05:33:47.640474 2025] [autoindex:error] [pid 34109:tid 34161] [client 45.146.55.26:54817] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/js/codemirror/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 07 05:33:48.065206 2025] [autoindex:error] [pid 34109:tid 34146] [client 45.146.55.26:54817] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/js/plupload/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 07 05:33:48.505935 2025] [autoindex:error] [pid 34109:tid 34141] [client 45.146.55.26:54817] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 07 05:33:48.948041 2025] [autoindex:error] [pid 34109:tid 34159] [client 45.146.55.26:54817] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/sitemaps/providers/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 07 05:34:23.167805 2025] [autoindex:error] [pid 34109:tid 34150] [client 45.146.55.26:54817] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/js/tinymce/plugins/fullscreen/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 07 05:34:39.754688 2025] [autoindex:error] [pid 34109:tid 34142] [client 45.146.55.26:54817] AH01276: Cannot serve directory /home/baldivis/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 07 05:34:45.933432 2025] [autoindex:error] [pid 34109:tid 34156] [client 45.146.55.26:54817] AH01276: Cannot serve directory /home/baldivis/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 07 05:34:46.358629 2025] [autoindex:error] [pid 34109:tid 34163] [client 45.146.55.26:54817] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 07 05:34:46.794628 2025] [autoindex:error] [pid 34109:tid 34153] [client 45.146.55.26:54817] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/SimplePie/XML/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 07 05:34:51.573144 2025] [autoindex:error] [pid 34109:tid 34158] [client 45.146.55.26:54817] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 07 05:34:51.996466 2025] [autoindex:error] [pid 34109:tid 34148] [client 45.146.55.26:54817] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 07 05:34:52.865296 2025] [autoindex:error] [pid 7089:tid 7104] [client 45.146.55.29:42479] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 07 05:34:53.296721 2025] [autoindex:error] [pid 7089:tid 7114] [client 45.146.55.29:42479] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/Text/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 07 05:34:53.732083 2025] [autoindex:error] [pid 7089:tid 7093] [client 45.146.55.29:42479] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/Text/Diff/Renderer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 07 05:34:54.159841 2025] [autoindex:error] [pid 7089:tid 7102] [client 45.146.55.29:42479] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/customize/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 07 05:34:54.591174 2025] [autoindex:error] [pid 7089:tid 7113] [client 45.146.55.29:42479] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 07 05:34:55.019073 2025] [autoindex:error] [pid 7089:tid 7103] [client 45.146.55.29:42479] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/pomo/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 07 05:34:55.445274 2025] [autoindex:error] [pid 7089:tid 7112] [client 45.146.55.29:42479] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 07 05:35:23.643832 2025] [autoindex:error] [pid 7089:tid 7099] [client 45.146.55.29:42479] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/js/jcrop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 07 05:35:27.141767 2025] [autoindex:error] [pid 7089:tid 7106] [client 45.146.55.29:42479] AH01276: Cannot serve directory /home/baldivis/public_html/wp-content/maintenance/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 07 05:35:40.844651 2025] [autoindex:error] [pid 7089:tid 7113] [client 45.146.55.29:42479] AH01276: Cannot serve directory /home/baldivis/public_html/.tmb/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 07 05:51:11.989486 2025] [:error] [pid 34195:tid 34203] [client 136.144.43.235:41341] [client 136.144.43.235] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.43.235, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTSlTxrSxOOdwv3vX3xzhAAAAMU"]
[Sun Dec 07 05:51:20.783158 2025] [:error] [pid 7273:tid 7298] [client 136.144.43.232:46055] [client 136.144.43.232] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.43.232, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTSlWPpR7YTD7JcHjhG7eAAAAVc"]
[Sun Dec 07 06:57:17.002725 2025] [:error] [pid 7089:tid 7097] [client 66.249.64.101:46879] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTS0zYJPZ-pZM-y51NEXrgAAAQY"]
[Sun Dec 07 06:57:22.509948 2025] [:error] [pid 13234:tid 13263] [client 66.249.64.101:57647] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTS00u6_dquQqQ60IZ_TKgAAAZY"]
[Sun Dec 07 06:57:28.436223 2025] [:error] [pid 34108:tid 34119] [client 66.249.64.101:55062] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTS02KLvdvAppF-gXotY9gAAAAY"]
[Sun Dec 07 06:57:33.248618 2025] [:error] [pid 7089:tid 7107] [client 66.249.64.101:38868] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTS03YJPZ-pZM-y51NEXvAAAARA"]
[Sun Dec 07 06:57:38.081011 2025] [:error] [pid 34110:tid 34188] [client 66.249.64.101:50517] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTS04gndtmtsHiXHBO3ApAAAAJU"]
[Sun Dec 07 06:57:42.791429 2025] [:error] [pid 7273:tid 7294] [client 66.249.64.101:49414] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTS05vpR7YTD7JcHjhHZNQAAAVM"]
[Sun Dec 07 06:57:47.494703 2025] [:error] [pid 34108:tid 34125] [client 66.249.64.101:63074] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTS066LvdvAppF-gXotZPQAAAAw"]
[Sun Dec 07 06:57:52.461516 2025] [:error] [pid 34110:tid 34182] [client 66.249.64.101:45877] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTS08AndtmtsHiXHBO3ArwAAAI8"]
[Sun Dec 07 06:58:03.076738 2025] [:error] [pid 7273:tid 7282] [client 66.249.64.101:37808] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTS0-_pR7YTD7JcHjhHZawAAAUc"]
[Sun Dec 07 07:03:35.326942 2025] [:error] [pid 7089:tid 7102] [client 66.249.64.101:44221] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTS2R4JPZ-pZM-y51NEYhAAAAQs"]
[Sun Dec 07 07:03:41.183778 2025] [:error] [pid 7089:tid 7111] [client 66.249.64.101:57974] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTS2TYJPZ-pZM-y51NEYhgAAARQ"]
[Sun Dec 07 07:03:45.889664 2025] [:error] [pid 13234:tid 13256] [client 66.249.64.101:49292] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTS2Ue6_dquQqQ60IZ_USQAAAY8"]
[Sun Dec 07 07:03:48.379156 2025] [:error] [pid 7089:tid 7095] [client 66.249.64.101:45058] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTS2VIJPZ-pZM-y51NEYiQAAAQQ"]
[Sun Dec 07 07:03:52.652541 2025] [:error] [pid 13234:tid 13260] [client 66.249.64.101:48573] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTS2WO6_dquQqQ60IZ_USwAAAZM"]
[Sun Dec 07 07:04:00.338831 2025] [:error] [pid 34195:tid 34210] [client 66.249.64.101:35018] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTS2YBrSxOOdwv3vX3yD1wAAAMw"]
[Sun Dec 07 07:04:00.515441 2025] [:error] [pid 34195:tid 34218] [client 66.249.64.101:45911] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTS2YBrSxOOdwv3vX3yD2QAAANQ"]
[Sun Dec 07 07:04:05.316888 2025] [:error] [pid 34110:tid 34174] [client 66.249.64.101:59704] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTS2ZQndtmtsHiXHBO3BXQAAAIc"]
[Sun Dec 07 07:04:10.036337 2025] [:error] [pid 7273:tid 7285] [client 66.249.64.101:55521] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTS2avpR7YTD7JcHjhHaqQAAAUo"]
[Sun Dec 07 07:04:14.750847 2025] [:error] [pid 7089:tid 7095] [client 66.249.64.101:36462] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTS2boJPZ-pZM-y51NEYlAAAAQQ"]
[Sun Dec 07 07:04:19.468298 2025] [:error] [pid 7273:tid 7290] [client 66.249.64.101:48372] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTS2c_pR7YTD7JcHjhHarQAAAU8"]
[Sun Dec 07 07:04:19.578789 2025] [:error] [pid 7273:tid 7286] [client 66.249.64.101:34966] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTS2c_pR7YTD7JcHjhHargAAAUs"]
[Sun Dec 07 07:04:24.589845 2025] [:error] [pid 34108:tid 34116] [client 66.249.64.101:39196] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTS2eKLvdvAppF-gXotaMQAAAAM"]
[Sun Dec 07 07:04:29.299895 2025] [:error] [pid 34108:tid 34127] [client 66.249.64.101:62227] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTS2faLvdvAppF-gXotaNAAAAA4"]
[Sun Dec 07 07:05:31.333483 2025] [:error] [pid 34108:tid 34126] [client 66.249.64.101:58775] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTS2u6LvdvAppF-gXotaVgAAAA0"]
[Sun Dec 07 07:05:42.576208 2025] [:error] [pid 7273:tid 7292] [client 66.249.64.101:50930] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTS2xvpR7YTD7JcHjhHbIgAAAVE"]
[Sun Dec 07 07:05:46.966889 2025] [:error] [pid 34110:tid 34191] [client 66.249.64.101:63361] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTS2ygndtmtsHiXHBO3BmwAAAJg"]
[Sun Dec 07 07:05:55.313304 2025] [:error] [pid 34109:tid 34140] [client 66.249.64.101:38322] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTS204jE_vucgM_xD4Qh2wAAAEA"]
[Sun Dec 07 07:06:00.033204 2025] [:error] [pid 7273:tid 7293] [client 66.249.64.101:56400] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTS22PpR7YTD7JcHjhHbLQAAAVI"]
[Sun Dec 07 07:06:04.776806 2025] [:error] [pid 34195:tid 34208] [client 66.249.64.101:59762] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTS23BrSxOOdwv3vX3yECwAAAMo"]
[Sun Dec 07 07:06:05.794308 2025] [:error] [pid 13234:tid 13258] [client 66.249.64.101:47388] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTS23e6_dquQqQ60IZ_UfgAAAZE"]
[Sun Dec 07 07:07:45.524754 2025] [:error] [pid 13234:tid 13241] [client 66.249.64.101:43120] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTS3Qe6_dquQqQ60IZ_UxAAAAYE"]
[Sun Dec 07 07:08:16.081613 2025] [:error] [pid 7273:tid 7294] [client 66.249.64.101:57552] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTS3YPpR7YTD7JcHjhHb2gAAAVM"]
[Sun Dec 07 07:08:21.421978 2025] [:error] [pid 7089:tid 7114] [client 66.249.64.101:36814] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTS3ZYJPZ-pZM-y51NEZMAAAARc"]
[Sun Dec 07 07:14:39.082490 2025] [:error] [pid 34109:tid 34153] [client 43.166.136.24:51804] [client 43.166.136.24] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||paramountbaldivis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTS434jE_vucgM_xD4Qi2AAAAE0"]
[Sun Dec 07 07:21:43.561218 2025] [:error] [pid 34108:tid 34128] [client 167.86.80.181:44684] [client 167.86.80.181] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 167.86.80.181, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTS6h6LvdvAppF-gXotcMAAAAA8"]
[Sun Dec 07 07:25:57.619996 2025] [:error] [pid 34110:tid 34173] [client 66.249.64.101:65304] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTS7hQndtmtsHiXHBO3EeAAAAIY"]
[Sun Dec 07 07:26:07.259636 2025] [:error] [pid 34109:tid 34160] [client 66.249.64.101:35352] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTS7j4jE_vucgM_xD4Qj-gAAAFQ"]
[Sun Dec 07 07:26:34.601188 2025] [:error] [pid 7273:tid 7280] [client 66.249.64.101:44515] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTS7qvpR7YTD7JcHjhHgbwAAAUU"]
[Sun Dec 07 07:26:39.051545 2025] [:error] [pid 34109:tid 34143] [client 66.249.64.101:62139] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTS7r4jE_vucgM_xD4QkFQAAAEM"]
[Sun Dec 07 07:26:44.684425 2025] [:error] [pid 34108:tid 34137] [client 66.249.64.101:53724] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTS7tKLvdvAppF-gXotcyQAAABg"]
[Sun Dec 07 07:28:07.210041 2025] [:error] [pid 34108:tid 34115] [client 104.28.201.38:24716] [client 104.28.201.38] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||paramountbaldivis.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "paramountbaldivis.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aTS8B6LvdvAppF-gXotc9AAAAAI"]
[Sun Dec 07 07:29:29.486439 2025] [:error] [pid 7273:tid 7285] [client 104.28.201.38:25011] [client 104.28.201.38] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.28.201.38, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aTS8WfpR7YTD7JcHjhHhXAAAAUo"]
[Sun Dec 07 07:30:35.337873 2025] [:error] [pid 7089:tid 7107] [client 104.28.201.38:25072] [client 104.28.201.38] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.28.201.38, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aTS8m4JPZ-pZM-y51NEcOgAAARA"]
[Sun Dec 07 07:30:54.187084 2025] [:error] [pid 7273:tid 7275] [client 66.249.64.101:52890] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTS8rvpR7YTD7JcHjhHh6wAAAUA"]
[Sun Dec 07 07:31:41.736408 2025] [:error] [pid 7273:tid 7279] [client 104.28.201.38:24716] [client 104.28.201.38] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.28.201.38, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aTS83fpR7YTD7JcHjhHiEQAAAUQ"]
[Sun Dec 07 07:36:55.221862 2025] [:error] [pid 7273:tid 7285] [client 66.249.64.101:46914] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTS-F_pR7YTD7JcHjhHjTAAAAUo"]
[Sun Dec 07 07:37:05.894189 2025] [:error] [pid 34109:tid 34157] [client 66.249.64.101:47538] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTS-IYjE_vucgM_xD4QlcgAAAFE"]
[Sun Dec 07 07:37:10.832351 2025] [:error] [pid 7089:tid 7103] [client 66.249.64.101:65434] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTS-JoJPZ-pZM-y51NEc9QAAAQw"]
[Sun Dec 07 07:37:15.792719 2025] [:error] [pid 13234:tid 13255] [client 66.249.64.101:63358] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTS-K-6_dquQqQ60IZ_ZyAAAAY4"]
[Sun Dec 07 07:37:20.769941 2025] [:error] [pid 34109:tid 34164] [client 66.249.64.101:45544] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTS-MIjE_vucgM_xD4QlegAAAFg"]
[Sun Dec 07 07:37:25.734686 2025] [:error] [pid 7089:tid 7110] [client 66.249.64.101:54385] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTS-NYJPZ-pZM-y51NEc-AAAARM"]
[Sun Dec 07 07:37:30.703427 2025] [:error] [pid 34110:tid 34191] [client 66.249.64.101:64436] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTS-OgndtmtsHiXHBO3GYQAAAJg"]
[Sun Dec 07 07:37:35.682729 2025] [:error] [pid 7089:tid 7114] [client 66.249.64.101:50123] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTS-P4JPZ-pZM-y51NEc_QAAARc"]
[Sun Dec 07 07:37:40.644522 2025] [:error] [pid 13234:tid 13247] [client 66.249.64.101:50454] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTS-RO6_dquQqQ60IZ_Z1gAAAYY"]
[Sun Dec 07 07:37:45.615843 2025] [:error] [pid 34110:tid 34191] [client 66.249.64.101:37684] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTS-SQndtmtsHiXHBO3GawAAAJg"]
[Sun Dec 07 07:38:44.533983 2025] [:error] [pid 7089:tid 7110] [client 66.249.64.101:63293] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTS-hIJPZ-pZM-y51NEdHQAAARM"]
[Sun Dec 07 07:38:50.248196 2025] [:error] [pid 7273:tid 7276] [client 66.249.64.101:38537] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTS-ivpR7YTD7JcHjhHjmwAAAUE"]
[Sun Dec 07 07:38:55.096350 2025] [:error] [pid 13234:tid 13245] [client 66.249.64.101:50060] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTS-j-6_dquQqQ60IZ_aAQAAAYQ"]
[Sun Dec 07 07:39:00.162234 2025] [:error] [pid 34108:tid 34118] [client 66.249.64.101:62353] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTS-lKLvdvAppF-gXote_wAAAAU"]
[Sun Dec 07 07:39:05.138928 2025] [:error] [pid 7273:tid 7293] [client 66.249.64.101:55224] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTS-mfpR7YTD7JcHjhHjpAAAAVI"]
[Sun Dec 07 07:39:13.433206 2025] [:error] [pid 7089:tid 7102] [client 66.249.64.101:63295] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTS-oYJPZ-pZM-y51NEdJgAAAQs"]
[Sun Dec 07 07:39:18.115643 2025] [:error] [pid 7089:tid 7110] [client 66.249.64.101:39134] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTS-poJPZ-pZM-y51NEdKAAAARM"]
[Sun Dec 07 07:39:22.850255 2025] [:error] [pid 34109:tid 34147] [client 66.249.64.101:46565] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTS-qojE_vucgM_xD4QlugAAAEc"]
[Sun Dec 07 07:39:27.689780 2025] [:error] [pid 7089:tid 7098] [client 66.249.64.101:38424] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTS-r4JPZ-pZM-y51NEdQQAAAQc"]
[Sun Dec 07 07:39:29.956253 2025] [:error] [pid 34195:tid 34208] [client 66.249.64.101:60464] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTS-sRrSxOOdwv3vX3yIFAAAAMo"]
[Sun Dec 07 07:39:34.959027 2025] [:error] [pid 34110:tid 34173] [client 66.249.64.101:46661] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTS-tgndtmtsHiXHBO3GlQAAAIY"]
[Sun Dec 07 07:41:03.700027 2025] [:error] [pid 34109:tid 34142] [client 66.249.64.101:49268] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTS_D4jE_vucgM_xD4Ql9AAAAEI"]
[Sun Dec 07 07:41:14.365461 2025] [:error] [pid 7089:tid 7108] [client 66.249.64.101:45744] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTS_GoJPZ-pZM-y51NEdWQAAARE"]
[Sun Dec 07 07:41:19.328699 2025] [:error] [pid 7273:tid 7277] [client 66.249.64.101:35138] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTS_H_pR7YTD7JcHjhHkHgAAAUI"]
[Sun Dec 07 07:41:22.927541 2025] [:error] [pid 7273:tid 7290] [client 66.249.64.101:63733] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTS_IvpR7YTD7JcHjhHkHwAAAU8"]
[Sun Dec 07 07:41:26.510342 2025] [:error] [pid 34109:tid 34149] [client 66.249.64.101:53387] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTS_JojE_vucgM_xD4Ql-wAAAEk"]
[Sun Dec 07 07:41:30.155712 2025] [:error] [pid 34195:tid 34206] [client 66.249.64.101:63547] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTS_KhrSxOOdwv3vX3yINQAAAMg"]
[Sun Dec 07 07:41:33.695732 2025] [:error] [pid 7273:tid 7296] [client 66.249.64.101:60452] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTS_LfpR7YTD7JcHjhHkOQAAAVU"]
[Sun Dec 07 07:41:37.274288 2025] [:error] [pid 7273:tid 7294] [client 66.249.64.101:58207] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTS_MfpR7YTD7JcHjhHkRQAAAVM"]
[Sun Dec 07 07:41:40.875857 2025] [:error] [pid 34108:tid 34127] [client 66.249.64.101:58736] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTS_NKLvdvAppF-gXotfngAAAA4"]
[Sun Dec 07 07:41:44.478464 2025] [:error] [pid 7089:tid 7095] [client 66.249.64.101:57330] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTS_OIJPZ-pZM-y51NEdZwAAAQQ"]
[Sun Dec 07 07:41:48.054825 2025] [:error] [pid 34110:tid 34180] [client 66.249.64.101:39190] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTS_PAndtmtsHiXHBO3GwwAAAI0"]
[Sun Dec 07 07:41:51.628574 2025] [:error] [pid 34195:tid 34218] [client 66.249.64.101:49131] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTS_PxrSxOOdwv3vX3yIOgAAANQ"]
[Sun Dec 07 07:42:38.636365 2025] [:error] [pid 34108:tid 34119] [client 66.249.64.101:39114] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTS_bqLvdvAppF-gXotfxQAAAAY"]
[Sun Dec 07 07:42:41.912002 2025] [:error] [pid 34109:tid 34152] [client 66.249.64.101:56603] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTS_cYjE_vucgM_xD4QmWgAAAEw"]
[Sun Dec 07 07:42:45.493841 2025] [:error] [pid 34108:tid 34131] [client 66.249.64.101:52049] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTS_daLvdvAppF-gXotf0AAAABI"]
[Sun Dec 07 08:27:39.483879 2025] [:error] [pid 7273:tid 7275] [client 5.75.132.157:55098] [client 5.75.132.157] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.75.132.157, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTTJ-_pR7YTD7JcHjhH0ugAAAUA"]
[Sun Dec 07 08:28:53.050072 2025] [:error] [pid 34109:tid 34152] [client 66.249.64.101:44277] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTKRYjE_vucgM_xD4QuKgAAAEw"]
[Sun Dec 07 08:28:57.512011 2025] [:error] [pid 34110:tid 34177] [client 66.249.64.101:56786] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTKSQndtmtsHiXHBO3PsQAAAIo"]
[Sun Dec 07 08:29:01.019721 2025] [:error] [pid 34195:tid 34208] [client 66.249.64.101:46727] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTKTRrSxOOdwv3vX3yQBAAAAMo"]
[Sun Dec 07 08:29:04.692749 2025] [:error] [pid 34195:tid 34199] [client 66.249.64.101:62619] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTKUBrSxOOdwv3vX3yQBQAAAME"]
[Sun Dec 07 08:29:08.278045 2025] [:error] [pid 7089:tid 7094] [client 66.249.64.101:50813] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTKVIJPZ-pZM-y51NEmqQAAAQM"]
[Sun Dec 07 08:29:11.722582 2025] [:error] [pid 34195:tid 34219] [client 66.249.64.101:37031] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTKVxrSxOOdwv3vX3yQDgAAANU"]
[Sun Dec 07 08:29:15.459036 2025] [:error] [pid 34195:tid 34215] [client 66.249.64.101:39795] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTKWxrSxOOdwv3vX3yQEQAAANE"]
[Sun Dec 07 08:29:19.035350 2025] [:error] [pid 34108:tid 34115] [client 66.249.64.101:53026] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTKX6LvdvAppF-gXotqPQAAAAI"]
[Sun Dec 07 08:29:23.141411 2025] [:error] [pid 34109:tid 34147] [client 66.249.64.101:52034] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTKY4jE_vucgM_xD4QuOQAAAEc"]
[Sun Dec 07 08:29:27.247116 2025] [:error] [pid 34108:tid 34124] [client 66.249.64.101:58677] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTKZ6LvdvAppF-gXotqRwAAAAs"]
[Sun Dec 07 08:29:31.367998 2025] [:error] [pid 7273:tid 7296] [client 66.249.64.101:51946] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTKa_pR7YTD7JcHjhH1UQAAAVU"]
[Sun Dec 07 08:29:35.341878 2025] [:error] [pid 34109:tid 34153] [client 66.249.64.101:44628] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTKb4jE_vucgM_xD4QuQgAAAE0"]
[Sun Dec 07 08:29:39.338089 2025] [:error] [pid 7273:tid 7297] [client 66.249.64.101:57505] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTKc_pR7YTD7JcHjhH1YwAAAVY"]
[Sun Dec 07 08:29:47.186097 2025] [:error] [pid 34195:tid 34204] [client 66.249.64.101:64421] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTKexrSxOOdwv3vX3yQGAAAAMY"]
[Sun Dec 07 08:30:37.218794 2025] [:error] [pid 7089:tid 7097] [client 66.249.64.101:62755] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTKrYJPZ-pZM-y51NEmzQAAAQY"]
[Sun Dec 07 08:30:41.515762 2025] [:error] [pid 34108:tid 34135] [client 66.249.64.101:46611] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTKsaLvdvAppF-gXotqdQAAABY"]
[Sun Dec 07 08:30:45.222708 2025] [:error] [pid 7089:tid 7115] [client 66.249.64.101:61316] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTKtYJPZ-pZM-y51NEm1AAAARg"]
[Sun Dec 07 08:30:51.305875 2025] [:error] [pid 7089:tid 7093] [client 66.249.64.101:51636] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTKu4JPZ-pZM-y51NEm2gAAAQI"]
[Sun Dec 07 08:30:55.280609 2025] [:error] [pid 34109:tid 34159] [client 66.249.64.101:48768] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTKv4jE_vucgM_xD4QubQAAAFM"]
[Sun Dec 07 08:30:59.394097 2025] [:error] [pid 7089:tid 7111] [client 66.249.64.101:42216] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTKw4JPZ-pZM-y51NEm3QAAARQ"]
[Sun Dec 07 08:31:03.377130 2025] [:error] [pid 13234:tid 13263] [client 66.249.64.101:60236] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTKx-6_dquQqQ60IZ_mgwAAAZY"]
[Sun Dec 07 08:31:05.579230 2025] [:error] [pid 34195:tid 34218] [client 66.249.64.101:57581] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTKyRrSxOOdwv3vX3yQMQAAANQ"]
[Sun Dec 07 08:31:09.555326 2025] [:error] [pid 13234:tid 13249] [client 66.249.64.101:41152] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTKze6_dquQqQ60IZ_mhgAAAYg"]
[Sun Dec 07 08:31:13.534630 2025] [:error] [pid 34109:tid 34157] [client 66.249.64.101:43871] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTK0YjE_vucgM_xD4QucwAAAFE"]
[Sun Dec 07 08:31:17.501670 2025] [:error] [pid 34109:tid 34145] [client 66.249.64.101:36779] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTK1YjE_vucgM_xD4QudgAAAEU"]
[Sun Dec 07 08:31:21.599533 2025] [:error] [pid 34109:tid 34141] [client 66.249.64.101:38004] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTK2YjE_vucgM_xD4QudwAAAEE"]
[Sun Dec 07 08:31:23.973534 2025] [:error] [pid 34109:tid 34156] [client 66.249.64.101:45302] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTK24jE_vucgM_xD4QueQAAAFA"]
[Sun Dec 07 08:31:26.164179 2025] [:error] [pid 13234:tid 13250] [client 66.249.64.101:57179] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTK3u6_dquQqQ60IZ_mjQAAAYk"]
[Sun Dec 07 08:31:30.291202 2025] [:error] [pid 7089:tid 7094] [client 66.249.64.101:38219] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTK4oJPZ-pZM-y51NEm6AAAAQM"]
[Sun Dec 07 08:31:31.948003 2025] [:error] [pid 7273:tid 7290] [client 66.249.64.101:52268] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTK4_pR7YTD7JcHjhH10QAAAU8"]
[Sun Dec 07 08:32:14.158705 2025] [:error] [pid 34108:tid 34131] [client 66.249.64.101:38530] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTLDqLvdvAppF-gXotqtwAAABI"]
[Sun Dec 07 08:32:18.436626 2025] [:error] [pid 7089:tid 7109] [client 66.249.64.101:56059] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTLEoJPZ-pZM-y51NEnAQAAARI"]
[Sun Dec 07 08:32:22.151839 2025] [:error] [pid 34110:tid 34172] [client 66.249.64.101:64284] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTLFgndtmtsHiXHBO3QJgAAAIU"]
[Sun Dec 07 08:32:25.615870 2025] [:error] [pid 34110:tid 34174] [client 66.249.64.101:53577] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTLGQndtmtsHiXHBO3QKAAAAIc"]
[Sun Dec 07 08:32:32.793618 2025] [:error] [pid 13234:tid 13262] [client 66.249.64.101:36758] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTLIO6_dquQqQ60IZ_mqAAAAZU"]
[Sun Dec 07 08:32:37.297092 2025] [:error] [pid 34109:tid 34152] [client 66.249.64.101:49581] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTLJYjE_vucgM_xD4QumQAAAEw"]
[Sun Dec 07 08:32:41.273838 2025] [:error] [pid 34108:tid 34121] [client 66.249.64.101:61213] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTLKaLvdvAppF-gXotqwQAAAAg"]
[Sun Dec 07 08:32:45.504736 2025] [:error] [pid 7273:tid 7295] [client 66.249.64.101:49181] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTLLfpR7YTD7JcHjhH2NQAAAVQ"]
[Sun Dec 07 08:32:47.171428 2025] [:error] [pid 34195:tid 34216] [client 66.249.64.101:43982] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTLLxrSxOOdwv3vX3yQZQAAANI"]
[Sun Dec 07 08:32:50.972765 2025] [:error] [pid 34195:tid 34210] [client 66.249.64.101:39068] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTLMhrSxOOdwv3vX3yQZwAAAMw"]
[Sun Dec 07 08:33:59.102169 2025] [:error] [pid 34195:tid 34205] [client 66.249.64.101:56200] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTLdxrSxOOdwv3vX3yQkQAAAMc"]
[Sun Dec 07 08:34:09.886374 2025] [:error] [pid 7089:tid 7094] [client 66.249.64.101:50433] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTLgYJPZ-pZM-y51NEnTQAAAQM"]
[Sun Dec 07 08:34:31.577620 2025] [:error] [pid 7273:tid 7291] [client 66.249.64.101:54607] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTLl_pR7YTD7JcHjhH20gAAAVA"]
[Sun Dec 07 08:34:34.851042 2025] [:error] [pid 7273:tid 7290] [client 66.249.64.101:51305] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTLmvpR7YTD7JcHjhH21gAAAU8"]
[Sun Dec 07 08:34:39.776065 2025] [:error] [pid 7273:tid 7291] [client 66.249.64.101:49366] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTLn_pR7YTD7JcHjhH24wAAAVA"]
[Sun Dec 07 08:34:45.804819 2025] [:error] [pid 13234:tid 13250] [client 66.249.64.101:44630] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTLpe6_dquQqQ60IZ_nLwAAAYk"]
[Sun Dec 07 08:35:56.050425 2025] [:error] [pid 34110:tid 34171] [client 66.249.64.101:36856] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTL7AndtmtsHiXHBO3QhAAAAIQ"]
[Sun Dec 07 08:36:02.193830 2025] [:error] [pid 13234:tid 13252] [client 66.249.64.101:44698] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTL8u6_dquQqQ60IZ_nXAAAAYs"]
[Sun Dec 07 09:13:40.943034 2025] [:error] [pid 34110:tid 34169] [client 66.249.64.101:35449] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTUxAndtmtsHiXHBO3VvQAAAII"]
[Sun Dec 07 09:13:53.505923 2025] [:error] [pid 7273:tid 7287] [client 66.249.64.101:45029] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTU0fpR7YTD7JcHjhH_PwAAAUw"]
[Sun Dec 07 09:14:18.685835 2025] [:error] [pid 34108:tid 34119] [client 66.249.64.101:45499] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTU6qLvdvAppF-gXotySQAAAAY"]
[Sun Dec 07 09:17:35.161476 2025] [:error] [pid 13234:tid 13250] [client 45.157.54.21:62532] [client 45.157.54.21] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.157.54.21, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aTTVr-6_dquQqQ60IZ_vTwAAAYk"]
[Sun Dec 07 09:17:35.194936 2025] [:error] [pid 7273:tid 7283] [client 45.157.54.21:62531] [client 45.157.54.21] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.157.54.21, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aTTVr_pR7YTD7JcHjhEAUQAAAUg"]
[Sun Dec 07 09:18:27.647636 2025] [proxy_fcgi:error] [pid 25298:tid 25323] [client 66.249.64.102:53372] AH01067: Failed to read FastCGI header
[Sun Dec 07 09:18:27.647679 2025] [proxy_fcgi:error] [pid 25298:tid 25323] (104)Connection reset by peer: [client 66.249.64.102:53372] AH01075: Error dispatching request to :
[Sun Dec 07 09:18:27.649113 2025] [proxy_fcgi:error] [pid 25298:tid 25322] [client 66.249.64.102:62264] AH01067: Failed to read FastCGI header
[Sun Dec 07 09:18:27.649159 2025] [proxy_fcgi:error] [pid 25298:tid 25322] (104)Connection reset by peer: [client 66.249.64.102:62264] AH01075: Error dispatching request to :
[Sun Dec 07 09:20:48.855510 2025] [:error] [pid 25600:tid 25626] [client 66.249.64.101:39552] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTWcIX3SVrXRURpt5L0oAAAAFM"]
[Sun Dec 07 09:21:26.489826 2025] [:error] [pid 25602:tid 25683] [client 66.249.64.101:53331] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTWlhMayYLriq9gRdeE_wAAANU"]
[Sun Dec 07 09:24:23.164029 2025] [:error] [pid 25694:tid 25711] [client 66.249.64.101:39623] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTXR0f7996cewJ5N2-05gAAAQ8"]
[Sun Dec 07 09:24:35.426083 2025] [:error] [pid 25602:tid 25669] [client 66.249.64.101:35349] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTXUxMayYLriq9gRdeGnAAAAMc"]
[Sun Dec 07 09:24:37.094403 2025] [:error] [pid 25601:tid 25655] [client 66.249.64.101:36329] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTXVatsSIqGPs4YVxHvkgAAAJQ"]
[Sun Dec 07 09:24:51.842575 2025] [:error] [pid 25694:tid 25703] [client 66.249.64.101:40198] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTXY0f7996cewJ5N2-0_gAAAQc"]
[Sun Dec 07 09:25:00.450775 2025] [:error] [pid 25601:tid 25639] [client 66.249.64.101:41462] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTXbKtsSIqGPs4YVxHvngAAAIQ"]
[Sun Dec 07 09:28:22.585931 2025] [:error] [pid 25602:tid 25667] [client 66.249.64.101:58505] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTYNhMayYLriq9gRdeHvAAAAMU"]
[Sun Dec 07 09:28:33.264100 2025] [:error] [pid 25601:tid 25648] [client 5.252.55.178:58240] [client 5.252.55.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTYQatsSIqGPs4YVxHw1AAAAI0"]
[Sun Dec 07 09:28:34.342729 2025] [:error] [pid 25601:tid 25647] [client 5.252.55.178:52428] [client 5.252.55.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTYQqtsSIqGPs4YVxHxAQAAAIw"]
[Sun Dec 07 09:28:34.564749 2025] [:error] [pid 25600:tid 25615] [client 66.249.64.101:59687] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTYQoX3SVrXRURpt5L3NAAAAEg"]
[Sun Dec 07 09:28:35.634181 2025] [:error] [pid 25694:tid 25701] [client 5.252.55.178:52428] [client 5.252.55.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTYQ0f7996cewJ5N2-3DgAAAQU"]
[Sun Dec 07 09:28:36.850786 2025] [:error] [pid 25602:tid 25683] [client 5.252.55.178:52429] [client 5.252.55.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTYRBMayYLriq9gRdeIAAAAANU"]
[Sun Dec 07 09:28:38.021337 2025] [:error] [pid 25602:tid 25668] [client 5.252.55.178:49349] [client 5.252.55.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTYRhMayYLriq9gRdeIIQAAAMY"]
[Sun Dec 07 09:28:44.054304 2025] [:error] [pid 25601:tid 25644] [client 66.249.64.101:38546] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTYTKtsSIqGPs4YVxHxsgAAAIk"]
[Sun Dec 07 09:28:47.005108 2025] [:error] [pid 25694:tid 25713] [client 66.249.64.101:41367] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTYT0f7996cewJ5N2-3iQAAARE"]
[Sun Dec 07 09:28:59.739742 2025] [:error] [pid 25602:tid 25674] [client 66.249.64.101:62953] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTYWxMayYLriq9gRdeITQAAAMw"]
[Sun Dec 07 09:30:15.537082 2025] [:error] [pid 25694:tid 25707] [client 51.112.63.142:7589] [client 51.112.63.142] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 51.112.63.142, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTTYp0f7996cewJ5N2-4AwAAAQs"]
[Sun Dec 07 09:31:43.231778 2025] [:error] [pid 25602:tid 25685] [client 66.249.64.101:57147] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTY_xMayYLriq9gRdeJDgAAANc"]
[Sun Dec 07 09:31:55.814051 2025] [:error] [pid 25602:tid 25684] [client 66.249.64.101:43778] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTZCxMayYLriq9gRdeJHAAAANY"]
[Sun Dec 07 09:32:08.861024 2025] [:error] [pid 25600:tid 25616] [client 66.249.64.101:53899] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTZGIX3SVrXRURpt5L4ywAAAEk"]
[Sun Dec 07 09:32:20.985177 2025] [:error] [pid 25694:tid 25705] [client 66.249.64.101:48959] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTZJEf7996cewJ5N2-4sgAAAQk"]
[Sun Dec 07 09:34:52.680306 2025] [:error] [pid 25600:tid 25622] [client 66.249.64.101:46651] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTZvIX3SVrXRURpt5L5wQAAAE8"]
[Sun Dec 07 09:35:30.325003 2025] [:error] [pid 25601:tid 25656] [client 66.249.64.101:54747] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTZ4qtsSIqGPs4YVxHzIwAAAJU"]
[Sun Dec 07 09:39:03.048816 2025] [:error] [pid 25601:tid 25651] [client 66.249.64.101:52684] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTat6tsSIqGPs4YVxHzzQAAAJA"]
[Sun Dec 07 09:39:33.729954 2025] [:error] [pid 25601:tid 25636] [client 66.249.64.101:56368] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTa1atsSIqGPs4YVxHz4QAAAIE"]
[Sun Dec 07 09:39:41.537378 2025] [:error] [pid 25600:tid 25613] [client 66.249.64.101:63023] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTa3YX3SVrXRURpt5L6bQAAAEY"]
[Sun Dec 07 09:39:54.093794 2025] [:error] [pid 25694:tid 25719] [client 66.249.64.101:57445] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTa6kf7996cewJ5N2-7lQAAARc"]
[Sun Dec 07 09:43:40.642464 2025] [:error] [pid 25600:tid 25624] [client 66.249.64.101:55267] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTbzIX3SVrXRURpt5L7dwAAAFE"]
[Sun Dec 07 09:43:44.057203 2025] [:error] [pid 25601:tid 25641] [client 66.249.64.101:45188] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTb0KtsSIqGPs4YVxH03AAAAIY"]
[Sun Dec 07 09:43:53.244641 2025] [:error] [pid 25602:tid 25679] [client 66.249.64.101:35599] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTb2RMayYLriq9gRdeNIQAAANE"]
[Sun Dec 07 09:49:05.766173 2025] [:error] [pid 25600:tid 25607] [client 66.249.64.101:64880] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTdEYX3SVrXRURpt5L8QwAAAEA"]
[Sun Dec 07 09:49:07.236877 2025] [:error] [pid 25694:tid 25701] [client 66.249.64.101:60088] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTdE0f7996cewJ5N2-_wgAAAQU"]
[Sun Dec 07 09:49:09.918990 2025] [:error] [pid 25601:tid 25638] [client 66.249.64.101:50884] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTdFatsSIqGPs4YVxH2LQAAAIM"]
[Sun Dec 07 09:49:12.848795 2025] [:error] [pid 25694:tid 25708] [client 66.249.64.101:39545] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTdGEf7996cewJ5N2-_zQAAAQw"]
[Sun Dec 07 09:49:15.924362 2025] [:error] [pid 25600:tid 25609] [client 66.249.64.101:61439] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTdG4X3SVrXRURpt5L8SwAAAEI"]
[Sun Dec 07 09:49:18.721183 2025] [:error] [pid 25694:tid 25697] [client 66.249.64.101:36800] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTdHkf7996cewJ5N2-_1gAAAQE"]
[Sun Dec 07 09:49:21.803935 2025] [:error] [pid 25600:tid 25613] [client 66.249.64.101:36378] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTdIYX3SVrXRURpt5L8UQAAAEY"]
[Sun Dec 07 09:49:24.631940 2025] [:error] [pid 25694:tid 25708] [client 66.249.64.101:44472] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTdJEf7996cewJ5N2-_5QAAAQw"]
[Sun Dec 07 09:49:27.561101 2025] [:error] [pid 25694:tid 25708] [client 66.249.64.101:38995] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTdJ0f7996cewJ5N2-_7AAAAQw"]
[Sun Dec 07 09:49:30.466020 2025] [:error] [pid 25602:tid 25669] [client 66.249.64.101:38089] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTdKhMayYLriq9gRdeOagAAAMc"]
[Sun Dec 07 09:49:33.438282 2025] [:error] [pid 25694:tid 25714] [client 66.249.64.101:53748] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTdLUf7996cewJ5N2-_8QAAARI"]
[Sun Dec 07 09:49:36.331680 2025] [:error] [pid 25600:tid 25630] [client 66.249.64.101:61717] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTdMIX3SVrXRURpt5L8WgAAAFc"]
[Sun Dec 07 09:49:39.282640 2025] [:error] [pid 25694:tid 25706] [client 66.249.64.101:50887] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTdM0f7996cewJ5N2-__QAAAQo"]
[Sun Dec 07 09:49:42.214019 2025] [:error] [pid 25601:tid 25636] [client 66.249.64.101:64887] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTdNqtsSIqGPs4YVxH2ZQAAAIE"]
[Sun Dec 07 09:49:45.152023 2025] [:error] [pid 25601:tid 25654] [client 66.249.64.101:51018] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTdOatsSIqGPs4YVxH2agAAAJM"]
[Sun Dec 07 09:49:48.078857 2025] [:error] [pid 25602:tid 25686] [client 66.249.64.101:36390] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTdPBMayYLriq9gRdeOggAAANg"]
[Sun Dec 07 09:49:51.012970 2025] [:error] [pid 25694:tid 25715] [client 66.249.64.101:43220] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTdP0f7996cewJ5N2_ADwAAARM"]
[Sun Dec 07 09:49:53.952466 2025] [:error] [pid 25602:tid 25673] [client 66.249.64.101:49206] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTdQRMayYLriq9gRdeOiwAAAMs"]
[Sun Dec 07 09:49:56.891164 2025] [:error] [pid 25602:tid 25671] [client 66.249.64.101:41849] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTdRBMayYLriq9gRdeOjgAAAMk"]
[Sun Dec 07 09:49:59.874346 2025] [:error] [pid 25601:tid 25653] [client 66.249.64.101:49520] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTdR6tsSIqGPs4YVxH2jQAAAJI"]
[Sun Dec 07 09:50:02.917971 2025] [:error] [pid 25694:tid 25717] [client 66.249.64.101:35574] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTdSkf7996cewJ5N2_AGAAAARU"]
[Sun Dec 07 09:50:37.298990 2025] [:error] [pid 25601:tid 25653] [client 66.249.64.101:38080] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTdbatsSIqGPs4YVxH26AAAAJI"]
[Sun Dec 07 09:50:41.062692 2025] [:error] [pid 25602:tid 25686] [client 66.249.64.101:47545] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTdcRMayYLriq9gRdePAAAAANg"]
[Sun Dec 07 09:50:43.854464 2025] [:error] [pid 25601:tid 25638] [client 66.249.64.101:38483] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTdc6tsSIqGPs4YVxH29QAAAIM"]
[Sun Dec 07 09:50:46.881082 2025] [:error] [pid 25600:tid 25619] [client 66.249.64.101:57340] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTddoX3SVrXRURpt5L8sAAAAEw"]
[Sun Dec 07 09:50:49.744106 2025] [:error] [pid 25694:tid 25697] [client 66.249.64.101:52158] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTdeUf7996cewJ5N2_AzwAAAQE"]
[Sun Dec 07 09:50:52.685950 2025] [:error] [pid 25600:tid 25621] [client 66.249.64.101:36672] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTdfIX3SVrXRURpt5L8uQAAAE4"]
[Sun Dec 07 09:50:55.616845 2025] [:error] [pid 25602:tid 25677] [client 66.249.64.101:40637] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTdfxMayYLriq9gRdePHQAAAM8"]
[Sun Dec 07 09:50:58.689798 2025] [:error] [pid 25694:tid 25719] [client 66.249.64.101:58917] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTdgkf7996cewJ5N2_A2gAAARc"]
[Sun Dec 07 09:51:01.482365 2025] [:error] [pid 25694:tid 25714] [client 66.249.64.101:56575] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTdhUf7996cewJ5N2_A4AAAARI"]
[Sun Dec 07 09:51:04.417462 2025] [:error] [pid 25602:tid 25682] [client 66.249.64.101:48855] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTdiBMayYLriq9gRdePJQAAANQ"]
[Sun Dec 07 09:51:07.470529 2025] [:error] [pid 25602:tid 25666] [client 66.249.64.101:47032] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTdixMayYLriq9gRdePKQAAAMQ"]
[Sun Dec 07 09:51:10.292219 2025] [:error] [pid 25601:tid 25644] [client 66.249.64.101:53402] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTdjqtsSIqGPs4YVxH3HQAAAIk"]
[Sun Dec 07 09:51:15.759635 2025] [:error] [pid 25694:tid 25702] [client 66.249.64.101:41486] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTdk0f7996cewJ5N2_A7AAAAQY"]
[Sun Dec 07 09:51:17.360098 2025] [:error] [pid 25600:tid 25610] [client 66.249.64.101:49459] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTdlYX3SVrXRURpt5L8ywAAAEM"]
[Sun Dec 07 09:51:19.092356 2025] [:error] [pid 25694:tid 25718] [client 66.249.64.101:54960] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTdl0f7996cewJ5N2_A8gAAARY"]
[Sun Dec 07 09:51:22.020080 2025] [:error] [pid 25694:tid 25711] [client 66.249.64.101:46815] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTdmkf7996cewJ5N2_A-wAAAQ8"]
[Sun Dec 07 09:51:24.982201 2025] [:error] [pid 25694:tid 25713] [client 66.249.64.101:36386] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTdnEf7996cewJ5N2_BAAAAARE"]
[Sun Dec 07 09:51:27.900663 2025] [:error] [pid 25694:tid 25703] [client 66.249.64.101:43558] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTdn0f7996cewJ5N2_BCgAAAQc"]
[Sun Dec 07 09:51:30.849086 2025] [:error] [pid 25601:tid 25649] [client 66.249.64.101:53981] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTdoqtsSIqGPs4YVxH3MQAAAI4"]
[Sun Dec 07 09:51:33.767085 2025] [:error] [pid 25694:tid 25711] [client 66.249.64.101:39486] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTdpUf7996cewJ5N2_BFgAAAQ8"]
[Sun Dec 07 09:52:23.134100 2025] [:error] [pid 25694:tid 25701] [client 66.249.64.101:39679] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTd10f7996cewJ5N2_BpAAAAQU"]
[Sun Dec 07 09:52:26.867964 2025] [:error] [pid 25602:tid 25669] [client 66.249.64.101:35670] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTd2hMayYLriq9gRdePegAAAMc"]
[Sun Dec 07 09:52:28.225727 2025] [:error] [pid 25601:tid 25641] [client 66.249.64.101:49027] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTd3KtsSIqGPs4YVxH3egAAAIY"]
[Sun Dec 07 09:52:29.662623 2025] [:error] [pid 25600:tid 25623] [client 66.249.64.101:64774] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTd3YX3SVrXRURpt5L9AQAAAFA"]
[Sun Dec 07 09:52:32.518171 2025] [:error] [pid 25600:tid 25616] [client 66.249.64.101:65278] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTd4IX3SVrXRURpt5L9BgAAAEk"]
[Sun Dec 07 09:52:35.441988 2025] [:error] [pid 25694:tid 25708] [client 66.249.64.101:52333] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTd40f7996cewJ5N2_BrgAAAQw"]
[Sun Dec 07 09:52:40.098479 2025] [:error] [pid 25601:tid 25644] [client 66.249.64.101:54764] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTd6KtsSIqGPs4YVxH3kAAAAIk"]
[Sun Dec 07 09:52:41.310060 2025] [:error] [pid 25602:tid 25674] [client 66.249.64.101:62290] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTd6RMayYLriq9gRdePiwAAAMw"]
[Sun Dec 07 09:52:44.279812 2025] [:error] [pid 25694:tid 25706] [client 66.249.64.101:40342] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTd7Ef7996cewJ5N2_BwgAAAQo"]
[Sun Dec 07 09:52:47.183918 2025] [:error] [pid 25600:tid 25623] [client 66.249.64.101:61868] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTd74X3SVrXRURpt5L9FAAAAFA"]
[Sun Dec 07 09:52:50.919769 2025] [:error] [pid 25694:tid 25696] [client 66.249.64.101:53486] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTd8kf7996cewJ5N2_B4AAAAQA"]
[Sun Dec 07 09:52:54.506240 2025] [:error] [pid 25601:tid 25650] [client 66.249.64.101:41519] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTd9qtsSIqGPs4YVxH3xgAAAI8"]
[Sun Dec 07 09:53:04.366766 2025] [:error] [pid 25694:tid 25714] [client 66.249.64.101:64715] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTeAEf7996cewJ5N2_B_gAAARI"]
[Sun Dec 07 09:53:13.753936 2025] [:error] [pid 25694:tid 25698] [client 66.249.64.101:39098] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTeCUf7996cewJ5N2_COAAAAQI"]
[Sun Dec 07 09:53:18.380326 2025] [:error] [pid 25601:tid 25651] [client 66.249.64.101:45641] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTeDqtsSIqGPs4YVxH35QAAAJA"]
[Sun Dec 07 09:54:06.774981 2025] [:error] [pid 25694:tid 25720] [client 66.249.64.101:50023] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTePkf7996cewJ5N2_CmgAAARg"]
[Sun Dec 07 09:54:10.345727 2025] [:error] [pid 25601:tid 25657] [client 66.249.64.101:56420] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTeQqtsSIqGPs4YVxH4CAAAAJY"]
[Sun Dec 07 09:54:12.345199 2025] [:error] [pid 25602:tid 25684] [client 66.249.64.101:55385] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTeRBMayYLriq9gRdeQUQAAANY"]
[Sun Dec 07 09:54:15.274110 2025] [:error] [pid 25600:tid 25631] [client 66.249.64.101:43610] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTeR4X3SVrXRURpt5L9cAAAAFg"]
[Sun Dec 07 09:54:18.221936 2025] [:error] [pid 25601:tid 25651] [client 66.249.64.101:50042] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTeSqtsSIqGPs4YVxH4DgAAAJA"]
[Sun Dec 07 09:54:21.151007 2025] [:error] [pid 25694:tid 25711] [client 66.249.64.101:56138] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTeTUf7996cewJ5N2_CtwAAAQ8"]
[Sun Dec 07 09:54:24.092365 2025] [:error] [pid 25602:tid 25665] [client 66.249.64.101:64009] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTeUBMayYLriq9gRdeQYAAAAMM"]
[Sun Dec 07 09:54:27.047384 2025] [:error] [pid 25694:tid 25706] [client 66.249.64.101:38269] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTeU0f7996cewJ5N2_CwAAAAQo"]
[Sun Dec 07 09:54:29.956291 2025] [:error] [pid 25694:tid 25716] [client 66.249.64.101:41035] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTeVUf7996cewJ5N2_CwQAAARQ"]
[Sun Dec 07 09:54:32.894089 2025] [:error] [pid 25694:tid 25714] [client 66.249.64.101:44740] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTeWEf7996cewJ5N2_CyQAAARI"]
[Sun Dec 07 09:54:35.826637 2025] [:error] [pid 25694:tid 25706] [client 66.249.64.101:55596] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTeW0f7996cewJ5N2_CzwAAAQo"]
[Sun Dec 07 09:54:39.968668 2025] [:error] [pid 25601:tid 25638] [client 66.249.64.101:63285] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTeX6tsSIqGPs4YVxH4KAAAAIM"]
[Sun Dec 07 09:54:43.577381 2025] [:error] [pid 25694:tid 25719] [client 66.249.64.101:55894] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTeY0f7996cewJ5N2_C1QAAARc"]
[Sun Dec 07 09:54:47.282980 2025] [:error] [pid 25602:tid 25679] [client 66.249.64.101:57238] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTeZxMayYLriq9gRdeQggAAANE"]
[Sun Dec 07 09:54:54.573573 2025] [:error] [pid 25602:tid 25665] [client 66.249.64.101:44531] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTebhMayYLriq9gRdeQigAAAMM"]
[Sun Dec 07 09:55:36.830728 2025] [:error] [pid 25694:tid 25703] [client 66.249.64.101:37268] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTemEf7996cewJ5N2_DRAAAAQc"]
[Sun Dec 07 09:55:40.580925 2025] [:error] [pid 25602:tid 25666] [client 66.249.64.101:54533] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTenBMayYLriq9gRdeQwwAAAMQ"]
[Sun Dec 07 09:55:43.536952 2025] [:error] [pid 25602:tid 25670] [client 66.249.64.101:64383] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTenxMayYLriq9gRdeQxgAAAMg"]
[Sun Dec 07 09:55:46.324715 2025] [:error] [pid 25694:tid 25714] [client 66.249.64.101:48555] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTeokf7996cewJ5N2_DXQAAARI"]
[Sun Dec 07 09:55:49.263537 2025] [:error] [pid 25694:tid 25720] [client 66.249.64.101:45775] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTepUf7996cewJ5N2_DcAAAARg"]
[Sun Dec 07 09:55:52.193211 2025] [:error] [pid 25601:tid 25655] [client 66.249.64.101:52036] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTeqKtsSIqGPs4YVxH4nQAAAJQ"]
[Sun Dec 07 09:55:55.137838 2025] [:error] [pid 25694:tid 25699] [client 66.249.64.101:54981] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTeq0f7996cewJ5N2_DqgAAAQM"]
[Sun Dec 07 09:55:58.062506 2025] [:error] [pid 25602:tid 25678] [client 66.249.64.101:44736] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTerhMayYLriq9gRdeQ3QAAANA"]
[Sun Dec 07 09:56:01.016777 2025] [:error] [pid 25602:tid 25667] [client 66.249.64.101:58632] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTesRMayYLriq9gRdeQ4wAAAMU"]
[Sun Dec 07 09:56:03.933043 2025] [:error] [pid 36068:tid 36071] [client 66.249.64.101:62906] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTes1GuxqM4ZYob8lN2zgAAAAE"]
[Sun Dec 07 09:56:06.870802 2025] [:error] [pid 36068:tid 36077] [client 66.249.64.101:52388] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTetlGuxqM4ZYob8lN24AAAAAc"]
[Sun Dec 07 09:56:11.938898 2025] [:error] [pid 25600:tid 25631] [client 66.249.64.101:43502] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTeu4X3SVrXRURpt5L-bAAAAFg"]
[Sun Dec 07 09:56:15.652173 2025] [:error] [pid 25694:tid 25700] [client 66.249.64.101:56626] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTev0f7996cewJ5N2_D-QAAAQQ"]
[Sun Dec 07 09:56:17.469012 2025] [:error] [pid 25694:tid 25708] [client 66.249.64.101:36537] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTewUf7996cewJ5N2_D_wAAAQw"]
[Sun Dec 07 09:56:18.661100 2025] [:error] [pid 25600:tid 25611] [client 66.249.64.101:56804] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTewoX3SVrXRURpt5L-egAAAEQ"]
[Sun Dec 07 09:56:21.557420 2025] [:error] [pid 25694:tid 25698] [client 66.249.64.101:36742] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTexUf7996cewJ5N2_EBQAAAQI"]
[Sun Dec 07 09:56:26.468569 2025] [:error] [pid 36068:tid 36083] [client 66.249.64.101:53817] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTeylGuxqM4ZYob8lN2_wAAAA0"]
[Sun Dec 07 09:56:30.036001 2025] [:error] [pid 25694:tid 25698] [client 66.249.64.101:60419] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTezkf7996cewJ5N2_ECwAAAQI"]
[Sun Dec 07 09:56:33.614358 2025] [:error] [pid 25602:tid 25674] [client 66.249.64.101:46209] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTe0RMayYLriq9gRdeRNQAAAMw"]
[Sun Dec 07 09:57:05.944988 2025] [:error] [pid 25694:tid 25704] [client 66.249.64.101:48997] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTe8Uf7996cewJ5N2_ESAAAAQg"]
[Sun Dec 07 09:57:09.637002 2025] [:error] [pid 25600:tid 25631] [client 66.249.64.101:63879] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTe9YX3SVrXRURpt5L-1QAAAFg"]
[Sun Dec 07 09:57:13.115414 2025] [:error] [pid 25601:tid 25647] [client 66.249.64.101:44183] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTe-atsSIqGPs4YVxH5FwAAAIw"]
[Sun Dec 07 09:57:16.663921 2025] [:error] [pid 36068:tid 36080] [client 66.249.64.101:46295] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTe_FGuxqM4ZYob8lN3OQAAAAo"]
[Sun Dec 07 09:57:20.357259 2025] [:error] [pid 25602:tid 25681] [client 66.249.64.101:44719] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTfABMayYLriq9gRdeRWQAAANM"]
[Sun Dec 07 09:57:23.209523 2025] [:error] [pid 36068:tid 36087] [client 66.249.64.101:60809] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTfA1GuxqM4ZYob8lN3PwAAABE"]
[Sun Dec 07 09:57:26.831458 2025] [:error] [pid 25694:tid 25702] [client 66.249.64.101:53889] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTfBkf7996cewJ5N2_EVwAAAQY"]
[Sun Dec 07 09:57:30.377295 2025] [:error] [pid 25694:tid 25703] [client 66.249.64.101:37174] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTfCkf7996cewJ5N2_EXAAAAQc"]
[Sun Dec 07 09:57:33.761222 2025] [:error] [pid 25601:tid 25654] [client 66.249.64.101:43357] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTfDatsSIqGPs4YVxH5JQAAAJM"]
[Sun Dec 07 09:57:37.331675 2025] [:error] [pid 25601:tid 25658] [client 66.249.64.101:58630] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTfEatsSIqGPs4YVxH5KwAAAJc"]
[Sun Dec 07 09:57:41.024600 2025] [:error] [pid 25602:tid 25669] [client 66.249.64.101:59084] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTfFRMayYLriq9gRdeRYAAAAMc"]
[Sun Dec 07 09:57:42.379134 2025] [:error] [pid 36068:tid 36082] [client 66.249.64.101:59377] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTfFlGuxqM4ZYob8lN3SgAAAAw"]
[Sun Dec 07 09:57:43.746647 2025] [:error] [pid 36068:tid 36086] [client 66.249.64.101:63870] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTfF1GuxqM4ZYob8lN3TAAAABA"]
[Sun Dec 07 09:57:45.239854 2025] [:error] [pid 25602:tid 25679] [client 66.249.64.101:64818] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTfGRMayYLriq9gRdeRYwAAANE"]
[Sun Dec 07 09:57:46.781701 2025] [:error] [pid 36068:tid 36074] [client 66.249.64.101:55632] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTfGlGuxqM4ZYob8lN3TgAAAAQ"]
[Sun Dec 07 09:57:49.805986 2025] [:error] [pid 25602:tid 25685] [client 66.249.64.101:52587] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTfHRMayYLriq9gRdeRagAAANc"]
[Sun Dec 07 09:57:52.675115 2025] [:error] [pid 25602:tid 25674] [client 66.249.64.101:46350] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTfIBMayYLriq9gRdeRawAAAMw"]
[Sun Dec 07 09:57:55.568919 2025] [:error] [pid 25602:tid 25680] [client 66.249.64.101:56888] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTfIxMayYLriq9gRdeRbQAAANI"]
[Sun Dec 07 09:57:58.492760 2025] [:error] [pid 36068:tid 36076] [client 66.249.64.101:42930] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTfJlGuxqM4ZYob8lN3dwAAAAY"]
[Sun Dec 07 09:58:32.994813 2025] [:error] [pid 36068:tid 36091] [client 66.249.64.101:55211] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTfSFGuxqM4ZYob8lN31wAAABU"]
[Sun Dec 07 09:58:36.644243 2025] [:error] [pid 25694:tid 25696] [client 66.249.64.101:45262] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTfTEf7996cewJ5N2_ErQAAAQA"]
[Sun Dec 07 09:58:39.723811 2025] [:error] [pid 25601:tid 25649] [client 66.249.64.101:41674] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTfT6tsSIqGPs4YVxH5SgAAAI4"]
[Sun Dec 07 09:58:42.536160 2025] [:error] [pid 36068:tid 36081] [client 66.249.64.101:46244] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTfUlGuxqM4ZYob8lN34QAAAAs"]
[Sun Dec 07 09:58:43.955804 2025] [:error] [pid 25602:tid 25675] [client 66.249.64.101:35043] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTfUxMayYLriq9gRdeRigAAAM0"]
[Sun Dec 07 09:58:45.472835 2025] [:error] [pid 36068:tid 36074] [client 66.249.64.101:44694] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTfVVGuxqM4ZYob8lN35gAAAAQ"]
[Sun Dec 07 09:58:48.536330 2025] [:error] [pid 36068:tid 36073] [client 66.249.64.101:50802] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTfWFGuxqM4ZYob8lN36QAAAAM"]
[Sun Dec 07 09:58:51.453814 2025] [:error] [pid 25601:tid 25655] [client 66.249.64.101:60357] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTfW6tsSIqGPs4YVxH5TQAAAJQ"]
[Sun Dec 07 09:58:54.265907 2025] [:error] [pid 25694:tid 25708] [client 66.249.64.101:55136] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTfXkf7996cewJ5N2_EvAAAAQw"]
[Sun Dec 07 09:58:57.208875 2025] [:error] [pid 36068:tid 36070] [client 66.249.64.101:42870] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTfYVGuxqM4ZYob8lN3-wAAAAA"]
[Sun Dec 07 09:59:00.770519 2025] [:error] [pid 25601:tid 25644] [client 66.249.64.101:37400] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTfZKtsSIqGPs4YVxH5VAAAAIk"]
[Sun Dec 07 09:59:04.893878 2025] [:error] [pid 36068:tid 36090] [client 66.249.64.101:37821] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTfaFGuxqM4ZYob8lN4AwAAABQ"]
[Sun Dec 07 09:59:08.555671 2025] [:error] [pid 25601:tid 25651] [client 66.249.64.101:52575] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTfbKtsSIqGPs4YVxH5WwAAAJA"]
[Sun Dec 07 09:59:12.123517 2025] [:error] [pid 25602:tid 25666] [client 66.249.64.101:39820] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTfcBMayYLriq9gRdeRswAAAMQ"]
[Sun Dec 07 09:59:15.835920 2025] [:error] [pid 36068:tid 36073] [client 66.249.64.101:35307] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTfc1GuxqM4ZYob8lN4DQAAAAM"]
[Sun Dec 07 09:59:19.548478 2025] [:error] [pid 36068:tid 36089] [client 66.249.64.101:56387] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTfd1GuxqM4ZYob8lN4FgAAABM"]
[Sun Dec 07 09:59:23.238375 2025] [:error] [pid 25601:tid 25638] [client 66.249.64.101:51967] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTfe6tsSIqGPs4YVxH5bQAAAIM"]
[Sun Dec 07 09:59:24.626455 2025] [:error] [pid 25602:tid 25679] [client 66.249.64.101:43908] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTffBMayYLriq9gRdeRvQAAANE"]
[Sun Dec 07 09:59:26.088922 2025] [:error] [pid 36068:tid 36073] [client 66.249.64.101:57093] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTfflGuxqM4ZYob8lN4GQAAAAM"]
[Sun Dec 07 09:59:27.540317 2025] [:error] [pid 25601:tid 25647] [client 66.249.64.101:35136] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTff6tsSIqGPs4YVxH5bwAAAIw"]
[Sun Dec 07 09:59:29.533920 2025] [:error] [pid 25600:tid 25625] [client 66.249.64.101:52684] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTfgYX3SVrXRURpt5L_IgAAAFI"]
[Sun Dec 07 10:00:05.937308 2025] [:error] [pid 25602:tid 25676] [client 66.249.64.101:62030] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTfpRMayYLriq9gRdeR5AAAAM4"]
[Sun Dec 07 10:00:09.523630 2025] [:error] [pid 36068:tid 36071] [client 66.249.64.101:61931] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTfqVGuxqM4ZYob8lN4XgAAAAE"]
[Sun Dec 07 10:00:13.117427 2025] [:error] [pid 36068:tid 36092] [client 66.249.64.101:57543] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTfrVGuxqM4ZYob8lN4YQAAABY"]
[Sun Dec 07 10:00:16.821211 2025] [:error] [pid 25602:tid 25674] [client 66.249.64.101:63047] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTfsBMayYLriq9gRdeR6gAAAMw"]
[Sun Dec 07 10:00:20.529503 2025] [:error] [pid 25694:tid 25717] [client 66.249.64.101:43389] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTftEf7996cewJ5N2_FBgAAARU"]
[Sun Dec 07 10:00:24.106051 2025] [:error] [pid 36068:tid 36084] [client 66.249.64.101:42946] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTfuFGuxqM4ZYob8lN4cwAAAA4"]
[Sun Dec 07 10:00:27.828833 2025] [:error] [pid 25694:tid 25714] [client 66.249.64.101:62422] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTfu0f7996cewJ5N2_FCgAAARI"]
[Sun Dec 07 10:00:31.544764 2025] [:error] [pid 36068:tid 36073] [client 66.249.64.101:55040] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTfv1GuxqM4ZYob8lN4dwAAAAM"]
[Sun Dec 07 10:00:35.122907 2025] [:error] [pid 25600:tid 25614] [client 66.249.64.101:57403] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTfw4X3SVrXRURpt5L_QgAAAEc"]
[Sun Dec 07 10:00:38.703417 2025] [:error] [pid 36068:tid 36075] [client 66.249.64.101:63952] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTfxlGuxqM4ZYob8lN4fgAAAAU"]
[Sun Dec 07 10:00:42.408527 2025] [:error] [pid 36068:tid 36081] [client 66.249.64.101:65159] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTfylGuxqM4ZYob8lN4hgAAAAs"]
[Sun Dec 07 10:00:46.113851 2025] [:error] [pid 25602:tid 25686] [client 66.249.64.101:59304] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTfzhMayYLriq9gRdeR-wAAANg"]
[Sun Dec 07 10:00:47.497081 2025] [:error] [pid 25601:tid 25653] [client 66.249.64.101:58020] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTfz6tsSIqGPs4YVxH5rwAAAJI"]
[Sun Dec 07 10:00:48.935808 2025] [:error] [pid 25694:tid 25713] [client 66.249.64.101:62121] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTf0Ef7996cewJ5N2_FFQAAARE"]
[Sun Dec 07 10:00:50.389837 2025] [:error] [pid 36068:tid 36088] [client 66.249.64.101:62521] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTf0lGuxqM4ZYob8lN4iwAAABI"]
[Sun Dec 07 10:00:51.864516 2025] [:error] [pid 25694:tid 25714] [client 66.249.64.101:50905] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTf00f7996cewJ5N2_FGQAAARI"]
[Sun Dec 07 10:00:53.337309 2025] [:error] [pid 25694:tid 25708] [client 66.249.64.101:54116] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTf1Uf7996cewJ5N2_FHAAAAQw"]
[Sun Dec 07 10:00:54.794053 2025] [:error] [pid 25602:tid 25680] [client 66.249.64.101:57705] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTf1hMayYLriq9gRdeSAAAAANI"]
[Sun Dec 07 10:00:57.741361 2025] [:error] [pid 25694:tid 25720] [client 66.249.64.101:54444] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTf2Uf7996cewJ5N2_FIQAAARg"]
[Sun Dec 07 10:01:00.674602 2025] [:error] [pid 25694:tid 25711] [client 66.249.64.101:51361] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTf3Ef7996cewJ5N2_FJAAAAQ8"]
[Sun Dec 07 10:01:43.941395 2025] [:error] [pid 25600:tid 25610] [client 66.249.64.101:48311] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTgB4X3SVrXRURpt5L_zAAAAEM"]
[Sun Dec 07 10:01:48.663386 2025] [:error] [pid 25602:tid 25684] [client 66.249.64.101:60475] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTgDBMayYLriq9gRdeSFwAAANY"]
[Sun Dec 07 10:01:52.244149 2025] [:error] [pid 25694:tid 25701] [client 66.249.64.101:41160] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTgEEf7996cewJ5N2_FRAAAAQU"]
[Sun Dec 07 10:01:55.828252 2025] [:error] [pid 25602:tid 25678] [client 66.249.64.101:52824] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTgExMayYLriq9gRdeSIAAAANA"]
[Sun Dec 07 10:01:59.416949 2025] [:error] [pid 25602:tid 25662] [client 66.249.64.101:51625] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTgFxMayYLriq9gRdeSJQAAAMA"]
[Sun Dec 07 10:02:05.569316 2025] [:error] [pid 25601:tid 25658] [client 66.249.64.101:58095] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTgHatsSIqGPs4YVxH54QAAAJc"]
[Sun Dec 07 10:02:09.149716 2025] [:error] [pid 25694:tid 25700] [client 66.249.64.101:61569] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTgIUf7996cewJ5N2_FTwAAAQQ"]
[Sun Dec 07 10:02:12.793893 2025] [:error] [pid 36068:tid 36073] [client 66.249.64.101:55093] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTgJFGuxqM4ZYob8lN42QAAAAM"]
[Sun Dec 07 10:02:16.385915 2025] [:error] [pid 25600:tid 25624] [client 66.249.64.101:48819] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTgKIX3SVrXRURpt5L_0QAAAFE"]
[Sun Dec 07 10:02:17.849305 2025] [:error] [pid 25600:tid 25612] [client 66.249.64.101:53400] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTgKYX3SVrXRURpt5L_1AAAAEU"]
[Sun Dec 07 10:02:19.304628 2025] [:error] [pid 25600:tid 25608] [client 66.249.64.101:46055] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTgK4X3SVrXRURpt5L_1gAAAEE"]
[Sun Dec 07 10:02:22.894010 2025] [:error] [pid 36068:tid 36079] [client 66.249.64.101:57764] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTgLlGuxqM4ZYob8lN5AgAAAAk"]
[Sun Dec 07 10:02:26.614007 2025] [:error] [pid 25600:tid 25613] [client 66.249.64.101:47089] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTgMoX3SVrXRURpt5L_2QAAAEY"]
[Sun Dec 07 10:02:30.198281 2025] [:error] [pid 36068:tid 36073] [client 66.249.64.101:54867] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTgNlGuxqM4ZYob8lN5DwAAAAM"]
[Sun Dec 07 10:02:33.907743 2025] [:error] [pid 36068:tid 36093] [client 66.249.64.101:53145] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTgOVGuxqM4ZYob8lN5EAAAABc"]
[Sun Dec 07 10:02:35.252771 2025] [:error] [pid 25694:tid 25702] [client 66.249.64.101:62704] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTgO0f7996cewJ5N2_FZwAAAQY"]
[Sun Dec 07 10:02:37.133438 2025] [:error] [pid 36068:tid 36070] [client 66.249.64.101:51922] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTgPVGuxqM4ZYob8lN5FQAAAAA"]
[Sun Dec 07 10:02:38.179408 2025] [:error] [pid 25601:tid 25655] [client 66.249.64.101:61564] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTgPqtsSIqGPs4YVxH59AAAAJQ"]
[Sun Dec 07 10:02:39.791462 2025] [:error] [pid 25602:tid 25681] [client 66.249.64.101:39048] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTgPxMayYLriq9gRdeSUAAAANM"]
[Sun Dec 07 10:03:17.461153 2025] [:error] [pid 36068:tid 36082] [client 66.249.64.101:53047] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTgZVGuxqM4ZYob8lN5XwAAAAw"]
[Sun Dec 07 10:03:21.741458 2025] [:error] [pid 36068:tid 36089] [client 66.249.64.101:64044] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTgaVGuxqM4ZYob8lN5awAAABM"]
[Sun Dec 07 10:03:25.447687 2025] [:error] [pid 25600:tid 25624] [client 66.249.64.101:64475] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTgbYX3SVrXRURpt5L_9wAAAFE"]
[Sun Dec 07 10:03:29.289177 2025] [:error] [pid 25694:tid 25718] [client 66.249.64.101:39739] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTgcUf7996cewJ5N2_FlwAAARY"]
[Sun Dec 07 10:03:34.680440 2025] [:error] [pid 36068:tid 36076] [client 66.249.64.101:46937] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTgdlGuxqM4ZYob8lN5egAAAAY"]
[Sun Dec 07 10:03:38.265777 2025] [:error] [pid 25602:tid 25666] [client 66.249.64.101:52774] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTgehMayYLriq9gRdeS7AAAAMQ"]
[Sun Dec 07 10:03:39.736619 2025] [:error] [pid 25601:tid 25645] [client 66.249.64.101:38481] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTge6tsSIqGPs4YVxH6QAAAAIo"]
[Sun Dec 07 10:03:41.340318 2025] [:error] [pid 25601:tid 25644] [client 66.249.64.101:35154] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTgfatsSIqGPs4YVxH6QgAAAIk"]
[Sun Dec 07 10:03:42.678526 2025] [:error] [pid 25602:tid 25682] [client 66.249.64.101:40841] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTgfhMayYLriq9gRdeS8gAAANQ"]
[Sun Dec 07 10:03:44.133350 2025] [:error] [pid 36068:tid 36088] [client 66.249.64.101:58643] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTggFGuxqM4ZYob8lN5mwAAABI"]
[Sun Dec 07 10:03:45.619447 2025] [:error] [pid 25600:tid 25623] [client 66.249.64.101:48034] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTggYX3SVrXRURpt5IAFAAAAFA"]
[Sun Dec 07 10:03:47.425054 2025] [:error] [pid 25602:tid 25676] [client 66.249.64.101:56895] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTggxMayYLriq9gRdeS9AAAAM4"]
[Sun Dec 07 10:03:56.233021 2025] [:error] [pid 25694:tid 25708] [client 66.249.64.101:58441] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTgjEf7996cewJ5N2_FsAAAAQw"]
[Sun Dec 07 10:04:12.890821 2025] [:error] [pid 36068:tid 36090] [client 66.249.64.101:40570] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTgnFGuxqM4ZYob8lN55wAAABQ"]
[Sun Dec 07 10:04:46.378774 2025] [:error] [pid 36068:tid 36072] [client 66.249.64.101:50623] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTgvlGuxqM4ZYob8lN6CwAAAAI"]
[Sun Dec 07 10:04:49.971801 2025] [:error] [pid 25602:tid 25664] [client 66.249.64.101:50677] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTgwRMayYLriq9gRdeTHgAAAMI"]
[Sun Dec 07 10:04:53.714426 2025] [:error] [pid 25602:tid 25665] [client 66.249.64.101:41312] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTgxRMayYLriq9gRdeTHwAAAMM"]
[Sun Dec 07 10:04:57.305542 2025] [:error] [pid 25600:tid 25609] [client 66.249.64.101:55786] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTgyYX3SVrXRURpt5IAQwAAAEI"]
[Sun Dec 07 10:04:59.505238 2025] [:error] [pid 25602:tid 25672] [client 66.249.64.101:57807] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTgyxMayYLriq9gRdeTJAAAAMo"]
[Sun Dec 07 10:05:09.648459 2025] [:error] [pid 36068:tid 36086] [client 66.249.64.101:42017] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTg1VGuxqM4ZYob8lN6GQAAABA"]
[Sun Dec 07 10:05:15.526709 2025] [:error] [pid 36068:tid 36075] [client 66.249.64.101:40519] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTg21GuxqM4ZYob8lN6JAAAAAU"]
[Sun Dec 07 10:05:18.464714 2025] [:error] [pid 25602:tid 25684] [client 66.249.64.101:34850] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTg3hMayYLriq9gRdeTOQAAANY"]
[Sun Dec 07 10:05:21.394664 2025] [:error] [pid 25601:tid 25645] [client 66.249.64.101:51572] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTg4atsSIqGPs4YVxH6fgAAAIo"]
[Sun Dec 07 10:05:25.717857 2025] [:error] [pid 25601:tid 25635] [client 66.249.64.101:55457] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTg5atsSIqGPs4YVxH6hgAAAIA"]
[Sun Dec 07 10:05:30.197082 2025] [:error] [pid 25600:tid 25626] [client 66.249.64.101:58329] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTg6oX3SVrXRURpt5IAZwAAAFM"]
[Sun Dec 07 10:05:34.142809 2025] [:error] [pid 25601:tid 25655] [client 66.249.64.101:55079] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTg7qtsSIqGPs4YVxH6kwAAAJQ"]
[Sun Dec 07 10:06:52.416805 2025] [:error] [pid 25694:tid 25696] [client 66.249.64.101:52181] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTThPEf7996cewJ5N2_GmgAAAQA"]
[Sun Dec 07 10:06:58.444432 2025] [:error] [pid 25600:tid 25631] [client 66.249.64.101:41152] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTThQoX3SVrXRURpt5IA8gAAAFg"]
[Sun Dec 07 10:07:01.223480 2025] [:error] [pid 25694:tid 25712] [client 66.249.64.101:57314] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTThRUf7996cewJ5N2_GngAAARA"]
[Sun Dec 07 10:07:04.150795 2025] [:error] [pid 25602:tid 25663] [client 66.249.64.101:61589] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTThSBMayYLriq9gRdeTegAAAME"]
[Sun Dec 07 10:07:07.093665 2025] [:error] [pid 25600:tid 25629] [client 66.249.64.101:51943] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTThS4X3SVrXRURpt5IA_QAAAFY"]
[Sun Dec 07 10:07:10.030667 2025] [:error] [pid 25694:tid 25720] [client 66.249.64.101:48177] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTThTkf7996cewJ5N2_GqQAAARg"]
[Sun Dec 07 10:07:12.973373 2025] [:error] [pid 36068:tid 36086] [client 66.249.64.101:41496] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTThUFGuxqM4ZYob8lN6pgAAABA"]
[Sun Dec 07 10:07:18.840759 2025] [:error] [pid 25600:tid 25610] [client 66.249.64.101:35030] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTThVoX3SVrXRURpt5IBDgAAAEM"]
[Sun Dec 07 10:07:24.615697 2025] [:error] [pid 36068:tid 36073] [client 66.249.64.101:54982] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTThXFGuxqM4ZYob8lN6rwAAAAM"]
[Sun Dec 07 10:07:27.641076 2025] [:error] [pid 25694:tid 25707] [client 66.249.64.101:46908] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTThX0f7996cewJ5N2_GuQAAAQs"]
[Sun Dec 07 10:07:30.574270 2025] [:error] [pid 25694:tid 25715] [client 66.249.64.101:37264] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTThYkf7996cewJ5N2_GvwAAARM"]
[Sun Dec 07 10:07:36.460253 2025] [:error] [pid 25694:tid 25704] [client 66.249.64.101:61125] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTThaEf7996cewJ5N2_GxAAAAQg"]
[Sun Dec 07 10:07:42.319951 2025] [:error] [pid 25601:tid 25650] [client 66.249.64.101:47746] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTThbqtsSIqGPs4YVxH7HAAAAI8"]
[Sun Dec 07 10:07:47.997849 2025] [:error] [pid 25694:tid 25708] [client 82.165.90.192:54358] [client 82.165.90.192] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 82.165.90.192, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTThc0f7996cewJ5N2_GyAAAAQw"]
[Sun Dec 07 10:08:34.463698 2025] [:error] [pid 36068:tid 36076] [client 66.249.64.101:55428] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTholGuxqM4ZYob8lN7DwAAAAY"]
[Sun Dec 07 10:08:38.108861 2025] [:error] [pid 25602:tid 25663] [client 66.249.64.101:44707] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTThphMayYLriq9gRdeTtQAAAME"]
[Sun Dec 07 10:08:41.194813 2025] [:error] [pid 25601:tid 25647] [client 66.249.64.101:37083] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTThqatsSIqGPs4YVxH7SwAAAIw"]
[Sun Dec 07 10:08:44.603335 2025] [:error] [pid 25602:tid 25674] [client 66.249.64.101:35020] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTThrBMayYLriq9gRdeTuQAAAMw"]
[Sun Dec 07 10:08:46.927665 2025] [:error] [pid 25601:tid 25659] [client 66.249.64.101:63374] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTThrqtsSIqGPs4YVxH7UQAAAJg"]
[Sun Dec 07 10:08:49.863246 2025] [:error] [pid 25601:tid 25640] [client 66.249.64.101:53976] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTThsatsSIqGPs4YVxH7UgAAAIU"]
[Sun Dec 07 10:08:52.812468 2025] [:error] [pid 36068:tid 36080] [client 66.249.64.101:45909] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTThtFGuxqM4ZYob8lN7GQAAAAo"]
[Sun Dec 07 10:08:55.729345 2025] [:error] [pid 25694:tid 25718] [client 66.249.64.101:48466] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTht0f7996cewJ5N2_G9gAAARY"]
[Sun Dec 07 10:08:58.671711 2025] [:error] [pid 36068:tid 36091] [client 66.249.64.101:42478] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTThulGuxqM4ZYob8lN7HQAAABU"]
[Sun Dec 07 10:09:07.489211 2025] [:error] [pid 25694:tid 25701] [client 66.249.64.101:46358] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTThw0f7996cewJ5N2_G_gAAAQU"]
[Sun Dec 07 10:09:10.414211 2025] [:error] [pid 36068:tid 36084] [client 66.249.64.101:59827] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTThxlGuxqM4ZYob8lN7IgAAAA4"]
[Sun Dec 07 10:09:13.351859 2025] [:error] [pid 25602:tid 25686] [client 66.249.64.101:37523] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTThyRMayYLriq9gRdeTxgAAANg"]
[Sun Dec 07 10:09:16.298850 2025] [:error] [pid 25600:tid 25621] [client 66.249.64.101:37968] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTThzIX3SVrXRURpt5IBWAAAAE4"]
[Sun Dec 07 10:09:19.220811 2025] [:error] [pid 25602:tid 25676] [client 66.249.64.101:55560] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTThzxMayYLriq9gRdeTzQAAAM4"]
[Sun Dec 07 10:09:22.156486 2025] [:error] [pid 36068:tid 36073] [client 66.249.64.101:59242] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTh0lGuxqM4ZYob8lN7LQAAAAM"]
[Sun Dec 07 10:09:25.089918 2025] [:error] [pid 36068:tid 36093] [client 66.249.64.101:44100] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTh1VGuxqM4ZYob8lN7MgAAABc"]
[Sun Dec 07 10:09:28.028279 2025] [:error] [pid 25600:tid 25624] [client 66.249.64.101:35304] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTh2IX3SVrXRURpt5IBWwAAAFE"]
[Sun Dec 07 10:09:30.960561 2025] [:error] [pid 25602:tid 25682] [client 66.249.64.101:54928] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTh2hMayYLriq9gRdeT0wAAANQ"]
[Sun Dec 07 10:10:17.141426 2025] [:error] [pid 25694:tid 25704] [client 66.249.64.101:37496] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTiCUf7996cewJ5N2_HMgAAAQg"]
[Sun Dec 07 10:10:20.725719 2025] [:error] [pid 36068:tid 36092] [client 66.249.64.101:54381] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTiDFGuxqM4ZYob8lN7tQAAABY"]
[Sun Dec 07 10:10:24.328695 2025] [:error] [pid 25600:tid 25608] [client 66.249.64.101:57756] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTiEIX3SVrXRURpt5IBewAAAEE"]
[Sun Dec 07 10:10:28.034728 2025] [:error] [pid 36068:tid 36078] [client 66.249.64.101:63711] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTiFFGuxqM4ZYob8lN7ugAAAAg"]
[Sun Dec 07 10:10:31.615430 2025] [:error] [pid 25600:tid 25616] [client 66.249.64.101:37612] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTiF4X3SVrXRURpt5IBowAAAEk"]
[Sun Dec 07 10:10:35.335971 2025] [:error] [pid 25602:tid 25682] [client 66.249.64.101:43056] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTiGxMayYLriq9gRdeULAAAANQ"]
[Sun Dec 07 10:10:38.918793 2025] [:error] [pid 25694:tid 25702] [client 66.249.64.101:36771] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTiHkf7996cewJ5N2_HQQAAAQY"]
[Sun Dec 07 10:10:42.508262 2025] [:error] [pid 25601:tid 25658] [client 66.249.64.101:43123] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTiIqtsSIqGPs4YVxH7kwAAAJc"]
[Sun Dec 07 10:10:46.094313 2025] [:error] [pid 25601:tid 25647] [client 66.249.64.101:57684] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTiJqtsSIqGPs4YVxH7mgAAAIw"]
[Sun Dec 07 10:10:49.681471 2025] [:error] [pid 25602:tid 25681] [client 66.249.64.101:56554] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTiKRMayYLriq9gRdeUTAAAANM"]
[Sun Dec 07 10:10:53.264356 2025] [:error] [pid 36068:tid 36075] [client 66.249.64.101:53835] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTiLVGuxqM4ZYob8lN72QAAAAU"]
[Sun Dec 07 10:10:53.396191 2025] [:error] [pid 36068:tid 36093] [client 66.249.64.101:39244] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTiLVGuxqM4ZYob8lN72wAAABc"]
[Sun Dec 07 10:12:15.147265 2025] [:error] [pid 36068:tid 36072] [client 66.249.64.101:58712] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTif1GuxqM4ZYob8lN8nAAAAAI"]
[Sun Dec 07 10:12:22.375113 2025] [:error] [pid 25600:tid 25610] [client 66.249.64.101:41013] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTihoX3SVrXRURpt5ICNQAAAEM"]
[Sun Dec 07 10:12:26.064371 2025] [:error] [pid 25694:tid 25710] [client 66.249.64.101:56940] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTiikf7996cewJ5N2_HyAAAAQ4"]
[Sun Dec 07 10:12:27.421244 2025] [:error] [pid 36068:tid 36072] [client 66.249.64.101:62430] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTii1GuxqM4ZYob8lN8pwAAAAI"]
[Sun Dec 07 10:12:30.509326 2025] [:error] [pid 25602:tid 25663] [client 66.249.64.101:37205] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTijhMayYLriq9gRdeU4AAAAME"]
[Sun Dec 07 10:12:32.013858 2025] [:error] [pid 36068:tid 36091] [client 66.249.64.101:39386] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTikFGuxqM4ZYob8lN8qwAAABU"]
[Sun Dec 07 10:12:34.944487 2025] [:error] [pid 25600:tid 25629] [client 66.249.64.101:36195] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTikoX3SVrXRURpt5ICPQAAAFY"]
[Sun Dec 07 10:12:37.878131 2025] [:error] [pid 25600:tid 25618] [client 66.249.64.101:51039] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTilYX3SVrXRURpt5ICQAAAAEs"]
[Sun Dec 07 10:12:40.815676 2025] [:error] [pid 36068:tid 36076] [client 66.249.64.101:64981] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTimFGuxqM4ZYob8lN8sAAAAAY"]
[Sun Dec 07 10:12:43.760848 2025] [:error] [pid 25694:tid 25703] [client 66.249.64.101:42967] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTim0f7996cewJ5N2_H1gAAAQc"]
[Sun Dec 07 10:12:46.690231 2025] [:error] [pid 25600:tid 25624] [client 66.249.64.101:60188] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTinoX3SVrXRURpt5ICRwAAAFE"]
[Sun Dec 07 10:12:49.637369 2025] [:error] [pid 25694:tid 25701] [client 66.249.64.101:60365] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTioUf7996cewJ5N2_H3QAAAQU"]
[Sun Dec 07 10:12:52.468317 2025] [:error] [pid 36068:tid 36071] [client 66.249.64.101:61022] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTipFGuxqM4ZYob8lN8vQAAAAE"]
[Sun Dec 07 10:13:41.761549 2025] [:error] [pid 25694:tid 25705] [client 66.249.64.101:43154] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTi1Uf7996cewJ5N2_ILgAAAQk"]
[Sun Dec 07 10:13:47.638941 2025] [:error] [pid 25601:tid 25646] [client 66.249.64.101:47373] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTi26tsSIqGPs4YVxH8owAAAIs"]
[Sun Dec 07 10:13:51.225876 2025] [:error] [pid 25694:tid 25717] [client 66.249.64.101:38728] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTi30f7996cewJ5N2_IRAAAARU"]
[Sun Dec 07 10:13:54.939050 2025] [:error] [pid 36068:tid 36078] [client 66.249.64.101:48570] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTi4lGuxqM4ZYob8lN9JgAAAAg"]
[Sun Dec 07 10:14:14.870238 2025] [:error] [pid 36068:tid 36085] [client 66.249.64.101:55715] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTi9lGuxqM4ZYob8lN9QAAAAA8"]
[Sun Dec 07 10:14:16.330427 2025] [:error] [pid 36068:tid 36070] [client 66.249.64.101:62587] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTi-FGuxqM4ZYob8lN9QQAAAAA"]
[Sun Dec 07 10:14:17.796116 2025] [:error] [pid 25602:tid 25672] [client 66.249.64.101:43306] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTi-RMayYLriq9gRdeVIwAAAMo"]
[Sun Dec 07 10:14:20.667794 2025] [:error] [pid 25602:tid 25669] [client 66.249.64.101:47144] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTi_BMayYLriq9gRdeVJQAAAMc"]
[Sun Dec 07 10:14:23.651547 2025] [:error] [pid 36068:tid 36088] [client 66.249.64.101:63619] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTi_1GuxqM4ZYob8lN9RQAAABI"]
[Sun Dec 07 10:14:26.690284 2025] [:error] [pid 25602:tid 25681] [client 66.249.64.101:56368] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTjAhMayYLriq9gRdeVKwAAANM"]
[Sun Dec 07 10:14:29.478013 2025] [:error] [pid 25602:tid 25663] [client 66.249.64.101:64198] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTjBRMayYLriq9gRdeVLQAAAME"]
[Sun Dec 07 10:14:35.469153 2025] [:error] [pid 25694:tid 25697] [client 66.249.64.101:60616] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTjC0f7996cewJ5N2_IcQAAAQE"]
[Sun Dec 07 10:15:15.733403 2025] [:error] [pid 36068:tid 36084] [client 66.249.64.101:53516] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTjM1GuxqM4ZYob8lN9gAAAAA4"]
[Sun Dec 07 10:15:19.408366 2025] [:error] [pid 25694:tid 25698] [client 66.249.64.101:42736] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTjN0f7996cewJ5N2_IkwAAAQI"]
[Sun Dec 07 10:15:22.342359 2025] [:error] [pid 25694:tid 25717] [client 66.249.64.101:48967] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTjOkf7996cewJ5N2_IlwAAARU"]
[Sun Dec 07 10:15:25.262781 2025] [:error] [pid 25694:tid 25697] [client 66.249.64.101:63093] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTjPUf7996cewJ5N2_InAAAAQE"]
[Sun Dec 07 10:15:28.966932 2025] [:error] [pid 25602:tid 25681] [client 66.249.64.101:57386] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTjQBMayYLriq9gRdeVUwAAANM"]
[Sun Dec 07 10:15:32.552166 2025] [:error] [pid 25601:tid 25650] [client 66.249.64.101:43380] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTjRKtsSIqGPs4YVxH85AAAAI8"]
[Sun Dec 07 10:15:36.136163 2025] [:error] [pid 36068:tid 36082] [client 66.249.64.101:46138] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTjSFGuxqM4ZYob8lN9mwAAAAw"]
[Sun Dec 07 10:15:40.008784 2025] [:error] [pid 25694:tid 25708] [client 66.249.64.101:57399] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTjTEf7996cewJ5N2_IpAAAAQw"]
[Sun Dec 07 10:15:43.707482 2025] [:error] [pid 25602:tid 25673] [client 66.249.64.101:46772] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTjTxMayYLriq9gRdeVWQAAAMs"]
[Sun Dec 07 10:15:47.279519 2025] [:error] [pid 25694:tid 25713] [client 66.249.64.101:43160] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTjU0f7996cewJ5N2_IpQAAARE"]
[Sun Dec 07 10:15:50.978289 2025] [:error] [pid 25600:tid 25611] [client 66.249.64.101:61461] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTjVoX3SVrXRURpt5IC4QAAAEQ"]
[Sun Dec 07 10:15:52.552878 2025] [:error] [pid 25694:tid 25715] [client 66.249.64.101:47738] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTjWEf7996cewJ5N2_IrQAAARM"]
[Sun Dec 07 10:15:53.798886 2025] [:error] [pid 25600:tid 25622] [client 66.249.64.101:39263] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTjWYX3SVrXRURpt5IC5AAAAE8"]
[Sun Dec 07 10:15:55.273119 2025] [:error] [pid 25602:tid 25669] [client 66.249.64.101:36157] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTjWxMayYLriq9gRdeVYwAAAMc"]
[Sun Dec 07 10:15:57.595398 2025] [:error] [pid 25602:tid 25679] [client 66.249.64.101:39136] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTjXRMayYLriq9gRdeVaQAAANE"]
[Sun Dec 07 10:16:00.520667 2025] [:error] [pid 25694:tid 25705] [client 66.249.64.101:45650] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTjYEf7996cewJ5N2_ItgAAAQk"]
[Sun Dec 07 10:16:03.462221 2025] [:error] [pid 25694:tid 25709] [client 66.249.64.101:52462] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTjY0f7996cewJ5N2_IugAAAQ0"]
[Sun Dec 07 10:16:06.394482 2025] [:error] [pid 25601:tid 25636] [client 66.249.64.101:59054] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTjZqtsSIqGPs4YVxH8-gAAAIE"]
[Sun Dec 07 10:16:09.436174 2025] [:error] [pid 25694:tid 25699] [client 66.249.64.101:36936] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTjaUf7996cewJ5N2_IxgAAAQM"]
[Sun Dec 07 10:23:31.980945 2025] [:error] [pid 25601:tid 25646] [client 66.249.64.101:37103] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTlI6tsSIqGPs4YVxH-awAAAIs"]
[Sun Dec 07 10:23:35.658460 2025] [:error] [pid 36068:tid 36076] [client 66.249.64.101:48753] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTlJ1GuxqM4ZYob8lOAFAAAAAY"]
[Sun Dec 07 10:23:38.715804 2025] [:error] [pid 25601:tid 25641] [client 66.249.64.101:37716] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTlKqtsSIqGPs4YVxH-bAAAAIY"]
[Sun Dec 07 10:23:43.887786 2025] [:error] [pid 25600:tid 25623] [client 66.249.64.101:59354] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTlL4X3SVrXRURpt5IEgQAAAFA"]
[Sun Dec 07 10:23:47.458872 2025] [:error] [pid 25600:tid 25629] [client 66.249.64.101:44324] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTlM4X3SVrXRURpt5IEiQAAAFY"]
[Sun Dec 07 10:23:49.010271 2025] [:error] [pid 25600:tid 25622] [client 66.249.64.101:58193] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTlNYX3SVrXRURpt5IEiwAAAE8"]
[Sun Dec 07 10:23:50.302396 2025] [:error] [pid 25600:tid 25630] [client 66.249.64.101:65004] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTlNoX3SVrXRURpt5IEjwAAAFc"]
[Sun Dec 07 10:23:53.414803 2025] [:error] [pid 25600:tid 25608] [client 66.249.64.101:39981] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTlOYX3SVrXRURpt5IEkgAAAEE"]
[Sun Dec 07 10:23:56.209202 2025] [:error] [pid 25600:tid 25613] [client 66.249.64.101:64683] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTlPIX3SVrXRURpt5IElwAAAEY"]
[Sun Dec 07 10:23:59.286374 2025] [:error] [pid 25601:tid 25646] [client 66.249.64.101:62611] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTlP6tsSIqGPs4YVxH-dAAAAIs"]
[Sun Dec 07 10:24:02.225900 2025] [:error] [pid 36068:tid 36075] [client 66.249.64.101:34785] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTlQlGuxqM4ZYob8lOANQAAAAU"]
[Sun Dec 07 10:24:05.004588 2025] [:error] [pid 25602:tid 25668] [client 66.249.64.101:57958] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTlRRMayYLriq9gRdeXKwAAAMY"]
[Sun Dec 07 10:24:08.077303 2025] [:error] [pid 25694:tid 25708] [client 66.249.64.101:46879] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTlSEf7996cewJ5N2_KUgAAAQw"]
[Sun Dec 07 10:24:09.083945 2025] [:error] [pid 25694:tid 25698] [client 66.249.64.101:56162] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTlSUf7996cewJ5N2_KVAAAAQI"]
[Sun Dec 07 10:24:10.871851 2025] [:error] [pid 25600:tid 25618] [client 66.249.64.101:50894] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTlSoX3SVrXRURpt5IEnQAAAEs"]
[Sun Dec 07 10:24:13.969269 2025] [:error] [pid 25602:tid 25674] [client 66.249.64.101:50573] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTlTRMayYLriq9gRdeXLwAAAMw"]
[Sun Dec 07 10:24:18.270676 2025] [:error] [pid 36068:tid 36074] [client 66.249.64.101:36860] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTlUlGuxqM4ZYob8lOASAAAAAQ"]
[Sun Dec 07 10:24:21.951846 2025] [:error] [pid 25601:tid 25638] [client 66.249.64.101:60591] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTlVatsSIqGPs4YVxH-fwAAAIM"]
[Sun Dec 07 10:24:25.533312 2025] [:error] [pid 25694:tid 25708] [client 66.249.64.101:50757] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTlWUf7996cewJ5N2_KXgAAAQw"]
[Sun Dec 07 10:24:59.989881 2025] [:error] [pid 25600:tid 25607] [client 66.249.64.101:40820] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTle4X3SVrXRURpt5IExAAAAEA"]
[Sun Dec 07 10:25:03.630591 2025] [:error] [pid 25694:tid 25697] [client 66.249.64.101:45776] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTlf0f7996cewJ5N2_KfwAAAQE"]
[Sun Dec 07 10:25:07.388023 2025] [:error] [pid 36068:tid 36078] [client 66.249.64.101:61624] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTlg1GuxqM4ZYob8lOAhQAAAAg"]
[Sun Dec 07 10:25:08.808656 2025] [:error] [pid 25600:tid 25614] [client 66.249.64.101:51237] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTlhIX3SVrXRURpt5IEzAAAAEc"]
[Sun Dec 07 10:25:10.133002 2025] [:error] [pid 25600:tid 25615] [client 66.249.64.101:64346] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTlhoX3SVrXRURpt5IEzwAAAEg"]
[Sun Dec 07 10:25:12.552388 2025] [:error] [pid 36068:tid 36077] [client 66.249.64.101:55619] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTliFGuxqM4ZYob8lOAhgAAAAc"]
[Sun Dec 07 10:25:15.497806 2025] [:error] [pid 36068:tid 36091] [client 66.249.64.101:59387] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTli1GuxqM4ZYob8lOAigAAABU"]
[Sun Dec 07 10:25:21.370308 2025] [:error] [pid 36068:tid 36070] [client 66.249.64.101:40495] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTlkVGuxqM4ZYob8lOAlgAAAAA"]
[Sun Dec 07 10:25:24.314539 2025] [:error] [pid 25602:tid 25673] [client 66.249.64.101:54666] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTllBMayYLriq9gRdeXxgAAAMs"]
[Sun Dec 07 10:25:27.240903 2025] [:error] [pid 36068:tid 36090] [client 66.249.64.101:63801] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTll1GuxqM4ZYob8lOApQAAABQ"]
[Sun Dec 07 10:25:30.319360 2025] [:error] [pid 25602:tid 25663] [client 66.249.64.101:45447] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTlmhMayYLriq9gRdeXzwAAAME"]
[Sun Dec 07 10:25:33.109031 2025] [:error] [pid 36068:tid 36072] [client 66.249.64.101:51352] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTlnVGuxqM4ZYob8lOAuAAAAAI"]
[Sun Dec 07 10:25:36.198786 2025] [:error] [pid 25600:tid 25610] [client 66.249.64.101:45246] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTloIX3SVrXRURpt5IE3gAAAEM"]
[Sun Dec 07 10:25:39.118166 2025] [:error] [pid 25601:tid 25640] [client 66.249.64.101:63955] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTlo6tsSIqGPs4YVxH-nQAAAIU"]
[Sun Dec 07 10:25:42.056357 2025] [:error] [pid 25600:tid 25615] [client 66.249.64.101:48681] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTlpoX3SVrXRURpt5IE5QAAAEg"]
[Sun Dec 07 10:25:44.861502 2025] [:error] [pid 25602:tid 25681] [client 66.249.64.101:50908] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTlqBMayYLriq9gRdeX1QAAANM"]
[Sun Dec 07 10:25:47.930588 2025] [:error] [pid 25601:tid 25644] [client 66.249.64.101:56789] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTlq6tsSIqGPs4YVxH-pAAAAIk"]
[Sun Dec 07 10:25:50.721448 2025] [:error] [pid 25600:tid 25621] [client 66.249.64.101:39682] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTlroX3SVrXRURpt5IE8wAAAE4"]
[Sun Dec 07 10:25:53.663876 2025] [:error] [pid 25600:tid 25629] [client 66.249.64.101:53036] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTlsYX3SVrXRURpt5IE-gAAAFY"]
[Sun Dec 07 10:26:28.170640 2025] [:error] [pid 25601:tid 25649] [client 66.249.64.101:57895] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTl1KtsSIqGPs4YVxH-1QAAAI4"]
[Sun Dec 07 10:26:31.833074 2025] [:error] [pid 25600:tid 25617] [client 66.249.64.101:64677] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTl14X3SVrXRURpt5IFEgAAAEo"]
[Sun Dec 07 10:26:34.895603 2025] [:error] [pid 36068:tid 36087] [client 66.249.64.101:65359] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTl2lGuxqM4ZYob8lOA9wAAABE"]
[Sun Dec 07 10:26:37.696528 2025] [:error] [pid 36068:tid 36075] [client 66.249.64.101:58680] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTl3VGuxqM4ZYob8lOBAAAAAAU"]
[Sun Dec 07 10:26:40.778644 2025] [:error] [pid 25602:tid 25679] [client 66.249.64.101:59364] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTl4BMayYLriq9gRdeX9AAAANE"]
[Sun Dec 07 10:26:45.287636 2025] [:error] [pid 25694:tid 25708] [client 66.249.64.101:50412] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTl5Uf7996cewJ5N2_K2gAAAQw"]
[Sun Dec 07 10:26:48.862121 2025] [:error] [pid 25600:tid 25609] [client 66.249.64.101:41298] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTl6IX3SVrXRURpt5IFGgAAAEI"]
[Sun Dec 07 10:26:50.474658 2025] [:error] [pid 36068:tid 36076] [client 66.249.64.101:53020] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTl6lGuxqM4ZYob8lOBQQAAAAY"]
[Sun Dec 07 10:26:52.516699 2025] [:error] [pid 25694:tid 25713] [client 66.249.64.101:55628] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTl7Ef7996cewJ5N2_K3wAAARE"]
[Sun Dec 07 10:26:55.323495 2025] [:error] [pid 25601:tid 25645] [client 66.249.64.101:54782] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTl76tsSIqGPs4YVxH-6gAAAIo"]
[Sun Dec 07 10:27:00.229028 2025] [:error] [pid 25601:tid 25637] [client 66.249.64.101:43780] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTl9KtsSIqGPs4YVxH-7AAAAII"]
[Sun Dec 07 10:27:01.827679 2025] [:error] [pid 25601:tid 25647] [client 66.249.64.101:52057] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTl9atsSIqGPs4YVxH-7gAAAIw"]
[Sun Dec 07 10:27:04.268546 2025] [:error] [pid 25602:tid 25667] [client 66.249.64.101:48519] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTl-BMayYLriq9gRdeX_wAAAMU"]
[Sun Dec 07 10:27:07.056292 2025] [:error] [pid 25600:tid 25622] [client 66.249.64.101:49515] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTl-4X3SVrXRURpt5IFIwAAAE8"]
[Sun Dec 07 10:27:10.013700 2025] [:error] [pid 25694:tid 25708] [client 66.249.64.101:52427] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTl_kf7996cewJ5N2_K7QAAAQw"]
[Sun Dec 07 10:27:13.072670 2025] [:error] [pid 25601:tid 25655] [client 66.249.64.101:56522] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTmAatsSIqGPs4YVxH--AAAAJQ"]
[Sun Dec 07 10:27:15.880814 2025] [:error] [pid 25602:tid 25664] [client 66.249.64.101:35335] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTmAxMayYLriq9gRdeYBgAAAMI"]
[Sun Dec 07 10:27:20.194002 2025] [:error] [pid 25602:tid 25666] [client 66.249.64.101:60984] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTmCBMayYLriq9gRdeYCwAAAMQ"]
[Sun Dec 07 10:27:24.694062 2025] [:error] [pid 25601:tid 25638] [client 66.249.64.101:36331] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTmDKtsSIqGPs4YVxH_BQAAAIM"]
[Sun Dec 07 10:27:59.195926 2025] [:error] [pid 25602:tid 25679] [client 66.249.64.101:50112] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTmLxMayYLriq9gRdeYQgAAANE"]
[Sun Dec 07 10:28:02.861103 2025] [:error] [pid 25600:tid 25608] [client 66.249.64.101:63537] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTmMoX3SVrXRURpt5IFVAAAAEE"]
[Sun Dec 07 10:28:05.785977 2025] [:error] [pid 36068:tid 36076] [client 66.249.64.101:36255] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTmNVGuxqM4ZYob8lOBmAAAAAY"]
[Sun Dec 07 10:28:16.879274 2025] [:error] [pid 36068:tid 36082] [client 66.249.64.101:36155] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTmQFGuxqM4ZYob8lOBoQAAAAw"]
[Sun Dec 07 10:28:19.786116 2025] [:error] [pid 36068:tid 36081] [client 66.249.64.101:36914] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTmQ1GuxqM4ZYob8lOBpQAAAAs"]
[Sun Dec 07 10:28:21.263499 2025] [:error] [pid 25694:tid 25700] [client 66.249.64.101:53043] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTmRUf7996cewJ5N2_LFAAAAQQ"]
[Sun Dec 07 10:28:23.553286 2025] [:error] [pid 36068:tid 36087] [client 66.249.64.101:41238] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTmR1GuxqM4ZYob8lOBrwAAABE"]
[Sun Dec 07 10:28:26.483243 2025] [:error] [pid 25602:tid 25683] [client 66.249.64.101:56741] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTmShMayYLriq9gRdeYTgAAANU"]
[Sun Dec 07 10:28:29.418842 2025] [:error] [pid 25694:tid 25702] [client 66.249.64.101:36041] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTmTUf7996cewJ5N2_LGgAAAQY"]
[Sun Dec 07 10:28:32.224698 2025] [:error] [pid 25602:tid 25676] [client 66.249.64.101:52677] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTmUBMayYLriq9gRdeYVQAAAM4"]
[Sun Dec 07 10:28:35.157087 2025] [:error] [pid 25601:tid 25652] [client 66.249.64.101:64670] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTmU6tsSIqGPs4YVxH_QgAAAJE"]
[Sun Dec 07 10:28:38.092263 2025] [:error] [pid 36068:tid 36081] [client 66.249.64.101:57141] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTmVlGuxqM4ZYob8lOBvQAAAAs"]
[Sun Dec 07 10:28:43.191832 2025] [:error] [pid 36068:tid 36077] [client 66.249.64.101:46139] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTmW1GuxqM4ZYob8lOBwwAAAAc"]
[Sun Dec 07 10:28:44.223120 2025] [:error] [pid 25694:tid 25716] [client 66.249.64.101:50677] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTmXEf7996cewJ5N2_LMgAAARQ"]
[Sun Dec 07 10:28:44.541665 2025] [:error] [pid 25600:tid 25610] [client 66.249.64.101:60704] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTmXIX3SVrXRURpt5IFdgAAAEM"]
[Sun Dec 07 10:28:46.908946 2025] [:error] [pid 25694:tid 25696] [client 66.249.64.101:52620] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTmXkf7996cewJ5N2_LOQAAAQA"]
[Sun Dec 07 10:28:49.837254 2025] [:error] [pid 25694:tid 25714] [client 66.249.64.101:47856] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTmYUf7996cewJ5N2_LPAAAARI"]
[Sun Dec 07 10:28:52.771130 2025] [:error] [pid 36068:tid 36080] [client 66.249.64.101:59129] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTmZFGuxqM4ZYob8lOBzgAAAAo"]
[Sun Dec 07 10:28:55.699828 2025] [:error] [pid 25601:tid 25654] [client 66.249.64.101:53895] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTmZ6tsSIqGPs4YVxH_TQAAAJM"]
[Sun Dec 07 10:29:30.238037 2025] [:error] [pid 25600:tid 25607] [client 66.249.64.101:48486] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTmioX3SVrXRURpt5IFwQAAAEA"]
[Sun Dec 07 10:29:33.876792 2025] [:error] [pid 36068:tid 36082] [client 66.249.64.101:53624] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTmjVGuxqM4ZYob8lOCLAAAAAw"]
[Sun Dec 07 10:29:36.942207 2025] [:error] [pid 25602:tid 25685] [client 66.249.64.101:37381] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTmkBMayYLriq9gRdeYuQAAANc"]
[Sun Dec 07 10:29:39.738125 2025] [:error] [pid 25694:tid 25697] [client 66.249.64.101:47569] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTmk0f7996cewJ5N2_LyQAAAQE"]
[Sun Dec 07 10:29:42.674450 2025] [:error] [pid 36068:tid 36088] [client 66.249.64.101:64617] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTmllGuxqM4ZYob8lOCQQAAABI"]
[Sun Dec 07 10:29:46.576346 2025] [:error] [pid 36068:tid 36083] [client 66.249.64.101:57453] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTmmlGuxqM4ZYob8lOCRQAAAA0"]
[Sun Dec 07 10:29:50.158244 2025] [:error] [pid 25601:tid 25643] [client 66.249.64.101:55928] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTmnqtsSIqGPs4YVxH_gAAAAIg"]
[Sun Dec 07 10:29:53.727753 2025] [:error] [pid 25600:tid 25618] [client 66.249.64.101:39385] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTmoYX3SVrXRURpt5IF1wAAAEs"]
[Sun Dec 07 10:29:57.728217 2025] [:error] [pid 36068:tid 36076] [client 66.249.64.101:46900] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTmpVGuxqM4ZYob8lOCYAAAAAY"]
[Sun Dec 07 10:29:59.084256 2025] [:error] [pid 25602:tid 25679] [client 66.249.64.101:38716] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTmpxMayYLriq9gRdeYxAAAANE"]
[Sun Dec 07 10:30:00.542797 2025] [:error] [pid 25694:tid 25702] [client 66.249.64.101:61637] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTmqEf7996cewJ5N2_L3gAAAQY"]
[Sun Dec 07 10:30:03.381672 2025] [:error] [pid 25694:tid 25710] [client 66.249.64.101:50416] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTmq0f7996cewJ5N2_L5AAAAQ4"]
[Sun Dec 07 10:30:06.361359 2025] [:error] [pid 36068:tid 36084] [client 66.249.64.101:61987] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTmrlGuxqM4ZYob8lOCewAAAA4"]
[Sun Dec 07 10:30:09.379107 2025] [:error] [pid 36068:tid 36085] [client 66.249.64.101:59383] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTmsVGuxqM4ZYob8lOCgwAAAA8"]
[Sun Dec 07 10:30:12.192509 2025] [:error] [pid 25600:tid 25612] [client 66.249.64.101:52457] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTmtIX3SVrXRURpt5IF4wAAAEU"]
[Sun Dec 07 10:30:15.339153 2025] [:error] [pid 25602:tid 25674] [client 66.249.64.101:63764] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTmtxMayYLriq9gRdeY-QAAAMw"]
[Sun Dec 07 10:30:18.064789 2025] [:error] [pid 36068:tid 36085] [client 66.249.64.101:42984] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTmulGuxqM4ZYob8lOCiwAAAA8"]
[Sun Dec 07 10:30:20.868133 2025] [:error] [pid 25602:tid 25664] [client 66.249.64.101:45421] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTmvBMayYLriq9gRdeY-wAAAMI"]
[Sun Dec 07 10:30:23.792089 2025] [:error] [pid 36068:tid 36079] [client 66.249.64.101:35876] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTmv1GuxqM4ZYob8lOCjwAAAAk"]
[Sun Dec 07 10:30:26.721087 2025] [:error] [pid 25602:tid 25673] [client 66.249.64.101:51394] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTmwhMayYLriq9gRdeZCQAAAMs"]
[Sun Dec 07 10:31:01.236933 2025] [:error] [pid 25602:tid 25680] [client 66.249.64.101:61388] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTm5RMayYLriq9gRdeZKAAAANI"]
[Sun Dec 07 10:31:04.892729 2025] [:error] [pid 25600:tid 25613] [client 66.249.64.101:45740] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTm6IX3SVrXRURpt5IGEAAAAEY"]
[Sun Dec 07 10:31:07.828545 2025] [:error] [pid 36068:tid 36070] [client 66.249.64.101:60357] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTm61GuxqM4ZYob8lOCygAAAAA"]
[Sun Dec 07 10:31:12.239778 2025] [:error] [pid 25694:tid 25699] [client 66.249.64.101:53587] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTm8Ef7996cewJ5N2_MbAAAAQM"]
[Sun Dec 07 10:31:15.831432 2025] [:error] [pid 25601:tid 25638] [client 66.249.64.101:46551] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTm86tsSIqGPs4YVxH_xAAAAIM"]
[Sun Dec 07 10:31:19.536764 2025] [:error] [pid 36068:tid 36091] [client 66.249.64.101:40545] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTm91GuxqM4ZYob8lOC6QAAABU"]
[Sun Dec 07 10:31:23.367527 2025] [:error] [pid 36068:tid 36086] [client 66.249.64.101:59187] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTm-1GuxqM4ZYob8lOC7QAAABA"]
[Sun Dec 07 10:31:24.571673 2025] [:error] [pid 25601:tid 25647] [client 66.249.64.101:51530] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTm_KtsSIqGPs4YVxH_zwAAAIw"]
[Sun Dec 07 10:31:26.050564 2025] [:error] [pid 25602:tid 25675] [client 66.249.64.101:46496] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTm_hMayYLriq9gRdeZPwAAAM0"]
[Sun Dec 07 10:31:28.384999 2025] [:error] [pid 25600:tid 25631] [client 66.249.64.101:56728] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTnAIX3SVrXRURpt5IGMQAAAFg"]
[Sun Dec 07 10:31:31.329852 2025] [:error] [pid 36068:tid 36089] [client 66.249.64.101:58326] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTnA1GuxqM4ZYob8lOC9wAAABM"]
[Sun Dec 07 10:31:34.281683 2025] [:error] [pid 36068:tid 36072] [client 66.249.64.101:61755] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTnBlGuxqM4ZYob8lOC_AAAAAI"]
[Sun Dec 07 10:31:37.338624 2025] [:error] [pid 25601:tid 25650] [client 66.249.64.101:38631] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTnCatsSIqGPs4YVxH_2AAAAI8"]
[Sun Dec 07 10:31:40.134987 2025] [:error] [pid 25602:tid 25672] [client 66.249.64.101:40109] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTnDBMayYLriq9gRdeZTQAAAMo"]
[Sun Dec 07 10:31:44.878019 2025] [:error] [pid 25602:tid 25681] [client 66.249.64.101:39296] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTnEBMayYLriq9gRdeZVgAAANM"]
[Sun Dec 07 10:31:48.458963 2025] [:error] [pid 25601:tid 25654] [client 66.249.64.101:61065] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTnFKtsSIqGPs4YVxH_5gAAAJM"]
[Sun Dec 07 10:31:49.913673 2025] [:error] [pid 36068:tid 36084] [client 66.249.64.101:58558] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTnFVGuxqM4ZYob8lODDQAAAA4"]
[Sun Dec 07 10:31:51.881197 2025] [:error] [pid 25600:tid 25614] [client 66.249.64.101:40156] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTnF4X3SVrXRURpt5IGSwAAAEc"]
[Sun Dec 07 10:31:54.822564 2025] [:error] [pid 36068:tid 36070] [client 66.249.64.101:40044] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTnGlGuxqM4ZYob8lODLgAAAAA"]
[Sun Dec 07 10:31:57.766802 2025] [:error] [pid 25694:tid 25712] [client 66.249.64.101:49173] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTnHUf7996cewJ5N2_MqwAAARA"]
[Sun Dec 07 10:32:35.367665 2025] [:error] [pid 25601:tid 25659] [client 66.249.64.101:56333] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTnQ6tsSIqGPs4YVxEALwAAAJg"]
[Sun Dec 07 10:32:37.564236 2025] [:error] [pid 25600:tid 25625] [client 66.249.64.101:61616] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTnRYX3SVrXRURpt5IGbwAAAFI"]
[Sun Dec 07 10:32:38.930957 2025] [:error] [pid 25602:tid 25677] [client 66.249.64.101:45860] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTnRhMayYLriq9gRdeZfQAAAM8"]
[Sun Dec 07 10:32:41.826138 2025] [:error] [pid 36068:tid 36085] [client 66.249.64.101:36314] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTnSVGuxqM4ZYob8lODegAAAA8"]
[Sun Dec 07 10:32:44.734458 2025] [:error] [pid 36068:tid 36087] [client 66.249.64.101:61420] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTnTFGuxqM4ZYob8lODfgAAABE"]
[Sun Dec 07 10:32:47.671498 2025] [:error] [pid 25694:tid 25711] [client 66.249.64.101:64442] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTnT0f7996cewJ5N2_M4gAAAQ8"]
[Sun Dec 07 10:32:50.612407 2025] [:error] [pid 36068:tid 36070] [client 66.249.64.101:50724] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTnUlGuxqM4ZYob8lODiQAAAAA"]
[Sun Dec 07 10:32:53.696081 2025] [:error] [pid 25602:tid 25668] [client 66.249.64.101:37684] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTnVRMayYLriq9gRdeZjgAAAMY"]
[Sun Dec 07 10:32:56.483447 2025] [:error] [pid 25600:tid 25610] [client 66.249.64.101:47554] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTnWIX3SVrXRURpt5IGewAAAEM"]
[Sun Dec 07 10:32:59.556747 2025] [:error] [pid 36068:tid 36083] [client 66.249.64.101:37818] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTnW1GuxqM4ZYob8lODnQAAAA0"]
[Sun Dec 07 10:33:01.993799 2025] [:error] [pid 25602:tid 25664] [client 35.242.254.186:36744] [client 35.242.254.186] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 35.242.254.186, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTTnXRMayYLriq9gRdeZlgAAAMI"]
[Sun Dec 07 10:33:02.348160 2025] [:error] [pid 25602:tid 25674] [client 66.249.64.101:46501] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTnXhMayYLriq9gRdeZlwAAAMw"]
[Sun Dec 07 10:33:05.355184 2025] [:error] [pid 25602:tid 25675] [client 66.249.64.101:42816] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTnYRMayYLriq9gRdeZnwAAAM0"]
[Sun Dec 07 10:33:08.560783 2025] [:error] [pid 36068:tid 36093] [client 66.249.64.101:59992] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTnZFGuxqM4ZYob8lODqQAAABc"]
[Sun Dec 07 10:33:11.156545 2025] [:error] [pid 36068:tid 36074] [client 66.249.64.101:44880] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTnZ1GuxqM4ZYob8lODqwAAAAQ"]
[Sun Dec 07 10:33:14.791658 2025] [:error] [pid 25694:tid 25699] [client 66.249.64.101:61789] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTnakf7996cewJ5N2_M8gAAAQM"]
[Sun Dec 07 10:33:17.029642 2025] [:error] [pid 25694:tid 25712] [client 66.249.64.101:61027] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTnbUf7996cewJ5N2_M9gAAARA"]
[Sun Dec 07 10:33:20.112222 2025] [:error] [pid 36068:tid 36086] [client 66.249.64.101:46493] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTncFGuxqM4ZYob8lODvgAAABA"]
[Sun Dec 07 10:33:22.907025 2025] [:error] [pid 25601:tid 25652] [client 66.249.64.101:62107] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTncqtsSIqGPs4YVxEAUgAAAJE"]
[Sun Dec 07 10:33:25.851149 2025] [:error] [pid 25602:tid 25667] [client 66.249.64.101:59937] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTndRMayYLriq9gRdeZ8gAAAMU"]
[Sun Dec 07 10:33:28.679133 2025] [:error] [pid 25600:tid 25622] [client 66.249.64.101:39114] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTneIX3SVrXRURpt5IG3gAAAE8"]
[Sun Dec 07 10:34:18.026812 2025] [:error] [pid 25694:tid 25719] [client 66.249.64.101:42482] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTnqkf7996cewJ5N2_NcQAAARc"]
[Sun Dec 07 10:34:22.435475 2025] [:error] [pid 36068:tid 36073] [client 66.249.64.101:47872] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTnrlGuxqM4ZYob8lOEHwAAAAM"]
[Sun Dec 07 10:34:24.563805 2025] [:error] [pid 36068:tid 36082] [client 66.249.64.101:37441] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTnsFGuxqM4ZYob8lOEJAAAAAw"]
[Sun Dec 07 10:34:27.492674 2025] [:error] [pid 25694:tid 25710] [client 66.249.64.101:63472] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTns0f7996cewJ5N2_NegAAAQ4"]
[Sun Dec 07 10:34:30.421338 2025] [:error] [pid 36068:tid 36077] [client 66.249.64.101:45814] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTntlGuxqM4ZYob8lOELAAAAAc"]
[Sun Dec 07 10:34:33.361900 2025] [:error] [pid 25602:tid 25664] [client 66.249.64.101:45766] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTnuRMayYLriq9gRdealwAAAMI"]
[Sun Dec 07 10:34:36.279622 2025] [:error] [pid 25694:tid 25713] [client 66.249.64.101:63507] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTnvEf7996cewJ5N2_NgQAAARE"]
[Sun Dec 07 10:34:39.369202 2025] [:error] [pid 25601:tid 25652] [client 66.249.64.101:34975] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTnv6tsSIqGPs4YVxEAjgAAAJE"]
[Sun Dec 07 10:34:42.311331 2025] [:error] [pid 25694:tid 25699] [client 66.249.64.101:63847] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTnwkf7996cewJ5N2_NhQAAAQM"]
[Sun Dec 07 10:34:45.102908 2025] [:error] [pid 25602:tid 25664] [client 66.249.64.101:56709] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTnxRMayYLriq9gRdeaogAAAMI"]
[Sun Dec 07 10:34:48.193474 2025] [:error] [pid 25601:tid 25637] [client 66.249.64.101:60906] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTnyKtsSIqGPs4YVxEAmwAAAII"]
[Sun Dec 07 10:34:51.116842 2025] [:error] [pid 25694:tid 25719] [client 66.249.64.101:59762] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTny0f7996cewJ5N2_NlAAAARc"]
[Sun Dec 07 10:34:53.912481 2025] [:error] [pid 25602:tid 25669] [client 66.249.64.101:38857] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTnzRMayYLriq9gRdeaqwAAAMc"]
[Sun Dec 07 10:34:56.842272 2025] [:error] [pid 36068:tid 36084] [client 66.249.64.101:55489] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTn0FGuxqM4ZYob8lOEPgAAAA4"]
[Sun Dec 07 10:34:59.776732 2025] [:error] [pid 25601:tid 25644] [client 66.249.64.101:39110] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTn06tsSIqGPs4YVxEAowAAAIk"]
[Sun Dec 07 10:35:03.369475 2025] [:error] [pid 36068:tid 36094] [client 66.249.64.101:39470] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTn11GuxqM4ZYob8lOERQAAABg"]
[Sun Dec 07 10:35:06.960632 2025] [:error] [pid 25601:tid 25657] [client 66.249.64.101:47921] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTn2qtsSIqGPs4YVxEAqgAAAJY"]
[Sun Dec 07 10:35:10.528245 2025] [:error] [pid 25601:tid 25651] [client 66.249.64.101:63295] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTn3qtsSIqGPs4YVxEArgAAAJA"]
[Sun Dec 07 10:35:14.407159 2025] [:error] [pid 36068:tid 36093] [client 66.249.64.101:48799] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTn4lGuxqM4ZYob8lOESgAAABc"]
[Sun Dec 07 10:35:52.133743 2025] [:error] [pid 36068:tid 36082] [client 66.249.64.101:34817] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTToCFGuxqM4ZYob8lOEfAAAAAw"]
[Sun Dec 07 10:35:56.758275 2025] [:error] [pid 25601:tid 25641] [client 66.249.64.101:64570] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTToDKtsSIqGPs4YVxEAzAAAAIY"]
[Sun Dec 07 10:36:00.351119 2025] [:error] [pid 25601:tid 25649] [client 66.249.64.101:53902] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTToEKtsSIqGPs4YVxEAzgAAAI4"]
[Sun Dec 07 10:36:03.913628 2025] [:error] [pid 25602:tid 25665] [client 66.249.64.101:48631] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTToExMayYLriq9gRdebBQAAAMM"]
[Sun Dec 07 10:36:05.972054 2025] [:error] [pid 25600:tid 25617] [client 66.249.64.101:41787] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTToFYX3SVrXRURpt5IHeAAAAEo"]
[Sun Dec 07 10:36:18.720019 2025] [:error] [pid 36068:tid 36084] [client 66.249.64.101:35666] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTToIlGuxqM4ZYob8lOEwwAAAA4"]
[Sun Dec 07 10:36:20.256742 2025] [:error] [pid 25694:tid 25700] [client 66.249.64.101:64553] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTToJEf7996cewJ5N2_N_gAAAQQ"]
[Sun Dec 07 10:36:21.670723 2025] [:error] [pid 25602:tid 25666] [client 66.249.64.101:45116] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTToJRMayYLriq9gRdebFAAAAMQ"]
[Sun Dec 07 10:36:23.139623 2025] [:error] [pid 25602:tid 25683] [client 66.249.64.101:41191] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTToJxMayYLriq9gRdebFgAAANU"]
[Sun Dec 07 10:36:24.610495 2025] [:error] [pid 25602:tid 25674] [client 66.249.64.101:58767] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTToKBMayYLriq9gRdebGwAAAMw"]
[Sun Dec 07 10:36:26.076329 2025] [:error] [pid 25694:tid 25712] [client 66.249.64.101:64314] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTToKkf7996cewJ5N2_OAQAAARA"]
[Sun Dec 07 10:36:29.015701 2025] [:error] [pid 25600:tid 25622] [client 66.249.64.101:54485] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTToLYX3SVrXRURpt5IHgAAAAE8"]
[Sun Dec 07 10:36:31.951696 2025] [:error] [pid 25602:tid 25664] [client 66.249.64.101:62513] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTToLxMayYLriq9gRdebIQAAAMI"]
[Sun Dec 07 10:36:34.872953 2025] [:error] [pid 25602:tid 25668] [client 66.249.64.101:45765] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTToMhMayYLriq9gRdebJAAAAMY"]
[Sun Dec 07 10:36:37.819749 2025] [:error] [pid 25694:tid 25708] [client 66.249.64.101:45097] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTToNUf7996cewJ5N2_ODAAAAQw"]
[Sun Dec 07 10:36:40.760157 2025] [:error] [pid 36068:tid 36077] [client 66.249.64.101:58958] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTToOFGuxqM4ZYob8lOE3AAAAAc"]
[Sun Dec 07 10:36:43.679350 2025] [:error] [pid 25601:tid 25645] [client 66.249.64.101:63823] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTToO6tsSIqGPs4YVxEBHAAAAIo"]
[Sun Dec 07 10:36:46.638699 2025] [:error] [pid 25602:tid 25669] [client 66.249.64.101:63369] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTToPhMayYLriq9gRdebLAAAAMc"]
[Sun Dec 07 10:37:22.356341 2025] [:error] [pid 25600:tid 25613] [client 66.249.64.101:61903] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTToYoX3SVrXRURpt5IHvwAAAEY"]
[Sun Dec 07 10:37:24.709144 2025] [:error] [pid 25694:tid 25712] [client 66.249.64.101:49037] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTToZEf7996cewJ5N2_ORQAAARA"]
[Sun Dec 07 10:37:29.022021 2025] [:error] [pid 25601:tid 25650] [client 66.249.64.101:41763] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTToaatsSIqGPs4YVxEBTQAAAI8"]
[Sun Dec 07 10:37:29.143229 2025] [:error] [pid 25602:tid 25683] [client 66.249.64.101:60383] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTToaRMayYLriq9gRdebUQAAANU"]
[Sun Dec 07 10:37:30.695431 2025] [:error] [pid 25601:tid 25657] [client 66.249.64.101:51132] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTToaqtsSIqGPs4YVxEBTgAAAJY"]
[Sun Dec 07 10:37:33.624950 2025] [:error] [pid 36068:tid 36084] [client 66.249.64.101:56556] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTobVGuxqM4ZYob8lOFQQAAAA4"]
[Sun Dec 07 10:37:36.545991 2025] [:error] [pid 25600:tid 25620] [client 66.249.64.101:48777] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTocIX3SVrXRURpt5IHzQAAAE0"]
[Sun Dec 07 10:37:39.484167 2025] [:error] [pid 25694:tid 25699] [client 66.249.64.101:54705] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTToc0f7996cewJ5N2_OVQAAAQM"]
[Sun Dec 07 10:37:42.427463 2025] [:error] [pid 25694:tid 25706] [client 66.249.64.101:51206] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTodkf7996cewJ5N2_OWwAAAQo"]
[Sun Dec 07 10:37:45.371139 2025] [:error] [pid 25600:tid 25627] [client 66.249.64.101:64666] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTToeYX3SVrXRURpt5IH3gAAAFQ"]
[Sun Dec 07 10:37:48.286485 2025] [:error] [pid 25602:tid 25684] [client 66.249.64.101:40790] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTofBMayYLriq9gRdebYwAAANY"]
[Sun Dec 07 10:37:51.244108 2025] [:error] [pid 25694:tid 25717] [client 66.249.64.101:58161] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTof0f7996cewJ5N2_OZQAAARU"]
[Sun Dec 07 10:37:54.068336 2025] [:error] [pid 25600:tid 25627] [client 66.249.64.101:50424] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTogoX3SVrXRURpt5IH6AAAAFQ"]
[Sun Dec 07 10:37:57.097234 2025] [:error] [pid 25694:tid 25714] [client 66.249.64.101:59273] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTohUf7996cewJ5N2_OdQAAARI"]
[Sun Dec 07 10:38:00.029720 2025] [:error] [pid 25601:tid 25651] [client 66.249.64.101:63852] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTToiKtsSIqGPs4YVxEBcwAAAJA"]
[Sun Dec 07 10:38:02.970236 2025] [:error] [pid 25602:tid 25677] [client 66.249.64.101:53484] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTToihMayYLriq9gRdebbwAAAM8"]
[Sun Dec 07 10:38:06.115216 2025] [:error] [pid 25602:tid 25673] [client 66.249.64.101:62884] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTojhMayYLriq9gRdebdgAAAMs"]
[Sun Dec 07 10:38:08.849761 2025] [:error] [pid 36068:tid 36085] [client 66.249.64.101:55137] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTokFGuxqM4ZYob8lOFiAAAAA8"]
[Sun Dec 07 10:38:11.681810 2025] [:error] [pid 25602:tid 25679] [client 66.249.64.101:38511] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTokxMayYLriq9gRdebfAAAANE"]
[Sun Dec 07 10:38:14.944151 2025] [:error] [pid 25694:tid 25701] [client 66.249.64.101:40258] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTolkf7996cewJ5N2_OmwAAAQU"]
[Sun Dec 07 10:38:17.651741 2025] [:error] [pid 36068:tid 36085] [client 66.249.64.101:49564] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTomVGuxqM4ZYob8lOFpAAAAA8"]
[Sun Dec 07 10:38:52.154895 2025] [:error] [pid 25600:tid 25629] [client 66.249.64.101:45881] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTovIX3SVrXRURpt5IIPAAAAFY"]
[Sun Dec 07 10:38:55.823537 2025] [:error] [pid 36068:tid 36080] [client 66.249.64.101:62576] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTov1GuxqM4ZYob8lOGGAAAAAo"]
[Sun Dec 07 10:38:58.756565 2025] [:error] [pid 25600:tid 25618] [client 66.249.64.101:48628] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTowoX3SVrXRURpt5IIQgAAAEs"]
[Sun Dec 07 10:39:04.627360 2025] [:error] [pid 25694:tid 25709] [client 66.249.64.101:63660] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTToyEf7996cewJ5N2_PDAAAAQ0"]
[Sun Dec 07 10:39:07.571388 2025] [:error] [pid 25694:tid 25719] [client 66.249.64.101:54211] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTToy0f7996cewJ5N2_PEQAAARc"]
[Sun Dec 07 10:39:13.558236 2025] [:error] [pid 25601:tid 25652] [client 66.249.64.101:49503] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTo0atsSIqGPs4YVxEB2gAAAJE"]
[Sun Dec 07 10:39:16.377862 2025] [:error] [pid 25600:tid 25629] [client 66.249.64.101:50043] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTo1IX3SVrXRURpt5IIUwAAAFY"]
[Sun Dec 07 10:39:19.305827 2025] [:error] [pid 36068:tid 36088] [client 66.249.64.101:36619] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTo11GuxqM4ZYob8lOGTwAAABI"]
[Sun Dec 07 10:39:22.428901 2025] [:error] [pid 25602:tid 25672] [client 66.249.64.101:58886] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTo2hMayYLriq9gRdeb9AAAAMo"]
[Sun Dec 07 10:39:25.177954 2025] [:error] [pid 36068:tid 36079] [client 66.249.64.101:49902] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTo3VGuxqM4ZYob8lOGWAAAAAk"]
[Sun Dec 07 10:39:28.109292 2025] [:error] [pid 36068:tid 36092] [client 66.249.64.101:43719] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTo4FGuxqM4ZYob8lOGXwAAABY"]
[Sun Dec 07 10:39:31.041772 2025] [:error] [pid 36068:tid 36085] [client 66.249.64.101:54768] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTo41GuxqM4ZYob8lOGaAAAAA8"]
[Sun Dec 07 10:39:33.971924 2025] [:error] [pid 25694:tid 25718] [client 66.249.64.101:62879] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTo5Uf7996cewJ5N2_PYgAAARY"]
[Sun Dec 07 10:39:36.921217 2025] [:error] [pid 25602:tid 25669] [client 66.249.64.101:35747] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTo6BMayYLriq9gRdecMQAAAMc"]
[Sun Dec 07 10:39:39.853534 2025] [:error] [pid 25602:tid 25663] [client 66.249.64.101:64601] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTo6xMayYLriq9gRdecOgAAAME"]
[Sun Dec 07 10:39:42.786880 2025] [:error] [pid 25602:tid 25669] [client 66.249.64.101:60760] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTo7hMayYLriq9gRdecQAAAAMc"]
[Sun Dec 07 10:39:45.712308 2025] [:error] [pid 25694:tid 25704] [client 66.249.64.101:41836] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTo8Uf7996cewJ5N2_PbwAAAQg"]
[Sun Dec 07 10:39:48.660712 2025] [:error] [pid 25602:tid 25686] [client 66.249.64.101:50507] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTo9BMayYLriq9gRdecRgAAANg"]
[Sun Dec 07 10:40:24.115856 2025] [:error] [pid 36068:tid 36081] [client 66.249.64.101:58063] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTpGFGuxqM4ZYob8lOHNQAAAAs"]
[Sun Dec 07 10:40:27.687680 2025] [:error] [pid 25600:tid 25607] [client 66.249.64.101:44536] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTpG4X3SVrXRURpt5IImgAAAEA"]
[Sun Dec 07 10:40:29.787506 2025] [:error] [pid 25601:tid 25643] [client 66.249.64.101:60934] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTpHatsSIqGPs4YVxECTwAAAIg"]
[Sun Dec 07 10:40:35.158194 2025] [:error] [pid 25694:tid 25702] [client 66.249.64.101:38074] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTpI0f7996cewJ5N2_P0wAAAQY"]
[Sun Dec 07 10:40:38.738289 2025] [:error] [pid 25601:tid 25636] [client 66.249.64.101:54940] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTpJqtsSIqGPs4YVxECVAAAAIE"]
[Sun Dec 07 10:40:42.320082 2025] [:error] [pid 25601:tid 25654] [client 66.249.64.101:56794] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTpKqtsSIqGPs4YVxECVwAAAJM"]
[Sun Dec 07 10:40:43.791671 2025] [:error] [pid 25600:tid 25609] [client 66.249.64.101:45528] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTpK4X3SVrXRURpt5IItAAAAEI"]
[Sun Dec 07 10:40:45.260020 2025] [:error] [pid 25600:tid 25620] [client 66.249.64.101:37783] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTpLYX3SVrXRURpt5IIuwAAAE0"]
[Sun Dec 07 10:40:47.406067 2025] [:error] [pid 25600:tid 25628] [client 66.249.64.101:51873] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTpL4X3SVrXRURpt5IIvQAAAFU"]
[Sun Dec 07 10:40:50.334984 2025] [:error] [pid 25694:tid 25708] [client 66.249.64.101:61913] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTpMkf7996cewJ5N2_P4QAAAQw"]
[Sun Dec 07 10:40:53.283029 2025] [:error] [pid 25602:tid 25664] [client 66.249.64.101:60741] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTpNRMayYLriq9gRdectwAAAMI"]
[Sun Dec 07 10:40:56.209796 2025] [:error] [pid 25602:tid 25684] [client 66.249.64.101:55889] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTpOBMayYLriq9gRdecvAAAANY"]
[Sun Dec 07 10:40:59.054601 2025] [:error] [pid 36068:tid 36080] [client 66.249.64.101:57340] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTpO1GuxqM4ZYob8lOHgwAAAAo"]
[Sun Dec 07 10:41:02.067743 2025] [:error] [pid 36068:tid 36091] [client 66.249.64.101:44657] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTpPlGuxqM4ZYob8lOHigAAABU"]
[Sun Dec 07 10:41:05.031799 2025] [:error] [pid 25602:tid 25685] [client 66.249.64.101:63457] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTpQRMayYLriq9gRdecwgAAANc"]
[Sun Dec 07 10:41:07.934561 2025] [:error] [pid 25694:tid 25702] [client 66.249.64.101:61558] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTpQ0f7996cewJ5N2_P-gAAAQY"]
[Sun Dec 07 10:41:10.883128 2025] [:error] [pid 25601:tid 25659] [client 66.249.64.101:62794] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTpRqtsSIqGPs4YVxECcwAAAJg"]
[Sun Dec 07 10:41:13.824061 2025] [:error] [pid 36068:tid 36094] [client 66.249.64.101:39306] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTpSVGuxqM4ZYob8lOHmQAAABg"]
[Sun Dec 07 10:41:16.896317 2025] [:error] [pid 25601:tid 25642] [client 66.249.64.101:40757] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTpTKtsSIqGPs4YVxECeQAAAIc"]
[Sun Dec 07 10:41:19.693911 2025] [:error] [pid 25600:tid 25619] [client 66.249.64.101:35061] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTpT4X3SVrXRURpt5IIzwAAAEw"]
[Sun Dec 07 10:41:56.506057 2025] [:error] [pid 36068:tid 36074] [client 66.249.64.101:55572] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTpdFGuxqM4ZYob8lOH7gAAAAQ"]
[Sun Dec 07 10:41:58.673775 2025] [:error] [pid 25694:tid 25701] [client 66.249.64.101:65204] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTpdkf7996cewJ5N2_QRgAAAQU"]
[Sun Dec 07 10:42:00.821948 2025] [:error] [pid 36068:tid 36094] [client 66.249.64.101:55113] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTpeFGuxqM4ZYob8lOH8QAAABg"]
[Sun Dec 07 10:42:06.690706 2025] [:error] [pid 25600:tid 25629] [client 66.249.64.101:44236] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTpfoX3SVrXRURpt5II5QAAAFY"]
[Sun Dec 07 10:42:12.461648 2025] [:error] [pid 25600:tid 25607] [client 66.249.64.101:53682] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTphIX3SVrXRURpt5II6gAAAEA"]
[Sun Dec 07 10:42:18.227752 2025] [:error] [pid 36068:tid 36080] [client 66.249.64.101:37648] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTpilGuxqM4ZYob8lOICwAAAAo"]
[Sun Dec 07 10:42:26.972619 2025] [:error] [pid 25694:tid 25716] [client 66.249.64.101:35640] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTpkkf7996cewJ5N2_QYwAAARQ"]
[Sun Dec 07 10:42:29.856915 2025] [:error] [pid 25694:tid 25719] [client 66.249.64.101:52414] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTplUf7996cewJ5N2_QawAAARc"]
[Sun Dec 07 10:42:35.541545 2025] [:error] [pid 25600:tid 25612] [client 66.249.64.101:60675] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTpm4X3SVrXRURpt5IJCgAAAEU"]
[Sun Dec 07 10:42:41.308046 2025] [:error] [pid 25600:tid 25626] [client 66.249.64.101:52343] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTpoYX3SVrXRURpt5IJEAAAAFM"]
[Sun Dec 07 10:42:47.082813 2025] [:error] [pid 25694:tid 25696] [client 66.249.64.101:39439] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTpp0f7996cewJ5N2_QeAAAAQA"]
[Sun Dec 07 10:44:30.262668 2025] [:error] [pid 36068:tid 36086] [client 66.249.64.101:49596] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTqDlGuxqM4ZYob8lOIrQAAABA"]
[Sun Dec 07 10:44:36.853908 2025] [:error] [pid 25602:tid 25674] [client 66.249.64.101:34977] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTqFBMayYLriq9gRdeddQAAAMw"]
[Sun Dec 07 10:44:42.495807 2025] [:error] [pid 36068:tid 36087] [client 66.249.64.101:38974] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTqGlGuxqM4ZYob8lOIugAAABE"]
[Sun Dec 07 10:44:48.261042 2025] [:error] [pid 36068:tid 36080] [client 66.249.64.101:53785] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTqIFGuxqM4ZYob8lOIwAAAAAo"]
[Sun Dec 07 10:44:54.030996 2025] [:error] [pid 25600:tid 25616] [client 66.249.64.101:38003] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTqJoX3SVrXRURpt5IJhgAAAEk"]
[Sun Dec 07 10:44:59.813732 2025] [:error] [pid 25602:tid 25665] [client 66.249.64.101:40302] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTqKxMayYLriq9gRdedfgAAAMM"]
[Sun Dec 07 10:45:11.341596 2025] [:error] [pid 25694:tid 25703] [client 66.249.64.101:65367] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTqN0f7996cewJ5N2_Q_AAAAQc"]
[Sun Dec 07 10:45:17.122283 2025] [:error] [pid 25600:tid 25624] [client 66.249.64.101:62697] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTqPYX3SVrXRURpt5IJkgAAAFE"]
[Sun Dec 07 10:45:22.879847 2025] [:error] [pid 36068:tid 36090] [client 66.249.64.101:61561] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTqQlGuxqM4ZYob8lOI4AAAABQ"]
[Sun Dec 07 10:46:41.704220 2025] [:error] [pid 36068:tid 36079] [client 66.249.64.101:46653] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTqkVGuxqM4ZYob8lOJNwAAAAk"]
[Sun Dec 07 10:46:46.650781 2025] [:error] [pid 25601:tid 25640] [client 66.249.64.101:47880] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTqlqtsSIqGPs4YVxEDYQAAAIU"]
[Sun Dec 07 10:46:49.460537 2025] [:error] [pid 25600:tid 25614] [client 66.249.64.101:63618] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTqmYX3SVrXRURpt5IJ4gAAAEc"]
[Sun Dec 07 10:46:55.237648 2025] [:error] [pid 25601:tid 25651] [client 66.249.64.101:41732] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTqn6tsSIqGPs4YVxEDZQAAAJA"]
[Sun Dec 07 10:47:01.041169 2025] [:error] [pid 25601:tid 25640] [client 66.249.64.101:49051] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTqpatsSIqGPs4YVxEDawAAAIU"]
[Sun Dec 07 10:47:12.539578 2025] [:error] [pid 25600:tid 25626] [client 66.249.64.101:55313] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTqsIX3SVrXRURpt5IJ7QAAAFM"]
[Sun Dec 07 10:56:25.036722 2025] [:error] [pid 25694:tid 25702] [client 4.233.91.203:56398] [client 4.233.91.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/userfuns.php"] [unique_id "aTTs2Uf7996cewJ5N2_TrwAAAQY"], referer: www.google.com
[Sun Dec 07 10:59:11.762244 2025] [:error] [pid 36068:tid 36074] [client 66.249.64.101:58039] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTtf1GuxqM4ZYob8lONPQAAAAQ"]
[Sun Dec 07 10:59:23.400799 2025] [:error] [pid 25602:tid 25664] [client 66.249.64.101:37059] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTtixMayYLriq9gRdeg5QAAAMI"]
[Sun Dec 07 10:59:29.136697 2025] [:error] [pid 25694:tid 25710] [client 66.249.64.101:54551] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTtkUf7996cewJ5N2_VBwAAAQ4"]
[Sun Dec 07 10:59:37.119762 2025] [:error] [pid 25602:tid 25682] [client 66.249.64.101:59863] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTtmRMayYLriq9gRdeg9AAAANQ"]
[Sun Dec 07 10:59:42.879444 2025] [:error] [pid 36068:tid 36087] [client 66.249.64.101:45028] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTtnlGuxqM4ZYob8lONXQAAABE"]
[Sun Dec 07 10:59:48.650938 2025] [:error] [pid 25602:tid 25685] [client 66.249.64.101:48520] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTtpBMayYLriq9gRdeg-QAAANc"]
[Sun Dec 07 11:01:22.197180 2025] [:error] [pid 36068:tid 36074] [client 66.249.64.101:64257] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTuAlGuxqM4ZYob8lON6AAAAAQ"]
[Sun Dec 07 11:01:27.949725 2025] [:error] [pid 36068:tid 36090] [client 66.249.64.101:35918] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTuB1GuxqM4ZYob8lON9AAAABQ"]
[Sun Dec 07 11:01:34.721002 2025] [:error] [pid 25600:tid 25625] [client 66.249.64.101:44306] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTuDoX3SVrXRURpt5INXAAAAFI"]
[Sun Dec 07 11:01:40.466932 2025] [:error] [pid 25602:tid 25677] [client 66.249.64.101:55205] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTuFBMayYLriq9gRdehZQAAAM8"]
[Sun Dec 07 11:01:46.353547 2025] [:error] [pid 25694:tid 25714] [client 66.249.64.101:59152] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTuGkf7996cewJ5N2_VtgAAARI"]
[Sun Dec 07 11:01:53.818297 2025] [:error] [pid 25601:tid 25638] [client 66.249.64.101:58994] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTuIatsSIqGPs4YVxEIAgAAAIM"]
[Sun Dec 07 11:01:56.715854 2025] [:error] [pid 25694:tid 25719] [client 66.249.64.101:46901] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTuJEf7996cewJ5N2_VvgAAARc"]
[Sun Dec 07 11:01:59.604703 2025] [:error] [pid 25694:tid 25715] [client 66.249.64.101:45574] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTuJ0f7996cewJ5N2_VwQAAARM"]
[Sun Dec 07 11:02:02.495368 2025] [:error] [pid 25600:tid 25622] [client 66.249.64.101:54916] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTuKoX3SVrXRURpt5INhQAAAE8"]
[Sun Dec 07 11:02:05.377349 2025] [:error] [pid 36068:tid 36076] [client 66.249.64.101:59252] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTuLVGuxqM4ZYob8lOOOwAAAAY"]
[Sun Dec 07 11:02:08.258495 2025] [:error] [pid 36068:tid 36092] [client 66.249.64.101:41946] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTuMFGuxqM4ZYob8lOOPQAAABY"]
[Sun Dec 07 11:02:12.978245 2025] [:error] [pid 25602:tid 25685] [client 66.249.64.101:36145] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTuNBMayYLriq9gRdehegAAANc"]
[Sun Dec 07 11:03:30.948598 2025] [:error] [pid 25600:tid 25631] [client 66.249.64.101:48561] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTugoX3SVrXRURpt5IN2wAAAFg"]
[Sun Dec 07 11:03:33.829326 2025] [:error] [pid 25602:tid 25684] [client 66.249.64.101:42038] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTuhRMayYLriq9gRdehzAAAANY"]
[Sun Dec 07 11:03:36.711681 2025] [:error] [pid 25602:tid 25666] [client 66.249.64.101:65512] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTuiBMayYLriq9gRdeh0QAAAMQ"]
[Sun Dec 07 11:03:39.621339 2025] [:error] [pid 25602:tid 25667] [client 66.249.64.101:47613] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTuixMayYLriq9gRdeh2QAAAMU"]
[Sun Dec 07 11:03:45.209663 2025] [:error] [pid 25694:tid 25717] [client 66.249.64.101:44548] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTukUf7996cewJ5N2_WTgAAARU"]
[Sun Dec 07 11:03:51.090682 2025] [:error] [pid 36068:tid 36091] [client 66.249.64.101:44148] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTul1GuxqM4ZYob8lOO9AAAABU"]
[Sun Dec 07 11:03:58.436302 2025] [:error] [pid 36068:tid 36080] [client 66.249.64.101:65268] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTunlGuxqM4ZYob8lOPGwAAAAo"]
[Sun Dec 07 11:04:14.165294 2025] [:error] [pid 25602:tid 25667] [client 66.249.64.101:39606] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTurhMayYLriq9gRdeiHAAAAMU"]
[Sun Dec 07 11:04:20.085217 2025] [:error] [pid 36068:tid 36072] [client 66.249.64.101:45925] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTutFGuxqM4ZYob8lOPUwAAAAI"]
[Sun Dec 07 11:05:28.458192 2025] [:error] [pid 36068:tid 36093] [client 66.249.64.101:46957] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTu-FGuxqM4ZYob8lOPwgAAABc"]
[Sun Dec 07 11:05:34.957074 2025] [:error] [pid 25694:tid 25704] [client 66.249.64.101:36801] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTu_kf7996cewJ5N2_WzwAAAQg"]
[Sun Dec 07 11:05:40.733830 2025] [:error] [pid 25602:tid 25664] [client 66.249.64.101:48567] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTvBBMayYLriq9gRdeibwAAAMI"]
[Sun Dec 07 11:05:46.498748 2025] [:error] [pid 25602:tid 25681] [client 66.249.64.101:36045] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTvChMayYLriq9gRdeidAAAANM"]
[Sun Dec 07 11:05:52.275757 2025] [:error] [pid 36068:tid 36093] [client 66.249.64.101:58366] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTvEFGuxqM4ZYob8lOQMgAAABc"]
[Sun Dec 07 11:05:58.031937 2025] [:error] [pid 36068:tid 36078] [client 66.249.64.101:36530] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTvFlGuxqM4ZYob8lOQOwAAAAg"]
[Sun Dec 07 11:06:03.808792 2025] [:error] [pid 25600:tid 25614] [client 66.249.64.101:39998] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTvG4X3SVrXRURpt5IOxwAAAEc"]
[Sun Dec 07 11:06:15.369058 2025] [:error] [pid 36068:tid 36087] [client 66.249.64.101:40430] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTvJ1GuxqM4ZYob8lOQXgAAABE"]
[Sun Dec 07 11:07:40.550390 2025] [:error] [pid 25694:tid 25717] [client 66.249.64.101:49916] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTvfEf7996cewJ5N2_X0gAAARU"]
[Sun Dec 07 11:07:44.156678 2025] [:error] [pid 25602:tid 25682] [client 66.249.64.101:42050] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTvgBMayYLriq9gRdei6AAAANQ"]
[Sun Dec 07 11:07:47.712194 2025] [:error] [pid 25694:tid 25705] [client 66.249.64.101:63424] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTvg0f7996cewJ5N2_X3QAAAQk"]
[Sun Dec 07 11:07:53.514487 2025] [:error] [pid 25600:tid 25628] [client 66.249.64.101:43226] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTviYX3SVrXRURpt5IPpAAAAFU"]
[Sun Dec 07 11:07:59.260058 2025] [:error] [pid 25600:tid 25625] [client 66.249.64.101:62231] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTvj4X3SVrXRURpt5IPpwAAAFI"]
[Sun Dec 07 11:08:08.626169 2025] [:error] [pid 36068:tid 36091] [client 66.249.64.101:44973] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTvmFGuxqM4ZYob8lOREgAAABU"]
[Sun Dec 07 11:08:25.627300 2025] [:error] [pid 25600:tid 25613] [client 66.249.64.101:43381] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTvqYX3SVrXRURpt5IPuQAAAEY"]
[Sun Dec 07 11:08:31.512898 2025] [:error] [pid 36068:tid 36086] [client 66.249.64.101:47270] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTvr1GuxqM4ZYob8lORJQAAABA"]
[Sun Dec 07 11:09:37.399439 2025] [:error] [pid 25600:tid 25613] [client 66.249.64.101:37676] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTv8YX3SVrXRURpt5IP8AAAAEY"]
[Sun Dec 07 11:09:38.609744 2025] [:error] [pid 25694:tid 25716] [client 66.249.64.101:46081] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTv8kf7996cewJ5N2_YcAAAARQ"]
[Sun Dec 07 11:09:44.577938 2025] [:error] [pid 36068:tid 36092] [client 66.249.64.101:52536] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTv-FGuxqM4ZYob8lORfwAAABY"]
[Sun Dec 07 11:09:48.922058 2025] [:error] [pid 25694:tid 25703] [client 66.249.64.101:46070] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTv_Ef7996cewJ5N2_YdwAAAQc"]
[Sun Dec 07 11:09:55.001269 2025] [:error] [pid 36068:tid 36075] [client 66.249.64.101:44617] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTwAlGuxqM4ZYob8lORjAAAAAU"]
[Sun Dec 07 11:10:00.760709 2025] [:error] [pid 25694:tid 25696] [client 66.249.64.101:50898] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTwCEf7996cewJ5N2_YhwAAAQA"]
[Sun Dec 07 11:10:06.503426 2025] [:error] [pid 25600:tid 25610] [client 66.249.64.101:41548] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTwDoX3SVrXRURpt5IQBwAAAEM"]
[Sun Dec 07 11:10:12.364402 2025] [:error] [pid 25694:tid 25718] [client 66.249.64.101:63105] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTwFEf7996cewJ5N2_YkwAAARY"]
[Sun Dec 07 11:10:17.787900 2025] [:error] [pid 25601:tid 25649] [client 66.249.64.101:35412] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTwGatsSIqGPs4YVxEJ_QAAAI4"]
[Sun Dec 07 11:10:23.548270 2025] [:error] [pid 25600:tid 25608] [client 66.249.64.101:53960] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTwH4X3SVrXRURpt5IQFQAAAEE"]
[Sun Dec 07 11:10:29.465293 2025] [:error] [pid 25694:tid 25720] [client 66.249.64.101:65464] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTwJUf7996cewJ5N2_YnQAAARg"]
[Sun Dec 07 11:11:44.344823 2025] [:error] [pid 36068:tid 36093] [client 66.249.64.101:53709] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTwcFGuxqM4ZYob8lOSIwAAABc"]
[Sun Dec 07 11:11:50.118264 2025] [:error] [pid 25694:tid 25718] [client 66.249.64.101:36102] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTwdkf7996cewJ5N2_Y-wAAARY"]
[Sun Dec 07 11:11:55.892508 2025] [:error] [pid 25602:tid 25677] [client 66.249.64.101:51806] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTwexMayYLriq9gRdejwgAAAM8"]
[Sun Dec 07 11:12:07.421786 2025] [:error] [pid 25602:tid 25683] [client 66.249.64.101:40568] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTwhxMayYLriq9gRdej1gAAANU"]
[Sun Dec 07 11:12:13.212798 2025] [:error] [pid 25694:tid 25703] [client 66.249.64.101:59565] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTwjUf7996cewJ5N2_ZDwAAAQc"]
[Sun Dec 07 11:12:18.963527 2025] [:error] [pid 25694:tid 25709] [client 66.249.64.101:44791] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTwkkf7996cewJ5N2_ZFgAAAQ0"]
[Sun Dec 07 11:12:24.745841 2025] [:error] [pid 36068:tid 36078] [client 66.249.64.101:42456] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTwmFGuxqM4ZYob8lOSZQAAAAg"]
[Sun Dec 07 11:12:30.510180 2025] [:error] [pid 25602:tid 25684] [client 66.249.64.101:38145] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTwnhMayYLriq9gRdej6gAAANY"]
[Sun Dec 07 11:13:54.369598 2025] [:error] [pid 36068:tid 36083] [client 66.249.64.101:41421] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTw8lGuxqM4ZYob8lOS0gAAAA0"]
[Sun Dec 07 11:13:57.954961 2025] [:error] [pid 25694:tid 25709] [client 66.249.64.101:39952] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTw9Uf7996cewJ5N2_Z5QAAAQ0"]
[Sun Dec 07 11:14:02.874715 2025] [:error] [pid 25600:tid 25620] [client 66.249.64.101:59031] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTw-oX3SVrXRURpt5IQ5QAAAE0"]
[Sun Dec 07 11:14:14.547994 2025] [:error] [pid 25694:tid 25714] [client 66.249.64.101:41705] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTxBkf7996cewJ5N2_Z9gAAARI"]
[Sun Dec 07 11:14:20.187614 2025] [:error] [pid 36068:tid 36077] [client 66.249.64.101:51205] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTxDFGuxqM4ZYob8lOS-gAAAAc"]
[Sun Dec 07 11:14:26.089106 2025] [:error] [pid 25694:tid 25718] [client 66.249.64.101:39534] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTxEkf7996cewJ5N2_Z_AAAARY"]
[Sun Dec 07 11:14:31.842417 2025] [:error] [pid 36068:tid 36088] [client 66.249.64.101:53323] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTxF1GuxqM4ZYob8lOTCAAAABI"]
[Sun Dec 07 11:14:37.498474 2025] [:error] [pid 25600:tid 25607] [client 66.249.64.101:61789] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTxHYX3SVrXRURpt5IQ-wAAAEA"]
[Sun Dec 07 11:14:43.408587 2025] [:error] [pid 25602:tid 25680] [client 66.249.64.101:40796] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTxIxMayYLriq9gRdekcQAAANI"]
[Sun Dec 07 11:14:49.058747 2025] [:error] [pid 36068:tid 36090] [client 66.249.64.101:60652] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTxKVGuxqM4ZYob8lOTHgAAABQ"]
[Sun Dec 07 11:16:07.127661 2025] [:error] [pid 36068:tid 36091] [client 66.249.64.101:47666] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTxd1GuxqM4ZYob8lOTpwAAABU"]
[Sun Dec 07 11:16:12.876924 2025] [:error] [pid 25600:tid 25624] [client 66.249.64.101:39040] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTxfIX3SVrXRURpt5IRNQAAAFE"]
[Sun Dec 07 11:16:18.750157 2025] [:error] [pid 25602:tid 25666] [client 66.249.64.101:48455] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTxghMayYLriq9gRdektgAAAMQ"]
[Sun Dec 07 11:16:21.512538 2025] [:error] [pid 36068:tid 36074] [client 66.249.64.101:52255] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTxhVGuxqM4ZYob8lOTwwAAAAQ"]
[Sun Dec 07 11:16:24.398050 2025] [:error] [pid 36068:tid 36080] [client 66.249.64.101:50455] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTxiFGuxqM4ZYob8lOTxwAAAAo"]
[Sun Dec 07 11:16:27.286973 2025] [:error] [pid 25601:tid 25656] [client 66.249.64.101:62262] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTxi6tsSIqGPs4YVxELYQAAAJU"]
[Sun Dec 07 11:16:50.246730 2025] [:error] [pid 36068:tid 36087] [client 66.249.64.101:41421] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTxolGuxqM4ZYob8lOT7AAAABE"]
[Sun Dec 07 11:16:56.030723 2025] [:error] [pid 25694:tid 25697] [client 66.249.64.101:48754] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTxqEf7996cewJ5N2_ahwAAAQE"]
[Sun Dec 07 11:18:15.667500 2025] [:error] [pid 36068:tid 36085] [client 66.249.64.101:52447] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTx91GuxqM4ZYob8lOUVwAAAA8"]
[Sun Dec 07 11:18:21.435525 2025] [:error] [pid 36068:tid 36073] [client 66.249.64.101:35137] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTx_VGuxqM4ZYob8lOUXwAAAAM"]
[Sun Dec 07 11:18:27.186779 2025] [:error] [pid 25601:tid 25642] [client 66.249.64.101:42032] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTyA6tsSIqGPs4YVxELqgAAAIc"]
[Sun Dec 07 11:18:32.956915 2025] [:error] [pid 25602:tid 25664] [client 66.249.64.101:35911] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTyCBMayYLriq9gRdelJwAAAMI"]
[Sun Dec 07 11:18:38.831776 2025] [:error] [pid 36068:tid 36093] [client 66.249.64.101:57600] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTyDlGuxqM4ZYob8lOUegAAABc"]
[Sun Dec 07 11:18:44.573761 2025] [:error] [pid 25601:tid 25658] [client 66.249.64.101:56466] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTyFKtsSIqGPs4YVxELsQAAAJc"]
[Sun Dec 07 11:18:50.457960 2025] [:error] [pid 25600:tid 25612] [client 66.249.64.101:62737] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTyGoX3SVrXRURpt5IRoQAAAEU"]
[Sun Dec 07 11:18:56.328652 2025] [:error] [pid 25602:tid 25662] [client 66.249.64.101:42678] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTyIBMayYLriq9gRdelNwAAAMA"]
[Sun Dec 07 11:19:02.071190 2025] [:error] [pid 25694:tid 25708] [client 66.249.64.101:59470] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTyJkf7996cewJ5N2_a8AAAAQw"]
[Sun Dec 07 11:20:23.067773 2025] [:error] [pid 25600:tid 25613] [client 66.249.64.101:39001] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTyd4X3SVrXRURpt5ISAAAAAEY"]
[Sun Dec 07 11:20:29.572715 2025] [:error] [pid 36068:tid 36080] [client 66.249.64.101:59195] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTyfVGuxqM4ZYob8lOVEgAAAAo"]
[Sun Dec 07 11:20:35.336417 2025] [:error] [pid 25602:tid 25663] [client 66.249.64.101:57281] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTygxMayYLriq9gRdelngAAAME"]
[Sun Dec 07 11:20:41.262723 2025] [:error] [pid 36068:tid 36075] [client 66.249.64.101:59976] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTyiVGuxqM4ZYob8lOVIwAAAAU"]
[Sun Dec 07 11:20:46.889511 2025] [:error] [pid 25694:tid 25703] [client 66.249.64.101:54213] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTyjkf7996cewJ5N2_bUQAAAQc"]
[Sun Dec 07 11:20:52.803746 2025] [:error] [pid 25601:tid 25641] [client 66.249.64.101:47696] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTylKtsSIqGPs4YVxEMAQAAAIY"]
[Sun Dec 07 11:20:58.423938 2025] [:error] [pid 25601:tid 25658] [client 66.249.64.101:55395] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTymqtsSIqGPs4YVxEMCgAAAJc"]
[Sun Dec 07 11:21:04.199015 2025] [:error] [pid 25694:tid 25696] [client 66.249.64.101:51413] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTyoEf7996cewJ5N2_bXgAAAQA"]
[Sun Dec 07 11:22:41.574452 2025] [:error] [pid 25601:tid 25650] [client 66.249.64.101:51139] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTzAatsSIqGPs4YVxEMWQAAAI8"]
[Sun Dec 07 11:22:48.064182 2025] [:error] [pid 36068:tid 36092] [client 66.249.64.101:64748] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTzCFGuxqM4ZYob8lOVqwAAABY"]
[Sun Dec 07 11:22:53.827883 2025] [:error] [pid 25602:tid 25667] [client 66.249.64.101:39666] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTzDRMayYLriq9gRdemHQAAAMU"]
[Sun Dec 07 11:22:59.503918 2025] [:error] [pid 25602:tid 25671] [client 66.249.64.101:64125] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTzExMayYLriq9gRdemIwAAAMk"]
[Sun Dec 07 11:23:05.372098 2025] [:error] [pid 25602:tid 25674] [client 66.249.64.101:55135] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTzGRMayYLriq9gRdemKAAAAMw"]
[Sun Dec 07 11:23:18.447842 2025] [:error] [pid 25694:tid 25720] [client 66.249.64.101:43937] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTzJkf7996cewJ5N2_b_gAAARg"]
[Sun Dec 07 11:23:22.597239 2025] [:error] [pid 25600:tid 25608] [client 66.249.64.101:38393] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTzKoX3SVrXRURpt5ISoQAAAEE"]
[Sun Dec 07 11:23:34.243151 2025] [:error] [pid 25600:tid 25629] [client 66.249.64.101:50668] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTzNoX3SVrXRURpt5ISrQAAAFY"]
[Sun Dec 07 11:24:48.522594 2025] [:error] [pid 25694:tid 25719] [client 66.249.64.101:50634] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTzgEf7996cewJ5N2_cXQAAARc"]
[Sun Dec 07 11:24:55.019710 2025] [:error] [pid 25600:tid 25630] [client 66.249.64.101:43534] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTzh4X3SVrXRURpt5IS0wAAAFc"]
[Sun Dec 07 11:25:00.780754 2025] [:error] [pid 25602:tid 25672] [client 66.249.64.101:35261] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTzjBMayYLriq9gRdemiAAAAMo"]
[Sun Dec 07 11:25:09.891408 2025] [:error] [pid 36068:tid 36072] [client 66.249.64.101:57306] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTzlVGuxqM4ZYob8lOWdgAAAAI"]
[Sun Dec 07 11:25:15.642369 2025] [:error] [pid 25601:tid 25652] [client 66.249.64.101:54854] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTzm6tsSIqGPs4YVxEM-wAAAJE"]
[Sun Dec 07 11:25:21.377729 2025] [:error] [pid 25694:tid 25701] [client 66.249.64.101:47460] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTzoUf7996cewJ5N2_cjAAAAQU"]
[Sun Dec 07 11:25:27.126068 2025] [:error] [pid 25602:tid 25664] [client 66.249.64.101:60210] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTzpxMayYLriq9gRdemlAAAAMI"]
[Sun Dec 07 11:25:30.002251 2025] [:error] [pid 25600:tid 25622] [client 66.249.64.101:57248] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTzqoX3SVrXRURpt5IS7wAAAE8"]
[Sun Dec 07 11:25:35.425933 2025] [:error] [pid 25602:tid 25666] [client 66.249.64.101:39889] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTzrxMayYLriq9gRdemrQAAAMQ"]
[Sun Dec 07 11:25:41.207693 2025] [:error] [pid 25694:tid 25709] [client 66.249.64.101:63070] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTztUf7996cewJ5N2_c_QAAAQ0"]
[Sun Dec 07 11:26:50.462100 2025] [:error] [pid 36068:tid 36089] [client 66.249.64.101:43986] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTTz-lGuxqM4ZYob8lOXTwAAABM"]
[Sun Dec 07 11:26:56.352664 2025] [:error] [pid 25600:tid 25623] [client 66.249.64.101:45529] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTT0AIX3SVrXRURpt5ITOgAAAFA"]
[Sun Dec 07 11:27:02.010987 2025] [:error] [pid 25602:tid 25673] [client 66.249.64.101:64841] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTT0BhMayYLriq9gRdenBgAAAMs"]
[Sun Dec 07 11:27:13.537859 2025] [:error] [pid 36068:tid 36074] [client 66.249.64.101:49321] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTT0EVGuxqM4ZYob8lOXYgAAAAQ"]
[Sun Dec 07 11:27:24.058669 2025] [:error] [pid 25600:tid 25625] [client 66.249.64.101:40173] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTT0HIX3SVrXRURpt5ITUAAAAFI"]
[Sun Dec 07 11:27:29.921806 2025] [:error] [pid 25600:tid 25613] [client 66.249.64.101:42241] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTT0IYX3SVrXRURpt5ITVQAAAEY"]
[Sun Dec 07 11:27:32.707683 2025] [:error] [pid 25601:tid 25657] [client 66.249.64.101:47610] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTT0JKtsSIqGPs4YVxENYQAAAJY"]
[Sun Dec 07 11:27:36.631520 2025] [:error] [pid 36068:tid 36078] [client 66.249.64.101:44565] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTT0KFGuxqM4ZYob8lOXpgAAAAg"]
[Sun Dec 07 11:27:42.392054 2025] [:error] [pid 36068:tid 36070] [client 66.249.64.101:56559] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTT0LlGuxqM4ZYob8lOXsQAAAAA"]
[Sun Dec 07 11:28:51.666493 2025] [:error] [pid 36068:tid 36080] [client 66.249.64.101:42687] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTT0c1GuxqM4ZYob8lOYfwAAAAo"]
[Sun Dec 07 11:28:57.429222 2025] [:error] [pid 25602:tid 25666] [client 66.249.64.101:48089] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTT0eRMayYLriq9gRdencQAAAMQ"]
[Sun Dec 07 11:29:32.194298 2025] [:error] [pid 25694:tid 25710] [client 66.249.64.101:40621] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTT0nEf7996cewJ5N2_eOQAAAQ4"]
[Sun Dec 07 11:29:37.815949 2025] [:error] [pid 25602:tid 25672] [client 66.249.64.101:53546] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTT0oRMayYLriq9gRdensAAAAMo"]
[Sun Dec 07 11:29:43.730359 2025] [:error] [pid 25694:tid 25719] [client 66.249.64.101:46770] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTT0p0f7996cewJ5N2_eQgAAARc"]
[Sun Dec 07 11:31:24.748149 2025] [:error] [pid 25694:tid 25716] [client 66.249.64.101:49855] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTT1DEf7996cewJ5N2_fdwAAARQ"]
[Sun Dec 07 11:31:30.505974 2025] [:error] [pid 25601:tid 25653] [client 66.249.64.101:59543] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTT1EqtsSIqGPs4YVxEOTAAAAJI"]
[Sun Dec 07 11:31:30.783623 2025] [:error] [pid 36068:tid 36089] [client 66.249.64.101:51381] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTT1ElGuxqM4ZYob8lOZ5QAAABM"]
[Sun Dec 07 11:31:33.539469 2025] [:error] [pid 25694:tid 25712] [client 66.249.64.101:62138] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTT1FUf7996cewJ5N2_ffwAAARA"]
[Sun Dec 07 11:31:39.018371 2025] [:error] [pid 25600:tid 25608] [client 66.249.64.101:64243] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTT1G4X3SVrXRURpt5IUigAAAEE"]
[Sun Dec 07 11:31:44.791773 2025] [:error] [pid 25694:tid 25717] [client 66.249.64.101:57718] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTT1IEf7996cewJ5N2_flgAAARU"]
[Sun Dec 07 11:31:50.569743 2025] [:error] [pid 36068:tid 36074] [client 66.249.64.101:40354] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTT1JlGuxqM4ZYob8lOaDQAAAAQ"]
[Sun Dec 07 11:31:56.332355 2025] [:error] [pid 25600:tid 25627] [client 66.249.64.101:64637] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTT1LIX3SVrXRURpt5IUnAAAAFQ"]
[Sun Dec 07 11:32:13.642661 2025] [:error] [pid 25694:tid 25720] [client 66.249.64.101:38688] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTT1PUf7996cewJ5N2_fpAAAARg"]
[Sun Dec 07 11:33:34.454412 2025] [:error] [pid 36068:tid 36085] [client 66.249.64.101:59651] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTT1jlGuxqM4ZYob8lOadgAAAA8"]
[Sun Dec 07 11:33:40.267323 2025] [:error] [pid 36068:tid 36074] [client 66.249.64.101:52699] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTT1lFGuxqM4ZYob8lOajQAAAAQ"]
[Sun Dec 07 11:33:45.976465 2025] [:error] [pid 25694:tid 25718] [client 66.249.64.101:60315] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTT1mUf7996cewJ5N2_f4AAAARY"]
[Sun Dec 07 11:33:51.919355 2025] [:error] [pid 25602:tid 25674] [client 66.249.64.101:57842] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTT1nxMayYLriq9gRdeokQAAAMw"]
[Sun Dec 07 11:34:03.295697 2025] [:error] [pid 25600:tid 25617] [client 66.249.64.101:41403] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTT1q4X3SVrXRURpt5IU4AAAAEo"]
[Sun Dec 07 11:34:09.071997 2025] [:error] [pid 25694:tid 25713] [client 66.249.64.101:62797] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTT1sUf7996cewJ5N2_f6wAAARE"]
[Sun Dec 07 11:34:14.968107 2025] [:error] [pid 25600:tid 25623] [client 66.249.64.101:59334] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTT1toX3SVrXRURpt5IU4wAAAFA"]
[Sun Dec 07 11:34:20.628706 2025] [:error] [pid 25600:tid 25612] [client 66.249.64.101:61535] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTT1vIX3SVrXRURpt5IU6AAAAEU"]
[Sun Dec 07 11:34:26.384057 2025] [:error] [pid 25601:tid 25637] [client 66.249.64.101:48245] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTT1wqtsSIqGPs4YVxEOjgAAAII"]
[Sun Dec 07 11:35:47.163943 2025] [:error] [pid 25601:tid 25649] [client 66.249.64.101:39179] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTT2E6tsSIqGPs4YVxEPSwAAAI4"]
[Sun Dec 07 11:35:52.938525 2025] [:error] [pid 25601:tid 25657] [client 66.249.64.101:60849] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTT2GKtsSIqGPs4YVxEPTwAAAJY"]
[Sun Dec 07 11:35:58.712275 2025] [:error] [pid 25600:tid 25617] [client 66.249.64.101:61334] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTT2HoX3SVrXRURpt5IVDQAAAEo"]
[Sun Dec 07 11:36:04.485817 2025] [:error] [pid 25694:tid 25714] [client 66.249.64.101:41064] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTT2JEf7996cewJ5N2_gwQAAARI"]
[Sun Dec 07 11:36:10.247740 2025] [:error] [pid 25600:tid 25631] [client 66.249.64.101:37828] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTT2KoX3SVrXRURpt5IVEwAAAFg"]
[Sun Dec 07 11:36:27.692801 2025] [:error] [pid 25602:tid 25665] [client 66.249.64.101:54991] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTT2OxMayYLriq9gRdepiQAAAMM"]
[Sun Dec 07 11:36:33.327494 2025] [:error] [pid 25602:tid 25684] [client 66.249.64.101:42152] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTT2QRMayYLriq9gRdepjAAAANY"]
[Sun Dec 07 11:37:59.367921 2025] [:error] [pid 36068:tid 36072] [client 66.249.64.101:35964] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTT2l1GuxqM4ZYob8lOcNgAAAAI"]
[Sun Dec 07 11:38:19.187131 2025] [:error] [pid 36068:tid 36072] [client 66.249.64.101:63617] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTT2q1GuxqM4ZYob8lOcRwAAAAI"]
[Sun Dec 07 11:38:24.935484 2025] [:error] [pid 25602:tid 25673] [client 66.249.64.101:49506] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTT2sBMayYLriq9gRdeqWAAAAMs"]
[Sun Dec 07 11:38:28.768017 2025] [:error] [pid 25602:tid 25668] [client 66.249.64.101:63029] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTT2tBMayYLriq9gRdeqWgAAAMY"]
[Sun Dec 07 11:38:34.539436 2025] [:error] [pid 25602:tid 25680] [client 66.249.64.101:36591] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTT2uhMayYLriq9gRdeqXQAAANI"]
[Sun Dec 07 11:38:40.303695 2025] [:error] [pid 25602:tid 25683] [client 66.249.64.101:57579] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTT2wBMayYLriq9gRdeqYAAAANU"]
[Sun Dec 07 11:38:46.249329 2025] [:error] [pid 25602:tid 25667] [client 66.249.64.101:64135] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTT2xhMayYLriq9gRdeqYwAAAMU"]
[Sun Dec 07 11:38:53.204686 2025] [:error] [pid 25601:tid 25643] [client 66.249.64.101:41450] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTT2zatsSIqGPs4YVxEPzgAAAIg"]
[Sun Dec 07 11:39:38.121711 2025] [:error] [pid 25601:tid 25654] [client 69.57.172.96:60568] [client 69.57.172.96] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 69.57.172.96, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTT2-qtsSIqGPs4YVxEP4wAAAJM"]
[Sun Dec 07 11:40:34.998358 2025] [:error] [pid 25694:tid 25703] [client 66.249.64.101:41201] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTT3Mkf7996cewJ5N2_h9gAAAQc"]
[Sun Dec 07 11:40:41.622532 2025] [:error] [pid 25601:tid 25654] [client 66.249.64.101:38938] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTT3OatsSIqGPs4YVxEQAQAAAJM"]
[Sun Dec 07 11:40:47.387761 2025] [:error] [pid 25602:tid 25676] [client 66.249.64.101:46169] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTT3PxMayYLriq9gRdeqoAAAAM4"]
[Sun Dec 07 11:40:53.171585 2025] [:error] [pid 36068:tid 36088] [client 66.249.64.101:60464] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTT3RVGuxqM4ZYob8lOc-gAAABI"]
[Sun Dec 07 11:40:58.808787 2025] [:error] [pid 36068:tid 36078] [client 66.249.64.101:42117] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTT3SlGuxqM4ZYob8lOdBwAAAAg"]
[Sun Dec 07 11:41:10.491369 2025] [:error] [pid 36068:tid 36093] [client 66.249.64.101:59686] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTT3VlGuxqM4ZYob8lOdDwAAABc"]
[Sun Dec 07 11:41:16.124395 2025] [:error] [pid 25694:tid 25701] [client 66.249.64.101:57197] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTT3XEf7996cewJ5N2_iCAAAAQU"]
[Sun Dec 07 11:41:22.024186 2025] [:error] [pid 25694:tid 25720] [client 66.249.64.101:46814] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTT3Ykf7996cewJ5N2_iDQAAARg"]
[Sun Dec 07 11:41:27.657879 2025] [:error] [pid 36068:tid 36078] [client 66.249.64.101:40008] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTT3Z1GuxqM4ZYob8lOdLgAAAAg"]
[Sun Dec 07 11:42:54.532067 2025] [:error] [pid 36068:tid 36085] [client 66.249.64.101:51087] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTT3vlGuxqM4ZYob8lOdngAAAA8"]
[Sun Dec 07 11:42:59.987873 2025] [:error] [pid 36068:tid 36084] [client 66.249.64.101:37483] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTT3w1GuxqM4ZYob8lOdqAAAAA4"]
[Sun Dec 07 11:43:05.766328 2025] [:error] [pid 36068:tid 36083] [client 66.249.64.101:50905] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTT3yVGuxqM4ZYob8lOdsgAAAA0"]
[Sun Dec 07 11:43:28.190756 2025] [:error] [pid 36068:tid 36072] [client 66.249.64.101:56698] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTT34FGuxqM4ZYob8lOd0QAAAAI"]
[Sun Dec 07 11:43:31.093085 2025] [:error] [pid 25601:tid 25645] [client 66.249.64.101:54118] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTT346tsSIqGPs4YVxEQUAAAAIo"]
[Sun Dec 07 11:50:00.783373 2025] [:error] [pid 36068:tid 36077] [client 49.235.136.28:49066] [client 49.235.136.28] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||paramountbaldivis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTT5aFGuxqM4ZYob8lOf_QAAAAc"]
[Sun Dec 07 13:54:18.914398 2025] [:error] [pid 25601:tid 25635] [client 85.209.135.111:46800] [client 85.209.135.111] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.paramountbaldivis.com"] [uri "/.git/config"] [unique_id "aTUWiqtsSIqGPs4YVxEpCQAAAIA"]
[Sun Dec 07 13:57:58.396867 2025] [:error] [pid 25602:tid 25670] [client 85.209.135.111:59218] [client 85.209.135.111] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paramountbaldivis.com"] [uri "/.git/config"] [unique_id "aTUXZhMayYLriq9gRdfH_QAAAMg"]
[Sun Dec 07 13:57:59.707404 2025] [:error] [pid 25600:tid 25629] [client 85.209.135.111:37420] [client 85.209.135.111] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paramountbaldivis.com"] [uri "/.git/config"] [unique_id "aTUXZ4X3SVrXRURpt5IxzgAAAFY"]
[Sun Dec 07 14:48:08.687684 2025] [:error] [pid 25694:tid 25700] [client 103.200.22.140:33186] [client 103.200.22.140] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.200.22.140, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTUjKEf7996cewJ5N28QAAAAAQQ"]
[Sun Dec 07 14:48:13.748668 2025] [:error] [pid 25694:tid 25706] [client 103.200.22.140:33186] [client 103.200.22.140] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.200.22.140, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTUjLUf7996cewJ5N28QCAAAAQo"]
[Sun Dec 07 15:04:07.525824 2025] [:error] [pid 36068:tid 36071] [client 66.55.159.139:37308] [client 66.55.159.139] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 66.55.159.139, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTUm51GuxqM4ZYob8lPZRgAAAAE"]
[Sun Dec 07 16:20:58.463926 2025] [:error] [pid 25600:tid 25617] [client 157.230.24.5:43494] [client 157.230.24.5] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 157.230.24.5, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTU46oX3SVrXRURpt5JLiAAAAEo"]
[Sun Dec 07 17:30:30.312267 2025] [:error] [pid 39560:tid 39578] [client 85.128.143.135:59110] [client 85.128.143.135] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.128.143.135, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTVJNitL21FvSzcnpi05-QAAAVA"]
[Sun Dec 07 18:07:43.572937 2025] [:error] [pid 25602:tid 25664] [client 182.43.70.143:59159] [client 182.43.70.143] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.paramountbaldivis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.paramountbaldivis.com"] [uri "/"] [unique_id "aTVR7xMayYLriq9gRdf1MgAAAMI"]
[Sun Dec 07 21:00:43.531331 2025] [:error] [pid 5224:tid 5294] [client 51.112.63.142:8912] [client 51.112.63.142] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 51.112.63.142, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTV6e_AAkbWt7RJBoF_mowAAAM0"]
[Sun Dec 07 22:12:52.996427 2025] [:error] [pid 9961:tid 9969] [client 34.73.73.46:56524] [client 34.73.73.46] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 34.73.73.46, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTWLZGQdnfbgcnzr89JwfwAAAUY"]
[Sun Dec 07 22:39:14.631899 2025] [:error] [pid 5223:tid 5255] [client 136.144.35.236:39271] [client 136.144.35.236] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paramountbaldivis.com"] [uri "/.env"] [unique_id "aTWRkvoRJa-T0FB0DNr76wAAAIE"]
[Sun Dec 07 22:39:15.296022 2025] [:error] [pid 9961:tid 9984] [client 136.144.35.234:37017] [client 136.144.35.234] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paramountbaldivis.com"] [uri "/.env.example"] [unique_id "aTWRk2Qdnfbgcnzr89J61gAAAVU"]
[Sun Dec 07 22:39:35.960241 2025] [:error] [pid 9961:tid 9975] [client 136.144.35.225:45805] [client 136.144.35.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paramountbaldivis.com"] [uri "/config/.env"] [unique_id "aTWRp2Qdnfbgcnzr89J64gAAAUw"]
[Sun Dec 07 23:43:02.598419 2025] [:error] [pid 5224:tid 5305] [client 103.200.23.90:41508] [client 103.200.23.90] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.200.23.90, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTWghvAAkbWt7RJBoF8IdgAAANg"]
[Sun Dec 07 23:43:08.241644 2025] [:error] [pid 5223:tid 5262] [client 103.200.23.90:41512] [client 103.200.23.90] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.200.23.90, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTWgjPoRJa-T0FB0DNoJ8wAAAIg"]
[Mon Dec 08 00:11:42.891499 2025] [:error] [pid 5222:tid 5245] [client 52.175.54.91:39435] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/css.php"] [unique_id "aTWnPt8FU0HgkYWmt7tjcQAAAFM"]
[Mon Dec 08 00:11:43.125807 2025] [:error] [pid 5312:tid 5317] [client 52.175.54.91:39519] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/css.php"] [unique_id "aTWnP-aM49rasZGg_o4olgAAAAM"]
[Mon Dec 08 00:11:43.360482 2025] [:error] [pid 5312:tid 5330] [client 52.175.54.91:39453] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/css.php"] [unique_id "aTWnP-aM49rasZGg_o4olwAAABA"]
[Mon Dec 08 00:11:43.594505 2025] [:error] [pid 5312:tid 5315] [client 52.175.54.91:39431] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/css.php"] [unique_id "aTWnP-aM49rasZGg_o4omAAAAAE"]
[Mon Dec 08 00:11:43.848244 2025] [:error] [pid 5312:tid 5327] [client 52.175.54.91:39495] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/cloud.php"] [unique_id "aTWnP-aM49rasZGg_o4omgAAAA0"]
[Mon Dec 08 00:11:44.083400 2025] [:error] [pid 5312:tid 5326] [client 52.175.54.91:39426] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/cloud.php"] [unique_id "aTWnQOaM49rasZGg_o4omwAAAAw"]
[Mon Dec 08 00:11:44.320097 2025] [:error] [pid 9961:tid 9981] [client 52.175.54.91:39494] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/cloud.php"] [unique_id "aTWnQGQdnfbgcnzr89KaUQAAAVI"]
[Mon Dec 08 00:11:44.558487 2025] [:error] [pid 5312:tid 5319] [client 52.175.54.91:6100] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/cloud.php"] [unique_id "aTWnQOaM49rasZGg_o4onAAAAAU"]
[Mon Dec 08 00:11:44.835926 2025] [:error] [pid 5222:tid 5247] [client 52.175.54.91:39425] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/bless.php"] [unique_id "aTWnQN8FU0HgkYWmt7tjdAAAAFU"]
[Mon Dec 08 00:11:45.070073 2025] [:error] [pid 9610:tid 9635] [client 52.175.54.91:39447] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/bless.php"] [unique_id "aTWnQcZ4Zl9G0UhQ7w1nUgAAARc"]
[Mon Dec 08 00:11:45.304396 2025] [:error] [pid 5223:tid 5267] [client 52.175.54.91:39430] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/bless.php"] [unique_id "aTWnQfoRJa-T0FB0DNoPzAAAAI0"]
[Mon Dec 08 00:11:45.539208 2025] [:error] [pid 5312:tid 5323] [client 52.175.54.91:39496] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/bless.php"] [unique_id "aTWnQeaM49rasZGg_o4ongAAAAk"]
[Mon Dec 08 00:11:45.780392 2025] [:error] [pid 5224:tid 5302] [client 52.175.54.91:39491] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/radio.php"] [unique_id "aTWnQfAAkbWt7RJBoF8NtgAAANU"]
[Mon Dec 08 00:11:46.022298 2025] [:error] [pid 5223:tid 5255] [client 52.175.54.91:39497] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/radio.php"] [unique_id "aTWnQvoRJa-T0FB0DNoPzwAAAIE"]
[Mon Dec 08 00:11:46.261833 2025] [:error] [pid 5224:tid 5286] [client 52.175.54.91:39433] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/radio.php"] [unique_id "aTWnQvAAkbWt7RJBoF8NtwAAAMU"]
[Mon Dec 08 00:11:46.498084 2025] [:error] [pid 5224:tid 5300] [client 52.175.54.91:39434] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/radio.php"] [unique_id "aTWnQvAAkbWt7RJBoF8NuAAAANM"]
[Mon Dec 08 00:11:46.731998 2025] [:error] [pid 5312:tid 5324] [client 52.175.54.91:39474] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/cong.php"] [unique_id "aTWnQuaM49rasZGg_o4ooAAAAAo"]
[Mon Dec 08 00:11:47.082977 2025] [:error] [pid 5223:tid 5273] [client 52.175.54.91:39534] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/cong.php"] [unique_id "aTWnQ_oRJa-T0FB0DNoP0gAAAJM"]
[Mon Dec 08 00:11:47.319653 2025] [:error] [pid 5223:tid 5278] [client 52.175.54.91:39451] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/cong.php"] [unique_id "aTWnQ_oRJa-T0FB0DNoP0wAAAJg"]
[Mon Dec 08 00:11:47.556792 2025] [:error] [pid 5223:tid 5274] [client 52.175.54.91:39530] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/cong.php"] [unique_id "aTWnQ_oRJa-T0FB0DNoP1AAAAJQ"]
[Mon Dec 08 00:11:47.803106 2025] [:error] [pid 9610:tid 9617] [client 52.175.54.91:39441] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/bak.php"] [unique_id "aTWnQ8Z4Zl9G0UhQ7w1nUwAAAQU"]
[Mon Dec 08 00:11:48.112276 2025] [:error] [pid 5222:tid 5241] [client 52.175.54.91:39488] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/bak.php"] [unique_id "aTWnRN8FU0HgkYWmt7tjdwAAAE8"]
[Mon Dec 08 00:11:48.370265 2025] [:error] [pid 9610:tid 9632] [client 52.175.54.91:39538] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/bak.php"] [unique_id "aTWnRMZ4Zl9G0UhQ7w1nVQAAARQ"]
[Mon Dec 08 00:11:48.614264 2025] [:error] [pid 9610:tid 9624] [client 52.175.54.91:39446] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/bak.php"] [unique_id "aTWnRMZ4Zl9G0UhQ7w1nVgAAAQw"]
[Mon Dec 08 00:11:48.930596 2025] [:error] [pid 5223:tid 5256] [client 52.175.54.91:39448] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/as.php"] [unique_id "aTWnRPoRJa-T0FB0DNoP1QAAAII"]
[Mon Dec 08 00:11:49.173085 2025] [:error] [pid 9961:tid 9976] [client 52.175.54.91:39508] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/as.php"] [unique_id "aTWnRWQdnfbgcnzr89KaVgAAAU0"]
[Mon Dec 08 00:11:49.406899 2025] [:error] [pid 5222:tid 5246] [client 52.175.54.91:39449] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/as.php"] [unique_id "aTWnRd8FU0HgkYWmt7tjeQAAAFQ"]
[Mon Dec 08 00:11:49.654292 2025] [:error] [pid 9961:tid 9980] [client 52.175.54.91:39516] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/as.php"] [unique_id "aTWnRWQdnfbgcnzr89KaWAAAAVE"]
[Mon Dec 08 00:11:49.888275 2025] [:error] [pid 9961:tid 9977] [client 52.175.54.91:6104] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/404.php"] [unique_id "aTWnRWQdnfbgcnzr89KaWQAAAU4"]
[Mon Dec 08 00:11:50.130823 2025] [:error] [pid 5222:tid 5243] [client 52.175.54.91:39548] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/404.php"] [unique_id "aTWnRt8FU0HgkYWmt7tjegAAAFE"]
[Mon Dec 08 00:11:50.366179 2025] [:error] [pid 5223:tid 5265] [client 52.175.54.91:39429] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/404.php"] [unique_id "aTWnRvoRJa-T0FB0DNoP2QAAAIs"]
[Mon Dec 08 00:11:50.601942 2025] [:error] [pid 9610:tid 9623] [client 52.175.54.91:39454] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/404.php"] [unique_id "aTWnRsZ4Zl9G0UhQ7w1nWQAAAQs"]
[Mon Dec 08 00:11:50.837627 2025] [:error] [pid 5223:tid 5277] [client 52.175.54.91:39541] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/link.php"] [unique_id "aTWnRvoRJa-T0FB0DNoP2wAAAJc"]
[Mon Dec 08 00:11:51.074511 2025] [:error] [pid 5224:tid 5292] [client 52.175.54.91:39509] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/link.php"] [unique_id "aTWnR_AAkbWt7RJBoF8NvAAAAMs"]
[Mon Dec 08 00:11:51.336621 2025] [:error] [pid 5223:tid 5266] [client 52.175.54.91:39492] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/link.php"] [unique_id "aTWnR_oRJa-T0FB0DNoP3AAAAIw"]
[Mon Dec 08 00:11:51.571337 2025] [:error] [pid 5224:tid 5295] [client 52.175.54.91:39537] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/link.php"] [unique_id "aTWnR_AAkbWt7RJBoF8NvQAAAM4"]
[Mon Dec 08 00:11:51.805691 2025] [:error] [pid 5224:tid 5297] [client 52.175.54.91:39505] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/makeasmtp.php"] [unique_id "aTWnR_AAkbWt7RJBoF8NvgAAANA"]
[Mon Dec 08 00:11:52.041427 2025] [:error] [pid 9961:tid 9979] [client 52.175.54.91:39501] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/makeasmtp.php"] [unique_id "aTWnSGQdnfbgcnzr89KaWwAAAVA"]
[Mon Dec 08 00:11:52.275714 2025] [:error] [pid 5224:tid 5285] [client 52.175.54.91:39503] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/makeasmtp.php"] [unique_id "aTWnSPAAkbWt7RJBoF8NvwAAAMQ"]
[Mon Dec 08 00:11:52.516361 2025] [:error] [pid 5312:tid 5331] [client 52.175.54.91:39445] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/makeasmtp.php"] [unique_id "aTWnSOaM49rasZGg_o4oowAAABE"]
[Mon Dec 08 00:11:52.773626 2025] [:error] [pid 5312:tid 5322] [client 52.175.54.91:6119] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/file.php"] [unique_id "aTWnSOaM49rasZGg_o4opQAAAAg"]
[Mon Dec 08 00:11:53.021586 2025] [:error] [pid 9961:tid 9964] [client 52.175.54.91:6138] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/file.php"] [unique_id "aTWnSWQdnfbgcnzr89KaXQAAAUE"]
[Mon Dec 08 00:11:53.294816 2025] [:error] [pid 5312:tid 5330] [client 52.175.54.91:39531] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/file.php"] [unique_id "aTWnSeaM49rasZGg_o4opgAAABA"]
[Mon Dec 08 00:11:53.542806 2025] [:error] [pid 9961:tid 9978] [client 52.175.54.91:39536] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/file.php"] [unique_id "aTWnSWQdnfbgcnzr89KaXwAAAU8"]
[Mon Dec 08 00:11:53.798580 2025] [:error] [pid 5312:tid 5318] [client 52.175.54.91:39464] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/chosen.php"] [unique_id "aTWnSeaM49rasZGg_o4opwAAAAQ"]
[Mon Dec 08 00:11:54.033440 2025] [:error] [pid 5312:tid 5327] [client 52.175.54.91:6089] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/chosen.php"] [unique_id "aTWnSuaM49rasZGg_o4oqAAAAA0"]
[Mon Dec 08 00:11:54.281917 2025] [:error] [pid 9610:tid 9613] [client 52.175.54.91:6092] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/chosen.php"] [unique_id "aTWnSsZ4Zl9G0UhQ7w1nWwAAAQE"]
[Mon Dec 08 00:11:54.523034 2025] [:error] [pid 5312:tid 5335] [client 52.175.54.91:39549] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/chosen.php"] [unique_id "aTWnSuaM49rasZGg_o4oqgAAABU"]
[Mon Dec 08 00:11:54.757047 2025] [:error] [pid 5222:tid 5240] [client 52.175.54.91:39440] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp.php"] [unique_id "aTWnSt8FU0HgkYWmt7tjewAAAE4"]
[Mon Dec 08 00:11:55.088220 2025] [:error] [pid 5222:tid 5227] [client 52.175.54.91:39547] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp.php"] [unique_id "aTWnS98FU0HgkYWmt7tjfQAAAEE"]
[Mon Dec 08 00:11:55.343311 2025] [:error] [pid 5222:tid 5250] [client 52.175.54.91:39550] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp.php"] [unique_id "aTWnS98FU0HgkYWmt7tjfgAAAFg"]
[Mon Dec 08 00:11:55.580984 2025] [:error] [pid 9961:tid 9974] [client 52.175.54.91:39455] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp.php"] [unique_id "aTWnS2Qdnfbgcnzr89KaZwAAAUs"]
[Mon Dec 08 00:11:55.830252 2025] [:error] [pid 5222:tid 5231] [client 52.175.54.91:39545] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/uana.php"] [unique_id "aTWnS98FU0HgkYWmt7tjfwAAAEU"]
[Mon Dec 08 00:11:56.063503 2025] [:error] [pid 9610:tid 9612] [client 52.175.54.91:6091] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/uana.php"] [unique_id "aTWnTMZ4Zl9G0UhQ7w1nYgAAAQA"]
[Mon Dec 08 00:11:56.335818 2025] [:error] [pid 9961:tid 9970] [client 52.175.54.91:39459] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/uana.php"] [unique_id "aTWnTGQdnfbgcnzr89KabAAAAUc"]
[Mon Dec 08 00:11:56.570431 2025] [:error] [pid 9961:tid 9966] [client 52.175.54.91:39500] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/uana.php"] [unique_id "aTWnTGQdnfbgcnzr89KabgAAAUM"]
[Mon Dec 08 00:11:56.806505 2025] [:error] [pid 9961:tid 9979] [client 52.175.54.91:39510] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/lock360.php"] [unique_id "aTWnTGQdnfbgcnzr89KabwAAAVA"]
[Mon Dec 08 00:11:57.039737 2025] [:error] [pid 9610:tid 9633] [client 52.175.54.91:6096] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/lock360.php"] [unique_id "aTWnTcZ4Zl9G0UhQ7w1nZQAAARU"]
[Mon Dec 08 00:11:57.283332 2025] [:error] [pid 5312:tid 5325] [client 52.175.54.91:39498] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/lock360.php"] [unique_id "aTWnTeaM49rasZGg_o4otAAAAAs"]
[Mon Dec 08 00:11:57.521161 2025] [:error] [pid 5224:tid 5295] [client 52.175.54.91:6088] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/lock360.php"] [unique_id "aTWnTfAAkbWt7RJBoF8N5QAAAM4"]
[Mon Dec 08 00:11:57.757007 2025] [:error] [pid 9610:tid 9632] [client 52.175.54.91:39515] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/a.php"] [unique_id "aTWnTcZ4Zl9G0UhQ7w1naQAAARQ"]
[Mon Dec 08 00:11:58.004713 2025] [:error] [pid 9961:tid 9968] [client 52.175.54.91:39432] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/a.php"] [unique_id "aTWnTmQdnfbgcnzr89KadAAAAUU"]
[Mon Dec 08 00:11:58.239938 2025] [:error] [pid 9610:tid 9615] [client 52.175.54.91:39506] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/a.php"] [unique_id "aTWnTsZ4Zl9G0UhQ7w1nbAAAAQM"]
[Mon Dec 08 00:11:58.474432 2025] [:error] [pid 5222:tid 5228] [client 52.175.54.91:39507] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/a.php"] [unique_id "aTWnTt8FU0HgkYWmt7tjgAAAAEI"]
[Mon Dec 08 00:11:58.745153 2025] [:error] [pid 5222:tid 5234] [client 52.175.54.91:39470] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/api.php"] [unique_id "aTWnTt8FU0HgkYWmt7tjgQAAAEg"]
[Mon Dec 08 00:11:59.001810 2025] [:error] [pid 5224:tid 5299] [client 52.175.54.91:6117] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/api.php"] [unique_id "aTWnT_AAkbWt7RJBoF8N6gAAANI"]
[Mon Dec 08 00:11:59.235142 2025] [:error] [pid 9961:tid 9975] [client 52.175.54.91:39544] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/api.php"] [unique_id "aTWnT2Qdnfbgcnzr89KadgAAAUw"]
[Mon Dec 08 00:11:59.511305 2025] [:error] [pid 5223:tid 5272] [client 52.175.54.91:6062] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/api.php"] [unique_id "aTWnT_oRJa-T0FB0DNoP4gAAAJI"]
[Mon Dec 08 00:11:59.745249 2025] [:error] [pid 5222:tid 5230] [client 52.175.54.91:39540] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/inc.php"] [unique_id "aTWnT98FU0HgkYWmt7tjggAAAEQ"]
[Mon Dec 08 00:12:00.002050 2025] [:error] [pid 9961:tid 9971] [client 52.175.54.91:39466] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/inc.php"] [unique_id "aTWnUGQdnfbgcnzr89KaeQAAAUg"]
[Mon Dec 08 00:12:00.262935 2025] [:error] [pid 9961:tid 9965] [client 52.175.54.91:39436] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/inc.php"] [unique_id "aTWnUGQdnfbgcnzr89KaewAAAUI"]
[Mon Dec 08 00:12:00.515910 2025] [:error] [pid 9961:tid 9972] [client 52.175.54.91:39487] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/inc.php"] [unique_id "aTWnUGQdnfbgcnzr89KafgAAAUk"]
[Mon Dec 08 00:12:00.765696 2025] [:error] [pid 9961:tid 9969] [client 52.175.54.91:39442] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/atomlib.php"] [unique_id "aTWnUGQdnfbgcnzr89KagAAAAUY"]
[Mon Dec 08 00:12:01.057886 2025] [:error] [pid 9610:tid 9618] [client 52.175.54.91:39460] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/atomlib.php"] [unique_id "aTWnUcZ4Zl9G0UhQ7w1nbQAAAQY"]
[Mon Dec 08 00:12:01.291929 2025] [:error] [pid 9610:tid 9619] [client 52.175.54.91:39524] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/atomlib.php"] [unique_id "aTWnUcZ4Zl9G0UhQ7w1nbwAAAQc"]
[Mon Dec 08 00:12:01.526390 2025] [:error] [pid 9610:tid 9613] [client 52.175.54.91:39521] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/atomlib.php"] [unique_id "aTWnUcZ4Zl9G0UhQ7w1ncAAAAQE"]
[Mon Dec 08 00:12:01.760876 2025] [:error] [pid 5223:tid 5260] [client 52.175.54.91:6018] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ioxi-rex4.php7"] [unique_id "aTWnUfoRJa-T0FB0DNoP5AAAAIY"]
[Mon Dec 08 00:12:01.997383 2025] [:error] [pid 5222:tid 5229] [client 52.175.54.91:39450] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ioxi-rex4.php7"] [unique_id "aTWnUd8FU0HgkYWmt7tjhAAAAEM"]
[Mon Dec 08 00:12:02.231771 2025] [:error] [pid 5223:tid 5261] [client 52.175.54.91:39543] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ioxi-rex4.php7"] [unique_id "aTWnUvoRJa-T0FB0DNoP5QAAAIc"]
[Mon Dec 08 00:12:02.467774 2025] [:error] [pid 5312:tid 5337] [client 52.175.54.91:6050] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ioxi-rex4.php7"] [unique_id "aTWnUuaM49rasZGg_o4otwAAABc"]
[Mon Dec 08 00:12:02.701950 2025] [:error] [pid 5312:tid 5322] [client 52.175.54.91:39463] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/moon.php"] [unique_id "aTWnUuaM49rasZGg_o4ouAAAAAg"]
[Mon Dec 08 00:12:02.948779 2025] [:error] [pid 5223:tid 5254] [client 52.175.54.91:39456] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/moon.php"] [unique_id "aTWnUvoRJa-T0FB0DNoP6AAAAIA"]
[Mon Dec 08 00:12:03.191339 2025] [:error] [pid 9961:tid 9983] [client 52.175.54.91:39480] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/moon.php"] [unique_id "aTWnU2Qdnfbgcnzr89KagwAAAVQ"]
[Mon Dec 08 00:12:03.426466 2025] [:error] [pid 5222:tid 5247] [client 52.175.54.91:39424] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/moon.php"] [unique_id "aTWnU98FU0HgkYWmt7tjhwAAAFU"]
[Mon Dec 08 00:12:03.660479 2025] [:error] [pid 5223:tid 5276] [client 52.175.54.91:39472] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-info.php"] [unique_id "aTWnU_oRJa-T0FB0DNoP6gAAAJY"]
[Mon Dec 08 00:12:03.913290 2025] [:error] [pid 9961:tid 9964] [client 52.175.54.91:39490] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-info.php"] [unique_id "aTWnU2Qdnfbgcnzr89KahAAAAUE"]
[Mon Dec 08 00:12:04.162777 2025] [:error] [pid 5222:tid 5232] [client 52.175.54.91:6109] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-info.php"] [unique_id "aTWnVN8FU0HgkYWmt7tjiQAAAEY"]
[Mon Dec 08 00:12:04.407659 2025] [:error] [pid 9610:tid 9612] [client 52.175.54.91:6099] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-info.php"] [unique_id "aTWnVMZ4Zl9G0UhQ7w1ndAAAAQA"]
[Mon Dec 08 00:12:04.641376 2025] [:error] [pid 5224:tid 5290] [client 52.175.54.91:39457] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/warm.PhP7"] [unique_id "aTWnVPAAkbWt7RJBoF8N7AAAAMk"]
[Mon Dec 08 00:12:04.874224 2025] [:error] [pid 5224:tid 5301] [client 52.175.54.91:39546] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/warm.PhP7"] [unique_id "aTWnVPAAkbWt7RJBoF8N7QAAANQ"]
[Mon Dec 08 00:12:05.108697 2025] [:error] [pid 5222:tid 5241] [client 52.175.54.91:6016] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/warm.PhP7"] [unique_id "aTWnVd8FU0HgkYWmt7tjiwAAAE8"]
[Mon Dec 08 00:12:05.347932 2025] [:error] [pid 5222:tid 5246] [client 52.175.54.91:39461] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/warm.PhP7"] [unique_id "aTWnVd8FU0HgkYWmt7tjjAAAAFQ"]
[Mon Dec 08 00:12:05.581202 2025] [:error] [pid 9961:tid 9975] [client 52.175.54.91:6122] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ws.php7"] [unique_id "aTWnVWQdnfbgcnzr89KahwAAAUw"]
[Mon Dec 08 00:12:05.814122 2025] [:error] [pid 5224:tid 5302] [client 52.175.54.91:39502] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ws.php7"] [unique_id "aTWnVfAAkbWt7RJBoF8N7gAAANU"]
[Mon Dec 08 00:12:06.067769 2025] [:error] [pid 5224:tid 5284] [client 52.175.54.91:39515] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ws.php7"] [unique_id "aTWnVvAAkbWt7RJBoF8N7wAAAMM"]
[Mon Dec 08 00:12:06.302075 2025] [:error] [pid 9610:tid 9636] [client 52.175.54.91:39428] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ws.php7"] [unique_id "aTWnVsZ4Zl9G0UhQ7w1ndwAAARg"]
[Mon Dec 08 00:12:06.536279 2025] [:error] [pid 9961:tid 9971] [client 52.175.54.91:39452] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/rss.php"] [unique_id "aTWnVmQdnfbgcnzr89KaigAAAUg"]
[Mon Dec 08 00:12:06.770043 2025] [:error] [pid 9961:tid 9965] [client 52.175.54.91:6032] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/rss.php"] [unique_id "aTWnVmQdnfbgcnzr89KaiwAAAUI"]
[Mon Dec 08 00:12:07.003063 2025] [:error] [pid 9610:tid 9617] [client 52.175.54.91:39514] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/rss.php"] [unique_id "aTWnV8Z4Zl9G0UhQ7w1negAAAQU"]
[Mon Dec 08 00:12:07.236921 2025] [:error] [pid 5222:tid 5240] [client 52.175.54.91:39483] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/rss.php"] [unique_id "aTWnV98FU0HgkYWmt7tjjgAAAE4"]
[Mon Dec 08 00:12:07.470690 2025] [:error] [pid 5312:tid 5315] [client 52.175.54.91:6034] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/pekok.php"] [unique_id "aTWnV-aM49rasZGg_o4ovAAAAAE"]
[Mon Dec 08 00:12:07.704886 2025] [:error] [pid 5224:tid 5291] [client 52.175.54.91:39525] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/pekok.php"] [unique_id "aTWnV_AAkbWt7RJBoF8N8QAAAMo"]
[Mon Dec 08 00:12:07.938632 2025] [:error] [pid 9961:tid 9976] [client 52.175.54.91:6043] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/pekok.php"] [unique_id "aTWnV2Qdnfbgcnzr89KajgAAAU0"]
[Mon Dec 08 00:12:08.180254 2025] [:error] [pid 5224:tid 5286] [client 52.175.54.91:39499] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/pekok.php"] [unique_id "aTWnWPAAkbWt7RJBoF8N8gAAAMU"]
[Mon Dec 08 00:12:08.415102 2025] [:error] [pid 9610:tid 9630] [client 52.175.54.91:39475] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/elp.php"] [unique_id "aTWnWMZ4Zl9G0UhQ7w1nfAAAARI"]
[Mon Dec 08 00:12:08.662231 2025] [:error] [pid 5312:tid 5335] [client 52.175.54.91:39532] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/elp.php"] [unique_id "aTWnWOaM49rasZGg_o4ovQAAABU"]
[Mon Dec 08 00:12:08.897126 2025] [:error] [pid 5312:tid 5326] [client 52.175.54.91:39476] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/elp.php"] [unique_id "aTWnWOaM49rasZGg_o4ovgAAAAw"]
[Mon Dec 08 00:12:09.134431 2025] [:error] [pid 5223:tid 5269] [client 52.175.54.91:6124] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/elp.php"] [unique_id "aTWnWfoRJa-T0FB0DNoP7QAAAI8"]
[Mon Dec 08 00:12:09.371783 2025] [:error] [pid 9961:tid 9969] [client 52.175.54.91:39485] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-aa.php"] [unique_id "aTWnWWQdnfbgcnzr89KakAAAAUY"]
[Mon Dec 08 00:12:09.620536 2025] [:error] [pid 9610:tid 9624] [client 52.175.54.91:39535] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-aa.php"] [unique_id "aTWnWcZ4Zl9G0UhQ7w1nfgAAAQw"]
[Mon Dec 08 00:12:09.854116 2025] [:error] [pid 9961:tid 9980] [client 52.175.54.91:6103] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-aa.php"] [unique_id "aTWnWWQdnfbgcnzr89KakgAAAVE"]
[Mon Dec 08 00:12:10.089080 2025] [:error] [pid 5223:tid 5272] [client 52.175.54.91:39517] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-aa.php"] [unique_id "aTWnWvoRJa-T0FB0DNoP7wAAAJI"]
[Mon Dec 08 00:12:10.333240 2025] [:error] [pid 5224:tid 5295] [client 52.175.54.91:6095] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/cart.php"] [unique_id "aTWnWvAAkbWt7RJBoF8N9gAAAM4"]
[Mon Dec 08 00:12:10.580699 2025] [:error] [pid 5224:tid 5281] [client 52.175.54.91:39523] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/cart.php"] [unique_id "aTWnWvAAkbWt7RJBoF8N-AAAAMA"]
[Mon Dec 08 00:12:10.814918 2025] [:error] [pid 9961:tid 9963] [client 52.175.54.91:39478] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/cart.php"] [unique_id "aTWnWmQdnfbgcnzr89KalAAAAUA"]
[Mon Dec 08 00:12:11.059195 2025] [:error] [pid 9961:tid 9968] [client 52.175.54.91:39489] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/cart.php"] [unique_id "aTWnW2Qdnfbgcnzr89KalgAAAUU"]
[Mon Dec 08 00:12:11.293761 2025] [:error] [pid 5224:tid 5294] [client 52.175.54.91:6082] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/compare.php"] [unique_id "aTWnW_AAkbWt7RJBoF8N-QAAAM0"]
[Mon Dec 08 00:12:11.526701 2025] [:error] [pid 5224:tid 5298] [client 52.175.54.91:6107] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/compare.php"] [unique_id "aTWnW_AAkbWt7RJBoF8N-gAAANE"]
[Mon Dec 08 00:12:11.759569 2025] [:error] [pid 5223:tid 5256] [client 52.175.54.91:39522] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/compare.php"] [unique_id "aTWnW_oRJa-T0FB0DNoP8AAAAII"]
[Mon Dec 08 00:12:11.994214 2025] [:error] [pid 5222:tid 5230] [client 52.175.54.91:6027] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/compare.php"] [unique_id "aTWnW98FU0HgkYWmt7tjkwAAAEQ"]
[Mon Dec 08 00:12:12.251158 2025] [:error] [pid 5224:tid 5302] [client 52.175.54.91:39513] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/shop.php"] [unique_id "aTWnXPAAkbWt7RJBoF8OAQAAANU"]
[Mon Dec 08 00:12:12.486140 2025] [:error] [pid 5224:tid 5291] [client 52.175.54.91:6118] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/shop.php"] [unique_id "aTWnXPAAkbWt7RJBoF8OAgAAAMo"]
[Mon Dec 08 00:12:12.732771 2025] [:error] [pid 5224:tid 5305] [client 52.175.54.91:39444] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/shop.php"] [unique_id "aTWnXPAAkbWt7RJBoF8OBAAAANg"]
[Mon Dec 08 00:12:12.968184 2025] [:error] [pid 9961:tid 9978] [client 52.175.54.91:5974] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/shop.php"] [unique_id "aTWnXGQdnfbgcnzr89KalwAAAU8"]
[Mon Dec 08 00:12:13.244437 2025] [:error] [pid 5224:tid 5297] [client 52.175.54.91:6113] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/api.php"] [unique_id "aTWnXfAAkbWt7RJBoF8OBQAAANA"]
[Mon Dec 08 00:12:13.478631 2025] [:error] [pid 5224:tid 5300] [client 52.175.54.91:6120] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/api.php"] [unique_id "aTWnXfAAkbWt7RJBoF8OBgAAANM"]
[Mon Dec 08 00:12:13.712503 2025] [:error] [pid 5312:tid 5334] [client 52.175.54.91:39526] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/api.php"] [unique_id "aTWnXeaM49rasZGg_o4oxgAAABQ"]
[Mon Dec 08 00:12:13.947085 2025] [:error] [pid 5312:tid 5325] [client 52.175.54.91:6129] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/api.php"] [unique_id "aTWnXeaM49rasZGg_o4oxwAAAAs"]
[Mon Dec 08 00:12:14.187987 2025] [:error] [pid 9961:tid 9975] [client 52.175.54.91:39539] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/222.php"] [unique_id "aTWnXmQdnfbgcnzr89KamQAAAUw"]
[Mon Dec 08 00:12:14.440484 2025] [:error] [pid 9610:tid 9613] [client 52.175.54.91:6063] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/222.php"] [unique_id "aTWnXsZ4Zl9G0UhQ7w1nggAAAQE"]
[Mon Dec 08 00:12:14.676351 2025] [:error] [pid 5222:tid 5245] [client 52.175.54.91:6090] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/222.php"] [unique_id "aTWnXt8FU0HgkYWmt7tjlgAAAFM"]
[Mon Dec 08 00:12:14.910257 2025] [:error] [pid 5224:tid 5288] [client 52.175.54.91:39427] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/222.php"] [unique_id "aTWnXvAAkbWt7RJBoF8OCQAAAMc"]
[Mon Dec 08 00:12:15.145865 2025] [:error] [pid 5224:tid 5293] [client 52.175.54.91:6101] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/atom.php"] [unique_id "aTWnX_AAkbWt7RJBoF8OCgAAAMw"]
[Mon Dec 08 00:12:15.380439 2025] [:error] [pid 9610:tid 9625] [client 52.175.54.91:39465] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/atom.php"] [unique_id "aTWnX8Z4Zl9G0UhQ7w1nhQAAAQ0"]
[Mon Dec 08 00:12:15.615277 2025] [:error] [pid 9610:tid 9614] [client 52.175.54.91:6105] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/atom.php"] [unique_id "aTWnX8Z4Zl9G0UhQ7w1nhwAAAQI"]
[Mon Dec 08 00:12:15.849267 2025] [:error] [pid 9961:tid 9965] [client 52.175.54.91:39462] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/atom.php"] [unique_id "aTWnX2Qdnfbgcnzr89KanQAAAUI"]
[Mon Dec 08 00:12:16.089384 2025] [:error] [pid 5223:tid 5276] [client 52.175.54.91:6130] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/case.php"] [unique_id "aTWnYPoRJa-T0FB0DNoP8wAAAJY"]
[Mon Dec 08 00:12:16.330625 2025] [:error] [pid 5223:tid 5265] [client 52.175.54.91:39479] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/case.php"] [unique_id "aTWnYPoRJa-T0FB0DNoP9QAAAIs"]
[Mon Dec 08 00:12:16.589535 2025] [:error] [pid 5312:tid 5328] [client 52.175.54.91:6086] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/case.php"] [unique_id "aTWnYOaM49rasZGg_o4oyQAAAA4"]
[Mon Dec 08 00:12:16.839418 2025] [:error] [pid 5312:tid 5337] [client 52.175.54.91:6126] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/case.php"] [unique_id "aTWnYOaM49rasZGg_o4oygAAABc"]
[Mon Dec 08 00:12:17.078627 2025] [:error] [pid 5223:tid 5277] [client 52.175.54.91:39481] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/docs.php"] [unique_id "aTWnYfoRJa-T0FB0DNoP9wAAAJc"]
[Mon Dec 08 00:12:17.333272 2025] [:error] [pid 9610:tid 9629] [client 52.175.54.91:39473] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/docs.php"] [unique_id "aTWnYcZ4Zl9G0UhQ7w1niAAAARE"]
[Mon Dec 08 00:12:17.568313 2025] [:error] [pid 9610:tid 9633] [client 52.175.54.91:6093] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/docs.php"] [unique_id "aTWnYcZ4Zl9G0UhQ7w1niQAAARU"]
[Mon Dec 08 00:12:17.803683 2025] [:error] [pid 5224:tid 5304] [client 52.175.54.91:6022] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/docs.php"] [unique_id "aTWnYfAAkbWt7RJBoF8ODAAAANc"]
[Mon Dec 08 00:12:18.038528 2025] [:error] [pid 5224:tid 5303] [client 52.175.54.91:39482] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ios.php"] [unique_id "aTWnYvAAkbWt7RJBoF8ODQAAANY"]
[Mon Dec 08 00:12:18.372485 2025] [:error] [pid 5222:tid 5239] [client 52.175.54.91:6131] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ios.php"] [unique_id "aTWnYt8FU0HgkYWmt7tjmgAAAE0"]
[Mon Dec 08 00:12:18.665436 2025] [:error] [pid 9610:tid 9636] [client 52.175.54.91:6098] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ios.php"] [unique_id "aTWnYsZ4Zl9G0UhQ7w1niwAAARg"]
[Mon Dec 08 00:12:18.911605 2025] [:error] [pid 5222:tid 5232] [client 52.175.54.91:5992] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ios.php"] [unique_id "aTWnYt8FU0HgkYWmt7tjmwAAAEY"]
[Mon Dec 08 00:12:19.197237 2025] [:error] [pid 5222:tid 5241] [client 52.175.54.91:39458] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/click.php"] [unique_id "aTWnY98FU0HgkYWmt7tjnQAAAE8"]
[Mon Dec 08 00:12:19.442202 2025] [:error] [pid 5312:tid 5322] [client 52.175.54.91:39484] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/click.php"] [unique_id "aTWnY-aM49rasZGg_o4oywAAAAg"]
[Mon Dec 08 00:12:19.740085 2025] [:error] [pid 5224:tid 5283] [client 52.175.54.91:6123] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/click.php"] [unique_id "aTWnY_AAkbWt7RJBoF8OFgAAAMI"]
[Mon Dec 08 00:12:20.014796 2025] [:error] [pid 5312:tid 5321] [client 52.175.54.91:39511] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/click.php"] [unique_id "aTWnZOaM49rasZGg_o4ozAAAAAc"]
[Mon Dec 08 00:12:20.302021 2025] [:error] [pid 5224:tid 5297] [client 52.175.54.91:6049] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/lv.php"] [unique_id "aTWnZPAAkbWt7RJBoF8OFwAAANA"]
[Mon Dec 08 00:12:20.554499 2025] [:error] [pid 5224:tid 5300] [client 52.175.54.91:6111] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/lv.php"] [unique_id "aTWnZPAAkbWt7RJBoF8OGAAAANM"]
[Mon Dec 08 00:12:20.799042 2025] [:error] [pid 5223:tid 5267] [client 52.175.54.91:39477] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/lv.php"] [unique_id "aTWnZPoRJa-T0FB0DNoP-AAAAI0"]
[Mon Dec 08 00:12:21.038382 2025] [:error] [pid 5312:tid 5327] [client 52.175.54.91:6142] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/lv.php"] [unique_id "aTWnZeaM49rasZGg_o4ozgAAAA0"]
[Mon Dec 08 00:12:21.371070 2025] [:error] [pid 5223:tid 5266] [client 52.175.54.91:6115] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/inputs.php"] [unique_id "aTWnZfoRJa-T0FB0DNoP-QAAAIw"]
[Mon Dec 08 00:12:21.639257 2025] [:error] [pid 5312:tid 5315] [client 52.175.54.91:6060] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/inputs.php"] [unique_id "aTWnZeaM49rasZGg_o4ozwAAAAE"]
[Mon Dec 08 00:12:21.888427 2025] [:error] [pid 9610:tid 9628] [client 52.175.54.91:39468] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/inputs.php"] [unique_id "aTWnZcZ4Zl9G0UhQ7w1njgAAARA"]
[Mon Dec 08 00:12:22.141314 2025] [:error] [pid 9610:tid 9632] [client 52.175.54.91:6024] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/inputs.php"] [unique_id "aTWnZsZ4Zl9G0UhQ7w1nkAAAARQ"]
[Mon Dec 08 00:12:22.411043 2025] [:error] [pid 9961:tid 9973] [client 52.175.54.91:6073] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/alfa.php"] [unique_id "aTWnZmQdnfbgcnzr89KaowAAAUo"]
[Mon Dec 08 00:12:22.664638 2025] [:error] [pid 9961:tid 9968] [client 52.175.54.91:6071] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/alfa.php"] [unique_id "aTWnZmQdnfbgcnzr89KapQAAAUU"]
[Mon Dec 08 00:12:22.904382 2025] [:error] [pid 5312:tid 5319] [client 52.175.54.91:6112] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/alfa.php"] [unique_id "aTWnZuaM49rasZGg_o4o0gAAAAU"]
[Mon Dec 08 00:12:23.161457 2025] [:error] [pid 5224:tid 5295] [client 52.175.54.91:6087] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/alfa.php"] [unique_id "aTWnZ_AAkbWt7RJBoF8OGgAAAM4"]
[Mon Dec 08 00:12:23.396463 2025] [:error] [pid 5312:tid 5323] [client 52.175.54.91:6143] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/byp.php"] [unique_id "aTWnZ-aM49rasZGg_o4o0wAAAAk"]
[Mon Dec 08 00:12:23.635034 2025] [:error] [pid 5312:tid 5316] [client 52.175.54.91:6046] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/byp.php"] [unique_id "aTWnZ-aM49rasZGg_o4o1QAAAAI"]
[Mon Dec 08 00:12:23.877458 2025] [:error] [pid 5223:tid 5271] [client 52.175.54.91:39520] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/byp.php"] [unique_id "aTWnZ_oRJa-T0FB0DNoP-gAAAJE"]
[Mon Dec 08 00:12:24.113183 2025] [:error] [pid 9610:tid 9623] [client 52.175.54.91:5975] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/byp.php"] [unique_id "aTWnaMZ4Zl9G0UhQ7w1nkQAAAQs"]
[Mon Dec 08 00:12:24.406415 2025] [:error] [pid 5223:tid 5263] [client 52.175.54.91:6017] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/goat1.php"] [unique_id "aTWnaPoRJa-T0FB0DNoP_AAAAIk"]
[Mon Dec 08 00:12:24.639884 2025] [:error] [pid 5223:tid 5264] [client 52.175.54.91:6044] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/goat1.php"] [unique_id "aTWnaPoRJa-T0FB0DNoP_QAAAIo"]
[Mon Dec 08 00:12:24.873344 2025] [:error] [pid 9610:tid 9618] [client 52.175.54.91:6068] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/goat1.php"] [unique_id "aTWnaMZ4Zl9G0UhQ7w1nkwAAAQY"]
[Mon Dec 08 00:12:25.107072 2025] [:error] [pid 9961:tid 9985] [client 52.175.54.91:39512] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/goat1.php"] [unique_id "aTWnaWQdnfbgcnzr89KaqwAAAVY"]
[Mon Dec 08 00:12:25.354417 2025] [:error] [pid 9610:tid 9613] [client 52.175.54.91:39471] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/f.php"] [unique_id "aTWnacZ4Zl9G0UhQ7w1nlgAAAQE"]
[Mon Dec 08 00:12:25.588204 2025] [:error] [pid 9961:tid 9971] [client 52.175.54.91:39531] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/f.php"] [unique_id "aTWnaWQdnfbgcnzr89KarQAAAUg"]
[Mon Dec 08 00:12:25.821380 2025] [:error] [pid 9961:tid 9981] [client 52.175.54.91:6065] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/f.php"] [unique_id "aTWnaWQdnfbgcnzr89KarwAAAVI"]
[Mon Dec 08 00:12:26.055629 2025] [:error] [pid 9961:tid 9972] [client 52.175.54.91:39518] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/f.php"] [unique_id "aTWnamQdnfbgcnzr89KasgAAAUk"]
[Mon Dec 08 00:12:26.358101 2025] [:error] [pid 9961:tid 9966] [client 52.175.54.91:39438] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/max.php"] [unique_id "aTWnamQdnfbgcnzr89KatAAAAUM"]
[Mon Dec 08 00:12:26.603532 2025] [:error] [pid 5224:tid 5283] [client 52.175.54.91:6031] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/max.php"] [unique_id "aTWnavAAkbWt7RJBoF8OJwAAAMI"]
[Mon Dec 08 00:12:26.837748 2025] [:error] [pid 9961:tid 9973] [client 52.175.54.91:6084] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/max.php"] [unique_id "aTWnamQdnfbgcnzr89KatgAAAUo"]
[Mon Dec 08 00:12:27.071490 2025] [:error] [pid 5223:tid 5259] [client 52.175.54.91:6136] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/max.php"] [unique_id "aTWna_oRJa-T0FB0DNoP_wAAAIU"]
[Mon Dec 08 00:12:27.307422 2025] [:error] [pid 9610:tid 9627] [client 52.175.54.91:39529] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/m.php"] [unique_id "aTWna8Z4Zl9G0UhQ7w1nmgAAAQ8"]
[Mon Dec 08 00:12:27.556507 2025] [:error] [pid 5223:tid 5258] [client 52.175.54.91:6133] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/m.php"] [unique_id "aTWna_oRJa-T0FB0DNoQAAAAAIQ"]
[Mon Dec 08 00:12:27.795652 2025] [:error] [pid 5224:tid 5302] [client 52.175.54.91:5969] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/m.php"] [unique_id "aTWna_AAkbWt7RJBoF8OKwAAANU"]
[Mon Dec 08 00:12:28.030347 2025] [:error] [pid 9961:tid 9964] [client 52.175.54.91:6052] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/m.php"] [unique_id "aTWnbGQdnfbgcnzr89KauQAAAUE"]
[Mon Dec 08 00:12:28.266346 2025] [:error] [pid 9961:tid 9975] [client 52.175.54.91:6055] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/as.php"] [unique_id "aTWnbGQdnfbgcnzr89KauwAAAUw"]
[Mon Dec 08 00:12:28.504820 2025] [:error] [pid 5223:tid 5269] [client 52.175.54.91:39551] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/as.php"] [unique_id "aTWnbPoRJa-T0FB0DNoQAgAAAI8"]
[Mon Dec 08 00:12:28.759585 2025] [:error] [pid 9610:tid 9626] [client 52.175.54.91:5995] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/as.php"] [unique_id "aTWnbMZ4Zl9G0UhQ7w1nnAAAAQ4"]
[Mon Dec 08 00:12:28.994940 2025] [:error] [pid 9961:tid 9981] [client 52.175.54.91:6106] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/as.php"] [unique_id "aTWnbGQdnfbgcnzr89KawQAAAVI"]
[Mon Dec 08 00:12:29.229350 2025] [:error] [pid 9961:tid 9977] [client 52.175.54.91:6041] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/v.php"] [unique_id "aTWnbWQdnfbgcnzr89KawgAAAU4"]
[Mon Dec 08 00:12:29.464016 2025] [:error] [pid 9961:tid 9972] [client 52.175.54.91:6074] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/v.php"] [unique_id "aTWnbWQdnfbgcnzr89KawwAAAUk"]
[Mon Dec 08 00:12:29.698817 2025] [:error] [pid 5223:tid 5272] [client 52.175.54.91:6094] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/v.php"] [unique_id "aTWnbfoRJa-T0FB0DNoQAwAAAJI"]
[Mon Dec 08 00:12:29.933616 2025] [:error] [pid 5224:tid 5294] [client 52.175.54.91:6135] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/v.php"] [unique_id "aTWnbfAAkbWt7RJBoF8OLgAAAM0"]
[Mon Dec 08 00:12:30.166593 2025] [:error] [pid 9961:tid 9983] [client 52.175.54.91:39486] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/bless.php"] [unique_id "aTWnbmQdnfbgcnzr89KaxgAAAVQ"]
[Mon Dec 08 00:12:30.414416 2025] [:error] [pid 9961:tid 9986] [client 52.175.54.91:6064] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/bless.php"] [unique_id "aTWnbmQdnfbgcnzr89KayQAAAVc"]
[Mon Dec 08 00:12:30.653613 2025] [:error] [pid 5223:tid 5274] [client 52.175.54.91:6023] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/bless.php"] [unique_id "aTWnbvoRJa-T0FB0DNoQBQAAAJQ"]
[Mon Dec 08 00:12:30.901275 2025] [:error] [pid 5224:tid 5304] [client 52.175.54.91:5997] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/bless.php"] [unique_id "aTWnbvAAkbWt7RJBoF8OLwAAANc"]
[Mon Dec 08 00:12:31.135820 2025] [:error] [pid 9961:tid 9987] [client 52.175.54.91:6039] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/vv.php"] [unique_id "aTWnb2Qdnfbgcnzr89KazAAAAVg"]
[Mon Dec 08 00:12:31.384151 2025] [:error] [pid 5222:tid 5243] [client 52.175.54.91:6121] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/vv.php"] [unique_id "aTWnb98FU0HgkYWmt7tjnwAAAFE"]
[Mon Dec 08 00:12:31.618692 2025] [:error] [pid 5223:tid 5262] [client 52.175.54.91:6108] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/vv.php"] [unique_id "aTWnb_oRJa-T0FB0DNoQCgAAAIg"]
[Mon Dec 08 00:12:31.852060 2025] [:error] [pid 5223:tid 5277] [client 52.175.54.91:6079] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/vv.php"] [unique_id "aTWnb_oRJa-T0FB0DNoQDAAAAJc"]
[Mon Dec 08 00:12:32.091897 2025] [:error] [pid 9961:tid 9971] [client 52.175.54.91:6140] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/0.php"] [unique_id "aTWncGQdnfbgcnzr89KazQAAAUg"]
[Mon Dec 08 00:12:32.334823 2025] [:error] [pid 9610:tid 9634] [client 52.175.54.91:6141] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/0.php"] [unique_id "aTWncMZ4Zl9G0UhQ7w1npgAAARY"]
[Mon Dec 08 00:12:32.569069 2025] [:error] [pid 5224:tid 5296] [client 52.175.54.91:6036] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/0.php"] [unique_id "aTWncPAAkbWt7RJBoF8OMgAAAM8"]
[Mon Dec 08 00:12:32.803151 2025] [:error] [pid 5224:tid 5286] [client 52.175.54.91:6026] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/0.php"] [unique_id "aTWncPAAkbWt7RJBoF8OMwAAAMU"]
[Mon Dec 08 00:12:33.041259 2025] [:error] [pid 9961:tid 9978] [client 52.175.54.91:6076] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/jp.php"] [unique_id "aTWncWQdnfbgcnzr89Ka0QAAAU8"]
[Mon Dec 08 00:12:33.278859 2025] [:error] [pid 9610:tid 9614] [client 52.175.54.91:6056] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/jp.php"] [unique_id "aTWnccZ4Zl9G0UhQ7w1nqAAAAQI"]
[Mon Dec 08 00:12:33.527048 2025] [:error] [pid 5224:tid 5285] [client 52.175.54.91:6075] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/jp.php"] [unique_id "aTWncfAAkbWt7RJBoF8ONAAAAMQ"]
[Mon Dec 08 00:12:33.762219 2025] [:error] [pid 5223:tid 5274] [client 52.175.54.91:39443] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/jp.php"] [unique_id "aTWncfoRJa-T0FB0DNoQDwAAAJQ"]
[Mon Dec 08 00:12:34.002990 2025] [:error] [pid 5223:tid 5260] [client 52.175.54.91:39445] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/2.php"] [unique_id "aTWncvoRJa-T0FB0DNoQEAAAAIY"]
[Mon Dec 08 00:12:34.241109 2025] [:error] [pid 9961:tid 9976] [client 52.175.54.91:6072] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/2.php"] [unique_id "aTWncmQdnfbgcnzr89Ka1AAAAU0"]
[Mon Dec 08 00:12:34.475306 2025] [:error] [pid 9610:tid 9627] [client 52.175.54.91:6047] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/2.php"] [unique_id "aTWncsZ4Zl9G0UhQ7w1nqwAAAQ8"]
[Mon Dec 08 00:12:34.709878 2025] [:error] [pid 9961:tid 9963] [client 52.175.54.91:6070] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/2.php"] [unique_id "aTWncmQdnfbgcnzr89Ka1gAAAUA"]
[Mon Dec 08 00:12:34.943656 2025] [:error] [pid 5224:tid 5297] [client 52.175.54.91:6019] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/goods.php"] [unique_id "aTWncvAAkbWt7RJBoF8OOAAAANA"]
[Mon Dec 08 00:12:35.176605 2025] [:error] [pid 9961:tid 9987] [client 52.175.54.91:6137] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/goods.php"] [unique_id "aTWnc2Qdnfbgcnzr89Ka2QAAAVg"]
[Mon Dec 08 00:12:35.410542 2025] [:error] [pid 9961:tid 9965] [client 52.175.54.91:6116] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/goods.php"] [unique_id "aTWnc2Qdnfbgcnzr89Ka2gAAAUI"]
[Mon Dec 08 00:12:35.645374 2025] [:error] [pid 9961:tid 9985] [client 52.175.54.91:5891] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/goods.php"] [unique_id "aTWnc2Qdnfbgcnzr89Ka2wAAAVY"]
[Mon Dec 08 00:12:35.879042 2025] [:error] [pid 5223:tid 5257] [client 52.175.54.91:6011] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/manager.php"] [unique_id "aTWnc_oRJa-T0FB0DNoQEwAAAIM"]
[Mon Dec 08 00:12:36.112939 2025] [:error] [pid 5224:tid 5300] [client 52.175.54.91:6054] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/manager.php"] [unique_id "aTWndPAAkbWt7RJBoF8OOQAAANM"]
[Mon Dec 08 00:12:36.359759 2025] [:error] [pid 9961:tid 9981] [client 52.175.54.91:6110] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/manager.php"] [unique_id "aTWndGQdnfbgcnzr89Ka3QAAAVI"]
[Mon Dec 08 00:12:36.594185 2025] [:error] [pid 9961:tid 9977] [client 52.175.54.91:6053] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/manager.php"] [unique_id "aTWndGQdnfbgcnzr89Ka3wAAAU4"]
[Mon Dec 08 00:12:36.842202 2025] [:error] [pid 5223:tid 5254] [client 52.175.54.91:5960] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/new.php"] [unique_id "aTWndPoRJa-T0FB0DNoQFgAAAIA"]
[Mon Dec 08 00:12:37.076325 2025] [:error] [pid 5224:tid 5290] [client 52.175.54.91:6048] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/new.php"] [unique_id "aTWndfAAkbWt7RJBoF8OOwAAAMk"]
[Mon Dec 08 00:12:37.326987 2025] [:error] [pid 5224:tid 5292] [client 52.175.54.91:6083] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/new.php"] [unique_id "aTWndfAAkbWt7RJBoF8OPQAAAMs"]
[Mon Dec 08 00:12:37.561384 2025] [:error] [pid 9961:tid 9978] [client 52.175.54.91:5968] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/new.php"] [unique_id "aTWndWQdnfbgcnzr89Ka4gAAAU8"]
[Mon Dec 08 00:12:37.795644 2025] [:error] [pid 5312:tid 5324] [client 52.175.54.91:6080] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/info.php"] [unique_id "aTWndeaM49rasZGg_o4o1gAAAAo"]
[Mon Dec 08 00:12:38.029105 2025] [:error] [pid 9961:tid 9972] [client 52.175.54.91:39528] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/info.php"] [unique_id "aTWndmQdnfbgcnzr89Ka5AAAAUk"]
[Mon Dec 08 00:12:38.268491 2025] [:error] [pid 5223:tid 5266] [client 52.175.54.91:5971] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/info.php"] [unique_id "aTWndvoRJa-T0FB0DNoQGwAAAIw"]
[Mon Dec 08 00:12:38.504534 2025] [:error] [pid 9610:tid 9616] [client 52.175.54.91:6127] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/info.php"] [unique_id "aTWndsZ4Zl9G0UhQ7w1nrAAAAQQ"]
[Mon Dec 08 00:12:38.738158 2025] [:error] [pid 9961:tid 9964] [client 52.175.54.91:5977] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/doc.php"] [unique_id "aTWndmQdnfbgcnzr89Ka5gAAAUE"]
[Mon Dec 08 00:12:38.988560 2025] [:error] [pid 5223:tid 5263] [client 52.175.54.91:6005] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/doc.php"] [unique_id "aTWndvoRJa-T0FB0DNoQHQAAAIk"]
[Mon Dec 08 00:12:39.222928 2025] [:error] [pid 5223:tid 5264] [client 52.175.54.91:6077] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/doc.php"] [unique_id "aTWnd_oRJa-T0FB0DNoQHgAAAIo"]
[Mon Dec 08 00:12:39.465003 2025] [:error] [pid 5223:tid 5275] [client 52.175.54.91:6114] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/doc.php"] [unique_id "aTWnd_oRJa-T0FB0DNoQHwAAAJU"]
[Mon Dec 08 00:12:39.704006 2025] [:error] [pid 5223:tid 5276] [client 52.175.54.91:5912] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/go.php"] [unique_id "aTWnd_oRJa-T0FB0DNoQIAAAAJY"]
[Mon Dec 08 00:12:39.950713 2025] [:error] [pid 9961:tid 9987] [client 52.175.54.91:39444] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/go.php"] [unique_id "aTWnd2Qdnfbgcnzr89Ka6wAAAVg"]
[Mon Dec 08 00:12:40.188426 2025] [:error] [pid 5224:tid 5289] [client 52.175.54.91:5962] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/go.php"] [unique_id "aTWnePAAkbWt7RJBoF8OSQAAAMg"]
[Mon Dec 08 00:12:40.423312 2025] [:error] [pid 5224:tid 5283] [client 52.175.54.91:6020] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/go.php"] [unique_id "aTWnePAAkbWt7RJBoF8OSgAAAMI"]
[Mon Dec 08 00:12:40.656988 2025] [:error] [pid 5224:tid 5299] [client 52.175.54.91:6081] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/mail.php"] [unique_id "aTWnePAAkbWt7RJBoF8OTAAAANI"]
[Mon Dec 08 00:12:40.891793 2025] [:error] [pid 9610:tid 9615] [client 52.175.54.91:6085] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/mail.php"] [unique_id "aTWneMZ4Zl9G0UhQ7w1nsAAAAQM"]
[Mon Dec 08 00:13:11.045456 2025] [:error] [pid 5224:tid 5297] [client 52.175.54.91:5976] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/js.php"] [unique_id "aTWnl_AAkbWt7RJBoF8ObwAAANA"]
[Mon Dec 08 00:13:11.299655 2025] [:error] [pid 5222:tid 5231] [client 52.175.54.91:39460] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/js.php"] [unique_id "aTWnl98FU0HgkYWmt7tjtgAAAEU"]
[Mon Dec 08 00:13:11.533690 2025] [:error] [pid 5312:tid 5336] [client 52.175.54.91:5989] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/js.php"] [unique_id "aTWnl-aM49rasZGg_o4o5QAAABY"]
[Mon Dec 08 00:13:11.768764 2025] [:error] [pid 5222:tid 5240] [client 52.175.54.91:6015] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/js.php"] [unique_id "aTWnl98FU0HgkYWmt7tjtwAAAE4"]
[Mon Dec 08 00:13:12.003665 2025] [:error] [pid 5224:tid 5300] [client 52.175.54.91:5941] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/file1.php"] [unique_id "aTWnmPAAkbWt7RJBoF8OcQAAANM"]
[Mon Dec 08 00:13:12.242222 2025] [:error] [pid 5312:tid 5331] [client 52.175.54.91:39467] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/file1.php"] [unique_id "aTWnmOaM49rasZGg_o4o5wAAABE"]
[Mon Dec 08 00:13:12.475871 2025] [:error] [pid 9961:tid 9971] [client 52.175.54.91:6000] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/file1.php"] [unique_id "aTWnmGQdnfbgcnzr89KbCgAAAUg"]
[Mon Dec 08 00:13:12.712642 2025] [:error] [pid 5224:tid 5292] [client 52.175.54.91:5985] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/file1.php"] [unique_id "aTWnmPAAkbWt7RJBoF8OcgAAAMs"]
[Mon Dec 08 00:13:12.958928 2025] [:error] [pid 5224:tid 5281] [client 52.175.54.91:6045] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/mar.php"] [unique_id "aTWnmPAAkbWt7RJBoF8OcwAAAMA"]
[Mon Dec 08 00:13:13.195072 2025] [:error] [pid 9961:tid 9966] [client 52.175.54.91:6125] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/mar.php"] [unique_id "aTWnmWQdnfbgcnzr89KbDAAAAUM"]
[Mon Dec 08 00:13:13.430044 2025] [:error] [pid 5222:tid 5230] [client 52.175.54.91:39533] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/mar.php"] [unique_id "aTWnmd8FU0HgkYWmt7tjuQAAAEQ"]
[Mon Dec 08 00:13:13.663949 2025] [:error] [pid 5312:tid 5333] [client 52.175.54.91:5888] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/mar.php"] [unique_id "aTWnmeaM49rasZGg_o4o6AAAABM"]
[Mon Dec 08 00:13:13.897780 2025] [:error] [pid 9961:tid 9982] [client 52.175.54.91:5967] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/123.php"] [unique_id "aTWnmWQdnfbgcnzr89KbDQAAAVM"]
[Mon Dec 08 00:13:14.133270 2025] [:error] [pid 9610:tid 9633] [client 52.175.54.91:39504] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/123.php"] [unique_id "aTWnmsZ4Zl9G0UhQ7w1n0QAAARU"]
[Mon Dec 08 00:13:14.368035 2025] [:error] [pid 5224:tid 5301] [client 52.175.54.91:6132] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/123.php"] [unique_id "aTWnmvAAkbWt7RJBoF8OdQAAANQ"]
[Mon Dec 08 00:13:14.602733 2025] [:error] [pid 5312:tid 5328] [client 52.175.54.91:6028] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/123.php"] [unique_id "aTWnmuaM49rasZGg_o4o6QAAAA4"]
[Mon Dec 08 00:13:14.836411 2025] [:error] [pid 5312:tid 5322] [client 52.175.54.91:6051] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/321.php"] [unique_id "aTWnmuaM49rasZGg_o4o6gAAAAg"]
[Mon Dec 08 00:13:15.073699 2025] [:error] [pid 5223:tid 5275] [client 52.175.54.91:5979] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/321.php"] [unique_id "aTWnm_oRJa-T0FB0DNoQRQAAAJU"]
[Mon Dec 08 00:13:15.321256 2025] [:error] [pid 5312:tid 5315] [client 52.175.54.91:5893] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/321.php"] [unique_id "aTWnm-aM49rasZGg_o4o7QAAAAE"]
[Mon Dec 08 00:13:15.571204 2025] [:error] [pid 5312:tid 5335] [client 52.175.54.91:5892] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/321.php"] [unique_id "aTWnm-aM49rasZGg_o4o7wAAABU"]
[Mon Dec 08 00:13:15.811794 2025] [:error] [pid 5312:tid 5326] [client 52.175.54.91:5900] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/simple.php"] [unique_id "aTWnm-aM49rasZGg_o4o8AAAAAw"]
[Mon Dec 08 00:13:16.049904 2025] [:error] [pid 5223:tid 5256] [client 52.175.54.91:5964] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/simple.php"] [unique_id "aTWnnPoRJa-T0FB0DNoQRgAAAII"]
[Mon Dec 08 00:13:16.294405 2025] [:error] [pid 5312:tid 5316] [client 52.175.54.91:5988] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/simple.php"] [unique_id "aTWnnOaM49rasZGg_o4o8gAAAAI"]
[Mon Dec 08 00:13:16.528436 2025] [:error] [pid 5222:tid 5229] [client 52.175.54.91:6006] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/simple.php"] [unique_id "aTWnnN8FU0HgkYWmt7tjuwAAAEM"]
[Mon Dec 08 00:13:16.761460 2025] [:error] [pid 5223:tid 5278] [client 52.175.54.91:5966] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/classwithtostring.php"] [unique_id "aTWnnPoRJa-T0FB0DNoQRwAAAJg"]
[Mon Dec 08 00:13:16.996142 2025] [:error] [pid 5222:tid 5237] [client 52.175.54.91:5961] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/classwithtostring.php"] [unique_id "aTWnnN8FU0HgkYWmt7tjvQAAAEs"]
[Mon Dec 08 00:13:17.230613 2025] [:error] [pid 5222:tid 5239] [client 52.175.54.91:6029] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/classwithtostring.php"] [unique_id "aTWnnd8FU0HgkYWmt7tjvgAAAE0"]
[Mon Dec 08 00:13:17.465184 2025] [:error] [pid 5223:tid 5276] [client 52.175.54.91:39527] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/classwithtostring.php"] [unique_id "aTWnnfoRJa-T0FB0DNoQSQAAAJY"]
[Mon Dec 08 00:13:17.699416 2025] [:error] [pid 5222:tid 5241] [client 52.175.54.91:5973] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/al.php"] [unique_id "aTWnnd8FU0HgkYWmt7tjwAAAAE8"]
[Mon Dec 08 00:13:17.934820 2025] [:error] [pid 9961:tid 9964] [client 52.175.54.91:6002] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/al.php"] [unique_id "aTWnnWQdnfbgcnzr89KbDgAAAUE"]
[Mon Dec 08 00:13:18.168472 2025] [:error] [pid 9961:tid 9975] [client 52.175.54.91:6058] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/al.php"] [unique_id "aTWnnmQdnfbgcnzr89KbDwAAAUw"]
[Mon Dec 08 00:13:18.404043 2025] [:error] [pid 9610:tid 9631] [client 52.175.54.91:39439] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/al.php"] [unique_id "aTWnnsZ4Zl9G0UhQ7w1n0gAAARM"]
[Mon Dec 08 00:13:18.650777 2025] [:error] [pid 9610:tid 9628] [client 52.175.54.91:5910] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/xx.php"] [unique_id "aTWnnsZ4Zl9G0UhQ7w1n0wAAARA"]
[Mon Dec 08 00:13:18.899649 2025] [:error] [pid 5224:tid 5294] [client 52.175.54.91:6025] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/xx.php"] [unique_id "aTWnnvAAkbWt7RJBoF8OdgAAAM0"]
[Mon Dec 08 00:13:19.135501 2025] [:error] [pid 5223:tid 5260] [client 52.175.54.91:5965] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/xx.php"] [unique_id "aTWnn_oRJa-T0FB0DNoQTQAAAIY"]
[Mon Dec 08 00:13:19.371496 2025] [:error] [pid 5223:tid 5265] [client 52.175.54.91:5946] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/xx.php"] [unique_id "aTWnn_oRJa-T0FB0DNoQTgAAAIs"]
[Mon Dec 08 00:13:19.607674 2025] [:error] [pid 9961:tid 9976] [client 52.175.54.91:6078] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/jga.php"] [unique_id "aTWnn2Qdnfbgcnzr89KbEQAAAU0"]
[Mon Dec 08 00:13:19.841940 2025] [:error] [pid 5223:tid 5262] [client 52.175.54.91:5839] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/jga.php"] [unique_id "aTWnn_oRJa-T0FB0DNoQUQAAAIg"]
[Mon Dec 08 00:13:20.089607 2025] [:error] [pid 5312:tid 5334] [client 52.175.54.91:5955] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/jga.php"] [unique_id "aTWnoOaM49rasZGg_o4o9AAAABQ"]
[Mon Dec 08 00:13:20.327293 2025] [:error] [pid 5224:tid 5304] [client 52.175.54.91:6030] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/jga.php"] [unique_id "aTWnoPAAkbWt7RJBoF8OdwAAANc"]
[Mon Dec 08 00:13:20.567660 2025] [:error] [pid 5224:tid 5287] [client 52.175.54.91:5952] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/num.php"] [unique_id "aTWnoPAAkbWt7RJBoF8OeAAAAMY"]
[Mon Dec 08 00:13:20.809219 2025] [:error] [pid 9961:tid 9979] [client 52.175.54.91:5907] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/num.php"] [unique_id "aTWnoGQdnfbgcnzr89KbEgAAAVA"]
[Mon Dec 08 00:13:21.044421 2025] [:error] [pid 9961:tid 9974] [client 52.175.54.91:5986] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/num.php"] [unique_id "aTWnoWQdnfbgcnzr89KbEwAAAUs"]
[Mon Dec 08 00:13:21.278703 2025] [:error] [pid 5312:tid 5331] [client 52.175.54.91:5897] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/num.php"] [unique_id "aTWnoeaM49rasZGg_o4o9gAAABE"]
[Mon Dec 08 00:13:21.512405 2025] [:error] [pid 5312:tid 5325] [client 52.175.54.91:5953] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ty.php"] [unique_id "aTWnoeaM49rasZGg_o4o9wAAAAs"]
[Mon Dec 08 00:13:21.746541 2025] [:error] [pid 9961:tid 9973] [client 52.175.54.91:5926] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ty.php"] [unique_id "aTWnoWQdnfbgcnzr89KbFQAAAUo"]
[Mon Dec 08 00:13:21.979797 2025] [:error] [pid 9610:tid 9616] [client 52.175.54.91:6137] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ty.php"] [unique_id "aTWnocZ4Zl9G0UhQ7w1n1gAAAQQ"]
[Mon Dec 08 00:13:22.213359 2025] [:error] [pid 5222:tid 5231] [client 52.175.54.91:5840] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ty.php"] [unique_id "aTWnot8FU0HgkYWmt7tjxAAAAEU"]
[Mon Dec 08 00:13:22.447935 2025] [:error] [pid 9961:tid 9969] [client 52.175.54.91:6128] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/buy.php"] [unique_id "aTWnomQdnfbgcnzr89KbFgAAAUY"]
[Mon Dec 08 00:13:22.691378 2025] [:error] [pid 5312:tid 5328] [client 52.175.54.91:6067] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/buy.php"] [unique_id "aTWnouaM49rasZGg_o4o-QAAAA4"]
[Mon Dec 08 00:13:22.929804 2025] [:error] [pid 9610:tid 9629] [client 52.175.54.91:6009] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/buy.php"] [unique_id "aTWnosZ4Zl9G0UhQ7w1n2AAAARE"]
[Mon Dec 08 00:13:23.162703 2025] [:error] [pid 5222:tid 5233] [client 52.175.54.91:6059] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/buy.php"] [unique_id "aTWno98FU0HgkYWmt7tjxQAAAEc"]
[Mon Dec 08 00:13:23.395844 2025] [:error] [pid 5312:tid 5322] [client 52.175.54.91:5999] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/abcd.php"] [unique_id "aTWno-aM49rasZGg_o4o-gAAAAg"]
[Mon Dec 08 00:13:23.634881 2025] [:error] [pid 9961:tid 9965] [client 52.175.54.91:5887] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/abcd.php"] [unique_id "aTWno2Qdnfbgcnzr89KbGQAAAUI"]
[Mon Dec 08 00:13:23.890848 2025] [:error] [pid 5223:tid 5266] [client 52.175.54.91:5935] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/abcd.php"] [unique_id "aTWno_oRJa-T0FB0DNoQUwAAAIw"]
[Mon Dec 08 00:13:24.143937 2025] [:error] [pid 5222:tid 5234] [client 52.175.54.91:6069] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/abcd.php"] [unique_id "aTWnpN8FU0HgkYWmt7tjxwAAAEg"]
[Mon Dec 08 00:13:24.382971 2025] [:error] [pid 5223:tid 5255] [client 52.175.54.91:5889] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/c.php"] [unique_id "aTWnpPoRJa-T0FB0DNoQVAAAAIE"]
[Mon Dec 08 00:13:24.617847 2025] [:error] [pid 9961:tid 9984] [client 52.175.54.91:6021] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/c.php"] [unique_id "aTWnpGQdnfbgcnzr89KbGwAAAVU"]
[Mon Dec 08 00:13:24.856501 2025] [:error] [pid 5312:tid 5337] [client 52.175.54.91:6097] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/c.php"] [unique_id "aTWnpOaM49rasZGg_o4o-wAAABc"]
[Mon Dec 08 00:13:25.091259 2025] [:error] [pid 5222:tid 5230] [client 52.175.54.91:5945] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/c.php"] [unique_id "aTWnpd8FU0HgkYWmt7tjyAAAAEQ"]
[Mon Dec 08 00:13:25.326724 2025] [:error] [pid 5312:tid 5330] [client 52.175.54.91:5922] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/xo.php"] [unique_id "aTWnpeaM49rasZGg_o4o_AAAABA"]
[Mon Dec 08 00:13:25.578193 2025] [:error] [pid 5224:tid 5291] [client 52.175.54.91:5970] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/xo.php"] [unique_id "aTWnpfAAkbWt7RJBoF8OewAAAMo"]
[Mon Dec 08 00:13:25.811767 2025] [:error] [pid 5312:tid 5318] [client 52.175.54.91:5948] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/xo.php"] [unique_id "aTWnpeaM49rasZGg_o4o_QAAAAQ"]
[Mon Dec 08 00:13:26.055942 2025] [:error] [pid 9610:tid 9635] [client 52.175.54.91:6042] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/xo.php"] [unique_id "aTWnpsZ4Zl9G0UhQ7w1n2QAAARc"]
[Mon Dec 08 00:13:26.298192 2025] [:error] [pid 5312:tid 5327] [client 52.175.54.91:39469] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/dlu.php"] [unique_id "aTWnpuaM49rasZGg_o4o_wAAAA0"]
[Mon Dec 08 00:13:26.531899 2025] [:error] [pid 9961:tid 9970] [client 52.175.54.91:5956] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/dlu.php"] [unique_id "aTWnpmQdnfbgcnzr89KbHQAAAUc"]
[Mon Dec 08 00:13:26.766066 2025] [:error] [pid 5224:tid 5286] [client 52.175.54.91:6102] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/dlu.php"] [unique_id "aTWnpvAAkbWt7RJBoF8OfQAAAMU"]
[Mon Dec 08 00:13:26.999938 2025] [:error] [pid 5224:tid 5299] [client 52.175.54.91:5984] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/dlu.php"] [unique_id "aTWnpvAAkbWt7RJBoF8OgAAAANI"]
[Mon Dec 08 00:13:27.232987 2025] [:error] [pid 9961:tid 9966] [client 52.175.54.91:5894] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/rk2.php"] [unique_id "aTWnp2Qdnfbgcnzr89KbHgAAAUM"]
[Mon Dec 08 00:13:27.473405 2025] [:error] [pid 5224:tid 5282] [client 52.175.54.91:6057] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/rk2.php"] [unique_id "aTWnp_AAkbWt7RJBoF8OggAAAME"]
[Mon Dec 08 00:13:27.708266 2025] [:error] [pid 9961:tid 9964] [client 52.175.54.91:6007] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/rk2.php"] [unique_id "aTWnp2Qdnfbgcnzr89KbIQAAAUE"]
[Mon Dec 08 00:13:27.943837 2025] [:error] [pid 5224:tid 5300] [client 52.175.54.91:5908] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/rk2.php"] [unique_id "aTWnp_AAkbWt7RJBoF8OgwAAANM"]
[Mon Dec 08 00:13:28.190345 2025] [:error] [pid 5312:tid 5316] [client 52.175.54.91:5951] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wso.php"] [unique_id "aTWnqOaM49rasZGg_o4pAAAAAAI"]
[Mon Dec 08 00:13:28.424100 2025] [:error] [pid 5223:tid 5276] [client 52.175.54.91:5981] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wso.php"] [unique_id "aTWnqPoRJa-T0FB0DNoQWQAAAJY"]
[Mon Dec 08 00:13:28.665947 2025] [:error] [pid 9961:tid 9987] [client 52.175.54.91:5978] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wso.php"] [unique_id "aTWnqGQdnfbgcnzr89KbIwAAAVg"]
[Mon Dec 08 00:13:28.899154 2025] [:error] [pid 9961:tid 9979] [client 52.175.54.91:6037] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wso.php"] [unique_id "aTWnqGQdnfbgcnzr89KbJAAAAVA"]
[Mon Dec 08 00:13:29.133656 2025] [:error] [pid 9961:tid 9983] [client 52.175.54.91:5959] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/we.php"] [unique_id "aTWnqWQdnfbgcnzr89KbJgAAAVQ"]
[Mon Dec 08 00:13:29.373219 2025] [:error] [pid 9961:tid 9969] [client 52.175.54.91:6003] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/we.php"] [unique_id "aTWnqWQdnfbgcnzr89KbJwAAAUY"]
[Mon Dec 08 00:13:29.606807 2025] [:error] [pid 5224:tid 5292] [client 52.175.54.91:6035] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/we.php"] [unique_id "aTWnqfAAkbWt7RJBoF8OhQAAAMs"]
[Mon Dec 08 00:13:29.840644 2025] [:error] [pid 9961:tid 9985] [client 52.175.54.91:5828] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/we.php"] [unique_id "aTWnqWQdnfbgcnzr89KbKgAAAVY"]
[Mon Dec 08 00:13:30.088814 2025] [:error] [pid 9610:tid 9626] [client 52.175.54.91:5991] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/karak.php"] [unique_id "aTWnqsZ4Zl9G0UhQ7w1n2wAAAQ4"]
[Mon Dec 08 00:13:30.323088 2025] [:error] [pid 5222:tid 5246] [client 52.175.54.91:39493] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/karak.php"] [unique_id "aTWnqt8FU0HgkYWmt7tjzQAAAFQ"]
[Mon Dec 08 00:13:30.557543 2025] [:error] [pid 5222:tid 5249] [client 52.175.54.91:5958] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/karak.php"] [unique_id "aTWnqt8FU0HgkYWmt7tjzgAAAFc"]
[Mon Dec 08 00:13:30.791434 2025] [:error] [pid 9610:tid 9615] [client 52.175.54.91:5938] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/karak.php"] [unique_id "aTWnqsZ4Zl9G0UhQ7w1n3QAAAQM"]
[Mon Dec 08 00:13:31.025190 2025] [:error] [pid 9610:tid 9632] [client 52.175.54.91:5925] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/content.php"] [unique_id "aTWnq8Z4Zl9G0UhQ7w1n3gAAARQ"]
[Mon Dec 08 00:13:31.259915 2025] [:error] [pid 9610:tid 9618] [client 52.175.54.91:5917] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/content.php"] [unique_id "aTWnq8Z4Zl9G0UhQ7w1n3wAAAQY"]
[Mon Dec 08 00:13:31.506604 2025] [:error] [pid 5224:tid 5294] [client 52.175.54.91:5957] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/content.php"] [unique_id "aTWnq_AAkbWt7RJBoF8OiQAAAM0"]
[Mon Dec 08 00:13:31.740483 2025] [:error] [pid 5312:tid 5336] [client 52.175.54.91:6004] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/content.php"] [unique_id "aTWnq-aM49rasZGg_o4pBgAAABY"]
[Mon Dec 08 00:13:31.974851 2025] [:error] [pid 5312:tid 5338] [client 52.175.54.91:5909] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/406.php"] [unique_id "aTWnq-aM49rasZGg_o4pBwAAABg"]
[Mon Dec 08 00:13:32.208018 2025] [:error] [pid 5312:tid 5325] [client 52.175.54.91:5916] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/406.php"] [unique_id "aTWnrOaM49rasZGg_o4pCAAAAAs"]
[Mon Dec 08 00:13:32.442397 2025] [:error] [pid 9961:tid 9967] [client 52.175.54.91:5896] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/406.php"] [unique_id "aTWnrGQdnfbgcnzr89KbLAAAAUQ"]
[Mon Dec 08 00:13:32.686365 2025] [:error] [pid 5312:tid 5321] [client 52.175.54.91:5831] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/406.php"] [unique_id "aTWnrOaM49rasZGg_o4pCQAAAAc"]
[Mon Dec 08 00:13:32.919353 2025] [:error] [pid 9610:tid 9628] [client 52.175.54.91:5933] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/mariju.php"] [unique_id "aTWnrMZ4Zl9G0UhQ7w1n5AAAARA"]
[Mon Dec 08 00:13:33.207064 2025] [:error] [pid 9610:tid 9622] [client 52.175.54.91:6033] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/mariju.php"] [unique_id "aTWnrcZ4Zl9G0UhQ7w1n5wAAAQo"]
[Mon Dec 08 00:13:33.450167 2025] [:error] [pid 9610:tid 9617] [client 52.175.54.91:5944] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/mariju.php"] [unique_id "aTWnrcZ4Zl9G0UhQ7w1n6gAAAQU"]
[Mon Dec 08 00:13:33.684712 2025] [:error] [pid 5224:tid 5288] [client 52.175.54.91:5936] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/mariju.php"] [unique_id "aTWnrfAAkbWt7RJBoF8OigAAAMc"]
[Mon Dec 08 00:13:33.918350 2025] [:error] [pid 9961:tid 9986] [client 52.175.54.91:5833] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/k.php"] [unique_id "aTWnrWQdnfbgcnzr89KbLQAAAVc"]
[Mon Dec 08 00:13:34.152609 2025] [:error] [pid 9961:tid 9966] [client 52.175.54.91:5924] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/k.php"] [unique_id "aTWnrmQdnfbgcnzr89KbLwAAAUM"]
[Mon Dec 08 00:13:34.391425 2025] [:error] [pid 9961:tid 9968] [client 52.175.54.91:5914] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/k.php"] [unique_id "aTWnrmQdnfbgcnzr89KbMAAAAUU"]
[Mon Dec 08 00:13:34.630369 2025] [:error] [pid 9610:tid 9618] [client 52.175.54.91:5844] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/k.php"] [unique_id "aTWnrsZ4Zl9G0UhQ7w1n8wAAAQY"]
[Mon Dec 08 00:13:34.869136 2025] [:error] [pid 9610:tid 9623] [client 52.175.54.91:5837] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/cache.php"] [unique_id "aTWnrsZ4Zl9G0UhQ7w1n9QAAAQs"]
[Mon Dec 08 00:13:35.103684 2025] [:error] [pid 9961:tid 9963] [client 52.175.54.91:5845] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/cache.php"] [unique_id "aTWnr2Qdnfbgcnzr89KbNAAAAUA"]
[Mon Dec 08 00:13:35.349674 2025] [:error] [pid 9961:tid 9976] [client 52.175.54.91:5830] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/cache.php"] [unique_id "aTWnr2Qdnfbgcnzr89KbNQAAAU0"]
[Mon Dec 08 00:13:35.583600 2025] [:error] [pid 9961:tid 9983] [client 52.175.54.91:5890] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/cache.php"] [unique_id "aTWnr2Qdnfbgcnzr89KbNgAAAVQ"]
[Mon Dec 08 00:13:35.817944 2025] [:error] [pid 5222:tid 5250] [client 52.175.54.91:6014] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/zfile.php"] [unique_id "aTWnr98FU0HgkYWmt7tj0AAAAFg"]
[Mon Dec 08 00:13:36.052564 2025] [:error] [pid 9961:tid 9973] [client 52.175.54.91:5762] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/zfile.php"] [unique_id "aTWnsGQdnfbgcnzr89KbOAAAAUo"]
[Mon Dec 08 00:13:36.287332 2025] [:error] [pid 5222:tid 5231] [client 52.175.54.91:5993] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/zfile.php"] [unique_id "aTWnsN8FU0HgkYWmt7tj0QAAAEU"]
[Mon Dec 08 00:13:36.520704 2025] [:error] [pid 5223:tid 5254] [client 52.175.54.91:5949] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/zfile.php"] [unique_id "aTWnsPoRJa-T0FB0DNoQXgAAAIA"]
[Mon Dec 08 00:13:36.753932 2025] [:error] [pid 9610:tid 9634] [client 52.175.54.91:5867] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/NewFile.php"] [unique_id "aTWnsMZ4Zl9G0UhQ7w1n9gAAARY"]
[Mon Dec 08 00:13:36.987138 2025] [:error] [pid 5224:tid 5291] [client 52.175.54.91:6139] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/NewFile.php"] [unique_id "aTWnsPAAkbWt7RJBoF8OiwAAAMo"]
[Mon Dec 08 00:13:37.220329 2025] [:error] [pid 5223:tid 5262] [client 52.175.54.91:5913] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/NewFile.php"] [unique_id "aTWnsfoRJa-T0FB0DNoQXwAAAIg"]
[Mon Dec 08 00:13:37.454159 2025] [:error] [pid 5224:tid 5303] [client 52.175.54.91:5857] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/NewFile.php"] [unique_id "aTWnsfAAkbWt7RJBoF8OjAAAANY"]
[Mon Dec 08 00:13:37.688105 2025] [:error] [pid 5223:tid 5273] [client 52.175.54.91:5940] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/des.php"] [unique_id "aTWnsfoRJa-T0FB0DNoQYAAAAJM"]
[Mon Dec 08 00:13:37.922042 2025] [:error] [pid 5222:tid 5240] [client 52.175.54.91:6066] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/des.php"] [unique_id "aTWnsd8FU0HgkYWmt7tj1AAAAE4"]
[Mon Dec 08 00:13:38.155977 2025] [:error] [pid 5312:tid 5318] [client 52.175.54.91:5915] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/des.php"] [unique_id "aTWnsuaM49rasZGg_o4pCwAAAAQ"]
[Mon Dec 08 00:13:38.406163 2025] [:error] [pid 5222:tid 5233] [client 52.175.54.91:5824] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/des.php"] [unique_id "aTWnst8FU0HgkYWmt7tj1QAAAEc"]
[Mon Dec 08 00:13:38.653768 2025] [:error] [pid 5223:tid 5268] [client 52.175.54.91:5895] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ant.php"] [unique_id "aTWnsvoRJa-T0FB0DNoQYwAAAI4"]
[Mon Dec 08 00:13:38.904391 2025] [:error] [pid 5312:tid 5315] [client 52.175.54.91:5906] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ant.php"] [unique_id "aTWnsuaM49rasZGg_o4pDAAAAAE"]
[Mon Dec 08 00:13:39.138167 2025] [:error] [pid 5222:tid 5230] [client 52.175.54.91:6013] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ant.php"] [unique_id "aTWns98FU0HgkYWmt7tj1gAAAEQ"]
[Mon Dec 08 00:13:39.371311 2025] [:error] [pid 5222:tid 5228] [client 52.175.54.91:5862] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ant.php"] [unique_id "aTWns98FU0HgkYWmt7tj1wAAAEI"]
[Mon Dec 08 00:13:39.605232 2025] [:error] [pid 9961:tid 9963] [client 52.175.54.91:5947] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/jlex.php"] [unique_id "aTWns2Qdnfbgcnzr89KbPQAAAUA"]
[Mon Dec 08 00:13:39.843625 2025] [:error] [pid 5223:tid 5277] [client 52.175.54.91:6012] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/jlex.php"] [unique_id "aTWns_oRJa-T0FB0DNoQZAAAAJc"]
[Mon Dec 08 00:13:40.078905 2025] [:error] [pid 5222:tid 5242] [client 52.175.54.91:5983] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/jlex.php"] [unique_id "aTWntN8FU0HgkYWmt7tj2AAAAFA"]
[Mon Dec 08 00:13:40.314206 2025] [:error] [pid 9610:tid 9629] [client 52.175.54.91:5923] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/jlex.php"] [unique_id "aTWntMZ4Zl9G0UhQ7w1n-wAAARE"]
[Mon Dec 08 00:13:40.548317 2025] [:error] [pid 9961:tid 9972] [client 52.175.54.91:39520] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/mini.php"] [unique_id "aTWntGQdnfbgcnzr89KbPwAAAUk"]
[Mon Dec 08 00:13:40.786174 2025] [:error] [pid 9961:tid 9987] [client 52.175.54.91:5982] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/mini.php"] [unique_id "aTWntGQdnfbgcnzr89KbQAAAAVg"]
[Mon Dec 08 00:13:41.019831 2025] [:error] [pid 9961:tid 9983] [client 52.175.54.91:5773] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/mini.php"] [unique_id "aTWntWQdnfbgcnzr89KbQgAAAVQ"]
[Mon Dec 08 00:13:41.255074 2025] [:error] [pid 5223:tid 5270] [client 52.175.54.91:5836] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/mini.php"] [unique_id "aTWntfoRJa-T0FB0DNoQZQAAAJA"]
[Mon Dec 08 00:13:41.490003 2025] [:error] [pid 5223:tid 5266] [client 52.175.54.91:6010] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/fm.php"] [unique_id "aTWntfoRJa-T0FB0DNoQZgAAAIw"]
[Mon Dec 08 00:13:41.744277 2025] [:error] [pid 5224:tid 5285] [client 52.175.54.91:5905] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/fm.php"] [unique_id "aTWntfAAkbWt7RJBoF8OjwAAAMQ"]
[Mon Dec 08 00:13:41.978129 2025] [:error] [pid 5312:tid 5335] [client 52.175.54.91:5898] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/fm.php"] [unique_id "aTWnteaM49rasZGg_o4pDQAAABU"]
[Mon Dec 08 00:13:42.211023 2025] [:error] [pid 9610:tid 9626] [client 52.175.54.91:5987] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/fm.php"] [unique_id "aTWntsZ4Zl9G0UhQ7w1oAQAAAQ4"]
[Mon Dec 08 00:13:42.446763 2025] [:error] [pid 9610:tid 9632] [client 52.175.54.91:5854] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/1.php"] [unique_id "aTWntsZ4Zl9G0UhQ7w1oBAAAARQ"]
[Mon Dec 08 00:13:42.680707 2025] [:error] [pid 5223:tid 5255] [client 52.175.54.91:5899] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/1.php"] [unique_id "aTWntvoRJa-T0FB0DNoQZwAAAIE"]
[Mon Dec 08 00:13:42.922843 2025] [:error] [pid 5312:tid 5317] [client 52.175.54.91:5990] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/1.php"] [unique_id "aTWntuaM49rasZGg_o4pDgAAAAM"]
[Mon Dec 08 00:13:43.160303 2025] [:error] [pid 5312:tid 5327] [client 52.175.54.91:5846] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/1.php"] [unique_id "aTWnt-aM49rasZGg_o4pDwAAAA0"]
[Mon Dec 08 00:13:43.395271 2025] [:error] [pid 5223:tid 5264] [client 52.175.54.91:5874] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wpc.php"] [unique_id "aTWnt_oRJa-T0FB0DNoQaQAAAIo"]
[Mon Dec 08 00:13:43.632258 2025] [:error] [pid 5224:tid 5300] [client 52.175.54.91:6061] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wpc.php"] [unique_id "aTWnt_AAkbWt7RJBoF8OkQAAANM"]
[Mon Dec 08 00:13:43.870354 2025] [:error] [pid 5312:tid 5326] [client 52.175.54.91:5931] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wpc.php"] [unique_id "aTWnt-aM49rasZGg_o4pEAAAAAw"]
[Mon Dec 08 00:13:44.118899 2025] [:error] [pid 9961:tid 9973] [client 52.175.54.91:5934] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wpc.php"] [unique_id "aTWnuGQdnfbgcnzr89KbQwAAAUo"]
[Mon Dec 08 00:13:44.353591 2025] [:error] [pid 9961:tid 9985] [client 52.175.54.91:5928] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/lc.php"] [unique_id "aTWnuGQdnfbgcnzr89KbRAAAAVY"]
[Mon Dec 08 00:13:44.588126 2025] [:error] [pid 9610:tid 9613] [client 52.175.54.91:5825] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/lc.php"] [unique_id "aTWnuMZ4Zl9G0UhQ7w1oCwAAAQE"]
[Mon Dec 08 00:13:44.821584 2025] [:error] [pid 9961:tid 9969] [client 52.175.54.91:5841] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/lc.php"] [unique_id "aTWnuGQdnfbgcnzr89KbRQAAAUY"]
[Mon Dec 08 00:13:45.055733 2025] [:error] [pid 5222:tid 5244] [client 52.175.54.91:5994] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/lc.php"] [unique_id "aTWnud8FU0HgkYWmt7tj2wAAAFI"]
[Mon Dec 08 00:13:45.299014 2025] [:error] [pid 5223:tid 5275] [client 52.175.54.91:5872] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/mlex.php"] [unique_id "aTWnufoRJa-T0FB0DNoQagAAAJU"]
[Mon Dec 08 00:13:45.534859 2025] [:error] [pid 5312:tid 5329] [client 52.175.54.91:5937] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/mlex.php"] [unique_id "aTWnueaM49rasZGg_o4pFAAAAA8"]
[Mon Dec 08 00:13:45.802952 2025] [:error] [pid 5222:tid 5232] [client 52.175.54.91:5980] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/mlex.php"] [unique_id "aTWnud8FU0HgkYWmt7tj3AAAAEY"]
[Mon Dec 08 00:13:46.040687 2025] [:error] [pid 5224:tid 5281] [client 52.175.54.91:5852] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/mlex.php"] [unique_id "aTWnuvAAkbWt7RJBoF8OlAAAAMA"]
[Mon Dec 08 00:13:46.274629 2025] [:error] [pid 9610:tid 9628] [client 52.175.54.91:5918] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/nc4.php"] [unique_id "aTWnusZ4Zl9G0UhQ7w1oDQAAARA"]
[Mon Dec 08 00:13:46.531073 2025] [:error] [pid 5224:tid 5301] [client 52.175.54.91:5848] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/nc4.php"] [unique_id "aTWnuvAAkbWt7RJBoF8OlgAAANQ"]
[Mon Dec 08 00:13:46.772021 2025] [:error] [pid 9610:tid 9633] [client 52.175.54.91:39542] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/nc4.php"] [unique_id "aTWnusZ4Zl9G0UhQ7w1oDgAAARU"]
[Mon Dec 08 00:13:47.005491 2025] [:error] [pid 9961:tid 9981] [client 52.175.54.91:5919] [client 52.175.54.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/nc4.php"] [unique_id "aTWnu2Qdnfbgcnzr89KbSAAAAVI"]
[Mon Dec 08 00:26:43.070401 2025] [:error] [pid 55700:tid 55766] [client 182.42.104.32:51111] [client 182.42.104.32] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||paramountbaldivis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTWqw08bwbrSb89n9TcDmAAAAMk"]
[Mon Dec 08 01:01:32.136851 2025] [:error] [pid 55700:tid 55763] [client 43.157.148.38:47192] [client 43.157.148.38] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.paramountbaldivis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.paramountbaldivis.com"] [uri "/"] [unique_id "aTWy7E8bwbrSb89n9TcNzgAAAMY"]
[Mon Dec 08 02:00:50.296606 2025] [:error] [pid 55697:tid 55717] [client 162.240.102.83:52126] [client 162.240.102.83] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.240.102.83, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTXA0pCUb4ntL-D8ZJpvCQAAAE4"]
[Mon Dec 08 02:43:05.323978 2025] [:error] [pid 55700:tid 55757] [client 43.130.39.254:57324] [client 43.130.39.254] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||paramountbaldivis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTXKuU8bwbrSb89n9TctFwAAAME"]
[Mon Dec 08 03:09:10.547422 2025] [autoindex:error] [pid 55699:tid 55739] [client 194.5.82.44:25337] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Dec 08 03:09:13.720228 2025] [autoindex:error] [pid 55699:tid 55748] [client 194.5.82.44:25337] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Dec 08 03:09:13.944153 2025] [autoindex:error] [pid 55699:tid 55751] [client 194.5.82.44:25337] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/js/codemirror/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Dec 08 03:09:14.223890 2025] [autoindex:error] [pid 55699:tid 55746] [client 194.5.82.44:25337] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/theme-compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Dec 08 03:09:16.077320 2025] [autoindex:error] [pid 55699:tid 55730] [client 194.5.82.44:25337] AH01276: Cannot serve directory /home/baldivis/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Dec 08 03:09:16.263210 2025] [autoindex:error] [pid 55699:tid 55754] [client 194.5.82.44:25337] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/js/crop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Dec 08 03:09:18.540535 2025] [proxy_fcgi:error] [pid 55699:tid 55746] [client 194.5.82.44:25337] AH01071: Got error 'PHP message: PHP Warning: Use of undefined constant ABSPATH - assumed 'ABSPATH' (this will throw an Error in a future version of PHP) in /home/baldivis/public_html/wp-includes/blocks/index.php on line 9PHP message: PHP Warning: Use of undefined constant WPINC - assumed 'WPINC' (this will throw an Error in a future version of PHP) in /home/baldivis/public_html/wp-includes/blocks/index.php on line 9PHP message: PHP Warning: require(ABSPATHWPINC/blocks/archives.php): failed to open stream: No such file or directory in /home/baldivis/public_html/wp-includes/blocks/index.php on line 9PHP message: PHP Warning: require(ABSPATHWPINC/blocks/archives.php): failed to open stream: No such file or directory in /home/baldivis/public_html/wp-includes/blocks/index.php on line 9PHP message: PHP Fatal error: require(): Failed opening required 'ABSPATHWPINC/blocks/archives.php' (include_path='.:') in /home/baldivis/public_html/wp-includes/blocks/index.php on line 9'
[Mon Dec 08 04:01:34.287259 2025] [:error] [pid 18636:tid 18706] [client 66.249.64.101:64224] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTXdHugdXnohVr6jm70pfwAAAI4"]
[Mon Dec 08 04:01:40.543648 2025] [:error] [pid 18726:tid 18752] [client 66.249.64.101:56675] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTXdJFwVbxmJGL5LHAcXygAAANg"]
[Mon Dec 08 04:01:45.220733 2025] [:error] [pid 18635:tid 18676] [client 66.249.64.101:37572] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTXdKW4kCC_HamQRuE1aPAAAAEs"]
[Mon Dec 08 04:01:50.280742 2025] [:error] [pid 18726:tid 18751] [client 66.249.64.101:64047] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTXdLlwVbxmJGL5LHAcX1AAAANc"]
[Mon Dec 08 04:01:55.472298 2025] [:error] [pid 18726:tid 18741] [client 66.249.64.101:40162] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTXdM1wVbxmJGL5LHAcX3wAAAM0"]
[Mon Dec 08 04:02:00.554511 2025] [:error] [pid 18636:tid 18696] [client 66.249.64.101:46950] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTXdOOgdXnohVr6jm70pkgAAAIQ"]
[Mon Dec 08 04:02:05.707370 2025] [:error] [pid 18634:tid 18645] [client 66.249.64.101:48636] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTXdPZ-H1wCBKPf4vhNi3AAAAAc"]
[Mon Dec 08 04:02:10.726935 2025] [:error] [pid 18636:tid 18705] [client 66.249.64.101:48295] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTXdQugdXnohVr6jm70plgAAAI0"]
[Mon Dec 08 04:02:15.907960 2025] [:error] [pid 18636:tid 18709] [client 66.249.64.101:39802] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTXdR-gdXnohVr6jm70pngAAAJE"]
[Mon Dec 08 04:02:21.073835 2025] [:error] [pid 18726:tid 18748] [client 66.249.64.101:57776] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTXdTVwVbxmJGL5LHAcYAwAAANQ"]
[Mon Dec 08 04:02:26.190502 2025] [:error] [pid 18635:tid 18685] [client 66.249.64.101:55962] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTXdUm4kCC_HamQRuE1atQAAAFQ"]
[Mon Dec 08 04:03:35.217089 2025] [:error] [pid 18635:tid 18671] [client 66.249.64.101:55968] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTXdl24kCC_HamQRuE1bAgAAAEY"]
[Mon Dec 08 04:03:40.744829 2025] [:error] [pid 18726:tid 18729] [client 66.249.64.101:52885] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTXdnFwVbxmJGL5LHAcYtwAAAME"]
[Mon Dec 08 04:03:45.876246 2025] [:error] [pid 18636:tid 18713] [client 66.249.64.101:40690] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTXdoegdXnohVr6jm70qXQAAAJU"]
[Mon Dec 08 04:03:51.048078 2025] [:error] [pid 18636:tid 18713] [client 66.249.64.101:35906] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTXdp-gdXnohVr6jm70qbQAAAJU"]
[Mon Dec 08 04:03:56.161186 2025] [:error] [pid 18726:tid 18738] [client 66.249.64.101:51352] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTXdrFwVbxmJGL5LHAcYxgAAAMo"]
[Mon Dec 08 04:04:01.420404 2025] [:error] [pid 18636:tid 18714] [client 66.249.64.101:49003] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTXdsegdXnohVr6jm70qdgAAAJY"]
[Mon Dec 08 04:04:06.540499 2025] [:error] [pid 18634:tid 18638] [client 66.249.64.101:60645] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTXdtp-H1wCBKPf4vhNjYwAAAAA"]
[Mon Dec 08 04:04:11.812165 2025] [:error] [pid 18635:tid 18689] [client 66.249.64.101:51001] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTXdu24kCC_HamQRuE1bRQAAAFg"]
[Mon Dec 08 04:04:16.956600 2025] [:error] [pid 18726:tid 18738] [client 66.249.64.101:47884] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTXdwFwVbxmJGL5LHAcY9QAAAMo"]
[Mon Dec 08 04:04:22.073372 2025] [:error] [pid 18636:tid 18708] [client 66.249.64.101:55716] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTXdxugdXnohVr6jm70qjAAAAJA"]
[Mon Dec 08 04:04:27.218911 2025] [:error] [pid 18634:tid 18646] [client 66.249.64.101:56670] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTXdy5-H1wCBKPf4vhNjewAAAAg"]
[Mon Dec 08 04:05:28.870489 2025] [:error] [pid 18726:tid 18749] [client 66.249.64.101:42186] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTXeCFwVbxmJGL5LHAcZYwAAANU"]
[Mon Dec 08 04:05:34.029498 2025] [:error] [pid 18726:tid 18743] [client 66.249.64.101:48754] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTXeDlwVbxmJGL5LHAcZewAAAM8"]
[Mon Dec 08 04:05:39.147250 2025] [:error] [pid 18726:tid 18732] [client 66.249.64.101:61235] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTXeE1wVbxmJGL5LHAcZgQAAAMQ"]
[Mon Dec 08 04:05:44.278478 2025] [:error] [pid 18636:tid 18693] [client 66.249.64.101:49644] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTXeGOgdXnohVr6jm70rDAAAAIE"]
[Mon Dec 08 04:05:49.431604 2025] [:error] [pid 18635:tid 18689] [client 66.249.64.101:63217] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTXeHW4kCC_HamQRuE1byQAAAFg"]
[Mon Dec 08 04:05:54.558137 2025] [:error] [pid 18634:tid 18644] [client 66.249.64.101:49273] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTXeIp-H1wCBKPf4vhNj5wAAAAY"]
[Mon Dec 08 04:05:59.708126 2025] [:error] [pid 18635:tid 18673] [client 66.249.64.101:35818] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTXeJ24kCC_HamQRuE1b1QAAAEg"]
[Mon Dec 08 04:06:19.455036 2025] [:error] [pid 18636:tid 18700] [client 66.249.64.101:48899] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTXeO-gdXnohVr6jm70rUQAAAIg"]
[Mon Dec 08 04:06:24.580860 2025] [:error] [pid 18726:tid 18734] [client 66.249.64.101:54563] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTXeQFwVbxmJGL5LHAcZ8AAAAMY"]
[Mon Dec 08 04:07:22.533150 2025] [:error] [pid 18636:tid 18703] [client 66.249.64.101:52660] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTXeeugdXnohVr6jm70rtQAAAIs"]
[Mon Dec 08 04:07:28.342445 2025] [:error] [pid 18726:tid 18751] [client 66.249.64.101:47129] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTXegFwVbxmJGL5LHAcabwAAANc"]
[Mon Dec 08 04:07:33.461985 2025] [:error] [pid 18634:tid 18642] [client 66.249.64.101:61844] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTXehZ-H1wCBKPf4vhNkeAAAAAQ"]
[Mon Dec 08 04:07:38.603344 2025] [:error] [pid 18726:tid 18734] [client 66.249.64.101:46451] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTXeilwVbxmJGL5LHAcalgAAAMY"]
[Mon Dec 08 04:07:43.718156 2025] [:error] [pid 18726:tid 18728] [client 66.249.64.101:50044] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTXej1wVbxmJGL5LHAcarAAAAMA"]
[Mon Dec 08 04:07:48.764102 2025] [:error] [pid 18636:tid 18703] [client 66.249.64.101:55385] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTXelOgdXnohVr6jm70r0AAAAIs"]
[Mon Dec 08 04:07:53.949889 2025] [:error] [pid 18726:tid 18732] [client 66.249.64.101:61669] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTXemVwVbxmJGL5LHAcasQAAAMQ"]
[Mon Dec 08 04:07:59.079078 2025] [:error] [pid 18636:tid 18715] [client 66.249.64.101:51264] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTXen-gdXnohVr6jm70r2wAAAJc"]
[Mon Dec 08 04:08:09.321633 2025] [:error] [pid 18634:tid 18657] [client 66.249.64.101:38549] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTXeqZ-H1wCBKPf4vhNknwAAABM"]
[Mon Dec 08 04:08:14.429802 2025] [:error] [pid 18636:tid 18712] [client 66.249.64.101:41779] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTXerugdXnohVr6jm70r-gAAAJQ"]
[Mon Dec 08 04:09:26.849662 2025] [:error] [pid 18726:tid 18744] [client 66.249.64.101:59833] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTXe9lwVbxmJGL5LHAcbXwAAANA"]
[Mon Dec 08 04:09:31.969191 2025] [:error] [pid 18636:tid 18707] [client 66.249.64.101:64916] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTXe--gdXnohVr6jm70sYgAAAI8"]
[Mon Dec 08 04:09:38.696855 2025] [:error] [pid 18635:tid 18670] [client 66.249.64.101:57336] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTXfAm4kCC_HamQRuE1c6QAAAEU"]
[Mon Dec 08 04:09:43.817792 2025] [:error] [pid 18634:tid 18646] [client 66.249.64.101:60036] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTXfB5-H1wCBKPf4vhNlBgAAAAg"]
[Mon Dec 08 04:09:48.936427 2025] [:error] [pid 18636:tid 18716] [client 66.249.64.101:55159] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTXfDOgdXnohVr6jm70scQAAAJg"]
[Mon Dec 08 04:09:52.747182 2025] [:error] [pid 18726:tid 18736] [client 66.249.64.101:38659] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTXfEFwVbxmJGL5LHAcbgQAAAMg"]
[Mon Dec 08 04:09:56.856665 2025] [:error] [pid 18635:tid 18688] [client 66.249.64.101:59229] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTXfFG4kCC_HamQRuE1c_QAAAFc"]
[Mon Dec 08 04:10:12.225626 2025] [:error] [pid 18726:tid 18749] [client 66.249.64.101:39101] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTXfJFwVbxmJGL5LHAcbnQAAANU"]
[Mon Dec 08 04:10:17.475515 2025] [:error] [pid 18636:tid 18716] [client 66.249.64.101:56228] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTXfKegdXnohVr6jm70siAAAAJg"]
[Mon Dec 08 04:11:26.552193 2025] [:error] [pid 18634:tid 18657] [client 66.249.64.101:51678] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTXfbp-H1wCBKPf4vhNleAAAABM"]
[Mon Dec 08 04:11:29.809778 2025] [:error] [pid 18726:tid 18731] [client 66.249.64.101:63068] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTXfcVwVbxmJGL5LHAcceAAAAMM"]
[Mon Dec 08 04:11:34.174775 2025] [:error] [pid 18726:tid 18749] [client 66.249.64.101:53329] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTXfdlwVbxmJGL5LHAcchwAAANU"]
[Mon Dec 08 04:11:39.294635 2025] [:error] [pid 18635:tid 18678] [client 66.249.64.101:61073] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTXfe24kCC_HamQRuE1dmAAAAE0"]
[Mon Dec 08 04:11:44.422731 2025] [:error] [pid 18726:tid 18737] [client 66.249.64.101:38754] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTXfgFwVbxmJGL5LHAccjgAAAMk"]
[Mon Dec 08 04:11:49.537458 2025] [:error] [pid 18636:tid 18711] [client 66.249.64.101:42732] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTXfhegdXnohVr6jm70tBwAAAJM"]
[Mon Dec 08 04:11:54.666809 2025] [:error] [pid 18634:tid 18653] [client 66.249.64.101:63053] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTXfip-H1wCBKPf4vhNljAAAAA8"]
[Mon Dec 08 04:11:59.769874 2025] [:error] [pid 18635:tid 18667] [client 66.249.64.101:41316] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTXfj24kCC_HamQRuE1dswAAAEI"]
[Mon Dec 08 04:12:10.016250 2025] [:error] [pid 18726:tid 18733] [client 66.249.64.101:38358] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTXfmlwVbxmJGL5LHAccqgAAAMU"]
[Mon Dec 08 04:12:15.135862 2025] [:error] [pid 18726:tid 18733] [client 66.249.64.101:38782] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTXfn1wVbxmJGL5LHAccuAAAAMU"]
[Mon Dec 08 04:12:20.262789 2025] [:error] [pid 18636:tid 18696] [client 66.249.64.101:49448] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTXfpOgdXnohVr6jm70tTwAAAIQ"]
[Mon Dec 08 04:13:35.407665 2025] [:error] [pid 18726:tid 18746] [client 66.249.64.101:43169] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTXf71wVbxmJGL5LHAcdeAAAANI"]
[Mon Dec 08 04:13:41.916361 2025] [:error] [pid 18634:tid 18653] [client 66.249.64.101:63514] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTXf9Z-H1wCBKPf4vhNmCgAAAA8"]
[Mon Dec 08 04:13:47.059913 2025] [:error] [pid 18635:tid 18670] [client 66.249.64.101:35596] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTXf-24kCC_HamQRuE1eHgAAAEU"]
[Mon Dec 08 04:13:50.543033 2025] [:error] [pid 18636:tid 18712] [client 66.249.64.101:47496] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTXf_ugdXnohVr6jm70t2AAAAJQ"]
[Mon Dec 08 04:13:55.780157 2025] [:error] [pid 18726:tid 18735] [client 66.249.64.101:48158] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTXgA1wVbxmJGL5LHAcdsgAAAMc"]
[Mon Dec 08 04:13:58.236773 2025] [:error] [pid 18634:tid 18640] [client 66.249.64.101:44364] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTXgBp-H1wCBKPf4vhNmKwAAAAI"]
[Mon Dec 08 04:14:07.812733 2025] [:error] [pid 18726:tid 18735] [client 66.249.64.101:44195] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTXgD1wVbxmJGL5LHAcdxwAAAMc"]
[Mon Dec 08 04:14:15.562510 2025] [:error] [pid 18726:tid 18744] [client 66.249.64.101:48066] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTXgF1wVbxmJGL5LHAcdzgAAANA"]
[Mon Dec 08 04:14:20.691037 2025] [:error] [pid 18635:tid 18683] [client 66.249.64.101:51611] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTXgHG4kCC_HamQRuE1ePgAAAFI"]
[Mon Dec 08 04:14:25.811071 2025] [:error] [pid 18635:tid 18684] [client 66.249.64.101:65267] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTXgIW4kCC_HamQRuE1eQwAAAFM"]
[Mon Dec 08 04:14:28.375102 2025] [:error] [pid 18726:tid 18731] [client 66.249.64.101:43870] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTXgJFwVbxmJGL5LHAcd5gAAAMM"]
[Mon Dec 08 04:15:48.521047 2025] [:error] [pid 18636:tid 18712] [client 66.249.64.101:58778] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTXgdOgdXnohVr6jm70unQAAAJQ"]
[Mon Dec 08 04:15:53.653234 2025] [:error] [pid 18636:tid 18711] [client 66.249.64.101:52457] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTXgeegdXnohVr6jm70upwAAAJM"]
[Mon Dec 08 04:15:56.213245 2025] [:error] [pid 18636:tid 18708] [client 66.249.64.101:49274] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTXgfOgdXnohVr6jm70urwAAAJA"]
[Mon Dec 08 04:16:00.489316 2025] [:error] [pid 18634:tid 18657] [client 66.249.64.101:48073] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTXggJ-H1wCBKPf4vhNm_wAAABM"]
[Mon Dec 08 04:16:29.275454 2025] [:error] [pid 18635:tid 18680] [client 66.249.64.101:38775] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTXgnW4kCC_HamQRuE1e5wAAAE8"]
[Mon Dec 08 04:38:40.981822 2025] [:error] [pid 18726:tid 18736] [client 195.56.165.6:55706] [client 195.56.165.6] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 195.56.165.6, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTXl0FwVbxmJGL5LHAcmWwAAAMg"]
[Mon Dec 08 04:48:42.413783 2025] [:error] [pid 18634:tid 18640] [client 46.105.124.216:57916] [client 46.105.124.216] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 46.105.124.216, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTXoKp-H1wCBKPf4vhNuiQAAAAI"]
[Mon Dec 08 05:48:59.878190 2025] [:error] [pid 18726:tid 18747] [client 107.180.249.30:60346] [client 107.180.249.30] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 107.180.249.30, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTX2S1wVbxmJGL5LHAc2WQAAANM"]
[Mon Dec 08 06:29:53.899053 2025] [:error] [pid 18636:tid 18706] [client 182.44.2.148:43693] [client 182.44.2.148] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.paramountbaldivis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.paramountbaldivis.com"] [uri "/"] [unique_id "aTX_4egdXnohVr6jm71PWAAAAI4"]
[Mon Dec 08 06:58:14.635906 2025] [:error] [pid 18636:tid 18716] [client 34.226.120.205:60394] [client 34.226.120.205] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 34.226.120.205, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTYGhugdXnohVr6jm71WGgAAAJg"]
[Mon Dec 08 08:13:02.077039 2025] [autoindex:error] [pid 39261:tid 39276] [client 139.59.62.176:61095] AH01276: Cannot serve directory /home/baldivis/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Mon Dec 08 09:14:06.190093 2025] [:error] [pid 39261:tid 39273] [client 195.201.168.3:50268] [client 195.201.168.3] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 195.201.168.3, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTYmXnijlEqKrwMitDHNKgAAAMg"]
[Mon Dec 08 10:23:41.174671 2025] [:error] [pid 39261:tid 39280] [client 185.193.67.83:49386] [client 185.193.67.83] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.193.67.83, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTY2rXijlEqKrwMitDHuogAAAM8"]
[Mon Dec 08 11:32:12.462926 2025] [:error] [pid 39161:tid 39240] [client 161.97.167.141:55748] [client 161.97.167.141] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 161.97.167.141, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTZGvOQBy-JdpUuZzWf1GgAAAJQ"]
[Mon Dec 08 11:46:39.491651 2025] [:error] [pid 43324:tid 43334] [client 45.88.186.148:52605] [client 45.88.186.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTZKH2PgmTVXZPILisbgZgAAAUg"]
[Mon Dec 08 11:46:39.899288 2025] [:error] [pid 39160:tid 39192] [client 45.88.186.148:52763] [client 45.88.186.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTZKHym5Ndns0p3OT9CKaAAAAEA"]
[Mon Dec 08 11:46:40.305502 2025] [:error] [pid 39160:tid 39199] [client 45.88.186.148:52925] [client 45.88.186.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTZKICm5Ndns0p3OT9CKdAAAAEc"]
[Mon Dec 08 11:46:40.709277 2025] [:error] [pid 43361:tid 43382] [client 45.88.186.148:53090] [client 45.88.186.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTZKIMrZJ_dsPpuIXPnQeQAAAZI"]
[Mon Dec 08 11:46:41.123154 2025] [:error] [pid 39159:tid 39173] [client 45.88.186.148:53248] [client 45.88.186.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTZKIU48HaQt8jqjSbqC6wAAAAg"]
[Mon Dec 08 12:06:55.716177 2025] [:error] [pid 39161:tid 39229] [client 129.226.213.145:55594] [client 129.226.213.145] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||paramountbaldivis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTZO3-QBy-JdpUuZzWf8rwAAAIk"]
[Mon Dec 08 12:21:06.747888 2025] [:error] [pid 53927:tid 53949] [client 34.219.235.57:38514] [client 34.219.235.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paramountbaldivis.com"] [uri "/.env"] [unique_id "aTZSMrTtIvPZ1Cm2r06qjAAAARQ"]
[Mon Dec 08 12:46:07.477810 2025] [:error] [pid 13445:tid 13469] [client 217.154.56.180:35164] [client 217.154.56.180] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 217.154.56.180, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTZYD8ek7sIjbF2WoVbIUAAAAFM"]
[Mon Dec 08 14:02:27.015482 2025] [:error] [pid 13446:tid 13485] [client 167.86.80.181:38242] [client 167.86.80.181] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 167.86.80.181, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTZp81PLjuV-KbK89q0C5gAAAIY"]
[Mon Dec 08 14:36:10.163301 2025] [:error] [pid 13445:tid 13472] [client 66.249.64.101:39114] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTZx2sek7sIjbF2WoVboiAAAAFY"]
[Mon Dec 08 14:36:18.400663 2025] [:error] [pid 30580:tid 30605] [client 66.249.64.101:46293] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTZx4sEhRKiLBTnel9PyqgAAARc"]
[Mon Dec 08 14:36:26.545452 2025] [:error] [pid 30632:tid 30656] [client 66.249.64.101:62428] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTZx6hW3Slp5Vnr6sRd__AAAAZQ"]
[Mon Dec 08 14:36:37.335794 2025] [:error] [pid 13533:tid 13544] [client 66.249.64.101:48827] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTZx9UwxYk7zHgjCNdZ2cQAAAUk"]
[Mon Dec 08 14:57:11.310629 2025] [:error] [pid 30580:tid 30589] [client 51.38.113.2:39636] [client 51.38.113.2] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 51.38.113.2, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTZ2x8EhRKiLBTnel9P4ygAAAQc"]
[Mon Dec 08 16:06:59.368747 2025] [:error] [pid 58847:tid 58874] [client 81.169.221.4:34832] [client 81.169.221.4] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 81.169.221.4, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTaHI3y4UHQXWKMwpHmyugAAARU"]
[Mon Dec 08 17:13:02.935382 2025] [:error] [pid 58758:tid 58771] [client 45.86.202.190:38971] [client 45.86.202.190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paramountbaldivis.com"] [uri "/.env"] [unique_id "aTaWngBS5U6_vVkyhEd8aAAAAEk"]
[Mon Dec 08 17:13:03.537740 2025] [:error] [pid 58760:tid 58831] [client 45.86.202.201:55483] [client 45.86.202.201] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paramountbaldivis.com"] [uri "/.env.example"] [unique_id "aTaWn2qmF_jKbCz9E6lKUwAAAA4"]
[Mon Dec 08 17:13:04.138739 2025] [:error] [pid 58847:tid 58857] [client 45.86.202.202:46871] [client 45.86.202.202] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paramountbaldivis.com"] [uri "/.env.local"] [unique_id "aTaWoHy4UHQXWKMwpHnUUgAAAQQ"]
[Mon Dec 08 17:13:05.749091 2025] [:error] [pid 58760:tid 58832] [client 45.86.202.178:47361] [client 45.86.202.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paramountbaldivis.com"] [uri "/.env.backup"] [unique_id "aTaWoWqmF_jKbCz9E6lKVgAAAA8"]
[Mon Dec 08 17:21:45.598944 2025] [:error] [pid 58760:tid 58831] [client 154.12.228.174:50416] [client 154.12.228.174] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 154.12.228.174, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTaYqWqmF_jKbCz9E6lMwwAAAA4"]
[Mon Dec 08 18:35:13.396313 2025] [:error] [pid 2754:tid 2771] [client 43.140.247.223:51134] [client 43.140.247.223] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.paramountbaldivis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.paramountbaldivis.com"] [uri "/"] [unique_id "aTap4bSzS4AFjS-DhTUxjAAAAU4"]
[Mon Dec 08 18:42:15.825281 2025] [:error] [pid 58847:tid 58868] [client 103.77.45.59:64918] [client 103.77.45.59] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.77.45.59, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aTarh3y4UHQXWKMwpHnt4wAAAQ8"]
[Mon Dec 08 18:45:03.754479 2025] [autoindex:error] [pid 58760:tid 58826] [client 209.97.156.74:52571] AH01276: Cannot serve directory /home/baldivis/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Mon Dec 08 18:48:20.406940 2025] [:error] [pid 2754:tid 2775] [client 66.42.64.64:58678] [client 66.42.64.64] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 66.42.64.64, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTas9LSzS4AFjS-DhTU3hAAAAVE"]
[Mon Dec 08 19:50:19.872677 2025] [:error] [pid 58760:tid 58829] [client 51.159.214.31:35908] [client 51.159.214.31] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 51.159.214.31, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTa7e2qmF_jKbCz9E6l7iwAAAAw"]
[Mon Dec 08 21:17:08.240069 2025] [:error] [pid 50569:tid 50580] [client 85.239.234.122:43288] [client 85.239.234.122] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.239.234.122, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTbP1PHhZxyKreYmWzKsiAAAAAg"]
[Mon Dec 08 22:17:32.982649 2025] [:error] [pid 48482:tid 48512] [client 164.132.169.114:51692] [client 164.132.169.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 164.132.169.114, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTbd_H23gV7gRu3vn82V0wAAAIA"]
[Mon Dec 08 23:24:08.858934 2025] [:error] [pid 50569:tid 50583] [client 35.88.68.144:56300] [client 35.88.68.144] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.paramountbaldivis.com"] [uri "/.env"] [unique_id "aTbtmPHhZxyKreYmWzLj2wAAAAs"]
[Mon Dec 08 23:32:20.740068 2025] [:error] [pid 50569:tid 50585] [client 211.21.61.225:55832] [client 211.21.61.225] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 211.21.61.225, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTbvhPHhZxyKreYmWzLp8wAAAA0"]
[Mon Dec 08 23:54:32.879080 2025] [:error] [pid 44355:tid 44365] [client 77.222.40.184:36136] [client 77.222.40.184] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 77.222.40.184, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTb0uIcZ528mBeyOD1ewkQAAAEg"]
[Mon Dec 08 23:54:38.521632 2025] [:error] [pid 44355:tid 44363] [client 77.222.40.184:36136] [client 77.222.40.184] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 77.222.40.184, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTb0vocZ528mBeyOD1ewpgAAAEY"]
[Tue Dec 09 00:50:06.971870 2025] [:error] [pid 57134:tid 57176] [client 134.122.6.46:54120] [client 134.122.6.46] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 134.122.6.46, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTcBvln7_Hlbg-DXKIv5OgAAAEI"]
[Tue Dec 09 01:01:04.341008 2025] [:error] [pid 57134:tid 57181] [client 106.227.49.113:33321] [client 106.227.49.113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||paramountbaldivis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTcEUFn7_Hlbg-DXKIv_CQAAAEc"]
[Tue Dec 09 02:05:26.318446 2025] [:error] [pid 57134:tid 57188] [client 85.12.197.19:46335] [client 85.12.197.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.12.197.19, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTcTZln7_Hlbg-DXKIsaeAAAAE4"]
[Tue Dec 09 05:49:49.665057 2025] [:error] [pid 62041:tid 62097] [client 159.203.120.5:39964] [client 159.203.120.5] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.203.120.5, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTdH_fOmnJGvfaNPxPNRQAAAAIA"]
[Tue Dec 09 07:01:13.127525 2025] [:error] [pid 26689:tid 26749] [client 14.215.163.132:55639] [client 14.215.163.132] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.paramountbaldivis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.paramountbaldivis.com"] [uri "/"] [unique_id "aTdYudkbfj8nyBvIyRBRJQAAAQ0"]
[Tue Dec 09 07:09:27.816866 2025] [:error] [pid 6053:tid 6058] [client 23.166.40.70:40540] [client 23.166.40.70] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 23.166.40.70, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTdapyHz_Tnml8kdMwzBKwAAAYM"]
[Tue Dec 09 08:14:42.529751 2025] [:error] [pid 6097:tid 6099] [client 159.223.226.118:51974] [client 159.223.226.118] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.223.226.118, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTdp8uY9nDD1R9gHO2S-AAAAAcA"]
[Tue Dec 09 09:08:50.371265 2025] [:error] [pid 6053:tid 6059] [client 66.249.64.101:37362] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTd2oiHz_Tnml8kdMwzdHQAAAYQ"]
[Tue Dec 09 09:09:20.495750 2025] [:error] [pid 6097:tid 6107] [client 66.249.64.101:52440] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTd2wOY9nDD1R9gHO2TO0QAAAcg"]
[Tue Dec 09 09:09:31.237479 2025] [:error] [pid 62041:tid 62104] [client 66.249.64.101:45019] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTd2y_OmnJGvfaNPxPN9KAAAAIc"]
[Tue Dec 09 09:09:39.550845 2025] [:error] [pid 34783:tid 34789] [client 66.249.64.101:42850] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTd20617odLapL7SFcxg3AAAAUQ"]
[Tue Dec 09 09:12:51.509163 2025] [:error] [pid 62041:tid 62109] [client 66.249.64.101:42228] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTd3k_OmnJGvfaNPxPN-JgAAAIw"]
[Tue Dec 09 09:17:13.178707 2025] [:error] [pid 6097:tid 6103] [client 66.249.64.101:54898] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTd4meY9nDD1R9gHO2TR0wAAAcQ"]
[Tue Dec 09 09:17:21.598036 2025] [:error] [pid 62039:tid 62046] [client 66.249.64.101:54737] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTd4oa-WdjFepfLrlW7DngAAAAM"]
[Tue Dec 09 09:17:23.971286 2025] [:error] [pid 6053:tid 6069] [client 206.189.2.13:37130] [client 206.189.2.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.paramountbaldivis.com"] [uri "/v2/api-docs"] [unique_id "aTd4oyHz_Tnml8kdMwzfowAAAY4"]
[Tue Dec 09 09:17:24.969465 2025] [:error] [pid 62041:tid 62099] [client 206.189.2.13:37146] [client 206.189.2.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.paramountbaldivis.com"] [uri "/v3/api-docs"] [unique_id "aTd4pPOmnJGvfaNPxPN_ZgAAAII"]
[Tue Dec 09 09:17:25.970059 2025] [:error] [pid 6097:tid 6114] [client 206.189.2.13:33690] [client 206.189.2.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.paramountbaldivis.com"] [uri "/api-docs/swagger.json"] [unique_id "aTd4peY9nDD1R9gHO2TR5AAAAc8"]
[Tue Dec 09 09:17:26.972128 2025] [:error] [pid 62124:tid 62135] [client 206.189.2.13:33702] [client 206.189.2.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.paramountbaldivis.com"] [uri "/api/swagger.json"] [unique_id "aTd4plraBX51GaCVVuVyRAAAAMg"]
[Tue Dec 09 09:17:27.971399 2025] [:error] [pid 62124:tid 62149] [client 206.189.2.13:33710] [client 206.189.2.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.paramountbaldivis.com"] [uri "/@vite/env"] [unique_id "aTd4p1raBX51GaCVVuVyRwAAANY"]
[Tue Dec 09 09:17:28.975478 2025] [:error] [pid 62124:tid 62132] [client 206.189.2.13:33718] [client 206.189.2.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.paramountbaldivis.com"] [uri "/actuator/env"] [unique_id "aTd4qFraBX51GaCVVuVySQAAAMU"]
[Tue Dec 09 09:17:29.974484 2025] [:error] [pid 34783:tid 34797] [client 206.189.2.13:33730] [client 206.189.2.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.paramountbaldivis.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aTd4qa17odLapL7SFcxjHgAAAUw"]
[Tue Dec 09 09:17:30.974179 2025] [:error] [pid 62041:tid 62108] [client 206.189.2.13:33736] [client 206.189.2.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.paramountbaldivis.com"] [uri "/server"] [unique_id "aTd4qvOmnJGvfaNPxPN_bQAAAIs"]
[Tue Dec 09 09:17:31.975115 2025] [:error] [pid 62039:tid 62043] [client 206.189.2.13:33748] [client 206.189.2.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.paramountbaldivis.com"] [uri "/.vscode/sftp.json"] [unique_id "aTd4q6-WdjFepfLrlW7DpgAAAAA"]
[Tue Dec 09 09:17:33.976692 2025] [:error] [pid 26689:tid 26748] [client 206.189.2.13:33760] [client 206.189.2.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.paramountbaldivis.com"] [uri "/about"] [unique_id "aTd4rdkbfj8nyBvIyRBvhAAAAQw"]
[Tue Dec 09 09:17:34.987091 2025] [:error] [pid 6097:tid 6109] [client 206.189.2.13:33774] [client 206.189.2.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.paramountbaldivis.com"] [uri "/debug/default/view"] [unique_id "aTd4ruY9nDD1R9gHO2TR6QAAAco"]
[Tue Dec 09 09:17:35.987719 2025] [:error] [pid 62124:tid 62140] [client 206.189.2.13:53036] [client 206.189.2.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.paramountbaldivis.com"] [uri "/v2/_catalog"] [unique_id "aTd4r1raBX51GaCVVuVyTgAAAM0"]
[Tue Dec 09 09:17:36.990109 2025] [:error] [pid 62039:tid 62067] [client 206.189.2.13:53060] [client 206.189.2.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.paramountbaldivis.com"] [uri "/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application"] [unique_id "aTd4sK-WdjFepfLrlW7DqQAAABg"]
[Tue Dec 09 09:17:37.989488 2025] [:error] [pid 6097:tid 6099] [client 206.189.2.13:53064] [client 206.189.2.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.paramountbaldivis.com"] [uri "/server-status"] [unique_id "aTd4seY9nDD1R9gHO2TR7gAAAcA"]
[Tue Dec 09 09:17:38.990137 2025] [:error] [pid 62039:tid 62058] [client 206.189.2.13:53086] [client 206.189.2.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.paramountbaldivis.com"] [uri "/login.action"] [unique_id "aTd4sq-WdjFepfLrlW7DsQAAAA8"]
[Tue Dec 09 09:17:39.990895 2025] [:error] [pid 34783:tid 34805] [client 206.189.2.13:53114] [client 206.189.2.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.paramountbaldivis.com"] [uri "/_all_dbs"] [unique_id "aTd4s617odLapL7SFcxjKQAAAVQ"]
[Tue Dec 09 09:17:40.991299 2025] [:error] [pid 62039:tid 62051] [client 206.189.2.13:53132] [client 206.189.2.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.paramountbaldivis.com"] [uri "/.DS_Store"] [unique_id "aTd4tK-WdjFepfLrlW7DuQAAAAg"]
[Tue Dec 09 09:17:41.993489 2025] [:error] [pid 62124:tid 62149] [client 206.189.2.13:53144] [client 206.189.2.13] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.paramountbaldivis.com"] [uri "/.env"] [unique_id "aTd4tVraBX51GaCVVuVyZgAAANY"]
[Tue Dec 09 09:17:43.992453 2025] [:error] [pid 26689:tid 26754] [client 206.189.2.13:53170] [client 206.189.2.13] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.paramountbaldivis.com"] [uri "/.git/config"] [unique_id "aTd4t9kbfj8nyBvIyRBvhwAAARI"]
[Tue Dec 09 09:17:44.992648 2025] [:error] [pid 6053:tid 6074] [client 206.189.2.13:53184] [client 206.189.2.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.paramountbaldivis.com"] [uri "/s/4313e2232313e243e2330313/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties"] [unique_id "aTd4uCHz_Tnml8kdMwzfuwAAAZM"]
[Tue Dec 09 09:17:45.994756 2025] [:error] [pid 62039:tid 62059] [client 206.189.2.13:54064] [client 206.189.2.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.paramountbaldivis.com"] [uri "/config.json"] [unique_id "aTd4ua-WdjFepfLrlW7DygAAABA"]
[Tue Dec 09 09:17:46.997040 2025] [:error] [pid 62039:tid 62057] [client 206.189.2.13:54088] [client 206.189.2.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.paramountbaldivis.com"] [uri "/telescope/requests"] [unique_id "aTd4uq-WdjFepfLrlW7DzQAAAA4"]
[Tue Dec 09 09:17:47.812522 2025] [:error] [pid 62039:tid 62051] [client 66.249.64.101:36077] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTd4u6-WdjFepfLrlW7D0gAAAAg"]
[Tue Dec 09 09:17:47.996487 2025] [:error] [pid 62124:tid 62143] [client 206.189.2.13:54116] [client 206.189.2.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.paramountbaldivis.com"] [uri "/info.php"] [unique_id "aTd4u1raBX51GaCVVuVydwAAANA"]
[Tue Dec 09 09:17:48.994799 2025] [:error] [pid 62040:tid 62082] [client 206.189.2.13:54140] [client 206.189.2.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.paramountbaldivis.com"] [uri "/"] [unique_id "aTd4vPkSVjwLGqZL-9KOfgAAAEw"]
[Tue Dec 09 09:28:18.888603 2025] [:error] [pid 62041:tid 62097] [client 195.60.214.11:53964] [client 195.60.214.11] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 195.60.214.11, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTd7MvOmnJGvfaNPxPOCIAAAAIA"]
[Tue Dec 09 09:40:00.809850 2025] [:error] [pid 6053:tid 6057] [client 66.249.64.101:44621] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTd98CHz_Tnml8kdMwzl-wAAAYI"]
[Tue Dec 09 09:40:10.416211 2025] [:error] [pid 26689:tid 26745] [client 66.249.64.101:57494] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTd9-tkbfj8nyBvIyRB1qwAAAQo"]
[Tue Dec 09 09:40:20.671826 2025] [:error] [pid 34783:tid 34802] [client 66.249.64.101:45251] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTd-BK17odLapL7SFcxpKQAAAVE"]
[Tue Dec 09 09:40:29.798275 2025] [:error] [pid 62040:tid 62093] [client 66.249.64.101:56602] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTd-DfkSVjwLGqZL-9KUOgAAAFc"]
[Tue Dec 09 09:40:39.328449 2025] [:error] [pid 26689:tid 26740] [client 66.249.64.101:53738] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTd-F9kbfj8nyBvIyRB17gAAAQU"]
[Tue Dec 09 09:58:17.436560 2025] [:error] [pid 34783:tid 34798] [client 45.86.202.108:30927] [client 45.86.202.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paramountbaldivis.com"] [uri "/.env"] [unique_id "aTeCOa17odLapL7SFcxtewAAAU0"]
[Tue Dec 09 09:58:28.111628 2025] [:error] [pid 62040:tid 62084] [client 45.86.202.109:46969] [client 45.86.202.109] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paramountbaldivis.com"] [uri "/.env.local"] [unique_id "aTeCRPkSVjwLGqZL-9KXWgAAAE4"]
[Tue Dec 09 10:30:22.977440 2025] [:error] [pid 6053:tid 6069] [client 66.249.64.101:64976] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeJviHz_Tnml8kdMwzyNQAAAY4"]
[Tue Dec 09 10:30:26.792691 2025] [:error] [pid 26689:tid 26740] [client 66.249.64.101:62323] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeJwtkbfj8nyBvIyRCBbAAAAQU"]
[Tue Dec 09 10:30:33.509905 2025] [:error] [pid 62041:tid 62121] [client 66.249.64.101:47582] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeJyfOmnJGvfaNPxPOPMgAAAJg"]
[Tue Dec 09 10:30:40.301014 2025] [:error] [pid 62039:tid 62066] [client 66.249.64.101:61538] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeJ0K-WdjFepfLrlW7idwAAABc"]
[Tue Dec 09 10:34:18.875747 2025] [:error] [pid 62041:tid 62101] [client 66.249.64.101:56186] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeKqvOmnJGvfaNPxPOQagAAAIQ"]
[Tue Dec 09 10:34:25.671586 2025] [:error] [pid 62124:tid 62127] [client 66.249.64.101:47918] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeKsVraBX51GaCVVuWCjgAAAMA"]
[Tue Dec 09 10:34:32.560431 2025] [:error] [pid 62124:tid 62129] [client 66.249.64.101:39191] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeKuFraBX51GaCVVuWCmgAAAMI"]
[Tue Dec 09 10:34:39.256031 2025] [:error] [pid 62124:tid 62132] [client 66.249.64.101:49674] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeKv1raBX51GaCVVuWCpAAAAMU"]
[Tue Dec 09 10:34:52.853815 2025] [:error] [pid 62041:tid 62107] [client 66.249.64.101:55789] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeKzPOmnJGvfaNPxPOQkAAAAIo"]
[Tue Dec 09 10:35:59.125155 2025] [:error] [pid 6053:tid 6065] [client 37.59.109.228:33792] [client 37.59.109.228] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.59.109.228, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTeLDyHz_Tnml8kdMwzzhAAAAYo"]
[Tue Dec 09 10:36:50.085674 2025] [:error] [pid 34783:tid 34791] [client 66.249.64.101:53716] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeLQq17odLapL7SFcx0ZAAAAUY"]
[Tue Dec 09 10:37:08.765266 2025] [:error] [pid 34783:tid 34804] [client 66.249.64.101:39226] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeLVK17odLapL7SFcx0dQAAAVM"]
[Tue Dec 09 10:37:15.555396 2025] [:error] [pid 62040:tid 62073] [client 66.249.64.101:50300] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeLW_kSVjwLGqZL-9KdugAAAEM"]
[Tue Dec 09 10:39:32.325687 2025] [:error] [pid 26689:tid 26759] [client 66.249.64.101:35453] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeL5Nkbfj8nyBvIyRCDeQAAARc"]
[Tue Dec 09 10:39:45.064824 2025] [:error] [pid 6053:tid 6075] [client 66.249.64.101:42572] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeL8SHz_Tnml8kdMwz0EAAAAZQ"]
[Tue Dec 09 10:39:51.858774 2025] [:error] [pid 6097:tid 6100] [client 66.249.64.101:36077] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeL9-Y9nDD1R9gHO2TtkAAAAcE"]
[Tue Dec 09 10:39:58.645464 2025] [:error] [pid 62039:tid 62059] [client 66.249.64.101:54956] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeL_q-WdjFepfLrlW7leQAAABA"]
[Tue Dec 09 10:40:19.042079 2025] [:error] [pid 26689:tid 26759] [client 66.249.64.101:63483] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeME9kbfj8nyBvIyRCDxAAAARc"]
[Tue Dec 09 10:40:26.819089 2025] [:error] [pid 6097:tid 6100] [client 66.249.64.101:64541] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeMGuY9nDD1R9gHO2TtrQAAAcE"]
[Tue Dec 09 10:42:41.779769 2025] [:error] [pid 62039:tid 62060] [client 66.249.64.101:51364] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeMoa-WdjFepfLrlW7mQwAAABE"]
[Tue Dec 09 10:42:55.342083 2025] [:error] [pid 6097:tid 6106] [client 66.249.64.101:61304] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeMr-Y9nDD1R9gHO2TudgAAAcc"]
[Tue Dec 09 10:43:23.486690 2025] [:error] [pid 62039:tid 62051] [client 66.249.64.101:42220] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeMy6-WdjFepfLrlW7mvQAAAAg"]
[Tue Dec 09 10:43:29.324786 2025] [:error] [pid 62041:tid 62117] [client 66.249.64.101:37953] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeM0fOmnJGvfaNPxPOSSAAAAJQ"]
[Tue Dec 09 10:45:08.292079 2025] [:error] [pid 6097:tid 6107] [client 66.249.64.101:51061] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeNNOY9nDD1R9gHO2TviQAAAcg"]
[Tue Dec 09 10:45:15.005960 2025] [:error] [pid 62039:tid 62055] [client 66.249.64.101:52998] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeNO6-WdjFepfLrlW7nYgAAAAw"]
[Tue Dec 09 10:45:21.713696 2025] [:error] [pid 62041:tid 62103] [client 66.249.64.101:57359] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeNQfOmnJGvfaNPxPOS4AAAAIY"]
[Tue Dec 09 10:45:25.212604 2025] [:error] [pid 62039:tid 62056] [client 66.249.64.101:37628] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeNRa-WdjFepfLrlW7nawAAAA0"]
[Tue Dec 09 10:45:28.639848 2025] [:error] [pid 62039:tid 62058] [client 66.249.64.101:53768] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeNSK-WdjFepfLrlW7ndQAAAA8"]
[Tue Dec 09 10:45:31.938824 2025] [:error] [pid 62041:tid 62101] [client 66.249.64.101:60693] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeNS_OmnJGvfaNPxPOS5wAAAIQ"]
[Tue Dec 09 10:45:38.436826 2025] [:error] [pid 62039:tid 62049] [client 66.249.64.101:53370] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeNUq-WdjFepfLrlW7nfwAAAAY"]
[Tue Dec 09 10:45:45.240573 2025] [:error] [pid 62039:tid 62062] [client 66.249.64.101:39458] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeNWa-WdjFepfLrlW7nhAAAABM"]
[Tue Dec 09 10:45:53.553469 2025] [:error] [pid 62040:tid 62092] [client 66.249.64.101:56956] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeNYfkSVjwLGqZL-9KfqAAAAFY"]
[Tue Dec 09 10:51:33.936783 2025] [:error] [pid 62039:tid 62044] [client 66.249.64.101:38115] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeOta-WdjFepfLrlW7ppAAAAAE"]
[Tue Dec 09 10:51:37.247453 2025] [:error] [pid 26689:tid 26737] [client 66.249.64.101:60256] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeOudkbfj8nyBvIyRCGGAAAAQI"]
[Tue Dec 09 10:51:40.663687 2025] [:error] [pid 62039:tid 62048] [client 66.249.64.101:61553] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeOvK-WdjFepfLrlW7prgAAAAU"]
[Tue Dec 09 10:51:45.438125 2025] [:error] [pid 34783:tid 34795] [client 66.249.64.101:61671] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeOwa17odLapL7SFcx3ogAAAUo"]
[Tue Dec 09 10:51:52.229409 2025] [:error] [pid 62040:tid 62079] [client 66.249.64.101:52300] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeOyPkSVjwLGqZL-9Kg4QAAAEk"]
[Tue Dec 09 10:51:59.010985 2025] [:error] [pid 62039:tid 62045] [client 66.249.64.101:62262] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeOz6-WdjFepfLrlW7pvgAAAAI"]
[Tue Dec 09 10:55:27.758359 2025] [:error] [pid 62040:tid 62072] [client 66.249.64.101:48836] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTePn_kSVjwLGqZL-9KhmgAAAEI"]
[Tue Dec 09 10:55:34.558207 2025] [:error] [pid 62039:tid 62058] [client 66.249.64.101:44627] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTePpq-WdjFepfLrlW7rCQAAAA8"]
[Tue Dec 09 10:55:41.264106 2025] [:error] [pid 6097:tid 6119] [client 66.249.64.101:53635] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTePreY9nDD1R9gHO2TyAAAAAdQ"]
[Tue Dec 09 10:57:45.320030 2025] [:error] [pid 62124:tid 62142] [client 66.249.64.101:49501] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeQKVraBX51GaCVVuWGrwAAAM8"]
[Tue Dec 09 10:57:52.811265 2025] [:error] [pid 62039:tid 62051] [client 66.249.64.101:39308] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeQMK-WdjFepfLrlW7rwQAAAAg"]
[Tue Dec 09 10:58:19.976713 2025] [:error] [pid 62041:tid 62120] [client 66.249.64.101:57994] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeQS_OmnJGvfaNPxPOVegAAAJc"]
[Tue Dec 09 10:58:27.481540 2025] [:error] [pid 6097:tid 6120] [client 66.249.64.101:47973] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeQU-Y9nDD1R9gHO2TywgAAAdU"]
[Tue Dec 09 10:58:40.343892 2025] [:error] [pid 62039:tid 62067] [client 66.249.64.101:60365] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeQYK-WdjFepfLrlW7r6AAAABg"]
[Tue Dec 09 11:00:59.369235 2025] [:error] [pid 62039:tid 62047] [client 66.249.64.101:61730] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeQ66-WdjFepfLrlW7sggAAAAQ"]
[Tue Dec 09 11:01:23.458804 2025] [:error] [pid 62039:tid 62064] [client 66.249.64.101:38465] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeRA6-WdjFepfLrlW7slwAAABU"]
[Tue Dec 09 11:01:30.243420 2025] [:error] [pid 6097:tid 6109] [client 66.249.64.101:64736] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeRCuY9nDD1R9gHO2TztwAAAco"]
[Tue Dec 09 11:01:43.839612 2025] [:error] [pid 62124:tid 62131] [client 66.249.64.101:37484] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeRF1raBX51GaCVVuWHcQAAAMQ"]
[Tue Dec 09 11:01:50.734383 2025] [:error] [pid 62040:tid 62073] [client 66.249.64.101:38808] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeRHvkSVjwLGqZL-9KioQAAAEM"]
[Tue Dec 09 11:04:09.118437 2025] [:error] [pid 26689:tid 26741] [client 66.249.64.101:60376] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeRqdkbfj8nyBvIyRCIrAAAAQY"]
[Tue Dec 09 11:04:15.820195 2025] [:error] [pid 26689:tid 26757] [client 66.249.64.101:59535] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeRr9kbfj8nyBvIyRCIsgAAARU"]
[Tue Dec 09 11:04:22.510966 2025] [:error] [pid 62040:tid 62094] [client 66.249.64.101:65348] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeRtvkSVjwLGqZL-9KjbAAAAFg"]
[Tue Dec 09 11:04:29.320182 2025] [:error] [pid 62041:tid 62121] [client 66.249.64.101:39408] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeRvfOmnJGvfaNPxPOXBQAAAJg"]
[Tue Dec 09 11:04:33.726424 2025] [:error] [pid 62041:tid 62115] [client 66.249.64.101:59422] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeRwfOmnJGvfaNPxPOXDAAAAJI"]
[Tue Dec 09 11:04:40.527423 2025] [:error] [pid 62039:tid 62054] [client 66.249.64.101:47652] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeRyK-WdjFepfLrlW7uyAAAAAs"]
[Tue Dec 09 11:04:47.415246 2025] [:error] [pid 62040:tid 62081] [client 66.249.64.101:61798] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeRz_kSVjwLGqZL-9KjgAAAAEs"]
[Tue Dec 09 11:06:52.385372 2025] [:error] [pid 62124:tid 62136] [client 66.249.64.101:57821] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeSTFraBX51GaCVVuWIdgAAAMk"]
[Tue Dec 09 11:06:56.493791 2025] [:error] [pid 6053:tid 6068] [client 66.249.64.101:60220] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeSUCHz_Tnml8kdMwz6cwAAAY0"]
[Tue Dec 09 11:07:23.717796 2025] [:error] [pid 26689:tid 26755] [client 66.249.64.101:62276] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeSa9kbfj8nyBvIyRCJbQAAARM"]
[Tue Dec 09 11:07:32.859644 2025] [:error] [pid 26689:tid 26750] [client 66.249.64.101:40130] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeSdNkbfj8nyBvIyRCJdQAAAQ4"]
[Tue Dec 09 11:07:44.010829 2025] [:error] [pid 62041:tid 62112] [client 66.249.64.101:57468] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeSgPOmnJGvfaNPxPOXqQAAAI8"]
[Tue Dec 09 11:09:31.022351 2025] [:error] [pid 6053:tid 6071] [client 66.249.64.101:56855] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeS6yHz_Tnml8kdMwz68QAAAZA"]
[Tue Dec 09 11:09:34.379722 2025] [:error] [pid 62040:tid 62075] [client 66.249.64.101:41620] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeS7vkSVjwLGqZL-9KkVQAAAEU"]
[Tue Dec 09 11:09:39.629241 2025] [:error] [pid 6053:tid 6059] [client 66.249.64.101:57414] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeS8yHz_Tnml8kdMwz6-QAAAYQ"]
[Tue Dec 09 11:09:46.415805 2025] [:error] [pid 62040:tid 62078] [client 66.249.64.101:40568] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeS-vkSVjwLGqZL-9KkXQAAAEg"]
[Tue Dec 09 11:09:53.118627 2025] [:error] [pid 34783:tid 34790] [client 66.249.64.101:41659] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeTAa17odLapL7SFcx6qgAAAUU"]
[Tue Dec 09 11:09:59.908659 2025] [:error] [pid 62040:tid 62085] [client 66.249.64.101:44434] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeTB_kSVjwLGqZL-9KkYwAAAE8"]
[Tue Dec 09 11:10:06.800848 2025] [:error] [pid 62040:tid 62082] [client 66.249.64.101:43647] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeTDvkSVjwLGqZL-9KkaAAAAEw"]
[Tue Dec 09 11:11:53.372205 2025] [:error] [pid 6097:tid 6121] [client 66.249.64.101:51480] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeTeeY9nDD1R9gHO2T2VAAAAdY"]
[Tue Dec 09 11:12:00.131124 2025] [:error] [pid 26689:tid 26748] [client 66.249.64.101:51333] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeTgNkbfj8nyBvIyRCKbQAAAQw"]
[Tue Dec 09 11:12:06.976290 2025] [:error] [pid 62039:tid 62063] [client 66.249.64.101:61304] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeThq-WdjFepfLrlW7xZAAAABQ"]
[Tue Dec 09 11:12:13.676953 2025] [:error] [pid 62039:tid 62051] [client 66.249.64.101:39864] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeTja-WdjFepfLrlW7xagAAAAg"]
[Tue Dec 09 11:12:17.653184 2025] [:error] [pid 6097:tid 6113] [client 66.249.64.101:57881] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeTkeY9nDD1R9gHO2T2bQAAAc4"]
[Tue Dec 09 11:12:24.363032 2025] [:error] [pid 6053:tid 6057] [client 66.249.64.101:58168] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeTmCHz_Tnml8kdMwz7mwAAAYI"]
[Tue Dec 09 11:15:32.221961 2025] [:error] [pid 6097:tid 6121] [client 66.249.64.101:64667] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeUVOY9nDD1R9gHO2T3eQAAAdY"]
[Tue Dec 09 11:15:39.786748 2025] [:error] [pid 62039:tid 62047] [client 66.249.64.101:41868] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeUW6-WdjFepfLrlW7ySAAAAAQ"]
[Tue Dec 09 11:15:46.479224 2025] [:error] [pid 62041:tid 62115] [client 66.249.64.101:46114] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeUYvOmnJGvfaNPxPOYzQAAAJI"]
[Tue Dec 09 11:15:53.363743 2025] [:error] [pid 62041:tid 62099] [client 66.249.64.101:56126] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeUafOmnJGvfaNPxPOY2AAAAII"]
[Tue Dec 09 11:16:00.115445 2025] [:error] [pid 62124:tid 62142] [client 66.249.64.101:64560] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeUcFraBX51GaCVVuWKJQAAAM8"]
[Tue Dec 09 11:16:06.866917 2025] [:error] [pid 62040:tid 62080] [client 66.249.64.101:53267] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeUdvkSVjwLGqZL-9KlYgAAAEo"]
[Tue Dec 09 11:16:13.655467 2025] [:error] [pid 6097:tid 6123] [client 66.249.64.101:49627] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeUfeY9nDD1R9gHO2T3oQAAAdg"]
[Tue Dec 09 11:16:20.459675 2025] [:error] [pid 62040:tid 62088] [client 66.249.64.101:54103] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeUhPkSVjwLGqZL-9KlaQAAAFI"]
[Tue Dec 09 11:22:04.821746 2025] [:error] [pid 62039:tid 62048] [client 45.138.16.233:53593] [client 45.138.16.233] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/postnews.php"] [unique_id "aTeV3K-WdjFepfLrlW71CwAAAAU"]
[Tue Dec 09 11:22:05.421535 2025] [:error] [pid 34783:tid 34802] [client 45.138.16.233:53656] [client 45.138.16.233] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/postnews.php"] [unique_id "aTeV3a17odLapL7SFcx9SQAAAVE"]
[Tue Dec 09 11:22:06.015528 2025] [:error] [pid 34783:tid 34807] [client 45.138.16.233:53728] [client 45.138.16.233] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/postnews.php"] [unique_id "aTeV3q17odLapL7SFcx9TQAAAVY"]
[Tue Dec 09 11:25:21.753303 2025] [:error] [pid 62124:tid 62147] [client 66.249.64.101:38632] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeWoVraBX51GaCVVuWMyAAAANQ"]
[Tue Dec 09 11:25:25.149428 2025] [:error] [pid 34783:tid 34801] [client 66.249.64.101:50742] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeWpa17odLapL7SFcx-JwAAAVA"]
[Tue Dec 09 11:25:44.602168 2025] [:error] [pid 26689:tid 26753] [client 66.249.64.101:39279] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeWuNkbfj8nyBvIyRCOMgAAARE"]
[Tue Dec 09 11:25:51.288941 2025] [:error] [pid 6053:tid 6058] [client 66.249.64.101:43947] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeWvyHz_Tnml8kdMwz_eAAAAYM"]
[Tue Dec 09 11:28:44.978234 2025] [:error] [pid 62041:tid 62105] [client 66.249.64.101:48030] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeXbPOmnJGvfaNPxPObQgAAAIg"]
[Tue Dec 09 11:28:51.774708 2025] [:error] [pid 6053:tid 6059] [client 66.249.64.101:52480] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeXcyHz_Tnml8kdMwwAiwAAAYQ"]
[Tue Dec 09 11:29:06.815591 2025] [:error] [pid 62039:tid 62063] [client 66.249.64.101:55672] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeXgq-WdjFepfLrlW734AAAABQ"]
[Tue Dec 09 11:29:22.294278 2025] [:error] [pid 26689:tid 26748] [client 66.249.64.101:56620] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeXktkbfj8nyBvIyRCPUAAAAQw"]
[Tue Dec 09 11:29:31.944455 2025] [:error] [pid 62124:tid 62150] [client 66.249.64.101:49206] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeXm1raBX51GaCVVuWNoQAAANc"]
[Tue Dec 09 11:29:32.510287 2025] [:error] [pid 6097:tid 6108] [client 66.249.64.101:53513] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeXnOY9nDD1R9gHO2T8vQAAAck"]
[Tue Dec 09 11:31:24.366694 2025] [:error] [pid 6097:tid 6113] [client 66.249.64.101:48360] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeYDOY9nDD1R9gHO2T9IAAAAc4"]
[Tue Dec 09 11:31:37.794350 2025] [:error] [pid 62039:tid 62048] [client 66.249.64.101:43423] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeYGa-WdjFepfLrlW75BAAAAAU"]
[Tue Dec 09 11:31:44.708714 2025] [:error] [pid 34783:tid 34785] [client 66.249.64.101:47096] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeYIK17odLapL7SFcx_jwAAAUA"]
[Tue Dec 09 11:31:51.549462 2025] [:error] [pid 34783:tid 34808] [client 66.249.64.101:59745] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeYJ617odLapL7SFcx_lAAAAVc"]
[Tue Dec 09 11:32:11.839684 2025] [:error] [pid 26689:tid 26736] [client 66.249.64.101:38406] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeYO9kbfj8nyBvIyRCPngAAAQE"]
[Tue Dec 09 11:37:51.619215 2025] [:error] [pid 62041:tid 62109] [client 66.249.64.101:56859] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeZj_OmnJGvfaNPxPOdqQAAAIw"]
[Tue Dec 09 11:37:58.510534 2025] [:error] [pid 62124:tid 62150] [client 66.249.64.101:54984] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeZllraBX51GaCVVuWQFwAAANc"]
[Tue Dec 09 11:38:12.092340 2025] [:error] [pid 62039:tid 62047] [client 66.249.64.101:57348] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeZpK-WdjFepfLrlW77qQAAAAQ"]
[Tue Dec 09 11:38:26.530898 2025] [:error] [pid 6053:tid 6062] [client 66.249.64.101:42929] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeZsiHz_Tnml8kdMwwDDQAAAYc"]
[Tue Dec 09 11:38:41.518406 2025] [:error] [pid 62039:tid 62044] [client 66.249.64.101:53269] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeZwa-WdjFepfLrlW775QAAAAE"]
[Tue Dec 09 11:40:51.769829 2025] [:error] [pid 62124:tid 62129] [client 66.249.64.101:51380] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeaQ1raBX51GaCVVuWQrwAAAMI"]
[Tue Dec 09 11:40:59.155094 2025] [:error] [pid 26689:tid 26741] [client 66.249.64.101:37405] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeaS9kbfj8nyBvIyRCR2wAAAQY"]
[Tue Dec 09 11:41:01.880175 2025] [:error] [pid 62039:tid 62057] [client 66.249.64.101:36393] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeaTa-WdjFepfLrlW78jgAAAA4"]
[Tue Dec 09 11:41:05.295831 2025] [:error] [pid 34783:tid 34800] [client 66.249.64.101:34951] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeaUa17odLapL7SFcyBsgAAAU8"]
[Tue Dec 09 11:41:08.691174 2025] [:error] [pid 34783:tid 34799] [client 66.249.64.101:47764] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeaVK17odLapL7SFcyBswAAAU4"]
[Tue Dec 09 11:41:22.289276 2025] [:error] [pid 62039:tid 62062] [client 66.249.64.101:62038] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeaYq-WdjFepfLrlW78ogAAABM"]
[Tue Dec 09 11:41:29.118814 2025] [:error] [pid 62039:tid 62046] [client 66.249.64.101:56683] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeaaa-WdjFepfLrlW78qQAAAAM"]
[Tue Dec 09 11:41:35.864933 2025] [:error] [pid 6053:tid 6064] [client 66.249.64.101:38955] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeabyHz_Tnml8kdMwwDqwAAAYk"]
[Tue Dec 09 11:41:42.668520 2025] [:error] [pid 62039:tid 62049] [client 66.249.64.101:52682] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeadq-WdjFepfLrlW78swAAAAY"]
[Tue Dec 09 11:44:15.422354 2025] [:error] [pid 26689:tid 26756] [client 66.249.64.101:62578] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTebD9kbfj8nyBvIyRCSYgAAARQ"]
[Tue Dec 09 11:44:18.719565 2025] [:error] [pid 34783:tid 34787] [client 66.249.64.101:64752] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTebEq17odLapL7SFcyCOAAAAUI"]
[Tue Dec 09 11:44:22.123141 2025] [:error] [pid 62039:tid 62060] [client 66.249.64.101:52045] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTebFq-WdjFepfLrlW79pwAAABE"]
[Tue Dec 09 11:44:25.856287 2025] [:error] [pid 62041:tid 62117] [client 66.249.64.101:63479] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTebGfOmnJGvfaNPxPOe4AAAAJQ"]
[Tue Dec 09 11:44:32.548562 2025] [:error] [pid 62124:tid 62133] [client 66.249.64.101:64612] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTebIFraBX51GaCVVuWRPgAAAMY"]
[Tue Dec 09 11:44:39.480341 2025] [:error] [pid 6097:tid 6121] [client 66.249.64.101:37767] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTebJ-Y9nDD1R9gHO2QAdgAAAdY"]
[Tue Dec 09 11:44:50.227528 2025] [:error] [pid 62040:tid 62089] [client 66.249.64.101:46951] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTebMvkSVjwLGqZL-9Kr8gAAAFM"]
[Tue Dec 09 11:44:56.933186 2025] [:error] [pid 62041:tid 62111] [client 66.249.64.101:43386] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTebOPOmnJGvfaNPxPOe-QAAAI4"]
[Tue Dec 09 11:46:46.423324 2025] [:error] [pid 62041:tid 62115] [client 66.249.64.101:52238] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTebpvOmnJGvfaNPxPOfRAAAAJI"]
[Tue Dec 09 11:46:49.818998 2025] [:error] [pid 6053:tid 6061] [client 66.249.64.101:45047] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTebqSHz_Tnml8kdMwwE1QAAAYY"]
[Tue Dec 09 11:46:55.356879 2025] [:error] [pid 26689:tid 26752] [client 66.249.64.101:58252] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTebr9kbfj8nyBvIyRCS1gAAARA"]
[Tue Dec 09 11:47:02.852506 2025] [:error] [pid 62041:tid 62097] [client 66.249.64.101:56474] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTebtvOmnJGvfaNPxPOfWwAAAIA"]
[Tue Dec 09 11:47:09.555432 2025] [:error] [pid 34783:tid 34807] [client 66.249.64.101:63921] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTebva17odLapL7SFcyC6gAAAVY"]
[Tue Dec 09 11:47:16.274124 2025] [:error] [pid 62039:tid 62067] [client 66.249.64.101:36076] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTebxK-WdjFepfLrlW7-uwAAABg"]
[Tue Dec 09 11:47:23.094514 2025] [:error] [pid 62039:tid 62065] [client 66.249.64.101:57370] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeby6-WdjFepfLrlW7-xQAAABY"]
[Tue Dec 09 11:49:47.992318 2025] [:error] [pid 62039:tid 62043] [client 66.249.64.101:47720] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTecW6-WdjFepfLrlW7_jgAAAAA"]
[Tue Dec 09 11:49:52.771101 2025] [:error] [pid 62040:tid 62085] [client 66.249.64.101:48210] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTecYPkSVjwLGqZL-9Ks-AAAAE8"]
[Tue Dec 09 11:50:02.263644 2025] [:error] [pid 34783:tid 34800] [client 66.249.64.101:50150] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTecaq17odLapL7SFcyDYgAAAU8"]
[Tue Dec 09 11:50:20.295891 2025] [:error] [pid 62039:tid 62065] [client 66.249.64.101:64839] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTecfK-WdjFepfLrlW7_sgAAABY"]
[Tue Dec 09 11:50:25.234991 2025] [:error] [pid 26689:tid 26743] [client 66.249.64.101:37451] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTecgdkbfj8nyBvIyRCTiwAAAQg"]
[Tue Dec 09 11:50:33.005388 2025] [:error] [pid 62124:tid 62148] [client 66.249.64.101:47924] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeciVraBX51GaCVVuWSbAAAANU"]
[Tue Dec 09 11:53:05.973980 2025] [:error] [pid 62039:tid 62065] [client 66.249.64.101:36384] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTedIa-WdjFepfLrlW4AdQAAABY"]
[Tue Dec 09 11:53:12.761439 2025] [:error] [pid 62040:tid 62079] [client 66.249.64.101:59975] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTedKPkSVjwLGqZL-9KtuQAAAEk"]
[Tue Dec 09 11:53:22.382947 2025] [:error] [pid 6053:tid 6067] [client 66.249.64.101:55984] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTedMiHz_Tnml8kdMwwGNgAAAYw"]
[Tue Dec 09 11:53:30.137211 2025] [:error] [pid 6097:tid 6106] [client 66.249.64.101:60498] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTedOuY9nDD1R9gHO2QC1wAAAcc"]
[Tue Dec 09 11:53:39.320638 2025] [:error] [pid 6097:tid 6102] [client 66.249.64.101:44169] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTedQ-Y9nDD1R9gHO2QC4QAAAcM"]
[Tue Dec 09 11:53:41.697215 2025] [:error] [pid 62041:tid 62120] [client 66.249.64.101:61853] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTedRfOmnJGvfaNPxPOgfAAAAJc"]
[Tue Dec 09 11:55:29.108874 2025] [:error] [pid 62124:tid 62144] [client 66.249.64.101:48289] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTedsVraBX51GaCVVuWTfgAAANE"]
[Tue Dec 09 11:55:34.177897 2025] [:error] [pid 26689:tid 26752] [client 66.249.64.101:63691] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTedttkbfj8nyBvIyRCVHgAAARA"]
[Tue Dec 09 11:55:39.151269 2025] [:error] [pid 6097:tid 6119] [client 66.249.64.101:60810] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTedu-Y9nDD1R9gHO2QDSQAAAdQ"]
[Tue Dec 09 11:55:50.223482 2025] [:error] [pid 6936:tid 6960] [client 66.249.64.101:38791] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTedxqCix90d5oiof3pMkQAAABQ"]
[Tue Dec 09 11:55:52.228339 2025] [:error] [pid 6936:tid 6951] [client 66.249.64.101:51995] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTedyKCix90d5oiof3pMnAAAAAs"]
[Tue Dec 09 11:56:05.505117 2025] [:error] [pid 7287:tid 7293] [client 66.249.64.101:47655] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTed1f3UQf3HGDaVS5PI_QAAAAQ"]
[Tue Dec 09 11:57:57.578254 2025] [:error] [pid 7287:tid 7297] [client 66.249.64.101:53242] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeeRf3UQf3HGDaVS5PJrwAAAAg"]
[Tue Dec 09 11:58:15.571434 2025] [:error] [pid 7324:tid 7353] [client 66.249.64.101:38966] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeeV-f70zXc9zH4rTKiXAAAAVg"]
[Tue Dec 09 11:58:24.078642 2025] [:error] [pid 7382:tid 7412] [client 66.249.64.101:44679] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeeYCdEXhamGkzwq-j1BQAAAdI"]
[Tue Dec 09 11:58:31.996499 2025] [:error] [pid 7324:tid 7340] [client 66.249.64.101:37952] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeeZ-f70zXc9zH4rTKidwAAAUs"]
[Tue Dec 09 11:58:34.392384 2025] [:error] [pid 7287:tid 7299] [client 66.249.64.101:37978] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeeav3UQf3HGDaVS5PKWwAAAAo"]
[Tue Dec 09 11:58:41.870511 2025] [:error] [pid 7325:tid 7374] [client 66.249.64.101:65455] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeecQqEQlZnpyQAsW0jLAAAAZI"]
[Tue Dec 09 11:58:46.150692 2025] [:error] [pid 7382:tid 7395] [client 66.249.64.101:58629] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeedidEXhamGkzwq-j1YAAAAcE"]
[Tue Dec 09 12:00:20.019692 2025] [:error] [pid 7325:tid 7356] [client 66.249.64.101:46029] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTee1AqEQlZnpyQAsW0j6AAAAYA"]
[Tue Dec 09 12:00:22.281781 2025] [:error] [pid 7324:tid 7338] [client 66.249.64.101:47325] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTee1uf70zXc9zH4rTKjIwAAAUk"]
[Tue Dec 09 12:00:26.241687 2025] [:error] [pid 7382:tid 7411] [client 66.249.64.101:60824] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTee2idEXhamGkzwq-j19wAAAdE"]
[Tue Dec 09 12:00:35.759658 2025] [:error] [pid 7382:tid 7413] [client 66.249.64.101:56958] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTee4ydEXhamGkzwq-j2HQAAAdM"]
[Tue Dec 09 12:00:40.514460 2025] [:error] [pid 7325:tid 7372] [client 66.249.64.101:52192] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTee6AqEQlZnpyQAsW0kJwAAAZA"]
[Tue Dec 09 12:00:50.036931 2025] [:error] [pid 7382:tid 7404] [client 66.249.64.101:46134] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTee8idEXhamGkzwq-j2PQAAAco"]
[Tue Dec 09 12:00:54.711241 2025] [:error] [pid 7324:tid 7352] [client 66.249.64.101:37417] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTee9uf70zXc9zH4rTKjkQAAAVc"]
[Tue Dec 09 12:01:04.225097 2025] [:error] [pid 7324:tid 7332] [client 66.249.64.101:40237] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTefAOf70zXc9zH4rTKjkwAAAUM"]
[Tue Dec 09 12:02:34.059168 2025] [:error] [pid 7382:tid 7405] [client 66.249.64.101:49803] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTefWidEXhamGkzwq-j26AAAAcs"]
[Tue Dec 09 12:02:45.951267 2025] [:error] [pid 7287:tid 7294] [client 66.249.64.101:57438] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTefZf3UQf3HGDaVS5PLvgAAAAU"]
[Tue Dec 09 12:02:49.113093 2025] [:error] [pid 7325:tid 7364] [client 66.249.64.101:47343] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTefaQqEQlZnpyQAsW0k5QAAAYg"]
[Tue Dec 09 12:02:58.624225 2025] [:error] [pid 7287:tid 7305] [client 66.249.64.101:35452] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTefcv3UQf3HGDaVS5PL0AAAABA"]
[Tue Dec 09 12:03:22.400191 2025] [:error] [pid 7382:tid 7417] [client 66.249.64.101:38101] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTefiidEXhamGkzwq-j3WQAAAdc"]
[Tue Dec 09 12:04:55.128651 2025] [:error] [pid 7325:tid 7364] [client 66.249.64.101:42224] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTef5wqEQlZnpyQAsW0l0AAAAYg"]
[Tue Dec 09 12:05:14.270717 2025] [:error] [pid 7324:tid 7334] [client 66.249.64.101:50473] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTef-uf70zXc9zH4rTKlIgAAAUU"]
[Tue Dec 09 12:05:24.125735 2025] [:error] [pid 7287:tid 7295] [client 66.249.64.101:40961] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTegBP3UQf3HGDaVS5PM0wAAAAY"]
[Tue Dec 09 12:05:29.062918 2025] [:error] [pid 7382:tid 7396] [client 66.249.64.101:54595] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTegCSdEXhamGkzwq-j4EwAAAcI"]
[Tue Dec 09 12:05:34.004401 2025] [:error] [pid 12069:tid 12081] [client 66.249.64.101:65239] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTegDmwNDNgPF6LHYDSQUQAAAEo"]
[Tue Dec 09 12:05:40.542951 2025] [:error] [pid 7325:tid 7375] [client 66.249.64.101:38377] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTegFAqEQlZnpyQAsW0mJQAAAZM"]
[Tue Dec 09 12:07:25.218504 2025] [:error] [pid 12069:tid 12082] [client 66.249.64.101:40197] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTegfWwNDNgPF6LHYDSRcgAAAEs"]
[Tue Dec 09 12:07:30.264645 2025] [:error] [pid 12069:tid 12090] [client 66.249.64.101:36141] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeggmwNDNgPF6LHYDSRfwAAAFM"]
[Tue Dec 09 12:07:43.488978 2025] [:error] [pid 7325:tid 7379] [client 66.249.64.101:57286] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTegjwqEQlZnpyQAsW0mqQAAAZc"]
[Tue Dec 09 12:07:48.432533 2025] [:error] [pid 12069:tid 12084] [client 66.249.64.101:44544] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeglGwNDNgPF6LHYDSRlwAAAE0"]
[Tue Dec 09 12:07:57.792871 2025] [:error] [pid 7287:tid 7309] [client 66.249.64.101:40622] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTegnf3UQf3HGDaVS5PNlgAAABQ"]
[Tue Dec 09 12:08:13.978101 2025] [:error] [pid 7324:tid 7337] [client 66.249.64.101:46299] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTegref70zXc9zH4rTKmDgAAAUg"]
[Tue Dec 09 12:09:52.901175 2025] [:error] [pid 7324:tid 7330] [client 66.249.64.101:46087] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTehEOf70zXc9zH4rTKm9wAAAUE"]
[Tue Dec 09 12:09:57.845136 2025] [:error] [pid 12069:tid 12081] [client 66.249.64.101:36263] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTehFWwNDNgPF6LHYDSSswAAAEo"]
[Tue Dec 09 12:10:24.464970 2025] [:error] [pid 12069:tid 12083] [client 66.249.64.101:63338] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTehMGwNDNgPF6LHYDSS2QAAAEw"]
[Tue Dec 09 12:10:29.374780 2025] [:error] [pid 12069:tid 12086] [client 66.249.64.101:41110] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTehNWwNDNgPF6LHYDSS4AAAAE8"]
[Tue Dec 09 12:10:37.170159 2025] [:error] [pid 7287:tid 7300] [client 66.249.64.101:48284] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTehPf3UQf3HGDaVS5POiQAAAAs"]
[Tue Dec 09 12:11:57.277302 2025] [:error] [pid 12069:tid 12078] [client 66.249.64.101:45291] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTehjWwNDNgPF6LHYDSTwgAAAEc"]
[Tue Dec 09 12:12:13.727897 2025] [:error] [pid 12069:tid 12085] [client 66.249.64.101:41697] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTehnWwNDNgPF6LHYDSUSgAAAE4"]
[Tue Dec 09 12:12:18.770002 2025] [:error] [pid 7382:tid 7405] [client 66.249.64.101:40078] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTehoidEXhamGkzwq-j6CwAAAcs"]
[Tue Dec 09 12:12:25.354080 2025] [:error] [pid 7324:tid 7347] [client 66.249.64.101:64759] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTehqef70zXc9zH4rTKnbgAAAVI"]
[Tue Dec 09 12:13:59.851313 2025] [:error] [pid 12069:tid 12095] [client 66.249.64.101:44231] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeiB2wNDNgPF6LHYDSVFAAAAFg"]
[Tue Dec 09 12:14:05.379303 2025] [:error] [pid 7324:tid 7342] [client 66.249.64.101:43531] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeiDef70zXc9zH4rTKnuwAAAU0"]
[Tue Dec 09 12:14:14.961383 2025] [:error] [pid 7382:tid 7412] [client 66.249.64.101:37844] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeiFidEXhamGkzwq-j6pwAAAdI"]
[Tue Dec 09 12:14:22.635268 2025] [:error] [pid 12069:tid 12077] [client 66.249.64.101:39375] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeiHmwNDNgPF6LHYDSVNwAAAEY"]
[Tue Dec 09 12:14:27.663738 2025] [:error] [pid 7325:tid 7367] [client 66.249.64.101:61710] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeiIwqEQlZnpyQAsW0pTwAAAYs"]
[Tue Dec 09 12:14:32.730431 2025] [:error] [pid 7287:tid 7311] [client 66.249.64.101:35819] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeiKP3UQf3HGDaVS5PPygAAABY"]
[Tue Dec 09 12:14:37.794465 2025] [:error] [pid 7382:tid 7395] [client 66.249.64.101:60586] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeiLSdEXhamGkzwq-j6xAAAAcE"]
[Tue Dec 09 12:14:42.854854 2025] [:error] [pid 7324:tid 7329] [client 66.249.64.101:52887] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeiMuf70zXc9zH4rTKn0QAAAUA"]
[Tue Dec 09 12:14:47.900857 2025] [:error] [pid 7325:tid 7370] [client 66.249.64.101:54376] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeiNwqEQlZnpyQAsW0pggAAAY4"]
[Tue Dec 09 12:14:52.940724 2025] [:error] [pid 7324:tid 7348] [client 66.249.64.101:63730] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeiPOf70zXc9zH4rTKn2QAAAVM"]
[Tue Dec 09 12:14:55.323786 2025] [:error] [pid 12069:tid 12091] [client 66.249.64.101:47449] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeiP2wNDNgPF6LHYDSV1gAAAFQ"]
[Tue Dec 09 12:24:45.439032 2025] [:error] [pid 12069:tid 12092] [client 66.249.64.101:56643] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTekjWwNDNgPF6LHYDSYYAAAAFU"]
[Tue Dec 09 12:24:51.144053 2025] [:error] [pid 7324:tid 7336] [client 66.249.64.101:43461] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTekk-f70zXc9zH4rTKo5AAAAUc"]
[Tue Dec 09 12:24:56.803204 2025] [:error] [pid 7382:tid 7396] [client 66.249.64.101:41459] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTekmCdEXhamGkzwq-j8UwAAAcI"]
[Tue Dec 09 12:25:00.576371 2025] [:error] [pid 7382:tid 7405] [client 66.249.64.101:53674] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeknCdEXhamGkzwq-j8XAAAAcs"]
[Tue Dec 09 12:25:05.602434 2025] [:error] [pid 7287:tid 7304] [client 66.249.64.101:59520] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTekof3UQf3HGDaVS5PRIQAAAA8"]
[Tue Dec 09 12:25:34.664734 2025] [:error] [pid 12069:tid 12089] [client 66.249.64.101:56599] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTekvmwNDNgPF6LHYDSZoAAAAFI"]
[Tue Dec 09 12:25:36.393773 2025] [:error] [pid 7325:tid 7363] [client 66.249.64.101:52157] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTekwAqEQlZnpyQAsW0rgQAAAYc"]
[Tue Dec 09 12:26:52.074036 2025] [:error] [pid 12069:tid 12078] [client 66.249.64.101:39633] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTelDGwNDNgPF6LHYDSaZQAAAEc"]
[Tue Dec 09 12:26:56.824622 2025] [:error] [pid 7325:tid 7377] [client 66.249.64.101:51979] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTelEAqEQlZnpyQAsW0sWAAAAZU"]
[Tue Dec 09 12:27:11.155386 2025] [:error] [pid 12069:tid 12089] [client 66.249.64.101:43534] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTelH2wNDNgPF6LHYDSahgAAAFI"]
[Tue Dec 09 12:27:15.881813 2025] [:error] [pid 7287:tid 7291] [client 66.249.64.101:35033] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTelI_3UQf3HGDaVS5PRzAAAAAI"]
[Tue Dec 09 12:27:20.636200 2025] [:error] [pid 7382:tid 7409] [client 66.249.64.101:50884] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTelKCdEXhamGkzwq-j96QAAAc8"]
[Tue Dec 09 12:27:25.399361 2025] [:error] [pid 7382:tid 7408] [client 66.249.64.101:58231] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTelLSdEXhamGkzwq-j97AAAAc4"]
[Tue Dec 09 12:27:30.149580 2025] [:error] [pid 7382:tid 7394] [client 66.249.64.101:35187] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTelMidEXhamGkzwq-j98QAAAcA"]
[Tue Dec 09 12:27:34.908627 2025] [:error] [pid 7325:tid 7369] [client 66.249.64.101:49461] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTelNgqEQlZnpyQAsW0sbwAAAY0"]
[Tue Dec 09 12:28:39.760185 2025] [:error] [pid 7324:tid 7340] [client 66.249.64.101:47410] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeld-f70zXc9zH4rTKqGAAAAUs"]
[Tue Dec 09 12:28:42.142873 2025] [:error] [pid 7287:tid 7307] [client 66.249.64.101:62508] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTelev3UQf3HGDaVS5PSCwAAABI"]
[Tue Dec 09 12:28:46.350200 2025] [:error] [pid 7287:tid 7302] [client 66.249.64.101:40318] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTelfv3UQf3HGDaVS5PSDQAAAA0"]
[Tue Dec 09 12:28:51.101644 2025] [:error] [pid 7325:tid 7372] [client 66.249.64.101:44504] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTelgwqEQlZnpyQAsW0sxQAAAZA"]
[Tue Dec 09 12:28:55.864912 2025] [:error] [pid 7324:tid 7353] [client 66.249.64.101:54188] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTelh-f70zXc9zH4rTKqSwAAAVg"]
[Tue Dec 09 12:29:00.736240 2025] [:error] [pid 12069:tid 12093] [client 66.249.64.101:40014] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeljGwNDNgPF6LHYDSbGAAAAFY"]
[Tue Dec 09 12:29:14.908720 2025] [:error] [pid 12069:tid 12080] [client 66.249.64.101:55025] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTelmmwNDNgPF6LHYDSbJgAAAEk"]
[Tue Dec 09 12:29:19.668251 2025] [:error] [pid 7325:tid 7359] [client 66.249.64.101:35451] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTelnwqEQlZnpyQAsW0s5gAAAYM"]
[Tue Dec 09 12:29:24.430499 2025] [:error] [pid 12069:tid 12072] [client 66.249.64.101:36463] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTelpGwNDNgPF6LHYDSbNQAAAEE"]
[Tue Dec 09 12:29:29.191609 2025] [:error] [pid 7324:tid 7348] [client 66.249.64.101:40139] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTelqef70zXc9zH4rTKqbwAAAVM"]
[Tue Dec 09 12:30:41.779857 2025] [:error] [pid 7287:tid 7293] [client 66.249.64.101:56439] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTel8f3UQf3HGDaVS5PSfwAAAAQ"]
[Tue Dec 09 12:30:47.693250 2025] [:error] [pid 12069:tid 12090] [client 66.249.64.101:57418] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTel92wNDNgPF6LHYDSb5gAAAFM"]
[Tue Dec 09 12:30:52.760221 2025] [:error] [pid 7287:tid 7296] [client 66.249.64.101:61469] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTel_P3UQf3HGDaVS5PSkAAAAAc"]
[Tue Dec 09 12:30:53.556333 2025] [:error] [pid 7324:tid 7348] [client 66.249.64.101:50723] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTel_ef70zXc9zH4rTKqqwAAAVM"]
[Tue Dec 09 12:30:55.138694 2025] [:error] [pid 7287:tid 7310] [client 66.249.64.101:37002] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTel__3UQf3HGDaVS5PSlwAAABU"]
[Tue Dec 09 12:30:59.683654 2025] [:error] [pid 12069:tid 12087] [client 66.249.64.101:47952] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTemA2wNDNgPF6LHYDScBQAAAFA"]
[Tue Dec 09 12:31:18.675039 2025] [:error] [pid 12069:tid 12077] [client 66.249.64.101:61707] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTemFmwNDNgPF6LHYDScHAAAAEY"]
[Tue Dec 09 12:31:23.496383 2025] [:error] [pid 7287:tid 7296] [client 66.249.64.101:65148] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTemG_3UQf3HGDaVS5PSsAAAAAc"]
[Tue Dec 09 12:31:31.243966 2025] [:error] [pid 7382:tid 7409] [client 66.249.64.101:35708] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTemIydEXhamGkzwq-j_JgAAAc8"]
[Tue Dec 09 12:32:39.680030 2025] [:error] [pid 12069:tid 12090] [client 66.249.64.101:61706] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTemZ2wNDNgPF6LHYDScmwAAAFM"]
[Tue Dec 09 12:32:50.222438 2025] [:error] [pid 7287:tid 7298] [client 66.249.64.101:47286] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTemcv3UQf3HGDaVS5PS6QAAAAk"]
[Tue Dec 09 12:32:53.967298 2025] [:error] [pid 12069:tid 12089] [client 66.249.64.101:40490] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTemdWwNDNgPF6LHYDSc0QAAAFI"]
[Tue Dec 09 12:32:58.714741 2025] [:error] [pid 7324:tid 7333] [client 66.249.64.101:44911] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTemeuf70zXc9zH4rTKrJQAAAUQ"]
[Tue Dec 09 12:33:08.238182 2025] [:error] [pid 7382:tid 7403] [client 66.249.64.101:40400] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTemhCdEXhamGkzwq-j_4gAAAck"]
[Tue Dec 09 12:33:13.011950 2025] [:error] [pid 12069:tid 12079] [client 66.249.64.101:45273] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTemiWwNDNgPF6LHYDSdFwAAAEg"]
[Tue Dec 09 12:33:17.669127 2025] [:error] [pid 7324:tid 7345] [client 66.249.64.101:63128] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTemjef70zXc9zH4rTKrnwAAAVA"]
[Tue Dec 09 12:33:24.409940 2025] [:error] [pid 7382:tid 7399] [client 66.249.64.101:41924] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTemlCdEXhamGkzwq-gAjQAAAcU"]
[Tue Dec 09 12:33:27.298005 2025] [:error] [pid 7324:tid 7339] [client 66.249.64.101:37312] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeml-f70zXc9zH4rTKr3AAAAUo"]
[Tue Dec 09 12:34:33.226452 2025] [:error] [pid 7325:tid 7371] [client 66.249.64.101:49109] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTem2QqEQlZnpyQAsW0urQAAAY8"]
[Tue Dec 09 12:34:42.468984 2025] [:error] [pid 12069:tid 12082] [client 66.249.64.101:48504] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTem4mwNDNgPF6LHYDSdxwAAAEs"]
[Tue Dec 09 12:34:47.500238 2025] [:error] [pid 12069:tid 12094] [client 66.249.64.101:41086] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTem52wNDNgPF6LHYDSd3AAAAFc"]
[Tue Dec 09 12:34:52.527779 2025] [:error] [pid 12069:tid 12090] [client 66.249.64.101:34982] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTem7GwNDNgPF6LHYDSd7QAAAFM"]
[Tue Dec 09 12:34:57.607242 2025] [:error] [pid 12069:tid 12085] [client 66.249.64.101:46128] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTem8WwNDNgPF6LHYDSd9QAAAE4"]
[Tue Dec 09 12:35:02.652800 2025] [:error] [pid 7382:tid 7398] [client 66.249.64.101:34769] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTem9idEXhamGkzwq-gBWwAAAcQ"]
[Tue Dec 09 12:35:10.779075 2025] [:error] [pid 12069:tid 12089] [client 66.249.64.101:57264] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTem_mwNDNgPF6LHYDSeIQAAAFI"]
[Tue Dec 09 12:35:15.812098 2025] [:error] [pid 7325:tid 7357] [client 66.249.64.101:65383] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTenAwqEQlZnpyQAsW0vGQAAAYE"]
[Tue Dec 09 12:35:20.845930 2025] [:error] [pid 7325:tid 7379] [client 66.249.64.101:61257] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTenCAqEQlZnpyQAsW0vIwAAAZc"]
[Tue Dec 09 12:35:25.879969 2025] [:error] [pid 7324:tid 7334] [client 66.249.64.101:56412] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTenDef70zXc9zH4rTKsnQAAAUU"]
[Tue Dec 09 12:36:22.703090 2025] [:error] [pid 7382:tid 7396] [client 66.249.64.101:55927] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTenRidEXhamGkzwq-gB3AAAAcI"]
[Tue Dec 09 12:36:28.235236 2025] [:error] [pid 7382:tid 7404] [client 66.249.64.101:47881] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTenTCdEXhamGkzwq-gB5wAAAco"]
[Tue Dec 09 12:36:32.995393 2025] [:error] [pid 7287:tid 7291] [client 66.249.64.101:44741] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTenUP3UQf3HGDaVS5PVEgAAAAI"]
[Tue Dec 09 12:36:42.525777 2025] [:error] [pid 12069:tid 12093] [client 66.249.64.101:48424] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTenWmwNDNgPF6LHYDSexAAAAFY"]
[Tue Dec 09 12:36:47.276950 2025] [:error] [pid 12069:tid 12091] [client 66.249.64.101:54639] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTenX2wNDNgPF6LHYDSezQAAAFQ"]
[Tue Dec 09 12:36:55.120803 2025] [:error] [pid 7382:tid 7410] [client 66.249.64.101:43661] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTenZydEXhamGkzwq-gCKAAAAdA"]
[Tue Dec 09 12:36:56.998066 2025] [:error] [pid 7382:tid 7396] [client 66.249.64.101:62272] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTenaCdEXhamGkzwq-gCKgAAAcI"]
[Tue Dec 09 12:38:26.820083 2025] [:error] [pid 7382:tid 7405] [client 66.249.64.101:39354] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTenwidEXhamGkzwq-gDAgAAAcs"]
[Tue Dec 09 12:38:34.724867 2025] [:error] [pid 7325:tid 7372] [client 66.249.64.101:53162] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTenygqEQlZnpyQAsW0wsQAAAZA"]
[Tue Dec 09 12:38:39.090234 2025] [:error] [pid 7324:tid 7348] [client 66.249.64.101:60837] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTenz-f70zXc9zH4rTKthQAAAVM"]
[Tue Dec 09 12:38:41.590701 2025] [:error] [pid 7287:tid 7300] [client 66.249.64.101:38526] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTen0f3UQf3HGDaVS5PV5AAAAAs"]
[Tue Dec 09 12:38:46.345709 2025] [:error] [pid 7382:tid 7418] [client 66.249.64.101:40483] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTen1idEXhamGkzwq-gDIgAAAdg"]
[Tue Dec 09 12:38:51.096009 2025] [:error] [pid 12069:tid 12089] [client 66.249.64.101:35866] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTen22wNDNgPF6LHYDSfxQAAAFI"]
[Tue Dec 09 12:38:55.776631 2025] [:error] [pid 7287:tid 7299] [client 66.249.64.101:37535] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTen3_3UQf3HGDaVS5PWCQAAAAo"]
[Tue Dec 09 12:39:00.654998 2025] [:error] [pid 12069:tid 12095] [client 66.249.64.101:47549] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTen5GwNDNgPF6LHYDSfzwAAAFg"]
[Tue Dec 09 12:39:10.149878 2025] [:error] [pid 7382:tid 7409] [client 66.249.64.101:59085] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTen7idEXhamGkzwq-gDSQAAAc8"]
[Tue Dec 09 12:39:14.918821 2025] [:error] [pid 7382:tid 7415] [client 66.249.64.101:44684] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTen8idEXhamGkzwq-gDUQAAAdU"]
[Tue Dec 09 12:39:19.675618 2025] [:error] [pid 7324:tid 7351] [client 66.249.64.101:59551] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTen9-f70zXc9zH4rTKt_QAAAVY"]
[Tue Dec 09 12:40:25.574164 2025] [:error] [pid 12069:tid 12074] [client 66.249.64.101:36884] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeoOWwNDNgPF6LHYDSgmQAAAEM"]
[Tue Dec 09 12:40:31.102675 2025] [:error] [pid 7382:tid 7417] [client 66.249.64.101:43683] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeoPydEXhamGkzwq-gDlgAAAdc"]
[Tue Dec 09 12:40:37.584129 2025] [:error] [pid 7325:tid 7363] [client 66.249.64.101:54519] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeoRQqEQlZnpyQAsW0x4AAAAYc"]
[Tue Dec 09 12:40:44.113630 2025] [:error] [pid 7382:tid 7413] [client 66.249.64.101:51264] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeoTCdEXhamGkzwq-gDngAAAdM"]
[Tue Dec 09 12:40:49.393831 2025] [:error] [pid 7287:tid 7300] [client 66.249.64.101:43287] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeoUf3UQf3HGDaVS5PW7wAAAAs"]
[Tue Dec 09 12:40:51.848038 2025] [:error] [pid 12069:tid 12083] [client 66.249.64.101:56268] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeoU2wNDNgPF6LHYDSgrQAAAEw"]
[Tue Dec 09 12:40:58.024351 2025] [:error] [pid 7325:tid 7364] [client 66.249.64.101:59361] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeoWgqEQlZnpyQAsW0x8AAAAYg"]
[Tue Dec 09 12:41:06.079826 2025] [:error] [pid 12069:tid 12085] [client 66.249.64.101:62674] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeoYmwNDNgPF6LHYDSgwwAAAE4"]
[Tue Dec 09 12:41:13.959954 2025] [:error] [pid 12069:tid 12074] [client 66.249.64.101:55353] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeoaWwNDNgPF6LHYDSg_wAAAEM"]
[Tue Dec 09 12:42:42.275794 2025] [:error] [pid 7324:tid 7344] [client 66.249.64.101:64125] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeowuf70zXc9zH4rTKu7QAAAU8"]
[Tue Dec 09 12:42:50.410134 2025] [:error] [pid 7287:tid 7308] [client 66.249.64.101:58841] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeoyv3UQf3HGDaVS5PXhQAAABM"]
[Tue Dec 09 12:42:58.551850 2025] [:error] [pid 7324:tid 7343] [client 66.249.64.101:65165] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeo0uf70zXc9zH4rTKu9gAAAU4"]
[Tue Dec 09 12:43:18.259123 2025] [:error] [pid 7287:tid 7308] [client 66.249.64.101:43887] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeo5v3UQf3HGDaVS5PX0wAAABM"]
[Tue Dec 09 12:43:33.310101 2025] [:error] [pid 7325:tid 7362] [client 66.249.64.101:56444] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeo9QqEQlZnpyQAsW0ysQAAAYY"]
[Tue Dec 09 12:45:34.314521 2025] [:error] [pid 7325:tid 7371] [client 66.249.64.101:64170] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTepbgqEQlZnpyQAsW0zlwAAAY8"]
[Tue Dec 09 12:45:41.328956 2025] [:error] [pid 7325:tid 7376] [client 66.249.64.101:45295] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTepdQqEQlZnpyQAsW0zmwAAAZQ"]
[Tue Dec 09 12:45:49.474065 2025] [:error] [pid 7382:tid 7406] [client 66.249.64.101:58422] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTepfSdEXhamGkzwq-gFSQAAAcw"]
[Tue Dec 09 12:45:57.614746 2025] [:error] [pid 12069:tid 12081] [client 66.249.64.101:38806] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTephWwNDNgPF6LHYDSkFwAAAEo"]
[Tue Dec 09 12:46:13.875934 2025] [:error] [pid 7325:tid 7357] [client 66.249.64.101:53337] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeplQqEQlZnpyQAsW0ztAAAAYE"]
[Tue Dec 09 12:46:22.027282 2025] [:error] [pid 12069:tid 12089] [client 66.249.64.101:44255] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTepnmwNDNgPF6LHYDSkcwAAAFI"]
[Tue Dec 09 12:46:30.173189 2025] [:error] [pid 12069:tid 12082] [client 66.249.64.101:56827] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeppmwNDNgPF6LHYDSkogAAAEs"]
[Tue Dec 09 12:48:32.254882 2025] [:error] [pid 12069:tid 12077] [client 66.249.64.101:35365] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeqIGwNDNgPF6LHYDSl8AAAAEY"]
[Tue Dec 09 12:48:40.387837 2025] [:error] [pid 7382:tid 7410] [client 66.249.64.101:47610] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeqKCdEXhamGkzwq-gGUQAAAdA"]
[Tue Dec 09 12:48:51.463406 2025] [:error] [pid 12069:tid 12071] [client 66.249.64.101:43980] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeqM2wNDNgPF6LHYDSmYwAAAEA"]
[Tue Dec 09 12:48:59.089586 2025] [:error] [pid 7287:tid 7298] [client 66.249.64.101:48165] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeqO_3UQf3HGDaVS5PaHAAAAAk"]
[Tue Dec 09 12:49:06.381299 2025] [:error] [pid 7325:tid 7375] [client 66.249.64.101:56116] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeqQgqEQlZnpyQAsW01FgAAAZM"]
[Tue Dec 09 12:49:23.098853 2025] [:error] [pid 12069:tid 12084] [client 66.249.64.101:56469] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeqU2wNDNgPF6LHYDSm2AAAAE0"]
[Tue Dec 09 12:51:28.448781 2025] [:error] [pid 7382:tid 7396] [client 66.249.64.101:62905] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeq0CdEXhamGkzwq-gIkQAAAcI"]
[Tue Dec 09 12:51:37.289962 2025] [:error] [pid 7325:tid 7366] [client 66.249.64.101:42117] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeq2QqEQlZnpyQAsW03DgAAAYo"]
[Tue Dec 09 12:51:44.505338 2025] [:error] [pid 7324:tid 7349] [client 66.249.64.101:56352] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeq4Of70zXc9zH4rTKygQAAAVQ"]
[Tue Dec 09 12:51:51.818264 2025] [:error] [pid 7382:tid 7417] [client 66.249.64.101:54530] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeq5ydEXhamGkzwq-gIsQAAAdc"]
[Tue Dec 09 12:52:01.907913 2025] [:error] [pid 7324:tid 7332] [client 66.249.64.101:52760] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeq8ef70zXc9zH4rTKyugAAAUM"]
[Tue Dec 09 12:52:16.530195 2025] [:error] [pid 7287:tid 7304] [client 66.249.64.101:57202] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTerAP3UQf3HGDaVS5Pb_gAAAA8"]
[Tue Dec 09 12:53:59.507311 2025] [:error] [pid 7325:tid 7376] [client 66.249.64.101:51864] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTerZwqEQlZnpyQAsW03yQAAAZQ"]
[Tue Dec 09 12:54:06.078829 2025] [:error] [pid 12069:tid 12074] [client 134.209.169.174:55352] [client 134.209.169.174] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 134.209.169.174, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTerbmwNDNgPF6LHYDSpwAAAAEM"]
[Tue Dec 09 12:54:14.086884 2025] [:error] [pid 7324:tid 7345] [client 66.249.64.101:46488] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTerduf70zXc9zH4rTKz8AAAAVA"]
[Tue Dec 09 12:54:22.127221 2025] [:error] [pid 7382:tid 7399] [client 66.249.64.101:62136] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTerfidEXhamGkzwq-gJmwAAAcU"]
[Tue Dec 09 12:54:31.494139 2025] [:error] [pid 7287:tid 7309] [client 66.249.64.101:43170] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTerh_3UQf3HGDaVS5PcoQAAABQ"]
[Tue Dec 09 12:54:41.685985 2025] [:error] [pid 7287:tid 7310] [client 66.249.64.101:40707] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTerkf3UQf3HGDaVS5PcrgAAABU"]
[Tue Dec 09 12:54:48.981607 2025] [:error] [pid 12069:tid 12077] [client 66.249.64.101:64985] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTermGwNDNgPF6LHYDSp_QAAAEY"]
[Tue Dec 09 12:57:06.618803 2025] [:error] [pid 12069:tid 12088] [client 66.249.64.101:35361] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTesImwNDNgPF6LHYDSq6QAAAFE"]
[Tue Dec 09 12:57:23.264704 2025] [:error] [pid 7382:tid 7396] [client 66.249.64.101:54985] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTesMydEXhamGkzwq-gLAwAAAcI"]
[Tue Dec 09 12:57:30.469296 2025] [:error] [pid 7287:tid 7292] [client 66.249.64.101:59925] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTesOv3UQf3HGDaVS5PdwQAAAAM"]
[Tue Dec 09 12:57:55.112670 2025] [:error] [pid 7324:tid 7342] [client 66.249.64.101:40493] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTesU-f70zXc9zH4rTK1LAAAAU0"]
[Tue Dec 09 12:59:53.520739 2025] [:error] [pid 7325:tid 7368] [client 66.249.64.101:54484] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTesyQqEQlZnpyQAsW05kQAAAYw"]
[Tue Dec 09 13:00:00.814908 2025] [:error] [pid 7325:tid 7372] [client 66.249.64.101:34928] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTes0AqEQlZnpyQAsW05sQAAAZA"]
[Tue Dec 09 13:00:08.123502 2025] [:error] [pid 12069:tid 12083] [client 66.249.64.101:39702] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTes2GwNDNgPF6LHYDSsLQAAAEw"]
[Tue Dec 09 13:00:15.330920 2025] [:error] [pid 7382:tid 7404] [client 66.249.64.101:60630] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTes3ydEXhamGkzwq-gMVwAAAco"]
[Tue Dec 09 13:00:20.336719 2025] [:error] [pid 7324:tid 7329] [client 66.249.64.101:54985] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTes5Of70zXc9zH4rTK2AQAAAUA"]
[Tue Dec 09 13:00:28.387762 2025] [:error] [pid 12069:tid 12090] [client 66.249.64.101:41403] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTes7GwNDNgPF6LHYDSsbwAAAFM"]
[Tue Dec 09 13:00:40.491714 2025] [:error] [pid 7325:tid 7372] [client 66.249.64.101:49114] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTes-AqEQlZnpyQAsW06GwAAAZA"]
[Tue Dec 09 13:02:39.421753 2025] [:error] [pid 12069:tid 12087] [client 66.249.64.101:37853] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTetb2wNDNgPF6LHYDStkAAAAFA"]
[Tue Dec 09 13:02:46.722238 2025] [:error] [pid 12069:tid 12084] [client 66.249.64.101:44211] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTetdmwNDNgPF6LHYDStnQAAAE0"]
[Tue Dec 09 13:02:54.053045 2025] [:error] [pid 7324:tid 7350] [client 66.249.64.101:53444] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTetfuf70zXc9zH4rTK2sQAAAVU"]
[Tue Dec 09 13:03:03.189752 2025] [:error] [pid 7325:tid 7380] [client 66.249.64.101:60655] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTethwqEQlZnpyQAsW06sQAAAZg"]
[Tue Dec 09 13:03:22.164029 2025] [:error] [pid 7382:tid 7412] [client 66.249.64.101:46954] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTetmidEXhamGkzwq-gOOAAAAdI"]
[Tue Dec 09 13:03:27.542430 2025] [:error] [pid 12069:tid 12095] [client 66.249.64.101:62659] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTetn2wNDNgPF6LHYDSt2gAAAFg"]
[Tue Dec 09 13:08:34.898622 2025] [:error] [pid 7287:tid 7312] [client 66.249.64.101:37891] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeu0v3UQf3HGDaVS5PhKwAAABc"]
[Tue Dec 09 13:08:49.852209 2025] [:error] [pid 12069:tid 12095] [client 66.249.64.101:42345] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeu4WwNDNgPF6LHYDSw6AAAAFg"]
[Tue Dec 09 13:08:55.570349 2025] [:error] [pid 7382:tid 7414] [client 66.249.64.101:64054] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeu5ydEXhamGkzwq-gQWAAAAdQ"]
[Tue Dec 09 13:12:49.031852 2025] [:error] [pid 7287:tid 7313] [client 66.249.64.101:39242] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTev0f3UQf3HGDaVS5PiQwAAABg"]
[Tue Dec 09 13:12:57.145709 2025] [:error] [pid 7324:tid 7353] [client 66.249.64.101:48428] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTev2ef70zXc9zH4rTK5gwAAAVg"]
[Tue Dec 09 13:13:13.453384 2025] [:error] [pid 7324:tid 7349] [client 66.249.64.101:47896] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTev6ef70zXc9zH4rTK5iwAAAVQ"]
[Tue Dec 09 13:13:31.459129 2025] [:error] [pid 7324:tid 7353] [client 66.249.64.101:57595] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTev--f70zXc9zH4rTK5oQAAAVg"]
[Tue Dec 09 13:16:38.545669 2025] [:error] [pid 12069:tid 12086] [client 66.249.64.101:52327] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTewtmwNDNgPF6LHYDS1IwAAAE8"]
[Tue Dec 09 13:16:45.848851 2025] [:error] [pid 7382:tid 7414] [client 66.249.64.101:45450] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTewvSdEXhamGkzwq-gT6QAAAdQ"]
[Tue Dec 09 13:17:06.484804 2025] [:error] [pid 12069:tid 12091] [client 66.249.64.101:35737] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTew0mwNDNgPF6LHYDS1awAAAFQ"]
[Tue Dec 09 13:20:00.368270 2025] [:error] [pid 7324:tid 7353] [client 66.249.64.101:63019] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTexgOf70zXc9zH4rTK8LAAAAVg"]
[Tue Dec 09 13:20:17.961860 2025] [:error] [pid 7325:tid 7367] [client 66.249.64.101:63179] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTexkQqEQlZnpyQAsW1ACAAAAYs"]
[Tue Dec 09 13:20:25.601815 2025] [:error] [pid 12069:tid 12085] [client 66.249.64.101:50478] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTexmWwNDNgPF6LHYDS3UQAAAE4"]
[Tue Dec 09 13:20:39.944111 2025] [:error] [pid 7325:tid 7361] [client 66.249.64.101:56949] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTexpwqEQlZnpyQAsW1AYgAAAYU"]
[Tue Dec 09 13:20:47.309416 2025] [:error] [pid 7324:tid 7345] [client 66.249.64.101:39816] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTexr-f70zXc9zH4rTK8SwAAAVA"]
[Tue Dec 09 13:24:04.623560 2025] [:error] [pid 7382:tid 7402] [client 66.249.64.101:43533] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeydCdEXhamGkzwq-gWywAAAcg"]
[Tue Dec 09 13:24:12.763661 2025] [:error] [pid 7287:tid 7307] [client 66.249.64.101:41937] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeyfP3UQf3HGDaVS5Pl0gAAABI"]
[Tue Dec 09 13:24:35.993818 2025] [:error] [pid 12069:tid 12095] [client 66.249.64.101:57674] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeyk2wNDNgPF6LHYDS55AAAAFg"]
[Tue Dec 09 13:24:43.291147 2025] [:error] [pid 12069:tid 12089] [client 66.249.64.101:64712] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeym2wNDNgPF6LHYDS5-gAAAFI"]
[Tue Dec 09 13:28:07.459987 2025] [:error] [pid 12069:tid 12071] [client 66.249.64.101:38781] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTezZ2wNDNgPF6LHYDS7twAAAEA"]
[Tue Dec 09 13:28:14.799158 2025] [:error] [pid 12069:tid 12083] [client 66.249.64.101:44412] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTezbmwNDNgPF6LHYDS7yQAAAEw"]
[Tue Dec 09 13:28:22.701061 2025] [:error] [pid 7382:tid 7416] [client 66.249.64.101:56638] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTezdidEXhamGkzwq-gYEAAAAdY"]
[Tue Dec 09 13:28:27.303355 2025] [:error] [pid 12069:tid 12073] [client 66.249.64.101:37331] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTeze2wNDNgPF6LHYDS72QAAAEI"]
[Tue Dec 09 13:28:34.623828 2025] [:error] [pid 12069:tid 12081] [client 66.249.64.101:41969] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTezgmwNDNgPF6LHYDS78QAAAEo"]
[Tue Dec 09 13:28:50.949585 2025] [:error] [pid 7325:tid 7370] [client 66.249.64.101:62754] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTezkgqEQlZnpyQAsW1DJQAAAY4"]
[Tue Dec 09 13:37:38.410327 2025] [:error] [pid 7325:tid 7369] [client 66.249.64.101:59348] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTe1ogqEQlZnpyQAsW1FxAAAAY0"]
[Tue Dec 09 13:37:54.698128 2025] [:error] [pid 7287:tid 7294] [client 66.249.64.101:60049] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTe1sv3UQf3HGDaVS5PpoAAAAAU"]
[Tue Dec 09 13:38:21.026306 2025] [:error] [pid 12069:tid 12073] [client 66.249.64.101:52458] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTe1zWwNDNgPF6LHYDTArQAAAEI"]
[Tue Dec 09 13:42:09.769357 2025] [:error] [pid 7324:tid 7337] [client 66.249.64.101:63575] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTe2sef70zXc9zH4rTLDEAAAAUg"]
[Tue Dec 09 13:58:34.305904 2025] [:error] [pid 7325:tid 7363] [client 66.179.210.205:36750] [client 66.179.210.205] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 66.179.210.205, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTe6igqEQlZnpyQAsW1LggAAAYc"]
[Tue Dec 09 14:16:30.858710 2025] [:error] [pid 59388:tid 59393] [client 66.249.64.101:38915] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTe-vt7acjYK4IXwCBWRwwAAAIM"]
[Tue Dec 09 14:16:59.014776 2025] [:error] [pid 7324:tid 7342] [client 66.249.64.101:38427] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTe-2-f70zXc9zH4rTLKogAAAU0"]
[Tue Dec 09 14:24:10.176835 2025] [:error] [pid 7325:tid 7367] [client 66.249.64.101:36588] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTfAigqEQlZnpyQAsW1RKwAAAYs"]
[Tue Dec 09 14:24:26.596798 2025] [:error] [pid 7287:tid 7303] [client 66.249.64.101:43839] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTfAmv3UQf3HGDaVS5P1kAAAAA4"]
[Tue Dec 09 14:24:35.339360 2025] [:error] [pid 7382:tid 7402] [client 66.249.64.101:59900] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTfAoydEXhamGkzwq-goegAAAcg"]
[Tue Dec 09 14:24:44.153778 2025] [:error] [pid 12069:tid 12083] [client 66.249.64.101:53304] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTfArGwNDNgPF6LHYDTRiQAAAEw"]
[Tue Dec 09 14:27:03.355503 2025] [:error] [pid 59388:tid 59410] [client 66.249.64.101:36353] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTfBN97acjYK4IXwCBWVUgAAAJQ"]
[Tue Dec 09 14:27:14.171702 2025] [:error] [pid 59388:tid 59393] [client 66.249.64.101:47036] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTfBQt7acjYK4IXwCBWVYgAAAIM"]
[Tue Dec 09 14:27:25.003601 2025] [:error] [pid 12069:tid 12092] [client 66.249.64.101:48399] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTfBTWwNDNgPF6LHYDTSGAAAAFU"]
[Tue Dec 09 14:27:46.648644 2025] [:error] [pid 12069:tid 12091] [client 66.249.64.101:36462] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTfBYmwNDNgPF6LHYDTSKwAAAFQ"]
[Tue Dec 09 14:30:57.504412 2025] [:error] [pid 12069:tid 12078] [client 66.249.64.101:41067] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTfCIWwNDNgPF6LHYDTTYQAAAEc"]
[Tue Dec 09 14:31:26.972340 2025] [:error] [pid 59388:tid 59403] [client 66.249.64.101:42558] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTfCPt7acjYK4IXwCBWW2wAAAI0"]
[Tue Dec 09 14:31:35.629018 2025] [:error] [pid 7287:tid 7297] [client 66.249.64.101:60650] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTfCR_3UQf3HGDaVS5P2vQAAAAg"]
[Tue Dec 09 14:35:17.917184 2025] [:error] [pid 7287:tid 7313] [client 66.249.64.101:41339] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTfDJf3UQf3HGDaVS5P3twAAABg"]
[Tue Dec 09 14:35:28.161629 2025] [:error] [pid 7382:tid 7405] [client 66.249.64.101:64489] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTfDMCdEXhamGkzwq-grOwAAAcs"]
[Tue Dec 09 14:35:43.893120 2025] [:error] [pid 7325:tid 7380] [client 66.249.64.101:45765] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTfDPwqEQlZnpyQAsW1TcAAAAZg"]
[Tue Dec 09 14:35:52.693113 2025] [:error] [pid 59388:tid 59396] [client 66.249.64.101:64989] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTfDSN7acjYK4IXwCBWYVQAAAIY"]
[Tue Dec 09 14:39:13.605842 2025] [:error] [pid 7325:tid 7372] [client 66.249.64.101:53021] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTfEEQqEQlZnpyQAsW1U3QAAAZA"]
[Tue Dec 09 14:39:32.768617 2025] [:error] [pid 7325:tid 7365] [client 66.249.64.101:52627] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTfEJAqEQlZnpyQAsW1U_gAAAYk"]
[Tue Dec 09 14:39:41.514458 2025] [:error] [pid 7324:tid 7340] [client 66.249.64.101:47512] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTfELef70zXc9zH4rTLPAAAAAUs"]
[Tue Dec 09 14:39:57.989328 2025] [:error] [pid 7324:tid 7341] [client 66.249.64.101:59344] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTfEPef70zXc9zH4rTLPBwAAAUw"]
[Tue Dec 09 14:42:50.329229 2025] [:error] [pid 7325:tid 7366] [client 66.249.64.101:61709] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTfE6gqEQlZnpyQAsW1VrgAAAYo"]
[Tue Dec 09 14:43:01.779524 2025] [:error] [pid 59388:tid 59402] [client 66.249.64.101:39882] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTfE9d7acjYK4IXwCBWbrwAAAIw"]
[Tue Dec 09 14:43:07.167804 2025] [:error] [pid 7382:tid 7401] [client 66.249.64.101:54980] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTfE-ydEXhamGkzwq-gsogAAAcc"]
[Tue Dec 09 14:43:24.527055 2025] [:error] [pid 7382:tid 7397] [client 66.249.64.101:50481] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTfFDCdEXhamGkzwq-gstAAAAcM"]
[Tue Dec 09 14:43:35.415264 2025] [:error] [pid 7287:tid 7295] [client 66.249.64.101:56776] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTfFF_3UQf3HGDaVS5P47wAAAAY"]
[Tue Dec 09 14:46:10.805898 2025] [:error] [pid 59388:tid 59392] [client 66.249.64.101:47647] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTfFst7acjYK4IXwCBWc2gAAAII"]
[Tue Dec 09 14:46:25.020615 2025] [:error] [pid 7325:tid 7367] [client 66.249.64.101:44258] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTfFwQqEQlZnpyQAsW1WXAAAAYs"]
[Tue Dec 09 14:46:32.440339 2025] [:error] [pid 7325:tid 7372] [client 66.249.64.101:64597] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTfFyAqEQlZnpyQAsW1WXwAAAZA"]
[Tue Dec 09 14:46:48.755469 2025] [:error] [pid 59388:tid 59402] [client 66.249.64.101:49331] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTfF2N7acjYK4IXwCBWdIgAAAIw"]
[Tue Dec 09 14:53:48.830975 2025] [:error] [pid 12069:tid 12095] [client 45.138.16.233:50535] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTfHfGwNDNgPF6LHYDTcIQAAAFg"]
[Tue Dec 09 14:53:48.835254 2025] [:error] [pid 7325:tid 7357] [client 45.138.16.233:60361] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aTfHfAqEQlZnpyQAsW1Z7QAAAYE"], referer: www.google.com
[Tue Dec 09 14:53:48.835566 2025] [:error] [pid 7325:tid 7362] [client 45.138.16.233:60046] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "aTfHfAqEQlZnpyQAsW1Z7gAAAYY"]
[Tue Dec 09 14:53:48.835786 2025] [:error] [pid 7382:tid 7416] [client 45.138.16.233:60400] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aTfHfCdEXhamGkzwq-gxcAAAAdY"], referer: www.google.com
[Tue Dec 09 14:53:48.837753 2025] [:error] [pid 59388:tid 59391] [client 45.138.16.233:60468] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-plain.php"] [unique_id "aTfHfN7acjYK4IXwCBWibgAAAIE"], referer: www.google.com
[Tue Dec 09 14:53:49.423922 2025] [:error] [pid 7382:tid 7397] [client 45.138.16.233:51589] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTfHfSdEXhamGkzwq-gxcwAAAcM"]
[Tue Dec 09 14:53:49.438939 2025] [:error] [pid 7324:tid 7349] [client 45.138.16.233:51668] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aTfHfef70zXc9zH4rTLTxQAAAVQ"], referer: www.google.com
[Tue Dec 09 14:53:49.445895 2025] [:error] [pid 7324:tid 7340] [client 45.138.16.233:62104] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "aTfHfef70zXc9zH4rTLTxwAAAUs"]
[Tue Dec 09 14:53:49.449414 2025] [:error] [pid 7324:tid 7343] [client 45.138.16.233:62107] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aTfHfef70zXc9zH4rTLTyAAAAU4"], referer: www.google.com
[Tue Dec 09 14:53:49.455956 2025] [:error] [pid 59388:tid 59414] [client 45.138.16.233:62111] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-plain.php"] [unique_id "aTfHfd7acjYK4IXwCBWicwAAAJg"], referer: www.google.com
[Tue Dec 09 14:53:50.031795 2025] [:error] [pid 59388:tid 59411] [client 45.138.16.233:58396] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTfHft7acjYK4IXwCBWifQAAAJU"]
[Tue Dec 09 14:53:50.037938 2025] [:error] [pid 7382:tid 7417] [client 45.138.16.233:58425] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aTfHfidEXhamGkzwq-gxfgAAAdc"], referer: www.google.com
[Tue Dec 09 14:53:50.043662 2025] [:error] [pid 7287:tid 7307] [client 45.138.16.233:58445] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "aTfHfv3UQf3HGDaVS5P9agAAABI"]
[Tue Dec 09 14:53:50.044002 2025] [:error] [pid 7382:tid 7413] [client 45.138.16.233:61368] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aTfHfidEXhamGkzwq-gxgAAAAdM"], referer: www.google.com
[Tue Dec 09 14:53:50.057074 2025] [:error] [pid 7382:tid 7394] [client 45.138.16.233:61381] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-plain.php"] [unique_id "aTfHfidEXhamGkzwq-gxgQAAAcA"], referer: www.google.com
[Tue Dec 09 14:53:50.653503 2025] [:error] [pid 7382:tid 7416] [client 45.138.16.233:60736] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aTfHfidEXhamGkzwq-gxhAAAAdY"], referer: www.google.com
[Tue Dec 09 14:53:50.654993 2025] [:error] [pid 7324:tid 7339] [client 45.138.16.233:60911] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "aTfHfuf70zXc9zH4rTLTygAAAUo"]
[Tue Dec 09 14:53:50.656412 2025] [:error] [pid 59388:tid 59401] [client 45.138.16.233:60910] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTfHft7acjYK4IXwCBWihwAAAIs"]
[Tue Dec 09 14:53:50.656997 2025] [:error] [pid 7382:tid 7396] [client 45.138.16.233:60927] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-plain.php"] [unique_id "aTfHfidEXhamGkzwq-gxhQAAAcI"], referer: www.google.com
[Tue Dec 09 14:53:50.659157 2025] [:error] [pid 12069:tid 12090] [client 45.138.16.233:60919] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aTfHfmwNDNgPF6LHYDTcIwAAAFM"], referer: www.google.com
[Tue Dec 09 14:53:51.276243 2025] [:error] [pid 59388:tid 59396] [client 45.138.16.233:59772] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "aTfHf97acjYK4IXwCBWiiwAAAIY"]
[Tue Dec 09 14:53:51.280321 2025] [:error] [pid 59388:tid 59402] [client 45.138.16.233:59775] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aTfHf97acjYK4IXwCBWijAAAAIw"], referer: www.google.com
[Tue Dec 09 14:53:51.296569 2025] [:error] [pid 7287:tid 7293] [client 45.138.16.233:59783] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-plain.php"] [unique_id "aTfHf_3UQf3HGDaVS5P9bwAAAAQ"], referer: www.google.com
[Tue Dec 09 14:53:51.297224 2025] [:error] [pid 7324:tid 7335] [client 45.138.16.233:59779] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aTfHf-f70zXc9zH4rTLT0AAAAUY"], referer: www.google.com
[Tue Dec 09 14:53:51.300537 2025] [:error] [pid 7325:tid 7380] [client 45.138.16.233:59781] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTfHfwqEQlZnpyQAsW1Z9gAAAZg"]
[Tue Dec 09 14:53:52.485687 2025] [:error] [pid 59388:tid 59407] [client 45.138.16.233:61908] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aTfHgN7acjYK4IXwCBWimwAAAJE"], referer: www.google.com
[Tue Dec 09 14:53:52.498586 2025] [:error] [pid 7324:tid 7337] [client 45.138.16.233:61926] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aTfHgOf70zXc9zH4rTLT3QAAAUg"], referer: www.google.com
[Tue Dec 09 14:53:53.704957 2025] [:error] [pid 7324:tid 7338] [client 45.138.16.233:61144] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aTfHgef70zXc9zH4rTLT6wAAAUk"], referer: www.google.com
[Tue Dec 09 14:53:53.708386 2025] [:error] [pid 7325:tid 7361] [client 45.138.16.233:61109] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aTfHgQqEQlZnpyQAsW1Z_QAAAYU"], referer: www.google.com
[Tue Dec 09 14:53:54.897206 2025] [:error] [pid 7287:tid 7299] [client 45.138.16.233:61001] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aTfHgv3UQf3HGDaVS5P9hgAAAAo"], referer: www.google.com
[Tue Dec 09 14:53:54.897300 2025] [:error] [pid 7382:tid 7413] [client 45.138.16.233:50637] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aTfHgidEXhamGkzwq-gxlgAAAdM"], referer: www.google.com
[Tue Dec 09 14:53:56.114005 2025] [:error] [pid 7287:tid 7305] [client 45.138.16.233:61575] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aTfHhP3UQf3HGDaVS5P9hwAAABA"], referer: www.google.com
[Tue Dec 09 14:53:56.125485 2025] [:error] [pid 12069:tid 12094] [client 45.138.16.233:61579] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aTfHhGwNDNgPF6LHYDTcTwAAAFc"], referer: www.google.com
[Tue Dec 09 14:53:57.323082 2025] [:error] [pid 7324:tid 7333] [client 45.138.16.233:61896] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aTfHhef70zXc9zH4rTLUDQAAAUQ"], referer: www.google.com
[Tue Dec 09 14:53:57.352717 2025] [:error] [pid 7382:tid 7407] [client 45.138.16.233:59769] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aTfHhSdEXhamGkzwq-gxtwAAAc0"], referer: www.google.com
[Tue Dec 09 14:55:28.936022 2025] [:error] [pid 59388:tid 59396] [client 103.77.106.81:53108] [client 103.77.106.81] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paramountbaldivis.com"] [uri "/sftp-config.json"] [unique_id "aTfH4N7acjYK4IXwCBWlkgAAAIY"]
[Tue Dec 09 14:55:32.266004 2025] [:error] [pid 59388:tid 59391] [client 103.77.106.81:51601] [client 103.77.106.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/.vscode/sftp.json"] [unique_id "aTfH5N7acjYK4IXwCBWllwAAAIE"]
[Tue Dec 09 15:05:31.796163 2025] [:error] [pid 12069:tid 12086] [client 109.123.255.246:42324] [client 109.123.255.246] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 109.123.255.246, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTfKO2wNDNgPF6LHYDTh0gAAAE8"]
[Tue Dec 09 15:37:44.522249 2025] [:error] [pid 12069:tid 12074] [client 66.249.64.101:39562] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTfRyGwNDNgPF6LHYDTr4gAAAEM"]
[Tue Dec 09 15:45:31.589188 2025] [:error] [pid 59388:tid 59412] [client 66.249.64.101:36043] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTfTm97acjYK4IXwCBW26wAAAJY"]
[Tue Dec 09 15:45:52.293779 2025] [:error] [pid 7325:tid 7359] [client 66.249.64.101:42501] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTfTsAqEQlZnpyQAsW1mnQAAAYM"]
[Tue Dec 09 16:04:53.479696 2025] [:error] [pid 30500:tid 30570] [client 66.249.64.101:55090] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTfYJa2eIIK3JPWHCXVwowAAAY0"]
[Tue Dec 09 16:05:13.834995 2025] [:error] [pid 30591:tid 30608] [client 66.249.64.101:51113] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTfYORG-g76drVdWQUUbGAAAAE4"]
[Tue Dec 09 16:05:31.753617 2025] [:error] [pid 30499:tid 30553] [client 66.249.64.101:60601] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTfYS00x3OqZTOPp7cmdaQAAAVc"]
[Tue Dec 09 16:08:46.528691 2025] [:error] [pid 30591:tid 30608] [client 79.127.136.221:4209] [client 79.127.136.221] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paramountbaldivis.com"] [uri "/.git/index"] [unique_id "aTfZDhG-g76drVdWQUUcWAAAAE4"]
[Tue Dec 09 16:13:56.106804 2025] [:error] [pid 30591:tid 30609] [client 46.105.124.216:39754] [client 46.105.124.216] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 46.105.124.216, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTfaRBG-g76drVdWQUUfjAAAAE8"]
[Tue Dec 09 16:17:25.882566 2025] [:error] [pid 30498:tid 30509] [client 66.249.64.101:39012] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTfbFR2mcZJQ5qP_RC3q8QAAAAc"]
[Tue Dec 09 16:17:42.378832 2025] [:error] [pid 30499:tid 30545] [client 66.249.64.101:54878] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTfbJk0x3OqZTOPp7cmhpAAAAU8"]
[Tue Dec 09 17:28:37.388975 2025] [:error] [pid 36456:tid 36468] [client 65.38.25.38:49938] [client 65.38.25.38] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 65.38.25.38, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTfrxR0pAnOyfXl_v43lnAAAAIo"]
[Tue Dec 09 18:42:33.903257 2025] [:error] [pid 30591:tid 30597] [client 59.125.102.226:52184] [client 59.125.102.226] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 59.125.102.226, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTf9GRG-g76drVdWQUVXdwAAAEM"]
[Tue Dec 09 19:09:05.164166 2025] [:error] [pid 30500:tid 30566] [client 36.111.67.189:40900] [client 36.111.67.189] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.paramountbaldivis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.paramountbaldivis.com"] [uri "/"] [unique_id "aTgDUa2eIIK3JPWHCXW5TwAAAYk"]
[Tue Dec 09 19:53:49.804590 2025] [:error] [pid 30500:tid 30559] [client 35.192.77.233:57494] [client 35.192.77.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTgNza2eIIK3JPWHCXXMNAAAAYI"]
[Tue Dec 09 19:53:50.227779 2025] [:error] [pid 30498:tid 30515] [client 35.192.77.233:61647] [client 35.192.77.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTgNzh2mcZJQ5qP_RC0m8AAAAA0"]
[Tue Dec 09 19:53:50.664257 2025] [:error] [pid 30500:tid 30565] [client 35.192.77.233:60795] [client 35.192.77.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aTgNzq2eIIK3JPWHCXXMYwAAAYg"]
[Tue Dec 09 20:01:04.651673 2025] [:error] [pid 36456:tid 36481] [client 45.82.122.124:19280] [client 45.82.122.124] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.82.122.124, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTgPgB0pAnOyfXl_v40fKQAAAJc"]
[Tue Dec 09 21:18:38.848316 2025] [:error] [pid 5276:tid 5298] [client 213.168.176.42:60692] [client 213.168.176.42] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 213.168.176.42, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTghrktSXwbewdwyu-1-FQAAANQ"]
[Tue Dec 09 22:35:29.810477 2025] [:error] [pid 30498:tid 30502] [client 34.151.198.67:59974] [client 34.151.198.67] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 34.151.198.67, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTgzsR2mcZJQ5qP_RC1ZSgAAAAA"]
[Tue Dec 09 22:49:24.145234 2025] [:error] [pid 30498:tid 30519] [client 144.6.171.46:46776] [client 144.6.171.46] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.6.171.46, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTg29B2mcZJQ5qP_RC1ebQAAABE"]
[Tue Dec 09 23:39:28.311255 2025] [:error] [pid 30498:tid 30516] [client 103.65.138.38:58414] [client 103.65.138.38] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.65.138.38, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aThCsB2mcZJQ5qP_RC1u2AAAAA4"]
[Tue Dec 09 23:39:43.327775 2025] [:error] [pid 36456:tid 36473] [client 103.65.138.38:34420] [client 103.65.138.38] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.65.138.38, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aThCvx0pAnOyfXl_v42JzgAAAI8"]
[Tue Dec 09 23:52:05.893425 2025] [:error] [pid 30500:tid 30581] [client 158.220.99.49:37908] [client 158.220.99.49] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 158.220.99.49, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aThFpa2eIIK3JPWHCXU29gAAAZg"]
[Wed Dec 10 01:06:18.686641 2025] [:error] [pid 2366:tid 2376] [client 121.43.194.252:43484] [client 121.43.194.252] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 121.43.194.252, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aThXCkAeBjkmsNRkd1NUDAAAAMg"]
[Wed Dec 10 01:14:57.116292 2025] [:error] [pid 2366:tid 2385] [client 79.127.136.221:61595] [client 79.127.136.221] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paramountbaldivis.com"] [uri "/.git/index"] [unique_id "aThZEUAeBjkmsNRkd1NYoQAAANE"]
[Wed Dec 10 01:30:13.683976 2025] [:error] [pid 2277:tid 2287] [client 36.111.67.189:54739] [client 36.111.67.189] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||paramountbaldivis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aThcpYWGo731r6eS-w5YUwAAAAU"]
[Wed Dec 10 02:20:41.929802 2025] [:error] [pid 37041:tid 37064] [client 116.204.0.153:35310] [client 116.204.0.153] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 116.204.0.153, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aThoebuffDW8UzBwa1bDMQAAAFU"]
[Wed Dec 10 03:34:23.941430 2025] [:error] [pid 59072:tid 59098] [client 34.87.28.111:56242] [client 34.87.28.111] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 34.87.28.111, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTh5v3xRLkyu-SeVm2YuzAAAANg"]
[Wed Dec 10 04:28:28.309199 2025] [:error] [pid 11354:tid 11373] [client 170.39.213.43:53108] [client 170.39.213.43] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 170.39.213.43, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aTiGbO2TFO6mVSqWP8TkMgAAANA"], referer: http://paramountbaldivis.com
[Wed Dec 10 04:32:37.640289 2025] [:error] [pid 11268:tid 11342] [client 162.240.97.19:36572] [client 162.240.97.19] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 162.240.97.19, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aTiHZbbpLcj9WqyQndzpLgAAAJI"], referer: http://paramountbaldivis.com
[Wed Dec 10 04:36:59.510013 2025] [:error] [pid 11354:tid 11380] [client 188.166.62.194:56748] [client 188.166.62.194] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 188.166.62.194, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aTiIa-2TFO6mVSqWP8TpBgAAANc"], referer: http://paramountbaldivis.com
[Wed Dec 10 04:41:21.848692 2025] [:error] [pid 11266:tid 11285] [client 69.16.238.180:38036] [client 69.16.238.180] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 69.16.238.180, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aTiJcSXL_Qb0Ip3FW3l1SAAAAA8"], referer: http://paramountbaldivis.com
[Wed Dec 10 04:45:15.787857 2025] [:error] [pid 11354:tid 11363] [client 163.61.60.31:33834] [client 163.61.60.31] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 163.61.60.31, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTiKW-2TFO6mVSqWP8Tt8QAAAMY"]
[Wed Dec 10 04:45:36.975892 2025] [:error] [pid 11266:tid 11285] [client 92.205.229.150:43528] [client 92.205.229.150] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 92.205.229.150, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aTiKcCXL_Qb0Ip3FW3l2ogAAAA8"], referer: http://paramountbaldivis.com
[Wed Dec 10 04:49:53.161191 2025] [:error] [pid 11267:tid 11317] [client 51.81.207.12:54648] [client 51.81.207.12] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 51.81.207.12, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aTiLcYY2npWNIVl2IDx8SQAAAFQ"], referer: http://paramountbaldivis.com
[Wed Dec 10 04:54:34.987284 2025] [:error] [pid 11267:tid 11317] [client 72.167.46.195:40242] [client 72.167.46.195] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 72.167.46.195, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aTiMioY2npWNIVl2IDx-kwAAAFQ"], referer: http://paramountbaldivis.com
[Wed Dec 10 05:06:23.827957 2025] [:error] [pid 11268:tid 11343] [client 103.3.246.11:59756] [client 103.3.246.11] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.3.246.11, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTiPT7bpLcj9WqyQndz3KQAAAJM"]
[Wed Dec 10 05:06:29.566169 2025] [:error] [pid 11267:tid 11307] [client 103.3.246.11:60496] [client 103.3.246.11] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.3.246.11, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTiPVYY2npWNIVl2IDyDAQAAAEo"]
[Wed Dec 10 05:08:46.346801 2025] [:error] [pid 11354:tid 11367] [client 14.192.25.106:55080] [client 14.192.25.106] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 14.192.25.106, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aTiP3u2TFO6mVSqWP8T7LAAAAMo"], referer: http://paramountbaldivis.com
[Wed Dec 10 05:18:25.107914 2025] [:error] [pid 11354:tid 11374] [client 137.184.16.203:55268] [client 137.184.16.203] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 137.184.16.203, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aTiSIe2TFO6mVSqWP8QCCgAAANE"], referer: http://paramountbaldivis.com
[Wed Dec 10 05:23:19.263675 2025] [:error] [pid 11268:tid 11325] [client 114.215.206.33:40956] [client 114.215.206.33] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 114.215.206.33, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aTiTR7bpLcj9WqyQndwAMwAAAIE"], referer: http://paramountbaldivis.com
[Wed Dec 10 05:33:14.176915 2025] [:error] [pid 11268:tid 11331] [client 135.125.183.119:58308] [client 135.125.183.119] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 135.125.183.119, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aTiVmrbpLcj9WqyQndwEngAAAIc"], referer: http://paramountbaldivis.com
[Wed Dec 10 05:38:01.736752 2025] [:error] [pid 11354:tid 11377] [client 89.46.107.133:34554] [client 89.46.107.133] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 89.46.107.133, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aTiWue2TFO6mVSqWP8QMaQAAANQ"], referer: http://paramountbaldivis.com
[Wed Dec 10 05:52:22.913293 2025] [:error] [pid 11354:tid 11381] [client 133.125.52.204:47528] [client 133.125.52.204] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 133.125.52.204, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aTiaFu2TFO6mVSqWP8QSbQAAANg"], referer: http://paramountbaldivis.com
[Wed Dec 10 06:00:01.224274 2025] [:error] [pid 11267:tid 11305] [client 178.33.162.49:59628] [client 178.33.162.49] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 178.33.162.49, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTib4YY2npWNIVl2IDyYBAAAAEg"]
[Wed Dec 10 06:01:54.785599 2025] [:error] [pid 11267:tid 11306] [client 128.199.23.132:46656] [client 128.199.23.132] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 128.199.23.132, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aTicUoY2npWNIVl2IDyYjwAAAEk"], referer: http://paramountbaldivis.com
[Wed Dec 10 06:06:45.312492 2025] [:error] [pid 4155:tid 4172] [client 8.137.149.112:40796] [client 8.137.149.112] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 8.137.149.112, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aTiddRaQ_NfzxmAbMq5PlAAAAQ8"], referer: http://paramountbaldivis.com
[Wed Dec 10 06:16:08.444718 2025] [:error] [pid 16566:tid 16583] [client 81.88.53.43:43606] [client 81.88.53.43] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 81.88.53.43, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aTifqCEgzB1153EFuAbHMgAAAU8"], referer: http://paramountbaldivis.com
[Wed Dec 10 06:20:58.032451 2025] [:error] [pid 11267:tid 11312] [client 8.137.149.112:53850] [client 8.137.149.112] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 8.137.149.112, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aTigyoY2npWNIVl2IDyfxgAAAE8"], referer: http://paramountbaldivis.com
[Wed Dec 10 06:30:19.688526 2025] [:error] [pid 11354:tid 11373] [client 135.125.183.119:52762] [client 135.125.183.119] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 135.125.183.119, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aTii--2TFO6mVSqWP8QhNAAAANA"], referer: http://paramountbaldivis.com
[Wed Dec 10 06:35:11.251438 2025] [:error] [pid 16597:tid 16649] [client 35.247.159.133:56150] [client 35.247.159.133] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.247.159.133, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aTikH24Hlu0QtpUGkRREdwAAAdY"], referer: http://paramountbaldivis.com
[Wed Dec 10 06:39:55.412330 2025] [:error] [pid 21356:tid 21382] [client 68.178.220.63:37708] [client 68.178.220.63] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 68.178.220.63, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aTilO6fG7wIA5S25SldYigAAAtc"], referer: http://paramountbaldivis.com
[Wed Dec 10 06:44:44.065022 2025] [:error] [pid 21255:tid 21265] [client 217.107.219.186:41818] [client 217.107.219.186] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 217.107.219.186, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aTimXPOw-vgCwe7hEWEOcgAAAgc"], referer: http://paramountbaldivis.com
[Wed Dec 10 06:54:16.522516 2025] [:error] [pid 11354:tid 11374] [client 151.80.151.56:58856] [client 151.80.151.56] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 151.80.151.56, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aTiomO2TFO6mVSqWP8QlnQAAANE"], referer: http://paramountbaldivis.com
[Wed Dec 10 06:59:08.009421 2025] [:error] [pid 16596:tid 16602] [client 8.145.33.99:25556] [client 8.145.33.99] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 8.145.33.99, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aTipvHBe21fHOHH2RQoOlAAAAYI"], referer: http://paramountbaldivis.com
[Wed Dec 10 06:59:16.939356 2025] [:error] [pid 11266:tid 11284] [client 45.148.10.154:52038] [client 45.148.10.154] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paramountbaldivis.com"] [uri "/.git/config"] [unique_id "aTipxCXL_Qb0Ip3FW3mjnwAAAA4"]
[Wed Dec 10 07:04:00.150040 2025] [:error] [pid 21327:tid 21329] [client 78.46.40.28:45782] [client 78.46.40.28] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 78.46.40.28, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aTiq4Nuj_E2YnwjFG09YXwAAAoA"], referer: http://paramountbaldivis.com
[Wed Dec 10 07:08:55.702834 2025] [:error] [pid 16596:tid 16620] [client 82.221.129.40:40694] [client 82.221.129.40] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 82.221.129.40, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aTisB3Be21fHOHH2RQoQogAAAZQ"], referer: http://paramountbaldivis.com
[Wed Dec 10 07:13:52.792600 2025] [:error] [pid 11354:tid 11370] [client 114.215.206.33:40802] [client 114.215.206.33] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 114.215.206.33, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aTitMO2TFO6mVSqWP8QokwAAAM0"], referer: http://paramountbaldivis.com
[Wed Dec 10 07:15:45.152942 2025] [:error] [pid 21255:tid 21270] [client 164.132.169.114:43506] [client 164.132.169.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 164.132.169.114, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTitofOw-vgCwe7hEWEZKAAAAgw"]
[Wed Dec 10 07:23:38.127612 2025] [:error] [pid 11266:tid 11282] [client 132.148.179.59:37644] [client 132.148.179.59] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 132.148.179.59, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aTiveiXL_Qb0Ip3FW3mpegAAAAw"], referer: http://paramountbaldivis.com
[Wed Dec 10 08:37:17.791441 2025] [:error] [pid 21291:tid 21300] [client 54.38.195.241:48542] [client 54.38.195.241] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.38.195.241, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTjAvZreiUgLUUTTKJdV5wAAAkc"]
[Wed Dec 10 09:39:55.237892 2025] [:error] [pid 16596:tid 16606] [client 132.148.177.194:36496] [client 132.148.177.194] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 132.148.177.194, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aTjPa3Be21fHOHH2RQo4KgAAAYY"], referer: http://paramountbaldivis.com
[Wed Dec 10 09:53:33.761165 2025] [:error] [pid 11266:tid 11276] [client 51.178.251.196:41246] [client 51.178.251.196] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 51.178.251.196, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTjSnSXL_Qb0Ip3FW3nLpQAAAAY"]
[Wed Dec 10 10:53:06.161416 2025] [:error] [pid 11266:tid 11270] [client 182.253.58.115:11447] [client 182.253.58.115] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 182.253.58.115, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aTjgkiXL_Qb0Ip3FW3nXiwAAAAA"], referer: http://paramountbaldivis.com
[Wed Dec 10 10:58:23.638348 2025] [:error] [pid 21291:tid 21305] [client 89.46.106.213:47738] [client 89.46.106.213] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 89.46.106.213, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aTjhz5reiUgLUUTTKJdrwAAAAkw"], referer: http://paramountbaldivis.com
[Wed Dec 10 11:03:52.602209 2025] [:error] [pid 16566:tid 16574] [client 88.99.148.122:35342] [client 88.99.148.122] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 88.99.148.122, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTjjGCEgzB1153EFuAYR3wAAAUY"]
[Wed Dec 10 11:08:48.337173 2025] [:error] [pid 16597:tid 16628] [client 147.135.37.185:49354] [client 147.135.37.185] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 147.135.37.185, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aTjkQG4Hlu0QtpUGkRR01wAAAcE"], referer: http://paramountbaldivis.com
[Wed Dec 10 12:11:36.591949 2025] [:error] [pid 21327:tid 21334] [client 84.247.168.35:48242] [client 84.247.168.35] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 84.247.168.35, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTjy-Nuj_E2YnwjFG0-LAQAAAoU"]
[Wed Dec 10 13:21:08.495675 2025] [:error] [pid 21327:tid 21347] [client 134.122.21.213:55292] [client 134.122.21.213] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 134.122.21.213, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTkDRNuj_E2YnwjFG0-WKQAAApI"]
[Wed Dec 10 14:02:07.345142 2025] [:error] [pid 11266:tid 11274] [client 106.200.9.214:1834] [client 106.200.9.214] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.200.9.214, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aTkM3yXL_Qb0Ip3FW3n7XAAAAAQ"]
[Wed Dec 10 14:27:07.181803 2025] [:error] [pid 16566:tid 16578] [client 192.99.144.176:38080] [client 192.99.144.176] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.99.144.176, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTkSuyEgzB1153EFuAZJewAAAUo"]
[Wed Dec 10 16:45:43.559287 2025] [:error] [pid 36977:tid 37045] [client 149.202.92.141:56846] [client 149.202.92.141] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 149.202.92.141, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTkzN8c-JLl-uoL-Au6DygAAAEs"]
[Wed Dec 10 17:26:24.916625 2025] [:error] [pid 49095:tid 49121] [client 103.200.22.140:46600] [client 103.200.22.140] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.200.22.140, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTk8wMorr4Jt2Tfx_EaiPgAAAVg"]
[Wed Dec 10 17:26:29.375108 2025] [:error] [pid 49095:tid 49103] [client 103.200.22.140:46600] [client 103.200.22.140] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.200.22.140, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTk8xcorr4Jt2Tfx_EaiRwAAAUY"]
[Wed Dec 10 17:59:44.677292 2025] [:error] [pid 49095:tid 49119] [client 83.136.145.99:33545] [client 83.136.145.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 83.136.145.99, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTlEkMorr4Jt2Tfx_Ea1sAAAAVY"]
[Wed Dec 10 19:12:28.048660 2025] [:error] [pid 46868:tid 46872] [client 59.125.102.142:33178] [client 59.125.102.142] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 59.125.102.142, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTlVnI3NdlN2GOOyBjFk1gAAAQI"]
[Wed Dec 10 19:27:55.218950 2025] [:error] [pid 36976:tid 37007] [client 104.131.13.147:49650] [client 104.131.13.147] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.131.13.147, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTlZOySpHW5KVaY9tJmUDwAAAMA"]
[Wed Dec 10 19:27:57.330637 2025] [:error] [pid 49095:tid 49106] [client 104.131.13.147:57838] [client 104.131.13.147] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.131.13.147, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTlZPcorr4Jt2Tfx_EbT6wAAAUk"]
[Wed Dec 10 19:42:17.468182 2025] [:error] [pid 36977:tid 37042] [client 49.233.45.47:50368] [client 49.233.45.47] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.paramountbaldivis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.paramountbaldivis.com"] [uri "/"] [unique_id "aTlcmcc-JLl-uoL-Au6xNgAAAEg"]
[Wed Dec 10 19:51:57.784851 2025] [:error] [pid 49095:tid 49112] [client 104.131.13.147:64109] [client 104.131.13.147] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.131.13.147, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTle3corr4Jt2Tfx_Ebb8AAAAU8"]
[Wed Dec 10 20:27:33.133243 2025] [:error] [pid 36976:tid 37020] [client 207.244.254.77:44696] [client 207.244.254.77] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 207.244.254.77, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTlnNSSpHW5KVaY9tJmlswAAAM0"]
[Wed Dec 10 21:41:46.273043 2025] [:error] [pid 49095:tid 49117] [client 154.38.173.241:58026] [client 154.38.173.241] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 154.38.173.241, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTl4msorr4Jt2Tfx_EYITAAAAVQ"]
[Wed Dec 10 22:11:27.460471 2025] [:error] [pid 49095:tid 49098] [client 4.194.10.78:47143] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/goods.php"] [unique_id "aTl_j8orr4Jt2Tfx_EYURwAAAUE"]
[Wed Dec 10 22:11:28.710823 2025] [:error] [pid 46868:tid 46877] [client 4.194.10.78:52543] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/goods.php"] [unique_id "aTl_kI3NdlN2GOOyBjGNcAAAAQc"]
[Wed Dec 10 22:11:29.714116 2025] [:error] [pid 49095:tid 49100] [client 4.194.10.78:47114] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/goods.php"] [unique_id "aTl_kcorr4Jt2Tfx_EYUSgAAAUM"]
[Wed Dec 10 22:11:31.004614 2025] [:error] [pid 49095:tid 49117] [client 4.194.10.78:64465] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/goods.php"] [unique_id "aTl_k8orr4Jt2Tfx_EYUTAAAAVQ"]
[Wed Dec 10 22:11:31.567404 2025] [:error] [pid 37062:tid 37065] [client 4.194.10.78:44548] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/index1.php"] [unique_id "aTl_kzB0I62HCw8Z5BRy5AAAAAE"]
[Wed Dec 10 22:11:32.841485 2025] [:error] [pid 37062:tid 37071] [client 4.194.10.78:42339] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/index1.php"] [unique_id "aTl_lDB0I62HCw8Z5BRy6AAAAAc"]
[Wed Dec 10 22:11:33.558111 2025] [:error] [pid 36975:tid 36988] [client 4.194.10.78:56347] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/index1.php"] [unique_id "aTl_ld_ZNQ3zMmb38BGAvAAAAIg"]
[Wed Dec 10 22:11:33.961900 2025] [:error] [pid 46868:tid 46890] [client 4.194.10.78:42352] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/index1.php"] [unique_id "aTl_lY3NdlN2GOOyBjGNdQAAARQ"]
[Wed Dec 10 22:11:34.277177 2025] [:error] [pid 37062:tid 37086] [client 4.194.10.78:64480] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/lock6.php"] [unique_id "aTl_ljB0I62HCw8Z5BRy6gAAABY"]
[Wed Dec 10 22:11:34.812596 2025] [:error] [pid 36976:tid 37022] [client 4.194.10.78:52503] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/lock6.php"] [unique_id "aTl_liSpHW5KVaY9tJnDuQAAAM8"]
[Wed Dec 10 22:11:35.354985 2025] [:error] [pid 49095:tid 49109] [client 4.194.10.78:52489] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/lock6.php"] [unique_id "aTl_l8orr4Jt2Tfx_EYUUQAAAUw"]
[Wed Dec 10 22:11:36.185474 2025] [:error] [pid 49095:tid 49116] [client 4.194.10.78:44579] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/lock6.php"] [unique_id "aTl_mMorr4Jt2Tfx_EYUVAAAAVM"]
[Wed Dec 10 22:11:37.008159 2025] [:error] [pid 49095:tid 49102] [client 4.194.10.78:44566] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/news.php"] [unique_id "aTl_mcorr4Jt2Tfx_EYUVwAAAUU"]
[Wed Dec 10 22:11:37.567840 2025] [:error] [pid 49095:tid 49117] [client 4.194.10.78:64449] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/news.php"] [unique_id "aTl_mcorr4Jt2Tfx_EYUWgAAAVQ"]
[Wed Dec 10 22:11:38.052607 2025] [:error] [pid 49095:tid 49114] [client 4.194.10.78:50533] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/news.php"] [unique_id "aTl_msorr4Jt2Tfx_EYUXAAAAVE"]
[Wed Dec 10 22:11:38.356943 2025] [:error] [pid 49095:tid 49121] [client 4.194.10.78:52464] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/news.php"] [unique_id "aTl_msorr4Jt2Tfx_EYUXgAAAVg"]
[Wed Dec 10 22:11:38.766654 2025] [:error] [pid 36975:tid 36987] [client 4.194.10.78:45208] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/bs1.php"] [unique_id "aTl_mt_ZNQ3zMmb38BGAvwAAAIc"]
[Wed Dec 10 22:11:39.292340 2025] [:error] [pid 49095:tid 49118] [client 4.194.10.78:50527] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/bs1.php"] [unique_id "aTl_m8orr4Jt2Tfx_EYUYQAAAVU"]
[Wed Dec 10 22:11:39.907387 2025] [:error] [pid 37062:tid 37080] [client 4.194.10.78:45243] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/bs1.php"] [unique_id "aTl_mzB0I62HCw8Z5BRy7AAAABA"]
[Wed Dec 10 22:11:40.798103 2025] [:error] [pid 46868:tid 46881] [client 4.194.10.78:59247] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/bs1.php"] [unique_id "aTl_nI3NdlN2GOOyBjGNfAAAAQs"]
[Wed Dec 10 22:11:41.771723 2025] [:error] [pid 36975:tid 36993] [client 4.194.10.78:45214] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/css/plugins.php"] [unique_id "aTl_nd_ZNQ3zMmb38BGAwgAAAI0"]
[Wed Dec 10 22:11:42.047845 2025] [:error] [pid 49095:tid 49117] [client 4.194.10.78:62520] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/css/plugins.php"] [unique_id "aTl_nsorr4Jt2Tfx_EYUawAAAVQ"]
[Wed Dec 10 22:11:42.298111 2025] [:error] [pid 49095:tid 49104] [client 4.194.10.78:62503] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/css/plugins.php"] [unique_id "aTl_nsorr4Jt2Tfx_EYUbQAAAUc"]
[Wed Dec 10 22:11:42.796643 2025] [:error] [pid 36977:tid 37042] [client 4.194.10.78:57104] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/css/plugins.php"] [unique_id "aTl_nsc-JLl-uoL-Au7SdwAAAEg"]
[Wed Dec 10 22:11:43.275230 2025] [:error] [pid 36977:tid 37054] [client 4.194.10.78:61388] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/themes.php"] [unique_id "aTl_n8c-JLl-uoL-Au7SeAAAAFQ"]
[Wed Dec 10 22:11:43.551806 2025] [:error] [pid 49095:tid 49106] [client 4.194.10.78:45583] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/themes.php"] [unique_id "aTl_n8orr4Jt2Tfx_EYUcQAAAUk"]
[Wed Dec 10 22:11:43.938216 2025] [:error] [pid 36976:tid 37022] [client 4.194.10.78:57429] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/themes.php"] [unique_id "aTl_nySpHW5KVaY9tJnDwAAAAM8"]
[Wed Dec 10 22:11:44.215795 2025] [:error] [pid 36977:tid 37044] [client 4.194.10.78:62512] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/themes.php"] [unique_id "aTl_oMc-JLl-uoL-Au7SeQAAAEo"]
[Wed Dec 10 22:11:44.705605 2025] [:error] [pid 36977:tid 37057] [client 4.194.10.78:57151] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/404.php"] [unique_id "aTl_oMc-JLl-uoL-Au7SegAAAFc"]
[Wed Dec 10 22:11:45.062364 2025] [:error] [pid 49095:tid 49099] [client 4.194.10.78:43490] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/404.php"] [unique_id "aTl_ocorr4Jt2Tfx_EYUdQAAAUI"]
[Wed Dec 10 22:11:45.391803 2025] [:error] [pid 49095:tid 49103] [client 4.194.10.78:29391] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/404.php"] [unique_id "aTl_ocorr4Jt2Tfx_EYUdgAAAUY"]
[Wed Dec 10 22:11:45.733801 2025] [:error] [pid 49095:tid 49114] [client 4.194.10.78:62517] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/404.php"] [unique_id "aTl_ocorr4Jt2Tfx_EYUegAAAVE"]
[Wed Dec 10 22:11:46.067804 2025] [:error] [pid 49095:tid 49109] [client 4.194.10.78:8258] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/index/function.php"] [unique_id "aTl_osorr4Jt2Tfx_EYUewAAAUw"]
[Wed Dec 10 22:11:46.482102 2025] [:error] [pid 49095:tid 49118] [client 4.194.10.78:43469] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/index/function.php"] [unique_id "aTl_osorr4Jt2Tfx_EYUfgAAAVU"]
[Wed Dec 10 22:11:46.754004 2025] [:error] [pid 49095:tid 49107] [client 4.194.10.78:61432] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/index/function.php"] [unique_id "aTl_osorr4Jt2Tfx_EYUgQAAAUo"]
[Wed Dec 10 22:11:47.019436 2025] [:error] [pid 37062:tid 37066] [client 4.194.10.78:42253] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/index/function.php"] [unique_id "aTl_ozB0I62HCw8Z5BRy8QAAAAI"]
[Wed Dec 10 22:11:47.271251 2025] [:error] [pid 49095:tid 49097] [client 4.194.10.78:42267] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-mail.php"] [unique_id "aTl_o8orr4Jt2Tfx_EYUhAAAAUA"]
[Wed Dec 10 22:11:47.598196 2025] [:error] [pid 49095:tid 49103] [client 4.194.10.78:43494] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-mail.php"] [unique_id "aTl_o8orr4Jt2Tfx_EYUhQAAAUY"]
[Wed Dec 10 22:11:48.102738 2025] [:error] [pid 36976:tid 37012] [client 4.194.10.78:42274] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-mail.php"] [unique_id "aTl_pCSpHW5KVaY9tJnDxQAAAMU"]
[Wed Dec 10 22:11:48.767476 2025] [:error] [pid 49095:tid 49121] [client 4.194.10.78:8289] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-mail.php"] [unique_id "aTl_pMorr4Jt2Tfx_EYUhwAAAVg"]
[Wed Dec 10 22:11:49.253710 2025] [:error] [pid 49095:tid 49109] [client 4.194.10.78:55271] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/1.php"] [unique_id "aTl_pcorr4Jt2Tfx_EYUiQAAAUw"]
[Wed Dec 10 22:11:49.730890 2025] [:error] [pid 36975:tid 36988] [client 4.194.10.78:55284] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/1.php"] [unique_id "aTl_pd_ZNQ3zMmb38BGAxgAAAIg"]
[Wed Dec 10 22:11:50.621947 2025] [:error] [pid 49095:tid 49107] [client 4.194.10.78:43382] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/1.php"] [unique_id "aTl_psorr4Jt2Tfx_EYUjQAAAUo"]
[Wed Dec 10 22:11:51.381043 2025] [:error] [pid 49095:tid 49114] [client 4.194.10.78:54742] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/1.php"] [unique_id "aTl_p8orr4Jt2Tfx_EYUkQAAAVE"]
[Wed Dec 10 22:11:52.095102 2025] [:error] [pid 36976:tid 37024] [client 4.194.10.78:55326] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ok.php"] [unique_id "aTl_qCSpHW5KVaY9tJnDyAAAANE"]
[Wed Dec 10 22:11:53.709738 2025] [:error] [pid 37062:tid 37069] [client 4.194.10.78:42731] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ok.php"] [unique_id "aTl_qTB0I62HCw8Z5BRzGQAAAAU"]
[Wed Dec 10 22:11:54.190288 2025] [:error] [pid 49095:tid 49108] [client 4.194.10.78:64339] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ok.php"] [unique_id "aTl_qsorr4Jt2Tfx_EYUnQAAAUs"]
[Wed Dec 10 22:11:54.549182 2025] [:error] [pid 36975:tid 36994] [client 4.194.10.78:46624] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ok.php"] [unique_id "aTl_qt_ZNQ3zMmb38BGAzAAAAI4"]
[Wed Dec 10 22:11:55.085461 2025] [:error] [pid 49095:tid 49099] [client 4.194.10.78:9028] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/js/fm.php"] [unique_id "aTl_q8orr4Jt2Tfx_EYUoAAAAUI"]
[Wed Dec 10 22:11:55.287853 2025] [:error] [pid 36976:tid 37025] [client 4.194.10.78:43082] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/js/fm.php"] [unique_id "aTl_qySpHW5KVaY9tJnDzQAAANI"]
[Wed Dec 10 22:11:55.479191 2025] [:error] [pid 37062:tid 37076] [client 4.194.10.78:46642] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/js/fm.php"] [unique_id "aTl_qzB0I62HCw8Z5BRzJAAAAAw"]
[Wed Dec 10 22:11:55.958876 2025] [:error] [pid 36976:tid 37022] [client 4.194.10.78:64332] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/js/fm.php"] [unique_id "aTl_qySpHW5KVaY9tJnDzwAAAM8"]
[Wed Dec 10 22:11:56.211258 2025] [:error] [pid 36975:tid 36983] [client 4.194.10.78:42730] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/default.php"] [unique_id "aTl_rN_ZNQ3zMmb38BGA0QAAAIM"]
[Wed Dec 10 22:11:56.685728 2025] [:error] [pid 37062:tid 37069] [client 4.194.10.78:58196] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/default.php"] [unique_id "aTl_rDB0I62HCw8Z5BRzLwAAAAU"]
[Wed Dec 10 22:11:57.759697 2025] [:error] [pid 36976:tid 37008] [client 4.194.10.78:58235] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/default.php"] [unique_id "aTl_rSSpHW5KVaY9tJnD0gAAAME"]
[Wed Dec 10 22:11:58.679939 2025] [:error] [pid 49095:tid 49108] [client 4.194.10.78:54368] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/default.php"] [unique_id "aTl_rsorr4Jt2Tfx_EYUpAAAAUs"]
[Wed Dec 10 22:11:59.392142 2025] [:error] [pid 36976:tid 37009] [client 4.194.10.78:58956] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/m.php"] [unique_id "aTl_rySpHW5KVaY9tJnD2AAAAMI"]
[Wed Dec 10 22:12:00.069504 2025] [:error] [pid 36975:tid 36996] [client 4.194.10.78:64581] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/m.php"] [unique_id "aTl_sN_ZNQ3zMmb38BGA2QAAAJA"]
[Wed Dec 10 22:12:00.549431 2025] [:error] [pid 36975:tid 36994] [client 4.194.10.78:47219] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/m.php"] [unique_id "aTl_sN_ZNQ3zMmb38BGA2wAAAI4"]
[Wed Dec 10 22:12:00.848806 2025] [:error] [pid 36975:tid 36985] [client 4.194.10.78:64614] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/m.php"] [unique_id "aTl_sN_ZNQ3zMmb38BGA3AAAAIU"]
[Wed Dec 10 22:12:01.308450 2025] [:error] [pid 36975:tid 36983] [client 4.194.10.78:58886] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/alfa-rex.php"] [unique_id "aTl_sd_ZNQ3zMmb38BGA3gAAAIM"]
[Wed Dec 10 22:12:02.592169 2025] [:error] [pid 49095:tid 49111] [client 4.194.10.78:52928] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/alfa-rex.php"] [unique_id "aTl_ssorr4Jt2Tfx_EYUqAAAAU4"]
[Wed Dec 10 22:12:03.447571 2025] [:error] [pid 37062:tid 37064] [client 4.194.10.78:58933] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/alfa-rex.php"] [unique_id "aTl_szB0I62HCw8Z5BRzVAAAAAA"]
[Wed Dec 10 22:12:03.740201 2025] [:error] [pid 46868:tid 46870] [client 4.194.10.78:54794] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/alfa-rex.php"] [unique_id "aTl_s43NdlN2GOOyBjGNiAAAAQA"]
[Wed Dec 10 22:12:04.346633 2025] [:error] [pid 46868:tid 46886] [client 4.194.10.78:54797] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/dropdown.php"] [unique_id "aTl_tI3NdlN2GOOyBjGNiwAAARA"]
[Wed Dec 10 22:12:05.342518 2025] [:error] [pid 36975:tid 36996] [client 4.194.10.78:9183] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/dropdown.php"] [unique_id "aTl_td_ZNQ3zMmb38BGA5AAAAJA"]
[Wed Dec 10 22:12:06.345039 2025] [:error] [pid 36976:tid 37013] [client 4.194.10.78:44029] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/dropdown.php"] [unique_id "aTl_tiSpHW5KVaY9tJnD3gAAAMY"]
[Wed Dec 10 22:12:07.338234 2025] [:error] [pid 46868:tid 46892] [client 4.194.10.78:58902] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/dropdown.php"] [unique_id "aTl_t43NdlN2GOOyBjGNkwAAARY"]
[Wed Dec 10 22:12:08.171442 2025] [:error] [pid 36975:tid 37003] [client 4.194.10.78:54818] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/lv.php"] [unique_id "aTl_uN_ZNQ3zMmb38BGA6QAAAJc"]
[Wed Dec 10 22:12:08.664650 2025] [:error] [pid 37062:tid 37069] [client 4.194.10.78:52973] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/lv.php"] [unique_id "aTl_uDB0I62HCw8Z5BRzbgAAAAU"]
[Wed Dec 10 22:12:09.829828 2025] [:error] [pid 36977:tid 37052] [client 4.194.10.78:50001] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/lv.php"] [unique_id "aTl_ucc-JLl-uoL-Au7SjAAAAFI"]
[Wed Dec 10 22:12:10.634781 2025] [:error] [pid 36975:tid 36992] [client 4.194.10.78:44008] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/lv.php"] [unique_id "aTl_ut_ZNQ3zMmb38BGA7AAAAIw"]
[Wed Dec 10 22:12:11.301889 2025] [:error] [pid 36975:tid 36990] [client 4.194.10.78:56516] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/hoot.php"] [unique_id "aTl_u9_ZNQ3zMmb38BGA8AAAAIo"]
[Wed Dec 10 22:12:12.826013 2025] [:error] [pid 37062:tid 37082] [client 4.194.10.78:62398] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/hoot.php"] [unique_id "aTl_vDB0I62HCw8Z5BRzcwAAABI"]
[Wed Dec 10 22:12:13.373803 2025] [:error] [pid 36977:tid 37053] [client 4.194.10.78:61275] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/hoot.php"] [unique_id "aTl_vcc-JLl-uoL-Au7SoQAAAFM"]
[Wed Dec 10 22:12:13.984626 2025] [:error] [pid 36975:tid 36981] [client 4.194.10.78:43988] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/hoot.php"] [unique_id "aTl_vd_ZNQ3zMmb38BGA9QAAAIE"]
[Wed Dec 10 22:12:14.488218 2025] [:error] [pid 46868:tid 46879] [client 4.194.10.78:44020] [client 4.194.10.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "paramountbaldivis.com"] [uri "/fm.php"] [unique_id "aTl_vo3NdlN2GOOyBjGNoAAAAQk"]
[Wed Dec 10 22:12:15.026681 2025] [:error] [pid 46868:tid 46877] [client 4.194.10.78:61300] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/post.php"] [unique_id "aTl_v43NdlN2GOOyBjGNoQAAAQc"]
[Wed Dec 10 22:12:15.545789 2025] [:error] [pid 49095:tid 49102] [client 4.194.10.78:43973] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/post.php"] [unique_id "aTl_v8orr4Jt2Tfx_EYUuQAAAUU"]
[Wed Dec 10 22:12:16.045372 2025] [:error] [pid 36975:tid 36983] [client 4.194.10.78:64096] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/post.php"] [unique_id "aTl_wN_ZNQ3zMmb38BGA-gAAAIM"]
[Wed Dec 10 22:12:16.872589 2025] [:error] [pid 49095:tid 49116] [client 4.194.10.78:9201] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/post.php"] [unique_id "aTl_wMorr4Jt2Tfx_EYUvQAAAVM"]
[Wed Dec 10 22:12:17.893583 2025] [:error] [pid 36976:tid 37019] [client 4.194.10.78:44005] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/db.php"] [unique_id "aTl_wSSpHW5KVaY9tJnD7AAAAMw"]
[Wed Dec 10 22:12:18.994442 2025] [:error] [pid 37062:tid 37079] [client 4.194.10.78:54788] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/db.php"] [unique_id "aTl_wjB0I62HCw8Z5BRzewAAAA8"]
[Wed Dec 10 22:12:19.611618 2025] [:error] [pid 36976:tid 37031] [client 4.194.10.78:61264] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/db.php"] [unique_id "aTl_wySpHW5KVaY9tJnD7wAAANg"]
[Wed Dec 10 22:12:20.065625 2025] [:error] [pid 36975:tid 36996] [client 4.194.10.78:61253] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/db.php"] [unique_id "aTl_xN_ZNQ3zMmb38BGA_gAAAJA"]
[Wed Dec 10 22:12:20.820787 2025] [:error] [pid 46868:tid 46888] [client 4.194.10.78:54816] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/file4.php"] [unique_id "aTl_xI3NdlN2GOOyBjGNrQAAARI"]
[Wed Dec 10 22:12:21.068358 2025] [:error] [pid 46868:tid 46872] [client 4.194.10.78:59760] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/file4.php"] [unique_id "aTl_xY3NdlN2GOOyBjGNrgAAAQI"]
[Wed Dec 10 22:12:21.862671 2025] [:error] [pid 36977:tid 37040] [client 4.194.10.78:61278] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/file4.php"] [unique_id "aTl_xcc-JLl-uoL-Au7SzQAAAEY"]
[Wed Dec 10 22:12:22.261628 2025] [:error] [pid 49095:tid 49099] [client 4.194.10.78:64081] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/file4.php"] [unique_id "aTl_xsorr4Jt2Tfx_EYUwwAAAUI"]
[Wed Dec 10 22:12:22.860546 2025] [:error] [pid 37062:tid 37076] [client 4.194.10.78:9182] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/z.php"] [unique_id "aTl_xjB0I62HCw8Z5BRzggAAAAw"]
[Wed Dec 10 22:12:23.225650 2025] [:error] [pid 36976:tid 37008] [client 4.194.10.78:44003] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/z.php"] [unique_id "aTl_xySpHW5KVaY9tJnD9wAAAME"]
[Wed Dec 10 22:12:23.517156 2025] [:error] [pid 36975:tid 36995] [client 4.194.10.78:64067] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/z.php"] [unique_id "aTl_x9_ZNQ3zMmb38BGA_wAAAI8"]
[Wed Dec 10 22:12:23.811233 2025] [:error] [pid 49095:tid 49105] [client 4.194.10.78:9192] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/z.php"] [unique_id "aTl_x8orr4Jt2Tfx_EYUxwAAAUg"]
[Wed Dec 10 22:12:24.536181 2025] [:error] [pid 46868:tid 46891] [client 4.194.10.78:56552] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/mah.php"] [unique_id "aTl_yI3NdlN2GOOyBjGNtQAAARU"]
[Wed Dec 10 22:12:27.314592 2025] [:error] [pid 49095:tid 49117] [client 4.194.10.78:45180] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/mah.php"] [unique_id "aTl_y8orr4Jt2Tfx_EYUywAAAVQ"]
[Wed Dec 10 22:12:28.069652 2025] [:error] [pid 36976:tid 37014] [client 4.194.10.78:56575] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/mah.php"] [unique_id "aTl_zCSpHW5KVaY9tJnEEAAAAMc"]
[Wed Dec 10 22:12:28.571137 2025] [:error] [pid 49095:tid 49114] [client 4.194.10.78:9195] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/mah.php"] [unique_id "aTl_zMorr4Jt2Tfx_EYUzQAAAVE"]
[Wed Dec 10 22:12:29.335891 2025] [:error] [pid 36975:tid 36997] [client 4.194.10.78:65375] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/mah.php"] [unique_id "aTl_zd_ZNQ3zMmb38BGBBgAAAJE"]
[Wed Dec 10 22:12:29.448257 2025] [:error] [pid 36976:tid 37013] [client 4.194.10.78:54815] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/admin.php"] [unique_id "aTl_zSSpHW5KVaY9tJnEGAAAAMY"]
[Wed Dec 10 22:12:29.895753 2025] [:error] [pid 36975:tid 36985] [client 4.194.10.78:57073] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/admin.php"] [unique_id "aTl_zd_ZNQ3zMmb38BGBBwAAAIU"]
[Wed Dec 10 22:12:30.829262 2025] [:error] [pid 36976:tid 37020] [client 4.194.10.78:9016] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/admin.php"] [unique_id "aTl_ziSpHW5KVaY9tJnEIgAAAM0"]
[Wed Dec 10 22:12:31.403997 2025] [:error] [pid 37062:tid 37081] [client 4.194.10.78:62359] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/admin.php"] [unique_id "aTl_zzB0I62HCw8Z5BRziwAAABE"]
[Wed Dec 10 22:12:31.922906 2025] [:error] [pid 37062:tid 37086] [client 4.194.10.78:45556] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/geju.php"] [unique_id "aTl_zzB0I62HCw8Z5BRzjAAAABY"]
[Wed Dec 10 22:12:32.922234 2025] [:error] [pid 49095:tid 49117] [client 4.194.10.78:45128] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/geju.php"] [unique_id "aTl_0Morr4Jt2Tfx_EYU1AAAAVQ"]
[Wed Dec 10 22:12:33.886828 2025] [:error] [pid 36975:tid 37003] [client 4.194.10.78:57050] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/geju.php"] [unique_id "aTl_0d_ZNQ3zMmb38BGBDQAAAJc"]
[Wed Dec 10 22:12:35.081972 2025] [:error] [pid 36977:tid 37057] [client 4.194.10.78:57029] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/geju.php"] [unique_id "aTl_08c-JLl-uoL-Au7S-AAAAFc"]
[Wed Dec 10 22:12:35.602721 2025] [:error] [pid 37062:tid 37075] [client 4.194.10.78:8987] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ahax.php"] [unique_id "aTl_0zB0I62HCw8Z5BRzjwAAAAs"]
[Wed Dec 10 22:12:36.450426 2025] [:error] [pid 36977:tid 37058] [client 4.194.10.78:56572] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ahax.php"] [unique_id "aTl_1Mc-JLl-uoL-Au7S-wAAAFg"]
[Wed Dec 10 22:12:38.484755 2025] [:error] [pid 36977:tid 37046] [client 4.194.10.78:9101] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ahax.php"] [unique_id "aTl_1sc-JLl-uoL-Au7TBAAAAEw"]
[Wed Dec 10 22:12:39.294012 2025] [:error] [pid 49095:tid 49114] [client 4.194.10.78:44033] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ahax.php"] [unique_id "aTl_18orr4Jt2Tfx_EYU4gAAAVE"]
[Wed Dec 10 22:12:40.004705 2025] [:error] [pid 36975:tid 36999] [client 4.194.10.78:59456] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/bless.php"] [unique_id "aTl_2N_ZNQ3zMmb38BGBFAAAAJM"]
[Wed Dec 10 22:12:40.818696 2025] [:error] [pid 49095:tid 49105] [client 4.194.10.78:44051] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/bless.php"] [unique_id "aTl_2Morr4Jt2Tfx_EYU5QAAAUg"]
[Wed Dec 10 22:12:41.532874 2025] [:error] [pid 49095:tid 49100] [client 4.194.10.78:65354] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/bless.php"] [unique_id "aTl_2corr4Jt2Tfx_EYU5wAAAUM"]
[Wed Dec 10 22:12:42.043119 2025] [:error] [pid 49095:tid 49110] [client 4.194.10.78:47670] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/bless.php"] [unique_id "aTl_2sorr4Jt2Tfx_EYU6QAAAU0"]
[Wed Dec 10 22:12:42.808053 2025] [:error] [pid 36975:tid 36988] [client 4.194.10.78:51664] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/alfa.php"] [unique_id "aTl_2t_ZNQ3zMmb38BGBGAAAAIg"]
[Wed Dec 10 22:12:43.577697 2025] [:error] [pid 46868:tid 46870] [client 4.194.10.78:9011] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/alfa.php"] [unique_id "aTl_243NdlN2GOOyBjGNxwAAAQA"]
[Wed Dec 10 22:12:44.562682 2025] [:error] [pid 36976:tid 37009] [client 4.194.10.78:46484] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/alfa.php"] [unique_id "aTl_3CSpHW5KVaY9tJnEPwAAAMI"]
[Wed Dec 10 22:12:45.283619 2025] [:error] [pid 46868:tid 46871] [client 4.194.10.78:8968] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/alfa.php"] [unique_id "aTl_3Y3NdlN2GOOyBjGNygAAAQE"]
[Wed Dec 10 22:12:46.073048 2025] [:error] [pid 49095:tid 49100] [client 4.194.10.78:59452] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/contact.php"] [unique_id "aTl_3sorr4Jt2Tfx_EYU7wAAAUM"]
[Wed Dec 10 22:12:46.753841 2025] [:error] [pid 36975:tid 36994] [client 4.194.10.78:59157] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/contact.php"] [unique_id "aTl_3t_ZNQ3zMmb38BGBHgAAAI4"]
[Wed Dec 10 22:12:47.564128 2025] [:error] [pid 46868:tid 46872] [client 4.194.10.78:43082] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/contact.php"] [unique_id "aTl_343NdlN2GOOyBjGNzwAAAQI"]
[Wed Dec 10 22:12:48.231313 2025] [:error] [pid 36976:tid 37019] [client 4.194.10.78:59396] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/contact.php"] [unique_id "aTl_4CSpHW5KVaY9tJnEQwAAAMw"]
[Wed Dec 10 22:12:49.424891 2025] [:error] [pid 49095:tid 49109] [client 4.194.10.78:56272] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/item.php"] [unique_id "aTl_4corr4Jt2Tfx_EYU9gAAAUw"]
[Wed Dec 10 22:12:49.796348 2025] [:error] [pid 36976:tid 37026] [client 4.194.10.78:61464] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/item.php"] [unique_id "aTl_4SSpHW5KVaY9tJnEbQAAANM"]
[Wed Dec 10 22:12:50.332091 2025] [:error] [pid 36976:tid 37030] [client 4.194.10.78:65348] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/item.php"] [unique_id "aTl_4iSpHW5KVaY9tJnEggAAANc"]
[Wed Dec 10 22:12:50.969928 2025] [:error] [pid 46868:tid 46870] [client 4.194.10.78:45141] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/item.php"] [unique_id "aTl_4o3NdlN2GOOyBjGN0wAAAQA"]
[Wed Dec 10 22:12:51.774483 2025] [:error] [pid 36977:tid 37034] [client 4.194.10.78:48617] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/lufix.php"] [unique_id "aTl_48c-JLl-uoL-Au7TLwAAAEA"]
[Wed Dec 10 22:12:52.176191 2025] [:error] [pid 49095:tid 49102] [client 4.194.10.78:43066] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/lufix.php"] [unique_id "aTl_5Morr4Jt2Tfx_EYU-gAAAUU"]
[Wed Dec 10 22:12:52.818954 2025] [:error] [pid 36976:tid 37013] [client 4.194.10.78:51763] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/lufix.php"] [unique_id "aTl_5CSpHW5KVaY9tJnEsAAAAMY"]
[Wed Dec 10 22:12:54.043903 2025] [:error] [pid 36975:tid 36998] [client 4.194.10.78:56600] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/lufix.php"] [unique_id "aTl_5t_ZNQ3zMmb38BGBPgAAAJI"]
[Wed Dec 10 22:12:55.266367 2025] [:error] [pid 37062:tid 37075] [client 4.194.10.78:42654] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/buy.php"] [unique_id "aTl_5zB0I62HCw8Z5BRz3AAAAAs"]
[Wed Dec 10 22:12:57.080849 2025] [:error] [pid 36977:tid 37052] [client 4.194.10.78:45153] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/buy.php"] [unique_id "aTl_6cc-JLl-uoL-Au7TNAAAAFI"]
[Wed Dec 10 22:12:57.600801 2025] [:error] [pid 36976:tid 37014] [client 4.194.10.78:46678] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/buy.php"] [unique_id "aTl_6SSpHW5KVaY9tJnEtgAAAMc"]
[Wed Dec 10 22:12:58.127667 2025] [:error] [pid 36975:tid 36988] [client 4.194.10.78:47734] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/buy.php"] [unique_id "aTl_6t_ZNQ3zMmb38BGBQwAAAIg"]
[Wed Dec 10 22:12:59.238296 2025] [:error] [pid 46868:tid 46881] [client 4.194.10.78:47725] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/cloud.php"] [unique_id "aTl_643NdlN2GOOyBjGN2gAAAQs"]
[Wed Dec 10 22:12:59.687597 2025] [:error] [pid 37062:tid 37071] [client 4.194.10.78:46491] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/cloud.php"] [unique_id "aTl_6zB0I62HCw8Z5BRz4gAAAAc"]
[Wed Dec 10 22:13:01.066042 2025] [:error] [pid 37062:tid 37086] [client 4.194.10.78:46477] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/cloud.php"] [unique_id "aTl_7TB0I62HCw8Z5BRz4wAAABY"]
[Wed Dec 10 22:13:03.610325 2025] [:error] [pid 37062:tid 37087] [client 4.194.10.78:61197] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/cloud.php"] [unique_id "aTl_7zB0I62HCw8Z5BRz6gAAABc"]
[Wed Dec 10 22:13:03.981525 2025] [:error] [pid 46868:tid 46880] [client 4.194.10.78:61489] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/shell20211028.php"] [unique_id "aTl_743NdlN2GOOyBjGN3gAAAQo"]
[Wed Dec 10 22:13:05.272921 2025] [:error] [pid 46868:tid 46872] [client 4.194.10.78:8708] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/shell20211028.php"] [unique_id "aTl_8Y3NdlN2GOOyBjGN4wAAAQI"]
[Wed Dec 10 22:13:08.311304 2025] [:error] [pid 49095:tid 49101] [client 4.194.10.78:58565] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/shell20211028.php"] [unique_id "aTl_9Morr4Jt2Tfx_EYVKgAAAUQ"]
[Wed Dec 10 22:13:10.527513 2025] [:error] [pid 46868:tid 46883] [client 4.194.10.78:51661] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/shell20211028.php"] [unique_id "aTl_9o3NdlN2GOOyBjGN5wAAAQ0"]
[Wed Dec 10 22:13:11.773883 2025] [:error] [pid 49095:tid 49116] [client 4.194.10.78:56069] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/lock.php"] [unique_id "aTl_98orr4Jt2Tfx_EYVLAAAAVM"]
[Wed Dec 10 22:13:12.976513 2025] [:error] [pid 49095:tid 49117] [client 4.194.10.78:61184] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/lock.php"] [unique_id "aTl_-Morr4Jt2Tfx_EYVLwAAAVQ"]
[Wed Dec 10 22:13:13.892645 2025] [:error] [pid 49095:tid 49098] [client 4.194.10.78:8571] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/lock.php"] [unique_id "aTl_-corr4Jt2Tfx_EYVMgAAAUE"]
[Wed Dec 10 22:13:14.878418 2025] [:error] [pid 36977:tid 37045] [client 4.194.10.78:58584] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/lock.php"] [unique_id "aTl_-sc-JLl-uoL-Au7TUwAAAEs"]
[Wed Dec 10 22:13:16.086489 2025] [:error] [pid 49095:tid 49103] [client 4.194.10.78:56622] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/manager.php"] [unique_id "aTl__Morr4Jt2Tfx_EYVNgAAAUY"]
[Wed Dec 10 22:13:16.990602 2025] [:error] [pid 36976:tid 37011] [client 4.194.10.78:43049] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/manager.php"] [unique_id "aTl__CSpHW5KVaY9tJnEygAAAMQ"]
[Wed Dec 10 22:13:17.749604 2025] [:error] [pid 36977:tid 37047] [client 4.194.10.78:61490] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/manager.php"] [unique_id "aTl__cc-JLl-uoL-Au7TVQAAAE0"]
[Wed Dec 10 22:13:18.515212 2025] [:error] [pid 49095:tid 49117] [client 4.194.10.78:8510] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/manager.php"] [unique_id "aTl__sorr4Jt2Tfx_EYVPAAAAVQ"]
[Wed Dec 10 22:13:19.876844 2025] [:error] [pid 36975:tid 36994] [client 4.194.10.78:55979] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ws.php"] [unique_id "aTl__9_ZNQ3zMmb38BGBXQAAAI4"]
[Wed Dec 10 22:13:20.114873 2025] [:error] [pid 49095:tid 49107] [client 4.194.10.78:44050] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ws.php"] [unique_id "aTmAAMorr4Jt2Tfx_EYVPwAAAUo"]
[Wed Dec 10 22:13:20.585739 2025] [:error] [pid 36976:tid 37029] [client 4.194.10.78:8713] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ws.php"] [unique_id "aTmAACSpHW5KVaY9tJnEywAAANY"]
[Wed Dec 10 22:13:21.266920 2025] [:error] [pid 36975:tid 36987] [client 4.194.10.78:56079] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ws.php"] [unique_id "aTmAAd_ZNQ3zMmb38BGBXwAAAIc"]
[Wed Dec 10 22:13:22.674890 2025] [:error] [pid 36975:tid 36980] [client 4.194.10.78:49598] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/gmo.php"] [unique_id "aTmAAt_ZNQ3zMmb38BGBYAAAAIA"]
[Wed Dec 10 22:13:23.985435 2025] [:error] [pid 36975:tid 37001] [client 4.194.10.78:49599] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/gmo.php"] [unique_id "aTmAA9_ZNQ3zMmb38BGBYgAAAJU"]
[Wed Dec 10 22:13:24.467095 2025] [:error] [pid 36977:tid 37043] [client 4.194.10.78:57027] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/gmo.php"] [unique_id "aTmABMc-JLl-uoL-Au7TYQAAAEk"]
[Wed Dec 10 22:13:24.900028 2025] [:error] [pid 49095:tid 49118] [client 4.194.10.78:57042] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/gmo.php"] [unique_id "aTmABMorr4Jt2Tfx_EYVSQAAAVU"]
[Wed Dec 10 22:13:25.686482 2025] [:error] [pid 46868:tid 46872] [client 4.194.10.78:57037] [client 4.194.10.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/gel4y.php"] [unique_id "aTmABY3NdlN2GOOyBjGN8wAAAQI"]
[Wed Dec 10 23:02:02.726765 2025] [:error] [pid 36975:tid 36994] [client 185.79.65.128:49134] [client 185.79.65.128] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.79.65.128, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTmLat_ZNQ3zMmb38BGNvwAAAI4"]
[Thu Dec 11 01:26:16.000069 2025] [:error] [pid 27893:tid 27910] [client 45.10.160.28:36474] [client 45.10.160.28] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.10.160.28, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTmtN1Am_ScxuQGtQnRtyAAAAI8"]
[Thu Dec 11 01:33:45.299597 2025] [:error] [pid 27893:tid 27906] [client 45.128.199.29:51275] [client 45.128.199.29] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.29, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTmu-VAm_ScxuQGtQnRvHQAAAIs"]
[Thu Dec 11 02:10:39.645729 2025] [:error] [pid 10435:tid 10509] [client 45.128.199.15:30493] [client 45.128.199.15] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.15, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTm3n45HZq66Rpdj2aKKSQAAAA8"]
[Thu Dec 11 02:16:20.051775 2025] [:error] [pid 42065:tid 42077] [client 45.128.199.183:51813] [client 45.128.199.183] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.183, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTm49Pkj8kMSvqJobVUU7wAAAUo"]
[Thu Dec 11 02:16:20.053906 2025] [:error] [pid 42065:tid 42077] [client 45.128.199.183:51813] [client 45.128.199.183] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||paramountbaldivis.com|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /wp-login.php"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTm49Pkj8kMSvqJobVUU7wAAAUo"]
[Thu Dec 11 02:22:04.052239 2025] [:error] [pid 10434:tid 10479] [client 45.128.199.9:59409] [client 45.128.199.9] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.9, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTm6TGbAnZFInxx5bO_DuQAAAEw"]
[Thu Dec 11 02:27:59.499958 2025] [:error] [pid 10433:tid 10453] [client 45.128.199.3:59407] [client 45.128.199.3] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.3, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTm7r2fQ1q-Ic7huYoUI8gAAANA"]
[Thu Dec 11 02:33:33.387751 2025] [:error] [pid 10520:tid 10528] [client 45.128.199.51:27805] [client 45.128.199.51] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.51, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTm8_UNrVZZksrD9M7EtNgAAAQY"]
[Thu Dec 11 02:33:33.390049 2025] [:error] [pid 10520:tid 10528] [client 45.128.199.51:27805] [client 45.128.199.51] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||paramountbaldivis.com|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /wp-login.php"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTm8_UNrVZZksrD9M7EtNgAAAQY"]
[Thu Dec 11 02:33:38.344299 2025] [:error] [pid 10435:tid 10500] [client 182.42.110.255:54491] [client 182.42.110.255] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||paramountbaldivis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTm9Ao5HZq66Rpdj2aKPlQAAAAY"]
[Thu Dec 11 02:38:26.475132 2025] [:error] [pid 10520:tid 10538] [client 89.250.176.52:57530] [client 89.250.176.52] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.250.176.52, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTm-IkNrVZZksrD9M7EukQAAARA"]
[Thu Dec 11 02:39:30.439819 2025] [:error] [pid 10435:tid 10512] [client 45.128.199.34:41259] [client 45.128.199.34] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.34, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTm-Yo5HZq66Rpdj2aKQ6wAAABI"]
[Thu Dec 11 02:46:13.415070 2025] [:error] [pid 42065:tid 42089] [client 45.128.199.5:49755] [client 45.128.199.5] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.5, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTm_9fkj8kMSvqJobVUZKAAAAVY"]
[Thu Dec 11 02:53:29.949221 2025] [:error] [pid 10520:tid 10541] [client 45.128.199.254:58575] [client 45.128.199.254] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.254, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTnBqUNrVZZksrD9M7Ey6AAAARM"]
[Thu Dec 11 03:00:48.487725 2025] [:error] [pid 10520:tid 10546] [client 45.128.199.4:36851] [client 45.128.199.4] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.4, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTnDYENrVZZksrD9M7E1HQAAARg"]
[Thu Dec 11 03:08:13.366234 2025] [:error] [pid 10520:tid 10524] [client 45.128.199.20:50917] [client 45.128.199.20] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.20, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTnFHUNrVZZksrD9M7E2ugAAAQI"]
[Thu Dec 11 03:14:14.689016 2025] [:error] [pid 27893:tid 27903] [client 161.248.188.190:49638] [client 161.248.188.190] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 161.248.188.190, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTnGhlAm_ScxuQGtQnSBbwAAAIg"]
[Thu Dec 11 03:14:19.719657 2025] [:error] [pid 27893:tid 27902] [client 161.248.188.190:49638] [client 161.248.188.190] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 161.248.188.190, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTnGi1Am_ScxuQGtQnSBgAAAAIc"]
[Thu Dec 11 03:15:38.604188 2025] [:error] [pid 10435:tid 10508] [client 45.128.199.194:29275] [client 45.128.199.194] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.194, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTnG2o5HZq66Rpdj2aKW-QAAAA4"]
[Thu Dec 11 03:23:02.794244 2025] [:error] [pid 10434:tid 10490] [client 45.128.199.33:33761] [client 45.128.199.33] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.33, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTnIlmbAnZFInxx5bO_SRgAAAFc"]
[Thu Dec 11 03:30:28.137366 2025] [:error] [pid 17957:tid 17966] [client 45.128.199.14:38947] [client 45.128.199.14] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.14, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTnKVD2tR4AEIRdHKCHcyQAAAYc"]
[Thu Dec 11 03:37:36.190785 2025] [:error] [pid 37737:tid 37750] [client 45.128.199.30:36085] [client 45.128.199.30] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.30, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTnMAGNupnQNMDGcxEX7FwAAAMs"]
[Thu Dec 11 03:44:49.523934 2025] [:error] [pid 10461:tid 10503] [client 45.128.199.36:44437] [client 45.128.199.36] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.36, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTnNsYJNhZCn2jS_NN3upgAAAEU"]
[Thu Dec 11 03:50:37.009278 2025] [:error] [pid 10461:tid 10504] [client 178.128.255.38:50316] [client 178.128.255.38] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 178.128.255.38, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTnPDYJNhZCn2jS_NN3wngAAAEY"]
[Thu Dec 11 03:52:13.427899 2025] [:error] [pid 41204:tid 41218] [client 45.128.199.15:26851] [client 45.128.199.15] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.15, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTnPbfQw3U8W6FpVt8WZmAAAAAk"]
[Thu Dec 11 03:59:31.824782 2025] [:error] [pid 41294:tid 41317] [client 45.128.199.31:55461] [client 45.128.199.31] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.31, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTnRIztQDGeae60yuJVD7QAAANU"]
[Thu Dec 11 04:06:58.683804 2025] [:error] [pid 14092:tid 14102] [client 45.128.199.27:54917] [client 45.128.199.27] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.27, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTnS4m1yJs96znfXT9P9swAAAMc"]
[Thu Dec 11 04:14:25.860148 2025] [:error] [pid 57990:tid 58016] [client 45.128.199.51:27285] [client 45.128.199.51] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.51, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTnUoQqZT_dc36fQdXGgJwAAABU"]
[Thu Dec 11 04:21:51.896235 2025] [:error] [pid 57991:tid 58028] [client 45.128.199.20:47411] [client 45.128.199.20] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.20, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTnWX6PyGmNXA2ZsETbQ6QAAAEY"]
[Thu Dec 11 04:29:14.297484 2025] [:error] [pid 58099:tid 58118] [client 45.128.199.225:44165] [client 45.128.199.225] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.225, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTnYGsKZVSF_bdPFqRgfZQAAANE"]
[Thu Dec 11 04:36:29.698326 2025] [:error] [pid 57991:tid 58031] [client 45.128.199.223:35427] [client 45.128.199.223] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.223, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTnZzaPyGmNXA2ZsETbWXgAAAEk"]
[Thu Dec 11 04:43:52.595592 2025] [:error] [pid 27459:tid 27484] [client 45.128.199.190:60833] [client 45.128.199.190] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.190, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTnbiFhPEXihPBKMpRNdJgAAARc"]
[Thu Dec 11 04:51:02.690688 2025] [:error] [pid 57992:tid 58072] [client 45.128.199.36:38971] [client 45.128.199.36] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.36, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTndNuUeau0BMFF2vHnXEwAAAJc"]
[Thu Dec 11 04:58:14.535034 2025] [:error] [pid 58099:tid 58122] [client 45.128.199.240:25733] [client 45.128.199.240] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.240, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTne5sKZVSF_bdPFqRgrEAAAANU"]
[Thu Dec 11 05:05:34.116313 2025] [:error] [pid 57991:tid 58034] [client 45.8.17.227:21027] [client 45.8.17.227] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.227, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTngnqPyGmNXA2ZsETbejgAAAEw"]
[Thu Dec 11 05:12:57.106717 2025] [:error] [pid 27459:tid 27483] [client 45.128.199.194:58771] [client 45.128.199.194] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.194, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTniWVhPEXihPBKMpRNp3wAAARY"]
[Thu Dec 11 05:20:20.986420 2025] [:error] [pid 27459:tid 27466] [client 45.128.199.32:49507] [client 45.128.199.32] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.32, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTnkFFhPEXihPBKMpRNr6gAAAQU"]
[Thu Dec 11 05:27:29.604349 2025] [:error] [pid 57991:tid 58023] [client 45.128.199.23:63625] [client 45.128.199.23] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.23, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTnlwaPyGmNXA2ZsETbjSQAAAEE"]
[Thu Dec 11 05:34:40.410622 2025] [:error] [pid 27459:tid 27475] [client 45.128.199.28:39373] [client 45.128.199.28] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.28, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTnncFhPEXihPBKMpRNv-wAAAQ4"]
[Thu Dec 11 05:41:49.005787 2025] [:error] [pid 57992:tid 58055] [client 45.128.199.11:58755] [client 45.128.199.11] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.11, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTnpHeUeau0BMFF2vHnlEwAAAIY"]
[Thu Dec 11 05:48:55.068924 2025] [:error] [pid 58099:tid 58123] [client 45.128.199.35:50515] [client 45.128.199.35] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.35, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTnqx8KZVSF_bdPFqRg44wAAANY"]
[Thu Dec 11 05:56:08.217176 2025] [:error] [pid 27459:tid 27465] [client 45.128.199.183:55059] [client 45.128.199.183] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.183, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTnseFhPEXihPBKMpRN1igAAAQQ"]
[Thu Dec 11 06:03:24.055860 2025] [:error] [pid 27459:tid 27483] [client 45.128.199.20:46421] [client 45.128.199.20] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.20, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTnuLFhPEXihPBKMpRN2_gAAARY"]
[Thu Dec 11 06:10:43.544114 2025] [:error] [pid 57992:tid 58071] [client 45.128.199.13:54279] [client 45.128.199.13] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.13, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTnv4-Ueau0BMFF2vHnrKgAAAJY"]
[Thu Dec 11 06:18:03.685220 2025] [:error] [pid 48261:tid 48274] [client 45.128.199.31:60015] [client 45.128.199.31] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.31, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTnxm-yPI4WU-4JmiQOLEQAAAYo"]
[Thu Dec 11 06:25:26.559927 2025] [:error] [pid 57992:tid 58071] [client 45.128.199.14:51821] [client 45.128.199.14] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.14, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTnzVuUeau0BMFF2vHnuVQAAAJY"]
[Thu Dec 11 06:32:47.780260 2025] [:error] [pid 57990:tid 58002] [client 45.128.199.14:56267] [client 45.128.199.14] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.14, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTn1DwqZT_dc36fQdXHDdAAAAAc"]
[Thu Dec 11 06:33:35.931879 2025] [:error] [pid 57991:tid 58035] [client 84.247.168.35:45300] [client 84.247.168.35] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 84.247.168.35, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTn1P6PyGmNXA2ZsETbwxgAAAE0"]
[Thu Dec 11 06:40:11.461793 2025] [:error] [pid 27459:tid 27485] [client 45.128.199.25:30567] [client 45.128.199.25] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.25, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTn2y1hPEXihPBKMpROAowAAARg"]
[Thu Dec 11 06:47:26.136149 2025] [:error] [pid 27459:tid 27468] [client 45.128.199.18:58959] [client 45.128.199.18] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.18, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTn4flhPEXihPBKMpROB7wAAAQc"]
[Thu Dec 11 06:54:48.864388 2025] [:error] [pid 58099:tid 58115] [client 45.8.17.133:47523] [client 45.8.17.133] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.133, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTn6OMKZVSF_bdPFqRhHlAAAAM4"]
[Thu Dec 11 07:02:10.615981 2025] [:error] [pid 58099:tid 58120] [client 45.128.199.253:43027] [client 45.128.199.253] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.253, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTn78sKZVSF_bdPFqRhJXQAAANM"]
[Thu Dec 11 07:09:25.978346 2025] [:error] [pid 58099:tid 58107] [client 45.128.199.224:44951] [client 45.128.199.224] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.224, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTn9pcKZVSF_bdPFqRhLegAAAMY"]
[Thu Dec 11 07:16:48.744827 2025] [:error] [pid 35112:tid 35114] [client 45.128.199.25:51463] [client 45.128.199.25] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.25, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTn_YJ9ZpQ0WIeJhsJeLvQAAAUA"]
[Thu Dec 11 07:19:53.912885 2025] [:error] [pid 27459:tid 27462] [client 43.157.82.252:54098] [client 43.157.82.252] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||paramountbaldivis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aToAGVhPEXihPBKMpROMnwAAAQE"]
[Thu Dec 11 07:24:16.645357 2025] [:error] [pid 57990:tid 58003] [client 45.128.199.35:25493] [client 45.128.199.35] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.35, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aToBIAqZT_dc36fQdXHOPwAAAAg"]
[Thu Dec 11 07:31:33.151599 2025] [:error] [pid 48261:tid 48281] [client 45.128.199.22:28521] [client 45.128.199.22] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.22, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aToC1eyPI4WU-4JmiQOl_gAAAZE"]
[Thu Dec 11 07:38:57.679854 2025] [:error] [pid 57990:tid 57996] [client 45.128.199.13:64943] [client 45.128.199.13] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.13, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aToEkQqZT_dc36fQdXHRjgAAAAE"]
[Thu Dec 11 07:44:49.462270 2025] [:error] [pid 57991:tid 58031] [client 51.38.247.205:40500] [client 51.38.247.205] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 51.38.247.205, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aToF8aPyGmNXA2ZsETYBuAAAAEk"]
[Thu Dec 11 07:46:32.093732 2025] [:error] [pid 58099:tid 58124] [client 45.128.199.35:53499] [client 45.128.199.35] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.35, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aToGWMKZVSF_bdPFqRhV4gAAANc"]
[Thu Dec 11 07:54:03.662981 2025] [:error] [pid 57992:tid 58053] [client 45.128.199.14:33933] [client 45.128.199.14] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.14, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aToIG-Ueau0BMFF2vHkDCAAAAIQ"]
[Thu Dec 11 08:01:40.454989 2025] [:error] [pid 57990:tid 58011] [client 45.128.199.10:45529] [client 45.128.199.10] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.10, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aToJ5AqZT_dc36fQdXHWgwAAABA"]
[Thu Dec 11 08:09:19.450360 2025] [:error] [pid 35112:tid 35128] [client 45.128.199.14:27435] [client 45.128.199.14] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.14, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aToLr59ZpQ0WIeJhsJeZ_AAAAU4"]
[Thu Dec 11 08:16:39.752312 2025] [:error] [pid 48261:tid 48265] [client 45.128.199.191:50693] [client 45.128.199.191] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.191, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aToNZ-yPI4WU-4JmiQOzngAAAYE"]
[Thu Dec 11 08:19:44.768027 2025] [:error] [pid 57991:tid 58038] [client 112.122.236.39:26536] [client 112.122.236.39] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 112.122.236.39, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aToOIKPyGmNXA2ZsETYHowAAAFA"]
[Thu Dec 11 08:24:07.258785 2025] [:error] [pid 57991:tid 58042] [client 45.128.199.33:58567] [client 45.128.199.33] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.33, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aToPJ6PyGmNXA2ZsETYITwAAAFQ"]
[Thu Dec 11 08:31:33.526463 2025] [:error] [pid 35112:tid 35123] [client 45.128.199.225:41773] [client 45.128.199.225] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.225, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aToQ5Z9ZpQ0WIeJhsJefmAAAAUk"]
[Thu Dec 11 08:38:59.629120 2025] [:error] [pid 35112:tid 35124] [client 45.128.199.51:28787] [client 45.128.199.51] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.51, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aToSo59ZpQ0WIeJhsJeiBgAAAUo"]
[Thu Dec 11 08:40:11.018235 2025] [:error] [pid 48261:tid 48265] [client 15.235.59.82:63044] [client 15.235.59.82] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 15.235.59.82, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aToS6-yPI4WU-4JmiQO84QAAAYE"]
[Thu Dec 11 08:46:27.835584 2025] [:error] [pid 27459:tid 27470] [client 45.128.199.8:29171] [client 45.128.199.8] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.8, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aToUY1hPEXihPBKMpROhGwAAAQk"]
[Thu Dec 11 08:53:49.926987 2025] [:error] [pid 57991:tid 58033] [client 45.128.199.12:36439] [client 45.128.199.12] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.12, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aToWHaPyGmNXA2ZsETYPJQAAAEs"]
[Thu Dec 11 08:58:06.207677 2025] [:error] [pid 57992:tid 58067] [client 83.136.145.99:59206] [client 83.136.145.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 83.136.145.99, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aToXHuUeau0BMFF2vHkQxQAAAJI"]
[Thu Dec 11 09:01:01.651002 2025] [:error] [pid 57990:tid 58011] [client 45.128.199.183:31491] [client 45.128.199.183] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.183, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aToXzQqZT_dc36fQdXHi9AAAABA"]
[Thu Dec 11 09:08:23.146855 2025] [:error] [pid 57992:tid 58053] [client 45.128.199.51:54813] [client 45.128.199.51] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.51, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aToZh-Ueau0BMFF2vHkS9wAAAIQ"]
[Thu Dec 11 09:15:41.754887 2025] [:error] [pid 58099:tid 58106] [client 45.128.199.4:30051] [client 45.128.199.4] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.4, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTobPcKZVSF_bdPFqRhq-wAAAMU"]
[Thu Dec 11 09:23:03.533264 2025] [:error] [pid 35112:tid 35130] [client 45.128.199.26:28499] [client 45.128.199.26] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.26, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aToc959ZpQ0WIeJhsJetcAAAAVA"]
[Thu Dec 11 09:30:20.580998 2025] [:error] [pid 57991:tid 58033] [client 45.128.199.10:24815] [client 45.128.199.10] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.10, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aToerKPyGmNXA2ZsETYWmAAAAEs"]
[Thu Dec 11 09:37:41.995914 2025] [:error] [pid 35112:tid 35122] [client 45.128.199.17:57955] [client 45.128.199.17] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.17, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTogZZ9ZpQ0WIeJhsJex8wAAAUg"]
[Thu Dec 11 09:45:04.395124 2025] [:error] [pid 57991:tid 58039] [client 45.128.199.24:59111] [client 45.128.199.24] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.24, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aToiIKPyGmNXA2ZsETYZYQAAAFE"]
[Thu Dec 11 09:52:21.695049 2025] [:error] [pid 27459:tid 27483] [client 45.128.199.223:62147] [client 45.128.199.223] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.223, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aToj1VhPEXihPBKMpROxAgAAARY"]
[Thu Dec 11 10:02:09.953161 2025] [:error] [pid 57992:tid 58069] [client 45.128.199.253:30605] [client 45.128.199.253] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.253, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTomIeUeau0BMFF2vHkfCAAAAJQ"]
[Thu Dec 11 10:09:31.723682 2025] [:error] [pid 35112:tid 35136] [client 45.128.199.28:63165] [client 45.128.199.28] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.28, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTon259ZpQ0WIeJhsJe5twAAAVY"]
[Thu Dec 11 10:17:20.277240 2025] [:error] [pid 48261:tid 48270] [client 45.128.199.21:42381] [client 45.128.199.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.21, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTopsOyPI4WU-4JmiQPgpQAAAYY"]
[Thu Dec 11 10:24:47.336571 2025] [:error] [pid 48261:tid 48270] [client 45.128.199.14:26095] [client 45.128.199.14] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.14, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTorb-yPI4WU-4JmiQPjrAAAAYY"]
[Thu Dec 11 10:32:02.011076 2025] [:error] [pid 57992:tid 58071] [client 45.128.199.180:58711] [client 45.128.199.180] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.180, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTotIuUeau0BMFF2vHkleQAAAJY"]
[Thu Dec 11 10:39:25.141302 2025] [:error] [pid 57992:tid 58062] [client 45.128.199.10:48401] [client 45.128.199.10] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.10, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTou3eUeau0BMFF2vHknDQAAAI0"]
[Thu Dec 11 10:46:47.916390 2025] [:error] [pid 48261:tid 48287] [client 45.128.199.177:34775] [client 45.128.199.177] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.177, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTowl-yPI4WU-4JmiQPrsAAAAZc"]
[Thu Dec 11 10:54:14.896352 2025] [:error] [pid 57992:tid 58059] [client 45.128.199.17:20211] [client 45.128.199.17] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.17, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aToyVuUeau0BMFF2vHkqzgAAAIo"]
[Thu Dec 11 11:01:40.629215 2025] [:error] [pid 48261:tid 48265] [client 45.128.199.8:59353] [client 45.128.199.8] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.8, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTo0FOyPI4WU-4JmiQPxsQAAAYE"]
[Thu Dec 11 11:09:12.165928 2025] [:error] [pid 48261:tid 48273] [client 45.128.199.253:22175] [client 45.128.199.253] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.253, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTo12OyPI4WU-4JmiQP09AAAAYk"]
[Thu Dec 11 11:17:10.231144 2025] [:error] [pid 27459:tid 27465] [client 45.128.199.180:21421] [client 45.128.199.180] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.180, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTo3tlhPEXihPBKMpRPGmAAAAQQ"]
[Thu Dec 11 11:25:12.063177 2025] [:error] [pid 58099:tid 58124] [client 45.128.199.22:51767] [client 45.128.199.22] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.22, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTo5mMKZVSF_bdPFqRiLMAAAANc"]
[Thu Dec 11 11:27:08.689684 2025] [:error] [pid 48261:tid 48270] [client 217.154.56.229:59118] [client 217.154.56.229] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 217.154.56.229, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTo6DOyPI4WU-4JmiQP76AAAAYY"]
[Thu Dec 11 11:33:04.677947 2025] [:error] [pid 57991:tid 58024] [client 45.128.199.13:27311] [client 45.128.199.13] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.13, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTo7cKPyGmNXA2ZsETYymgAAAEI"]
[Thu Dec 11 11:40:48.633170 2025] [:error] [pid 57991:tid 58035] [client 45.128.199.178:20269] [client 45.128.199.178] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.178, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTo9QKPyGmNXA2ZsETY0lgAAAE0"]
[Thu Dec 11 11:48:36.772536 2025] [:error] [pid 57991:tid 58027] [client 45.128.199.23:38837] [client 45.128.199.23] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.23, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTo_FKPyGmNXA2ZsETY2qQAAAEU"]
[Thu Dec 11 11:56:30.488759 2025] [:error] [pid 57991:tid 58042] [client 45.128.199.13:24941] [client 45.128.199.13] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.13, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTpA7qPyGmNXA2ZsETY4XQAAAFQ"]
[Thu Dec 11 12:04:17.276298 2025] [:error] [pid 57990:tid 58008] [client 45.128.199.27:46497] [client 45.128.199.27] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.27, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTpCwQqZT_dc36fQdXENmwAAAA0"]
[Thu Dec 11 12:12:09.221879 2025] [:error] [pid 57991:tid 58045] [client 45.128.199.12:23441] [client 45.128.199.12] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.12, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTpEmaPyGmNXA2ZsETY-MwAAAFc"]
[Thu Dec 11 12:20:13.996717 2025] [:error] [pid 35112:tid 35115] [client 45.128.199.5:32065] [client 45.128.199.5] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.5, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTpGfZ9ZpQ0WIeJhsJfjOAAAAUE"]
[Thu Dec 11 12:28:07.974259 2025] [:error] [pid 57992:tid 58060] [client 45.128.199.30:28893] [client 45.128.199.30] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.30, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTpIV-Ueau0BMFF2vHlCjAAAAIs"]
[Thu Dec 11 12:36:09.313168 2025] [:error] [pid 57990:tid 58006] [client 45.128.199.8:33985] [client 45.128.199.8] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.8, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTpKOQqZT_dc36fQdXEWVAAAAAs"]
[Thu Dec 11 12:44:11.294916 2025] [:error] [pid 57991:tid 58042] [client 45.128.199.4:52089] [client 45.128.199.4] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.4, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTpMG6PyGmNXA2ZsETZGbAAAAFQ"]
[Thu Dec 11 12:47:09.102982 2025] [:error] [pid 35112:tid 35119] [client 188.40.154.27:53468] [client 188.40.154.27] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.40.154.27, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTpMzZ9ZpQ0WIeJhsJftoQAAAUU"]
[Thu Dec 11 12:52:08.554757 2025] [:error] [pid 35112:tid 35138] [client 45.128.199.27:40841] [client 45.128.199.27] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.27, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTpN-J9ZpQ0WIeJhsJfu4gAAAVg"]
[Thu Dec 11 13:00:01.006784 2025] [:error] [pid 57990:tid 57996] [client 45.128.199.18:38739] [client 45.128.199.18] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.18, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTpP0QqZT_dc36fQdXEbvAAAAAE"]
[Thu Dec 11 13:08:04.790736 2025] [:error] [pid 57990:tid 58019] [client 45.128.199.177:59899] [client 45.128.199.177] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.177, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTpRtAqZT_dc36fQdXEdMwAAABg"]
[Thu Dec 11 13:16:05.078236 2025] [:error] [pid 48261:tid 48264] [client 45.128.199.183:30703] [client 45.128.199.183] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.183, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTpTleyPI4WU-4JmiQMmtAAAAYA"]
[Thu Dec 11 13:23:58.799238 2025] [:error] [pid 57990:tid 58015] [client 45.128.199.180:29411] [client 45.128.199.180] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.180, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTpVbgqZT_dc36fQdXEgbwAAABQ"]
[Thu Dec 11 13:31:48.237450 2025] [:error] [pid 48261:tid 48288] [client 45.128.199.30:57877] [client 45.128.199.30] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.30, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTpXROyPI4WU-4JmiQMrZgAAAZg"]
[Thu Dec 11 13:39:30.325568 2025] [:error] [pid 35112:tid 35119] [client 45.128.199.25:27921] [client 45.128.199.25] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.25, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTpZEp9ZpQ0WIeJhsJf7qAAAAUU"]
[Thu Dec 11 13:47:15.526484 2025] [:error] [pid 57991:tid 58031] [client 45.128.199.35:36067] [client 45.128.199.35] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.35, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTpa46PyGmNXA2ZsETZTDAAAAEk"]
[Thu Dec 11 13:55:00.533809 2025] [:error] [pid 48261:tid 48266] [client 45.128.199.22:63615] [client 45.128.199.22] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.22, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTpctOyPI4WU-4JmiQM15AAAAYI"]
[Thu Dec 11 14:02:40.513440 2025] [:error] [pid 48261:tid 48286] [client 45.128.199.11:64977] [client 45.128.199.11] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.11, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTpegOyPI4WU-4JmiQM3_AAAAZY"]
[Thu Dec 11 14:08:05.865138 2025] [:error] [pid 58099:tid 58116] [client 142.132.158.170:35164] [client 142.132.158.170] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 142.132.158.170, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTpfxcKZVSF_bdPFqRizigAAAM8"]
[Thu Dec 11 14:10:44.820511 2025] [:error] [pid 57992:tid 58060] [client 45.128.199.240:20983] [client 45.128.199.240] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.240, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTpgZOUeau0BMFF2vHlYfwAAAIs"]
[Thu Dec 11 14:18:42.753187 2025] [:error] [pid 27459:tid 27462] [client 45.128.199.181:41527] [client 45.128.199.181] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.181, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTpiQlhPEXihPBKMpRP5HgAAAQE"]
[Thu Dec 11 14:26:50.005368 2025] [:error] [pid 48261:tid 48264] [client 45.128.199.225:50729] [client 45.128.199.225] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.225, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTpkKuyPI4WU-4JmiQNAaQAAAYA"]
[Thu Dec 11 14:34:58.622659 2025] [:error] [pid 57990:tid 58013] [client 45.128.199.177:44461] [client 45.128.199.177] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.177, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTpmEgqZT_dc36fQdXEuUQAAABI"]
[Thu Dec 11 14:42:56.719232 2025] [:error] [pid 35112:tid 35116] [client 45.128.199.32:27965] [client 45.128.199.32] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.32, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTpn8J9ZpQ0WIeJhsJcMlwAAAUI"]
[Thu Dec 11 14:49:14.601223 2025] [:error] [pid 58099:tid 58104] [client 45.128.199.183:44813] [client 45.128.199.183] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.183, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTppasKZVSF_bdPFqRi7wgAAAMM"]
[Thu Dec 11 14:55:34.698304 2025] [:error] [pid 57992:tid 58065] [client 125.94.144.102:42845] [client 125.94.144.102] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||paramountbaldivis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTpq5uUeau0BMFF2vHljgwAAAJA"]
[Thu Dec 11 14:55:51.975959 2025] [:error] [pid 57992:tid 58052] [client 45.128.199.190:40771] [client 45.128.199.190] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.190, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTpq9-Ueau0BMFF2vHljiwAAAIM"]
[Thu Dec 11 15:03:19.379673 2025] [:error] [pid 27459:tid 27468] [client 45.128.199.35:62313] [client 45.128.199.35] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.35, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTpst1hPEXihPBKMpRMDEwAAAQc"]
[Thu Dec 11 15:11:16.054952 2025] [:error] [pid 35112:tid 35133] [client 45.128.199.36:55623] [client 45.128.199.36] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.36, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTpulJ9ZpQ0WIeJhsJcUTgAAAVM"]
[Thu Dec 11 15:19:07.986702 2025] [:error] [pid 58099:tid 58117] [client 45.128.199.51:51423] [client 45.128.199.51] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.51, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTpwa8KZVSF_bdPFqRjDEQAAANA"]
[Thu Dec 11 15:27:06.537205 2025] [:error] [pid 58099:tid 58103] [client 45.128.199.11:54823] [client 45.128.199.11] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.11, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTpySsKZVSF_bdPFqRjExgAAAMI"]
[Thu Dec 11 15:27:14.733761 2025] [:error] [pid 57990:tid 58009] [client 51.38.247.205:43676] [client 51.38.247.205] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 51.38.247.205, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTpyUgqZT_dc36fQdXE7IgAAAA4"]
[Thu Dec 11 15:35:02.938325 2025] [:error] [pid 35112:tid 35138] [client 45.128.199.14:23177] [client 45.128.199.14] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.14, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTp0Jp9ZpQ0WIeJhsJcbSwAAAVg"]
[Thu Dec 11 15:43:00.011923 2025] [:error] [pid 27459:tid 27464] [client 45.8.17.133:38595] [client 45.8.17.133] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.133, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTp2BFhPEXihPBKMpRMPGAAAAQM"]
[Thu Dec 11 15:50:53.223910 2025] [:error] [pid 35112:tid 35136] [client 45.128.199.180:20057] [client 45.128.199.180] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.180, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTp33Z9ZpQ0WIeJhsJcgcQAAAVY"]
[Thu Dec 11 15:58:46.293330 2025] [:error] [pid 35112:tid 35119] [client 45.128.199.12:38583] [client 45.128.199.12] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.12, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTp5tp9ZpQ0WIeJhsJciyAAAAUU"]
[Thu Dec 11 16:06:45.382786 2025] [:error] [pid 48261:tid 48270] [client 45.128.199.14:32439] [client 45.128.199.14] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.14, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTp7leyPI4WU-4JmiQNoewAAAYY"]
[Thu Dec 11 16:14:49.294928 2025] [:error] [pid 27459:tid 27466] [client 45.128.199.51:31037] [client 45.128.199.51] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.51, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTp9eVhPEXihPBKMpRMXzAAAAQU"]
[Thu Dec 11 16:20:47.287285 2025] [:error] [pid 48261:tid 48278] [client 175.107.46.54:18572] [client 175.107.46.54] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 175.107.46.54, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aTp-3-yPI4WU-4JmiQNvzQAAAY4"]
[Thu Dec 11 16:22:56.183624 2025] [:error] [pid 57991:tid 58046] [client 45.8.17.227:59267] [client 45.8.17.227] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.227, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTp_YKPyGmNXA2ZsETZ1NwAAAFg"]
[Thu Dec 11 16:31:01.681000 2025] [:error] [pid 57992:tid 58059] [client 45.128.199.7:43211] [client 45.128.199.7] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.7, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTqBReUeau0BMFF2vHl59wAAAIo"]
[Thu Dec 11 16:39:03.483947 2025] [:error] [pid 27459:tid 27468] [client 45.128.199.190:61469] [client 45.128.199.190] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.190, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTqDJ1hPEXihPBKMpRMd-wAAAQc"]
[Thu Dec 11 16:45:30.025682 2025] [:error] [pid 57990:tid 58010] [client 34.151.198.67:37300] [client 34.151.198.67] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 34.151.198.67, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTqEqgqZT_dc36fQdXFOeQAAAA8"]
[Thu Dec 11 16:47:05.426923 2025] [:error] [pid 58099:tid 58121] [client 45.128.199.27:23879] [client 45.128.199.27] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.27, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTqFCcKZVSF_bdPFqRjZlQAAANQ"]
[Thu Dec 11 16:55:08.913018 2025] [:error] [pid 58099:tid 58108] [client 45.128.199.183:45495] [client 45.128.199.183] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.183, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTqG7MKZVSF_bdPFqRjbtgAAAMc"]
[Thu Dec 11 16:57:39.363756 2025] [:error] [pid 57991:tid 58035] [client 4.210.246.247:42794] [client 4.210.246.247] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.210.246.247, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTqHg6PyGmNXA2ZsETZ8EAAAAE0"]
[Thu Dec 11 16:57:44.532008 2025] [:error] [pid 57991:tid 58027] [client 4.210.246.247:42794] [client 4.210.246.247] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.210.246.247, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTqHiKPyGmNXA2ZsETZ8GAAAAEU"]
[Thu Dec 11 17:03:20.573186 2025] [:error] [pid 57992:tid 58073] [client 45.128.199.190:39809] [client 45.128.199.190] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.190, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTqI2OUeau0BMFF2vHmBRgAAAJg"]
[Thu Dec 11 17:11:36.914461 2025] [:error] [pid 57990:tid 58008] [client 45.128.199.51:50411] [client 45.128.199.51] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.51, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTqKyAqZT_dc36fQdXFU8QAAAA0"]
[Thu Dec 11 17:19:45.843666 2025] [:error] [pid 48261:tid 48285] [client 45.128.199.51:43539] [client 45.128.199.51] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.51, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTqMseyPI4WU-4JmiQOHagAAAZU"]
[Thu Dec 11 17:27:55.354727 2025] [:error] [pid 48261:tid 48285] [client 45.128.199.33:28833] [client 45.128.199.33] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.33, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTqOm-yPI4WU-4JmiQOLkQAAAZU"]
[Thu Dec 11 17:35:55.440042 2025] [:error] [pid 57990:tid 58007] [client 45.128.199.13:42607] [client 45.128.199.13] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.13, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTqQewqZT_dc36fQdXFcNgAAAAw"]
[Thu Dec 11 17:43:48.852121 2025] [:error] [pid 57992:tid 58062] [client 45.128.199.224:61187] [client 45.128.199.224] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.224, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTqSVOUeau0BMFF2vHmL1wAAAI0"]
[Thu Dec 11 17:51:55.103933 2025] [:error] [pid 57991:tid 58039] [client 45.128.199.253:38645] [client 45.128.199.253] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.253, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTqUO6PyGmNXA2ZsETaK7wAAAFE"]
[Thu Dec 11 17:59:56.773889 2025] [:error] [pid 48261:tid 48276] [client 45.128.199.51:41873] [client 45.128.199.51] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.51, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTqWHOyPI4WU-4JmiQOZWwAAAYw"]
[Thu Dec 11 18:07:17.505739 2025] [:error] [pid 48261:tid 48264] [client 4.233.19.103:5079] [client 4.233.19.103] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.233.19.103, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTqX1eyPI4WU-4JmiQOcWQAAAYA"]
[Thu Dec 11 18:07:25.787255 2025] [:error] [pid 48261:tid 48269] [client 4.233.19.103:18946] [client 4.233.19.103] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.233.19.103, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTqX3eyPI4WU-4JmiQOcdAAAAYU"]
[Thu Dec 11 18:07:58.447822 2025] [:error] [pid 48261:tid 48271] [client 45.128.199.29:54419] [client 45.128.199.29] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.29, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTqX_uyPI4WU-4JmiQOcxgAAAYc"]
[Thu Dec 11 18:10:50.485849 2025] [:error] [pid 48261:tid 48271] [client 178.63.98.224:48546] [client 178.63.98.224] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 178.63.98.224, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTqYquyPI4WU-4JmiQOdmQAAAYc"]
[Thu Dec 11 18:15:50.506086 2025] [:error] [pid 57991:tid 58038] [client 45.128.199.22:22321] [client 45.128.199.22] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.22, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTqZ1qPyGmNXA2ZsETaOugAAAFA"]
[Thu Dec 11 18:23:32.139933 2025] [:error] [pid 58814:tid 58826] [client 45.128.199.225:50495] [client 45.128.199.225] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.225, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTqbpNiz0l9AD_3pkMz-CwAAAco"]
[Thu Dec 11 18:31:03.831230 2025] [:error] [pid 57990:tid 58008] [client 45.128.199.35:59851] [client 45.128.199.35] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.35, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTqdZwqZT_dc36fQdXFpXQAAAA0"]
[Thu Dec 11 18:38:34.923155 2025] [:error] [pid 35112:tid 35128] [client 45.128.199.51:34399] [client 45.128.199.51] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.51, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTqfKp9ZpQ0WIeJhsJdREgAAAU4"]
[Thu Dec 11 18:46:04.373840 2025] [:error] [pid 27459:tid 27485] [client 45.128.199.5:35679] [client 45.128.199.5] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.5, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTqg7FhPEXihPBKMpRNChwAAARg"]
[Thu Dec 11 18:53:32.085117 2025] [:error] [pid 58814:tid 58836] [client 45.128.199.251:61659] [client 45.128.199.251] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.251, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTqirNiz0l9AD_3pkMwMjwAAAdQ"]
[Thu Dec 11 19:01:01.980816 2025] [:error] [pid 27459:tid 27467] [client 45.128.199.23:36315] [client 45.128.199.23] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.23, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTqkbVhPEXihPBKMpRNGVQAAAQY"]
[Thu Dec 11 19:08:37.175899 2025] [:error] [pid 58814:tid 58817] [client 45.128.199.24:65099] [client 45.128.199.24] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.24, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTqmNdiz0l9AD_3pkMwS2gAAAcE"]
[Thu Dec 11 19:16:11.535273 2025] [:error] [pid 57990:tid 58003] [client 45.128.199.9:39251] [client 45.128.199.9] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.9, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTqn-wqZT_dc36fQdXFzhQAAAAg"]
[Thu Dec 11 19:23:41.158420 2025] [:error] [pid 57991:tid 58035] [client 45.128.199.20:52247] [client 45.128.199.20] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.20, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTqpvaPyGmNXA2ZsETakNgAAAE0"]
[Thu Dec 11 19:31:21.813410 2025] [:error] [pid 27459:tid 27467] [client 45.128.199.253:41997] [client 45.128.199.253] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.253, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTqriVhPEXihPBKMpRNNCwAAAQY"]
[Thu Dec 11 19:32:11.765079 2025] [:error] [pid 58814:tid 58821] [client 88.99.242.15:37280] [client 88.99.242.15] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 88.99.242.15, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTqru9iz0l9AD_3pkMwaGQAAAcU"]
[Thu Dec 11 19:38:55.409846 2025] [:error] [pid 48261:tid 48282] [client 45.128.199.251:48301] [client 45.128.199.251] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.251, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTqtT-yPI4WU-4JmiQO0dQAAAZI"]
[Thu Dec 11 19:46:29.137614 2025] [:error] [pid 57992:tid 58065] [client 45.128.199.19:64153] [client 45.128.199.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.19, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTqvFeUeau0BMFF2vHmojAAAAJA"]
[Thu Dec 11 19:53:59.864173 2025] [:error] [pid 24527:tid 24558] [client 45.128.199.24:27589] [client 45.128.199.24] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.24, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTqw119_glvtS5vXiTX6nQAAAoI"]
[Thu Dec 11 20:01:29.191954 2025] [:error] [pid 57991:tid 58028] [client 45.128.199.5:31591] [client 45.128.199.5] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.5, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTqymaPyGmNXA2ZsETavcwAAAEY"]
[Thu Dec 11 20:09:04.809295 2025] [:error] [pid 48261:tid 48275] [client 45.128.199.28:60423] [client 45.128.199.28] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.28, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTq0YOyPI4WU-4JmiQO7NQAAAYs"]
[Thu Dec 11 20:24:20.594822 2025] [:error] [pid 27459:tid 27467] [client 45.128.199.253:47185] [client 45.128.199.253] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.253, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTq39FhPEXihPBKMpRNaAQAAAQY"]
[Thu Dec 11 20:31:55.459756 2025] [:error] [pid 35112:tid 35136] [client 45.128.199.251:57227] [client 45.128.199.251] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.251, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTq5u59ZpQ0WIeJhsJdpOgAAAVY"]
[Thu Dec 11 20:39:31.047325 2025] [:error] [pid 58099:tid 58102] [client 45.128.199.27:49297] [client 45.128.199.27] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.27, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTq7g8KZVSF_bdPFqRgXVQAAAME"]
[Thu Dec 11 20:46:58.757755 2025] [:error] [pid 58814:tid 58824] [client 45.128.199.34:58683] [client 45.128.199.34] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.34, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTq9Qtiz0l9AD_3pkMw1EgAAAcg"]
[Thu Dec 11 20:54:21.527459 2025] [:error] [pid 27459:tid 27485] [client 45.128.199.20:36327] [client 45.128.199.20] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.20, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTq-_VhPEXihPBKMpRNgSQAAARg"]
[Thu Dec 11 20:56:54.884120 2025] [:error] [pid 58814:tid 58824] [client 34.252.216.45:45818] [client 34.252.216.45] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 34.252.216.45, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTq_ltiz0l9AD_3pkMw3rAAAAcg"]
[Thu Dec 11 21:01:55.984519 2025] [:error] [pid 58814:tid 58816] [client 45.128.199.10:65261] [client 45.128.199.10] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.10, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTrAw9iz0l9AD_3pkMw5YQAAAcA"]
[Thu Dec 11 21:09:32.962956 2025] [:error] [pid 57992:tid 58053] [client 45.128.199.13:52663] [client 45.128.199.13] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.13, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTrCjOUeau0BMFF2vHm1xQAAAIQ"]
[Thu Dec 11 21:17:06.251933 2025] [:error] [pid 48261:tid 48269] [client 45.128.199.177:32275] [client 45.128.199.177] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.177, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTrEUuyPI4WU-4JmiQPGuAAAAYU"]
[Thu Dec 11 21:24:41.083937 2025] [:error] [pid 24527:tid 24567] [client 45.128.199.16:34777] [client 45.128.199.16] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.16, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTrGGV9_glvtS5vXiTUSTQAAAos"]
[Thu Dec 11 21:32:14.849248 2025] [:error] [pid 57991:tid 58022] [client 45.128.199.179:45681] [client 45.128.199.179] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.179, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTrH3qPyGmNXA2ZsETa_fgAAAEA"]
[Thu Dec 11 21:39:51.828804 2025] [:error] [pid 24527:tid 24577] [client 45.128.199.253:36221] [client 45.128.199.253] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.253, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTrJp19_glvtS5vXiTUVGAAAApU"]
[Thu Dec 11 21:47:23.451124 2025] [:error] [pid 48261:tid 48276] [client 45.128.199.34:49879] [client 45.128.199.34] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.34, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTrLa-yPI4WU-4JmiQPLjQAAAYw"]
[Thu Dec 11 21:54:57.703086 2025] [:error] [pid 58099:tid 58120] [client 45.128.199.3:43113] [client 45.128.199.3] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.3, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTrNMcKZVSF_bdPFqRgmTgAAANM"]
[Thu Dec 11 22:02:39.116225 2025] [:error] [pid 57991:tid 58024] [client 45.128.199.190:56975] [client 45.128.199.190] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.190, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTrO_6PyGmNXA2ZsETbErAAAAEI"]
[Thu Dec 11 22:10:18.369409 2025] [:error] [pid 24527:tid 24562] [client 45.128.199.183:37611] [client 45.128.199.183] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.183, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTrQyl9_glvtS5vXiTUeZQAAAoY"]
[Thu Dec 11 22:18:00.867828 2025] [:error] [pid 57991:tid 58039] [client 45.8.17.133:39007] [client 45.8.17.133] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.133, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTrSmKPyGmNXA2ZsETbHFwAAAFE"]
[Thu Dec 11 22:25:25.958600 2025] [:error] [pid 24483:tid 24488] [client 34.151.198.67:37452] [client 34.151.198.67] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 34.151.198.67, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTrUVVGHKh2d_uVkopRx7wAAAgM"]
[Thu Dec 11 22:25:30.896898 2025] [:error] [pid 48261:tid 48281] [client 45.128.199.27:37689] [client 45.128.199.27] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.27, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTrUWuyPI4WU-4JmiQPSWAAAAZE"]
[Thu Dec 11 22:33:05.687407 2025] [:error] [pid 58814:tid 58826] [client 45.128.199.8:38397] [client 45.128.199.8] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.8, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTrWIdiz0l9AD_3pkMxaxgAAAco"]
[Thu Dec 11 22:40:37.943702 2025] [:error] [pid 4462:tid 4492] [client 45.128.199.179:44145] [client 45.128.199.179] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.179, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTrX5cxEbl7Af0FrMT-M0wAAABc"]
[Thu Dec 11 22:42:52.853387 2025] [:error] [pid 4462:tid 4481] [client 43.153.36.110:33986] [client 43.153.36.110] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.paramountbaldivis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.paramountbaldivis.com"] [uri "/"] [unique_id "aTrYbMxEbl7Af0FrMT-NSAAAAAw"]
[Thu Dec 11 22:46:37.854195 2025] [:error] [pid 4463:tid 4505] [client 185.177.72.10:40908] [client 185.177.72.10] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paramountbaldivis.com"] [uri "/.git/config"] [unique_id "aTrZTcWRoGq8qZybgKXjWQAAAEk"]
[Thu Dec 11 22:48:11.622579 2025] [:error] [pid 4464:tid 4543] [client 45.128.199.13:54823] [client 45.128.199.13] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.13, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTrZq074RHTpQwGFIyZPQAAAAJE"]
[Thu Dec 11 22:48:45.310418 2025] [:error] [pid 4462:tid 4470] [client 185.177.72.10:35024] [client 185.177.72.10] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.paramountbaldivis.com"] [uri "/.git/config"] [unique_id "aTrZzcxEbl7Af0FrMT-PpwAAAAE"]
[Thu Dec 11 22:55:44.365018 2025] [:error] [pid 4911:tid 4926] [client 45.128.199.179:54403] [client 45.128.199.179] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.179, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTrbcA-tKegTX9jNpJkYYwAAAUw"]
[Thu Dec 11 23:03:17.505810 2025] [:error] [pid 4463:tid 4501] [client 45.128.199.251:42029] [client 45.128.199.251] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.251, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTrdNcWRoGq8qZybgKXnbQAAAEU"]
[Thu Dec 11 23:10:54.900498 2025] [:error] [pid 4463:tid 4514] [client 45.128.199.22:31845] [client 45.128.199.22] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.22, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTre_sWRoGq8qZybgKXpPgAAAFI"]
[Thu Dec 11 23:18:31.112628 2025] [:error] [pid 4564:tid 4587] [client 45.128.199.177:46051] [client 45.128.199.177] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.177, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTrgx5jzC8Q_-qV1DxWlVwAAANQ"]
[Thu Dec 11 23:26:04.524066 2025] [:error] [pid 4864:tid 4888] [client 45.128.199.7:37433] [client 45.128.199.7] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.7, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTrijGVhcrADVU33AP4yiAAAARY"]
[Thu Dec 11 23:33:40.268744 2025] [:error] [pid 4911:tid 4917] [client 45.128.199.21:35939] [client 45.128.199.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.21, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTrkVA-tKegTX9jNpJko1AAAAUM"]
[Thu Dec 11 23:41:14.781352 2025] [:error] [pid 4564:tid 4578] [client 45.128.199.34:27039] [client 45.128.199.34] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.34, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTrmGpjzC8Q_-qV1DxWriwAAAMs"]
[Thu Dec 11 23:48:53.215396 2025] [:error] [pid 4462:tid 4471] [client 45.128.199.251:20519] [client 45.128.199.251] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.251, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTrn5cxEbl7Af0FrMT-eegAAAAI"]
[Thu Dec 11 23:56:21.488005 2025] [:error] [pid 4463:tid 4513] [client 45.128.199.20:21965] [client 45.128.199.20] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.20, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTrppcWRoGq8qZybgKXy5wAAAFE"]
[Fri Dec 12 00:03:59.497340 2025] [:error] [pid 4463:tid 4500] [client 45.128.199.251:29229] [client 45.128.199.251] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.251, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTrrb8WRoGq8qZybgKX0kwAAAEQ"]
[Fri Dec 12 00:08:43.828964 2025] [:error] [pid 4911:tid 4926] [client 162.62.213.165:52236] [client 162.62.213.165] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||paramountbaldivis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTrsiw-tKegTX9jNpJkz3QAAAUw"]
[Fri Dec 12 00:11:41.541423 2025] [:error] [pid 53522:tid 53546] [client 45.128.199.224:40231] [client 45.128.199.224] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.224, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTrtPQ73fYFRtoUtdzEAYwAAAZY"]
[Fri Dec 12 00:19:23.620959 2025] [:error] [pid 53522:tid 53544] [client 45.128.199.223:27823] [client 45.128.199.223] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.223, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTrvCw73fYFRtoUtdzECaAAAAZQ"]
[Fri Dec 12 00:26:59.585642 2025] [:error] [pid 53552:tid 53561] [client 45.128.199.8:27707] [client 45.128.199.8] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.8, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTrw0wRA1W2830SPmKa64gAAAAc"]
[Fri Dec 12 00:34:36.440388 2025] [:error] [pid 65374:tid 65385] [client 45.128.199.9:53645] [client 45.128.199.9] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.9, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTrynPwxTYxIt4J3WeoH2gAAAEc"]
[Fri Dec 12 00:42:12.166870 2025] [:error] [pid 65374:tid 65386] [client 45.128.199.13:49115] [client 45.128.199.13] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.13, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTr0ZPwxTYxIt4J3WeoKzgAAAEg"]
[Fri Dec 12 00:50:01.127833 2025] [:error] [pid 53465:tid 53499] [client 45.8.17.140:40169] [client 45.8.17.140] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.140, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTr2OeV5ilx5SpOsBcLdcAAAAQQ"]
[Fri Dec 12 01:16:38.404878 2025] [:error] [pid 65374:tid 65381] [client 20.214.246.40:24512] [client 20.214.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-blog.php"] [unique_id "aTr8dvwxTYxIt4J3WeodBgAAAEM"]
[Fri Dec 12 01:16:40.654392 2025] [:error] [pid 53552:tid 53573] [client 20.214.246.40:24536] [client 20.214.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-blog.php"] [unique_id "aTr8eARA1W2830SPmKbPMgAAABM"]
[Fri Dec 12 01:16:43.222913 2025] [:error] [pid 53552:tid 53570] [client 20.214.246.40:24540] [client 20.214.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-blog.php"] [unique_id "aTr8ewRA1W2830SPmKbPNQAAABA"]
[Fri Dec 12 01:16:44.813684 2025] [:error] [pid 53464:tid 53484] [client 20.214.246.40:24453] [client 20.214.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-blog.php"] [unique_id "aTr8fI6Oxa1m77UpSzk-PgAAANA"]
[Fri Dec 12 01:16:46.169627 2025] [:error] [pid 65374:tid 65380] [client 20.214.246.40:24535] [client 20.214.246.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "paramountbaldivis.com"] [uri "/fm.php"] [unique_id "aTr8fvwxTYxIt4J3WeodEwAAAEI"]
[Fri Dec 12 01:16:47.567764 2025] [:error] [pid 53465:tid 53499] [client 20.214.246.40:24555] [client 20.214.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/bolt.php"] [unique_id "aTr8f-V5ilx5SpOsBcLnSQAAAQQ"]
[Fri Dec 12 01:16:48.533489 2025] [:error] [pid 53465:tid 53501] [client 20.214.246.40:24554] [client 20.214.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/bolt.php"] [unique_id "aTr8gOV5ilx5SpOsBcLnTQAAAQY"]
[Fri Dec 12 01:16:49.455731 2025] [:error] [pid 53522:tid 53534] [client 20.214.246.40:24574] [client 20.214.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/bolt.php"] [unique_id "aTr8gQ73fYFRtoUtdzEVvAAAAYo"]
[Fri Dec 12 01:16:51.247384 2025] [:error] [pid 53465:tid 53508] [client 20.214.246.40:24568] [client 20.214.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/bolt.php"] [unique_id "aTr8g-V5ilx5SpOsBcLnVgAAAQ0"]
[Fri Dec 12 01:16:52.375557 2025] [:error] [pid 53522:tid 53529] [client 20.214.246.40:24569] [client 20.214.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/about.php"] [unique_id "aTr8hA73fYFRtoUtdzEVwAAAAYU"]
[Fri Dec 12 01:16:54.007152 2025] [:error] [pid 65374:tid 65380] [client 20.214.246.40:24521] [client 20.214.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/about.php"] [unique_id "aTr8hvwxTYxIt4J3WeodIQAAAEI"]
[Fri Dec 12 01:16:56.592859 2025] [:error] [pid 53552:tid 53554] [client 20.214.246.40:24473] [client 20.214.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/about.php"] [unique_id "aTr8iARA1W2830SPmKbPQAAAAAA"]
[Fri Dec 12 01:16:58.339080 2025] [:error] [pid 53465:tid 53510] [client 20.214.246.40:24499] [client 20.214.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/about.php"] [unique_id "aTr8iuV5ilx5SpOsBcLnbAAAAQ8"]
[Fri Dec 12 01:16:59.368533 2025] [:error] [pid 53522:tid 53524] [client 20.214.246.40:24575] [client 20.214.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/goods.php"] [unique_id "aTr8iw73fYFRtoUtdzEVxQAAAYA"]
[Fri Dec 12 01:17:00.203753 2025] [:error] [pid 53522:tid 53545] [client 20.214.246.40:24482] [client 20.214.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/goods.php"] [unique_id "aTr8jA73fYFRtoUtdzEVxwAAAZU"]
[Fri Dec 12 01:17:02.082331 2025] [:error] [pid 65374:tid 65400] [client 20.214.246.40:24455] [client 20.214.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/goods.php"] [unique_id "aTr8jvwxTYxIt4J3WeodLAAAAFY"]
[Fri Dec 12 01:17:03.505708 2025] [:error] [pid 65374:tid 65382] [client 20.214.246.40:24469] [client 20.214.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/goods.php"] [unique_id "aTr8j_wxTYxIt4J3WeodMwAAAEQ"]
[Fri Dec 12 01:17:04.738749 2025] [:error] [pid 53522:tid 53529] [client 20.214.246.40:24565] [client 20.214.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ahax.php"] [unique_id "aTr8kA73fYFRtoUtdzEVzwAAAYU"]
[Fri Dec 12 01:17:05.349894 2025] [:error] [pid 65374:tid 65381] [client 20.214.246.40:24459] [client 20.214.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ahax.php"] [unique_id "aTr8kfwxTYxIt4J3WeodOAAAAEM"]
[Fri Dec 12 01:17:07.910055 2025] [:error] [pid 53522:tid 53537] [client 20.214.246.40:24551] [client 20.214.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ahax.php"] [unique_id "aTr8kw73fYFRtoUtdzEV2gAAAY0"]
[Fri Dec 12 01:17:09.257979 2025] [:error] [pid 53465:tid 53519] [client 20.214.246.40:24518] [client 20.214.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ahax.php"] [unique_id "aTr8leV5ilx5SpOsBcLncQAAARg"]
[Fri Dec 12 01:17:10.456604 2025] [:error] [pid 53552:tid 53575] [client 20.214.246.40:24471] [client 20.214.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/dejavu.php"] [unique_id "aTr8lgRA1W2830SPmKbPXAAAABU"]
[Fri Dec 12 01:17:11.345678 2025] [:error] [pid 53465:tid 53514] [client 20.214.246.40:23362] [client 20.214.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/dejavu.php"] [unique_id "aTr8l-V5ilx5SpOsBcLndAAAARM"]
[Fri Dec 12 01:17:12.110076 2025] [:error] [pid 53522:tid 53548] [client 20.214.246.40:24509] [client 20.214.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/dejavu.php"] [unique_id "aTr8mA73fYFRtoUtdzEV5gAAAZg"]
[Fri Dec 12 01:17:12.840665 2025] [:error] [pid 65374:tid 65378] [client 20.214.246.40:24449] [client 20.214.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/dejavu.php"] [unique_id "aTr8mPwxTYxIt4J3WeodQQAAAEA"]
[Fri Dec 12 01:17:13.995028 2025] [:error] [pid 65374:tid 65381] [client 20.214.246.40:24567] [client 20.214.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/index.php"] [unique_id "aTr8mfwxTYxIt4J3WeodQgAAAEM"]
[Fri Dec 12 01:17:16.139725 2025] [:error] [pid 65374:tid 65401] [client 20.214.246.40:24573] [client 20.214.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/index.php"] [unique_id "aTr8nPwxTYxIt4J3WeodSAAAAFc"]
[Fri Dec 12 01:17:16.863925 2025] [:error] [pid 53465:tid 53509] [client 20.214.246.40:24546] [client 20.214.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/index.php"] [unique_id "aTr8nOV5ilx5SpOsBcLneQAAAQ4"]
[Fri Dec 12 01:17:19.429062 2025] [:error] [pid 53464:tid 53485] [client 20.214.246.40:24463] [client 20.214.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/index.php"] [unique_id "aTr8n46Oxa1m77UpSzk-WQAAANE"]
[Fri Dec 12 01:17:20.652458 2025] [:error] [pid 53552:tid 53554] [client 20.214.246.40:24537] [client 20.214.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/pepe.php"] [unique_id "aTr8oARA1W2830SPmKbPXQAAAAA"]
[Fri Dec 12 01:17:21.596685 2025] [:error] [pid 53552:tid 53568] [client 20.214.246.40:24542] [client 20.214.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/pepe.php"] [unique_id "aTr8oQRA1W2830SPmKbPXwAAAA4"]
[Fri Dec 12 01:17:24.745813 2025] [:error] [pid 65374:tid 65390] [client 20.214.246.40:24466] [client 20.214.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/pepe.php"] [unique_id "aTr8pPwxTYxIt4J3WeodUwAAAEw"]
[Fri Dec 12 01:17:26.479512 2025] [:error] [pid 53464:tid 53490] [client 20.214.246.40:24458] [client 20.214.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/pepe.php"] [unique_id "aTr8po6Oxa1m77UpSzk-cAAAANY"]
[Fri Dec 12 01:17:27.759363 2025] [:error] [pid 53552:tid 53574] [client 20.214.246.40:24482] [client 20.214.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/public/z.php"] [unique_id "aTr8pwRA1W2830SPmKbPaAAAABQ"]
[Fri Dec 12 01:17:28.825312 2025] [:error] [pid 53465:tid 53497] [client 20.214.246.40:24480] [client 20.214.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/public/z.php"] [unique_id "aTr8qOV5ilx5SpOsBcLnhAAAAQI"]
[Fri Dec 12 01:17:29.994119 2025] [:error] [pid 65374:tid 65379] [client 20.214.246.40:24503] [client 20.214.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/public/z.php"] [unique_id "aTr8qfwxTYxIt4J3WeodWQAAAEE"]
[Fri Dec 12 01:17:31.666739 2025] [:error] [pid 53552:tid 53573] [client 20.214.246.40:24472] [client 20.214.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/public/z.php"] [unique_id "aTr8qwRA1W2830SPmKbPbwAAABM"]
[Fri Dec 12 01:17:33.416996 2025] [:error] [pid 65374:tid 65383] [client 20.214.246.40:24465] [client 20.214.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-update.php"] [unique_id "aTr8rfwxTYxIt4J3WeodXwAAAEU"]
[Fri Dec 12 01:17:35.471524 2025] [:error] [pid 65374:tid 65381] [client 20.214.246.40:24483] [client 20.214.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-update.php"] [unique_id "aTr8r_wxTYxIt4J3WeodZAAAAEM"]
[Fri Dec 12 01:17:57.554966 2025] [:error] [pid 53465:tid 53509] [client 20.214.246.40:24559] [client 20.214.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/alfa.php"] [unique_id "aTr8xeV5ilx5SpOsBcLnnQAAAQ4"]
[Fri Dec 12 01:17:59.396662 2025] [:error] [pid 65374:tid 65387] [client 20.214.246.40:24534] [client 20.214.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/alfa.php"] [unique_id "aTr8x_wxTYxIt4J3WeodcwAAAEk"]
[Fri Dec 12 01:18:01.009069 2025] [:error] [pid 53522:tid 53543] [client 20.214.246.40:24481] [client 20.214.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/alfa.php"] [unique_id "aTr8yQ73fYFRtoUtdzEWNQAAAZM"]
[Fri Dec 12 01:18:02.008140 2025] [:error] [pid 65374:tid 65397] [client 20.214.246.40:24448] [client 20.214.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/alfa.php"] [unique_id "aTr8yvwxTYxIt4J3WeoddwAAAFM"]
[Fri Dec 12 01:18:03.847877 2025] [:error] [pid 65374:tid 65400] [client 20.214.246.40:24571] [client 20.214.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/lv.php"] [unique_id "aTr8y_wxTYxIt4J3WeodewAAAFY"]
[Fri Dec 12 01:18:05.658490 2025] [:error] [pid 53552:tid 53567] [client 20.214.246.40:24485] [client 20.214.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/lv.php"] [unique_id "aTr8zQRA1W2830SPmKbPlwAAAA0"]
[Fri Dec 12 01:18:06.760931 2025] [:error] [pid 53465:tid 53512] [client 20.214.246.40:24556] [client 20.214.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/lv.php"] [unique_id "aTr8zuV5ilx5SpOsBcLnqQAAARE"]
[Fri Dec 12 01:18:08.009982 2025] [:error] [pid 53465:tid 53518] [client 20.214.246.40:24495] [client 20.214.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/lv.php"] [unique_id "aTr80OV5ilx5SpOsBcLnqgAAARc"]
[Fri Dec 12 01:18:12.550433 2025] [:error] [pid 65374:tid 65385] [client 20.214.246.40:24492] [client 20.214.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/admin.php"] [unique_id "aTr81PwxTYxIt4J3WeodkAAAAEc"]
[Fri Dec 12 01:18:14.087880 2025] [:error] [pid 53522:tid 53527] [client 20.214.246.40:24529] [client 20.214.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/admin.php"] [unique_id "aTr81g73fYFRtoUtdzEWPQAAAYM"]
[Fri Dec 12 01:18:15.659148 2025] [:error] [pid 53465:tid 53497] [client 20.214.246.40:24562] [client 20.214.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/admin.php"] [unique_id "aTr81-V5ilx5SpOsBcLnrAAAAQI"]
[Fri Dec 12 01:18:17.258239 2025] [:error] [pid 53552:tid 53557] [client 20.214.246.40:24497] [client 20.214.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/admin.php"] [unique_id "aTr82QRA1W2830SPmKbPvgAAAAM"]
[Fri Dec 12 01:18:18.597327 2025] [:error] [pid 53552:tid 53572] [client 20.214.246.40:24538] [client 20.214.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/nc4.php"] [unique_id "aTr82gRA1W2830SPmKbPwQAAABI"]
[Fri Dec 12 01:18:32.848979 2025] [:error] [pid 53552:tid 53567] [client 20.214.246.40:24490] [client 20.214.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/nc4.php"] [unique_id "aTr86ARA1W2830SPmKbQKAAAAA0"]
[Fri Dec 12 01:18:34.811217 2025] [:error] [pid 53464:tid 53480] [client 20.214.246.40:24488] [client 20.214.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/k.php"] [unique_id "aTr86o6Oxa1m77UpSzk-mAAAAMw"]
[Fri Dec 12 01:18:36.957185 2025] [:error] [pid 53522:tid 53531] [client 20.214.246.40:24508] [client 20.214.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/k.php"] [unique_id "aTr87A73fYFRtoUtdzEWUwAAAYc"]
[Fri Dec 12 01:18:38.279759 2025] [:error] [pid 53552:tid 53570] [client 20.214.246.40:24460] [client 20.214.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/k.php"] [unique_id "aTr87gRA1W2830SPmKbQYAAAABA"]
[Fri Dec 12 01:18:40.541344 2025] [:error] [pid 53522:tid 53533] [client 20.214.246.40:24504] [client 20.214.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/k.php"] [unique_id "aTr88A73fYFRtoUtdzEWmgAAAYk"]
[Fri Dec 12 01:18:46.596714 2025] [:error] [pid 53522:tid 53529] [client 20.214.246.40:23398] [client 20.214.246.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "paramountbaldivis.com"] [uri "/fm.php"] [unique_id "aTr89g73fYFRtoUtdzEWvwAAAYU"]
[Fri Dec 12 01:18:48.640715 2025] [:error] [pid 65374:tid 65388] [client 20.214.246.40:23371] [client 20.214.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/manager.php"] [unique_id "aTr8-PwxTYxIt4J3WeodugAAAEo"]
[Fri Dec 12 01:19:18.100247 2025] [:error] [pid 53464:tid 53469] [client 20.214.246.40:23380] [client 20.214.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp.php"] [unique_id "aTr9Fo6Oxa1m77UpSzk-ugAAAME"]
[Fri Dec 12 01:19:20.450686 2025] [:error] [pid 65374:tid 65399] [client 20.214.246.40:23376] [client 20.214.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp.php"] [unique_id "aTr9GPwxTYxIt4J3WeoeSgAAAFU"]
[Fri Dec 12 01:19:23.937563 2025] [:error] [pid 53522:tid 53540] [client 20.214.246.40:24570] [client 20.214.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp.php"] [unique_id "aTr9Gw73fYFRtoUtdzEXBAAAAZA"]
[Fri Dec 12 01:19:25.310771 2025] [:error] [pid 65374:tid 65400] [client 20.214.246.40:24500] [client 20.214.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp.php"] [unique_id "aTr9HfwxTYxIt4J3WeoeUQAAAFY"]
[Fri Dec 12 01:19:26.450725 2025] [:error] [pid 53522:tid 53525] [client 20.214.246.40:23403] [client 20.214.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/v3.php"] [unique_id "aTr9Hg73fYFRtoUtdzEXBQAAAYE"]
[Fri Dec 12 01:19:29.551469 2025] [:error] [pid 53464:tid 53491] [client 20.214.246.40:24487] [client 20.214.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/v3.php"] [unique_id "aTr9IY6Oxa1m77UpSzk-xAAAANc"]
[Fri Dec 12 01:19:31.195660 2025] [:error] [pid 53465:tid 53495] [client 20.214.246.40:23400] [client 20.214.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/v3.php"] [unique_id "aTr9I-V5ilx5SpOsBcLoFQAAAQA"]
[Fri Dec 12 01:19:31.808061 2025] [:error] [pid 53465:tid 53519] [client 20.214.246.40:23419] [client 20.214.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/v3.php"] [unique_id "aTr9I-V5ilx5SpOsBcLoFgAAARg"]
[Fri Dec 12 01:19:42.661359 2025] [:error] [pid 65374:tid 65397] [client 20.214.246.40:23361] [client 20.214.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/lib.php"] [unique_id "aTr9LvwxTYxIt4J3WeoehAAAAFM"]
[Fri Dec 12 01:19:43.776921 2025] [:error] [pid 53522:tid 53540] [client 20.214.246.40:24473] [client 20.214.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/lib.php"] [unique_id "aTr9Lw73fYFRtoUtdzEXEwAAAZA"]
[Fri Dec 12 01:19:44.761687 2025] [:error] [pid 65374:tid 65391] [client 20.214.246.40:23408] [client 20.214.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/lib.php"] [unique_id "aTr9MPwxTYxIt4J3WeoejAAAAE0"]
[Fri Dec 12 01:19:47.002016 2025] [:error] [pid 53522:tid 53534] [client 20.214.246.40:23411] [client 20.214.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/lib.php"] [unique_id "aTr9Mw73fYFRtoUtdzEXGQAAAYo"]
[Fri Dec 12 01:19:47.910408 2025] [:error] [pid 53552:tid 53572] [client 20.214.246.40:24486] [client 20.214.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/class9.php"] [unique_id "aTr9MwRA1W2830SPmKbRHwAAABI"]
[Fri Dec 12 01:19:50.118523 2025] [:error] [pid 65374:tid 65379] [client 20.214.246.40:23372] [client 20.214.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/class9.php"] [unique_id "aTr9NvwxTYxIt4J3WeoelAAAAEE"]
[Fri Dec 12 01:19:51.654149 2025] [:error] [pid 53522:tid 53542] [client 20.214.246.40:24505] [client 20.214.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/class9.php"] [unique_id "aTr9Nw73fYFRtoUtdzEXJAAAAZI"]
[Fri Dec 12 01:19:52.471054 2025] [:error] [pid 53522:tid 53533] [client 20.214.246.40:23375] [client 20.214.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/class9.php"] [unique_id "aTr9OA73fYFRtoUtdzEXJgAAAYk"]
[Fri Dec 12 01:20:00.896289 2025] [:error] [pid 65374:tid 65393] [client 20.214.246.40:23365] [client 20.214.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wsd.php"] [unique_id "aTr9QPwxTYxIt4J3WeoepQAAAE8"]
[Fri Dec 12 01:20:01.877979 2025] [:error] [pid 65374:tid 65388] [client 20.214.246.40:23377] [client 20.214.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wsd.php"] [unique_id "aTr9QfwxTYxIt4J3WeoeqgAAAEo"]
[Fri Dec 12 01:20:05.706830 2025] [:error] [pid 53465:tid 53496] [client 20.214.246.40:23395] [client 20.214.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wsd.php"] [unique_id "aTr9ReV5ilx5SpOsBcLoQwAAAQE"]
[Fri Dec 12 01:20:15.388947 2025] [:error] [pid 53552:tid 53563] [client 20.214.246.40:23414] [client 20.214.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ioxi-o.php"] [unique_id "aTr9TwRA1W2830SPmKbRMQAAAAk"]
[Fri Dec 12 01:20:35.590903 2025] [:error] [pid 53464:tid 53483] [client 20.214.246.40:24511] [client 20.214.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/gm.php"] [unique_id "aTr9Y46Oxa1m77UpSzk_QgAAAM8"]
[Fri Dec 12 01:20:37.097233 2025] [:error] [pid 53552:tid 53574] [client 20.214.246.40:23364] [client 20.214.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/gm.php"] [unique_id "aTr9ZQRA1W2830SPmKbRTAAAABQ"]
[Fri Dec 12 01:20:39.904183 2025] [:error] [pid 65374:tid 65394] [client 20.214.246.40:23320] [client 20.214.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/gm.php"] [unique_id "aTr9Z_wxTYxIt4J3Weoe-QAAAFA"]
[Fri Dec 12 01:20:42.718057 2025] [:error] [pid 65374:tid 65395] [client 20.214.246.40:23410] [client 20.214.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/gm.php"] [unique_id "aTr9avwxTYxIt4J3Weoe_AAAAFE"]
[Fri Dec 12 01:20:45.109194 2025] [:error] [pid 53522:tid 53531] [client 20.214.246.40:24516] [client 20.214.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/autoload_classmap.php"] [unique_id "aTr9bQ73fYFRtoUtdzEXZAAAAYc"]
[Fri Dec 12 01:20:47.699391 2025] [:error] [pid 53552:tid 53574] [client 20.214.246.40:23387] [client 20.214.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/autoload_classmap.php"] [unique_id "aTr9bwRA1W2830SPmKbRYAAAABQ"]
[Fri Dec 12 01:20:48.753388 2025] [:error] [pid 53464:tid 53470] [client 20.214.246.40:23370] [client 20.214.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/autoload_classmap.php"] [unique_id "aTr9cI6Oxa1m77UpSzk_VwAAAMI"]
[Fri Dec 12 01:20:50.581344 2025] [:error] [pid 53465:tid 53503] [client 20.214.246.40:24550] [client 20.214.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/autoload_classmap.php"] [unique_id "aTr9cuV5ilx5SpOsBcLogQAAAQg"]
[Fri Dec 12 01:20:51.263955 2025] [:error] [pid 65374:tid 65402] [client 20.214.246.40:23352] [client 20.214.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/abc.php"] [unique_id "aTr9c_wxTYxIt4J3WeofBwAAAFg"]
[Fri Dec 12 01:20:56.559626 2025] [:error] [pid 53464:tid 53476] [client 20.214.246.40:23357] [client 20.214.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/abc.php"] [unique_id "aTr9eI6Oxa1m77UpSzk_ZQAAAMg"]
[Fri Dec 12 01:20:57.613864 2025] [:error] [pid 53465:tid 53508] [client 20.214.246.40:23399] [client 20.214.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/abc.php"] [unique_id "aTr9eeV5ilx5SpOsBcLojAAAAQ0"]
[Fri Dec 12 01:20:59.063191 2025] [:error] [pid 53464:tid 53488] [client 20.214.246.40:23308] [client 20.214.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/abc.php"] [unique_id "aTr9e46Oxa1m77UpSzk_aAAAANQ"]
[Fri Dec 12 01:21:01.424502 2025] [:error] [pid 53552:tid 53565] [client 20.214.246.40:23385] [client 20.214.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/an.php"] [unique_id "aTr9fQRA1W2830SPmKbRkwAAAAs"]
[Fri Dec 12 01:21:03.337967 2025] [:error] [pid 65374:tid 65378] [client 20.214.246.40:23313] [client 20.214.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/an.php"] [unique_id "aTr9f_wxTYxIt4J3WeofIQAAAEA"]
[Fri Dec 12 01:21:03.938961 2025] [:error] [pid 65374:tid 65387] [client 20.214.246.40:24574] [client 20.214.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/an.php"] [unique_id "aTr9f_wxTYxIt4J3WeofJQAAAEk"]
[Fri Dec 12 01:21:06.324609 2025] [:error] [pid 53464:tid 53489] [client 20.214.246.40:23319] [client 20.214.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/an.php"] [unique_id "aTr9go6Oxa1m77UpSzk_bAAAANU"]
[Fri Dec 12 01:21:07.283703 2025] [:error] [pid 53552:tid 53565] [client 20.214.246.40:23306] [client 20.214.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/blox.php"] [unique_id "aTr9gwRA1W2830SPmKbRowAAAAs"]
[Fri Dec 12 01:21:09.928898 2025] [:error] [pid 65374:tid 65397] [client 20.214.246.40:23310] [client 20.214.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/blox.php"] [unique_id "aTr9hfwxTYxIt4J3WeofLwAAAFM"]
[Fri Dec 12 01:21:10.707402 2025] [:error] [pid 53464:tid 53490] [client 20.214.246.40:24464] [client 20.214.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/blox.php"] [unique_id "aTr9ho6Oxa1m77UpSzk_cgAAANY"]
[Fri Dec 12 01:21:11.750325 2025] [:error] [pid 53522:tid 53532] [client 20.214.246.40:23374] [client 20.214.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/blox.php"] [unique_id "aTr9hw73fYFRtoUtdzEXgAAAAYg"]
[Fri Dec 12 01:21:12.628615 2025] [:error] [pid 53552:tid 53571] [client 20.214.246.40:23416] [client 20.214.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/scx.php7"] [unique_id "aTr9iARA1W2830SPmKbRsAAAABE"]
[Fri Dec 12 01:21:13.198975 2025] [:error] [pid 53522:tid 53542] [client 20.214.246.40:24569] [client 20.214.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/scx.php7"] [unique_id "aTr9iQ73fYFRtoUtdzEXgQAAAZI"]
[Fri Dec 12 01:21:14.754971 2025] [:error] [pid 53552:tid 53559] [client 20.214.246.40:24545] [client 20.214.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/scx.php7"] [unique_id "aTr9igRA1W2830SPmKbRvAAAAAU"]
[Fri Dec 12 01:21:17.459779 2025] [:error] [pid 53522:tid 53538] [client 20.214.246.40:24512] [client 20.214.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/scx.php7"] [unique_id "aTr9jQ73fYFRtoUtdzEXhQAAAY4"]
[Fri Dec 12 01:21:18.969219 2025] [:error] [pid 65374:tid 65400] [client 20.214.246.40:23422] [client 20.214.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/siln.php"] [unique_id "aTr9jvwxTYxIt4J3WeofRQAAAFY"]
[Fri Dec 12 01:21:22.014222 2025] [:error] [pid 53464:tid 53473] [client 20.214.246.40:23342] [client 20.214.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/siln.php"] [unique_id "aTr9ko6Oxa1m77UpSzk_fQAAAMU"]
[Fri Dec 12 01:21:23.238809 2025] [:error] [pid 53522:tid 53545] [client 20.214.246.40:24575] [client 20.214.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/siln.php"] [unique_id "aTr9kw73fYFRtoUtdzEXkAAAAZU"]
[Fri Dec 12 01:21:24.032213 2025] [:error] [pid 53464:tid 53489] [client 20.214.246.40:23396] [client 20.214.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/siln.php"] [unique_id "aTr9lI6Oxa1m77UpSzk_ggAAANU"]
[Fri Dec 12 01:21:24.607609 2025] [:error] [pid 53465:tid 53517] [client 20.214.246.40:24558] [client 20.214.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/mtvcrew.php"] [unique_id "aTr9lOV5ilx5SpOsBcLopgAAARY"]
[Fri Dec 12 01:21:25.414017 2025] [:error] [pid 53465:tid 53514] [client 20.214.246.40:23423] [client 20.214.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/mtvcrew.php"] [unique_id "aTr9leV5ilx5SpOsBcLoqAAAARM"]
[Fri Dec 12 01:21:25.903606 2025] [:error] [pid 53522:tid 53531] [client 20.214.246.40:24513] [client 20.214.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/mtvcrew.php"] [unique_id "aTr9lQ73fYFRtoUtdzEXlwAAAYc"]
[Fri Dec 12 01:21:26.538537 2025] [:error] [pid 53465:tid 53515] [client 20.214.246.40:24523] [client 20.214.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/mtvcrew.php"] [unique_id "aTr9luV5ilx5SpOsBcLoqwAAARQ"]
[Fri Dec 12 01:21:27.425029 2025] [:error] [pid 53465:tid 53516] [client 20.214.246.40:23263] [client 20.214.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/111.php"] [unique_id "aTr9l-V5ilx5SpOsBcLorgAAARU"]
[Fri Dec 12 01:21:28.717977 2025] [:error] [pid 53552:tid 53574] [client 20.214.246.40:24449] [client 20.214.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/111.php"] [unique_id "aTr9mARA1W2830SPmKbR0wAAABQ"]
[Fri Dec 12 01:21:30.354118 2025] [:error] [pid 53552:tid 53568] [client 20.214.246.40:23301] [client 20.214.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/111.php"] [unique_id "aTr9mgRA1W2830SPmKbR1gAAAA4"]
[Fri Dec 12 01:21:31.348384 2025] [:error] [pid 53464:tid 53478] [client 20.214.246.40:23331] [client 20.214.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/111.php"] [unique_id "aTr9m46Oxa1m77UpSzk_lAAAAMo"]
[Fri Dec 12 01:22:04.617535 2025] [:error] [pid 53464:tid 53486] [client 20.214.246.40:24472] [client 20.214.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/sallu.php"] [unique_id "aTr9vI6Oxa1m77UpSzk_2wAAANI"]
[Fri Dec 12 01:22:08.235632 2025] [:error] [pid 65374:tid 65397] [client 20.214.246.40:23272] [client 20.214.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/sallu.php"] [unique_id "aTr9wPwxTYxIt4J3Weof5wAAAFM"]
[Fri Dec 12 01:23:40.454817 2025] [:error] [pid 53552:tid 53557] [client 20.214.246.40:24555] [client 20.214.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/js.php"] [unique_id "aTr-HARA1W2830SPmKbTLAAAAAM"]
[Fri Dec 12 01:23:42.682177 2025] [:error] [pid 53522:tid 53531] [client 20.214.246.40:24486] [client 20.214.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/js.php"] [unique_id "aTr-Hg73fYFRtoUtdzEYvQAAAYc"]
[Fri Dec 12 01:23:54.625817 2025] [:error] [pid 65374:tid 65383] [client 20.214.246.40:24568] [client 20.214.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/m.php"] [unique_id "aTr-KvwxTYxIt4J3Weog4QAAAEU"]
[Fri Dec 12 01:23:58.879050 2025] [:error] [pid 53522:tid 53532] [client 20.214.246.40:24566] [client 20.214.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/m.php"] [unique_id "aTr-Lg73fYFRtoUtdzEYxwAAAYg"]
[Fri Dec 12 01:24:03.112527 2025] [:error] [pid 53522:tid 53535] [client 20.214.246.40:24538] [client 20.214.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/m.php"] [unique_id "aTr-Mw73fYFRtoUtdzEYygAAAYs"]
[Fri Dec 12 01:24:05.047910 2025] [:error] [pid 65374:tid 65387] [client 20.214.246.40:24542] [client 20.214.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/m.php"] [unique_id "aTr-NfwxTYxIt4J3Weog_QAAAEk"]
[Fri Dec 12 01:24:08.900773 2025] [:error] [pid 65374:tid 65386] [client 20.214.246.40:24468] [client 20.214.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/f35.php"] [unique_id "aTr-OPwxTYxIt4J3WeohBQAAAEg"]
[Fri Dec 12 01:24:10.086537 2025] [:error] [pid 53522:tid 53530] [client 20.214.246.40:23311] [client 20.214.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/f35.php"] [unique_id "aTr-Og73fYFRtoUtdzEY1QAAAYY"]
[Fri Dec 12 01:24:17.803866 2025] [:error] [pid 65374:tid 65388] [client 20.214.246.40:24532] [client 20.214.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/f35.php"] [unique_id "aTr-QfwxTYxIt4J3WeohFgAAAEo"]
[Fri Dec 12 01:24:19.333991 2025] [:error] [pid 53552:tid 53574] [client 20.214.246.40:24530] [client 20.214.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/f35.php"] [unique_id "aTr-QwRA1W2830SPmKbTZAAAABQ"]
[Fri Dec 12 01:24:21.584472 2025] [:error] [pid 53552:tid 53565] [client 20.214.246.40:24466] [client 20.214.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/hello.php"] [unique_id "aTr-RQRA1W2830SPmKbTagAAAAs"]
[Fri Dec 12 01:24:29.036631 2025] [:error] [pid 53522:tid 53540] [client 20.214.246.40:24502] [client 20.214.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/hello.php"] [unique_id "aTr-TQ73fYFRtoUtdzEY4QAAAZA"]
[Fri Dec 12 01:24:30.447691 2025] [:error] [pid 53464:tid 53483] [client 20.214.246.40:24517] [client 20.214.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/hello.php"] [unique_id "aTr-To6Oxa1m77UpSzlAtgAAAM8"]
[Fri Dec 12 01:24:32.434037 2025] [:error] [pid 53552:tid 53561] [client 20.214.246.40:24480] [client 20.214.246.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/hello.php"] [unique_id "aTr-UARA1W2830SPmKbTeAAAAAc"]
[Fri Dec 12 01:25:27.543836 2025] [:error] [pid 65374:tid 65401] [client 91.92.241.199:55900] [client 91.92.241.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paramountbaldivis.com"] [uri "/.env"] [unique_id "aTr-h_wxTYxIt4J3WeohwwAAAFc"]
[Fri Dec 12 01:26:26.689895 2025] [:error] [pid 53464:tid 53473] [client 164.132.49.123:33734] [client 164.132.49.123] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 164.132.49.123, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTr-wo6Oxa1m77UpSzlBbQAAAMU"]
[Fri Dec 12 02:55:21.704914 2025] [:error] [pid 48259:tid 48283] [client 116.203.83.153:33468] [client 116.203.83.153] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 116.203.83.153, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTsTmZalXdDe4oe8mrYYAwAAAlY"]
[Fri Dec 12 03:41:32.285259 2025] [:error] [pid 47155:tid 47238] [client 195.178.110.223:35966] [client 195.178.110.223] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paramountbaldivis.com"] [uri "/.git/config"] [unique_id "aTsebOgKm7oX7fdmLAKSbgAAAJE"]
[Fri Dec 12 03:48:58.158243 2025] [:error] [pid 47262:tid 47283] [client 125.94.144.102:50637] [client 125.94.144.102] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||paramountbaldivis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTsgKlitTWF65bYkpFWPBwAAANM"]
[Fri Dec 12 04:21:51.572257 2025] [:error] [pid 26607:tid 26627] [client 82.64.81.82:53534] [client 82.64.81.82] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 82.64.81.82, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTsn38b_b0tOEWTL2KnN3wAAANI"]
[Fri Dec 12 05:48:44.857426 2025] [:error] [pid 26607:tid 26611] [client 194.163.159.96:43404] [client 194.163.159.96] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.163.159.96, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTs8PMb_b0tOEWTL2KnklQAAAMI"]
[Fri Dec 12 06:15:30.306484 2025] [:error] [pid 60649:tid 60668] [client 195.178.110.223:41116] [client 195.178.110.223] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.paramountbaldivis.com"] [uri "/.git/config"] [unique_id "aTtCglOcUGKU3sgfHP9UNQAAARA"]
[Fri Dec 12 07:08:28.530439 2025] [:error] [pid 60649:tid 60667] [client 43.157.170.126:42404] [client 43.157.170.126] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||paramountbaldivis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTtO7FOcUGKU3sgfHP9e5AAAAQ8"]
[Fri Dec 12 07:15:11.446659 2025] [:error] [pid 26520:tid 26570] [client 85.12.197.19:54160] [client 85.12.197.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.12.197.19, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTtQf0G_frlY5vNXu_BvZwAAAFI"]
[Fri Dec 12 10:12:13.033093 2025] [:error] [pid 26607:tid 26624] [client 13.228.228.218:59488] [client 13.228.228.218] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 13.228.228.218, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTt5_cb_b0tOEWTL2KkbKwAAAM8"]
[Fri Dec 12 10:42:29.445912 2025] [:error] [pid 27950:tid 27957] [client 45.8.17.45:38027] [client 45.8.17.45] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.45, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTuBFYVLRvkrdsSc1F0InAAAAUU"]
[Fri Dec 12 11:31:43.145515 2025] [:error] [pid 26521:tid 26597] [client 45.8.17.28:42557] [client 45.8.17.28] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.28, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTuMn5dhcAPU617AKTDNAwAAAJI"]
[Fri Dec 12 11:41:05.090988 2025] [:error] [pid 26521:tid 26600] [client 45.128.199.200:51895] [client 45.128.199.200] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.200, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTuO0ZdhcAPU617AKTDRUAAAAJU"]
[Fri Dec 12 11:41:05.093205 2025] [:error] [pid 26521:tid 26600] [client 45.128.199.200:51895] [client 45.128.199.200] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||paramountbaldivis.com|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /wp-login.php"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTuO0ZdhcAPU617AKTDRUAAAAJU"]
[Fri Dec 12 11:50:16.489384 2025] [:error] [pid 26607:tid 26626] [client 45.8.17.45:36781] [client 45.8.17.45] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.45, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTuQ-Mb_b0tOEWTL2KkzyAAAANE"]
[Fri Dec 12 12:00:23.008786 2025] [:error] [pid 26521:tid 26582] [client 45.128.199.117:34475] [client 45.128.199.117] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.117, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTuTV5dhcAPU617AKTDargAAAIM"]
[Fri Dec 12 12:12:36.437956 2025] [:error] [pid 26521:tid 26590] [client 45.128.199.127:57439] [client 45.128.199.127] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.127, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTuWNJdhcAPU617AKTDfbQAAAIs"]
[Fri Dec 12 12:12:36.440955 2025] [:error] [pid 26521:tid 26590] [client 45.128.199.127:57439] [client 45.128.199.127] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||paramountbaldivis.com|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /wp-login.php"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTuWNJdhcAPU617AKTDfbQAAAIs"]
[Fri Dec 12 12:24:28.549716 2025] [:error] [pid 27950:tid 27958] [client 45.8.17.219:37471] [client 45.8.17.219] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.219, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTuY_IVLRvkrdsSc1F0pQQAAAUY"]
[Fri Dec 12 12:36:40.450281 2025] [:error] [pid 27950:tid 27965] [client 45.128.199.215:30001] [client 45.128.199.215] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.215, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTub2IVLRvkrdsSc1F0tFgAAAU0"]
[Fri Dec 12 12:48:53.690955 2025] [:error] [pid 26607:tid 26621] [client 45.8.17.29:26711] [client 45.8.17.29] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.29, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTuetcb_b0tOEWTL2KlB9QAAAMw"]
[Fri Dec 12 13:01:03.589848 2025] [:error] [pid 26520:tid 26558] [client 45.128.199.128:62429] [client 45.128.199.128] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.128, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTuhj0G_frlY5vNXu_CyBgAAAEY"]
[Fri Dec 12 13:13:17.094812 2025] [:error] [pid 60649:tid 60665] [client 45.128.199.117:42647] [client 45.128.199.117] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.117, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTukbVOcUGKU3sgfHP-qiQAAAQ0"]
[Fri Dec 12 13:13:45.283125 2025] [:error] [pid 26521:tid 26592] [client 79.143.185.235:40748] [client 79.143.185.235] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 79.143.185.235, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTukiZdhcAPU617AKTD3jAAAAI0"]
[Fri Dec 12 13:25:28.739171 2025] [:error] [pid 26519:tid 26523] [client 45.128.199.250:25801] [client 45.128.199.250] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.250, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTunSM8TRgSGOeWqEherlgAAAAA"]
[Fri Dec 12 13:37:47.707220 2025] [:error] [pid 26521:tid 26601] [client 45.128.199.121:63049] [client 45.128.199.121] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.121, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTuqK5dhcAPU617AKTD-eQAAAJY"]
[Fri Dec 12 13:50:08.854094 2025] [:error] [pid 26521:tid 26600] [client 45.128.199.115:58587] [client 45.128.199.115] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.115, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTutEJdhcAPU617AKTACOgAAAJU"]
[Fri Dec 12 14:02:30.938097 2025] [:error] [pid 27950:tid 27970] [client 45.8.17.51:50243] [client 45.8.17.51] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.51, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTuv9oVLRvkrdsSc1F1DaAAAAVI"]
[Fri Dec 12 14:14:51.063388 2025] [:error] [pid 26521:tid 26582] [client 45.128.199.140:24717] [client 45.128.199.140] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.140, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTuy25dhcAPU617AKTAJ-gAAAIM"]
[Fri Dec 12 14:27:09.468257 2025] [:error] [pid 26607:tid 26631] [client 45.128.199.107:38297] [client 45.128.199.107] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.107, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTu1vcb_b0tOEWTL2KlYbQAAANY"]
[Fri Dec 12 14:39:37.891500 2025] [:error] [pid 27950:tid 27960] [client 45.8.17.51:65387] [client 45.8.17.51] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.51, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTu4qYVLRvkrdsSc1F1NmAAAAUg"]
[Fri Dec 12 14:47:46.657564 2025] [:error] [pid 26521:tid 26601] [client 137.184.76.185:48634] [client 137.184.76.185] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 137.184.76.185, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTu6kpdhcAPU617AKTAVawAAAJY"]
[Fri Dec 12 14:47:50.920996 2025] [:error] [pid 26607:tid 26621] [client 202.90.136.230:56029] [client 202.90.136.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 202.90.136.230, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aTu6lsb_b0tOEWTL2KldJAAAAMw"]
[Fri Dec 12 14:52:07.791478 2025] [:error] [pid 26521:tid 26595] [client 45.8.17.45:38835] [client 45.8.17.45] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.45, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTu7l5dhcAPU617AKTAXEQAAAJA"]
[Fri Dec 12 15:04:34.545599 2025] [:error] [pid 26521:tid 26583] [client 45.8.17.26:45259] [client 45.8.17.26] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.26, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTu-gpdhcAPU617AKTAaHwAAAIQ"]
[Fri Dec 12 15:16:53.359135 2025] [:error] [pid 26607:tid 26629] [client 45.128.199.121:46375] [client 45.128.199.121] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.121, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTvBZcb_b0tOEWTL2KliZwAAANQ"]
[Fri Dec 12 15:29:17.359865 2025] [:error] [pid 26520:tid 26572] [client 45.8.17.45:41571] [client 45.8.17.45] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.45, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTvETUG_frlY5vNXu_DK3QAAAFQ"]
[Fri Dec 12 15:41:44.915244 2025] [:error] [pid 27950:tid 27964] [client 45.8.17.46:34515] [client 45.8.17.46] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.46, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTvHOIVLRvkrdsSc1F1aTgAAAUw"]
[Fri Dec 12 15:54:17.180758 2025] [:error] [pid 55760:tid 55773] [client 45.128.199.110:24731] [client 45.128.199.110] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.110, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTvKKVObDQlftFDyGazFjgAAAYs"]
[Fri Dec 12 16:06:40.824758 2025] [:error] [pid 26607:tid 26626] [client 45.128.199.115:22339] [client 45.128.199.115] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.115, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTvNEMb_b0tOEWTL2KlqCQAAANE"]
[Fri Dec 12 16:19:09.827337 2025] [:error] [pid 26521:tid 26584] [client 45.8.17.27:43469] [client 45.8.17.27] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.27, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTvP_ZdhcAPU617AKTAqdQAAAIU"]
[Fri Dec 12 16:31:48.934281 2025] [:error] [pid 60649:tid 60665] [client 45.128.199.113:65245] [client 45.128.199.113] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.113, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTvS9FOcUGKU3sgfHP_J1gAAAQ0"]
[Fri Dec 12 16:44:15.025504 2025] [:error] [pid 55760:tid 55781] [client 45.128.199.233:52629] [client 45.128.199.233] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.233, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTvV31ObDQlftFDyGazOHgAAAZM"]
[Fri Dec 12 16:56:41.663862 2025] [:error] [pid 26520:tid 26556] [client 45.8.17.102:50995] [client 45.8.17.102] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.102, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTvYyUG_frlY5vNXu_DUzwAAAEQ"]
[Fri Dec 12 17:09:11.099777 2025] [:error] [pid 55760:tid 55768] [client 45.128.199.140:53649] [client 45.128.199.140] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.140, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTvbt1ObDQlftFDyGazUdgAAAYY"]
[Fri Dec 12 17:21:35.407785 2025] [:error] [pid 26520:tid 26561] [client 45.128.199.110:43563] [client 45.128.199.110] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.110, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTven0G_frlY5vNXu_DXdQAAAEk"]
[Fri Dec 12 17:32:11.767744 2025] [:error] [pid 26607:tid 26620] [client 130.33.54.142:27659] [client 130.33.54.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aTvhG8b_b0tOEWTL2Kl06wAAAMs"]
[Fri Dec 12 17:32:14.329762 2025] [:error] [pid 26607:tid 26622] [client 130.33.54.142:27738] [client 130.33.54.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/ID3/rk2.php"] [unique_id "aTvhHsb_b0tOEWTL2Kl07QAAAM0"]
[Fri Dec 12 17:32:21.490519 2025] [:error] [pid 26521:tid 26582] [client 130.33.54.142:27754] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/inputs.php"] [unique_id "aTvhJZdhcAPU617AKTA8tAAAAIM"]
[Fri Dec 12 17:32:21.731523 2025] [:error] [pid 26607:tid 26618] [client 130.33.54.142:27724] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/inputs.php"] [unique_id "aTvhJcb_b0tOEWTL2Kl08gAAAMk"]
[Fri Dec 12 17:32:21.966028 2025] [:error] [pid 26519:tid 26532] [client 130.33.54.142:27663] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/inputs.php"] [unique_id "aTvhJc8TRgSGOeWqEhfP6AAAAAk"]
[Fri Dec 12 17:32:22.198505 2025] [:error] [pid 60649:tid 60656] [client 130.33.54.142:27677] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/inputs.php"] [unique_id "aTvhJlOcUGKU3sgfHP_SSQAAAQQ"]
[Fri Dec 12 17:32:22.542823 2025] [:error] [pid 27950:tid 27961] [client 130.33.54.142:27719] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/admin/function.php"] [unique_id "aTvhJoVLRvkrdsSc1F1tfAAAAUk"]
[Fri Dec 12 17:32:22.770145 2025] [:error] [pid 60649:tid 60666] [client 130.33.54.142:27674] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/admin/function.php"] [unique_id "aTvhJlOcUGKU3sgfHP_SSgAAAQ4"]
[Fri Dec 12 17:32:23.011720 2025] [:error] [pid 60649:tid 60660] [client 130.33.54.142:27740] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/admin/function.php"] [unique_id "aTvhJ1OcUGKU3sgfHP_SSwAAAQg"]
[Fri Dec 12 17:32:23.249457 2025] [:error] [pid 26519:tid 26529] [client 130.33.54.142:27725] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/admin/function.php"] [unique_id "aTvhJ88TRgSGOeWqEhfP6gAAAAY"]
[Fri Dec 12 17:32:23.488530 2025] [:error] [pid 60649:tid 60662] [client 130.33.54.142:13267] [client 130.33.54.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/assets/index.php"] [unique_id "aTvhJ1OcUGKU3sgfHP_STQAAAQo"]
[Fri Dec 12 17:32:23.725564 2025] [:error] [pid 27950:tid 27968] [client 130.33.54.142:27672] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/images/index.php"] [unique_id "aTvhJ4VLRvkrdsSc1F1tfQAAAVA"]
[Fri Dec 12 17:32:23.968490 2025] [:error] [pid 60649:tid 60672] [client 130.33.54.142:27653] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/images/index.php"] [unique_id "aTvhJ1OcUGKU3sgfHP_STwAAARQ"]
[Fri Dec 12 17:32:24.198698 2025] [:error] [pid 26520:tid 26574] [client 130.33.54.142:27758] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/images/index.php"] [unique_id "aTvhKEG_frlY5vNXu_DY0QAAAFY"]
[Fri Dec 12 17:32:24.428775 2025] [:error] [pid 26607:tid 26629] [client 130.33.54.142:27737] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/default.php"] [unique_id "aTvhKMb_b0tOEWTL2Kl08wAAANQ"]
[Fri Dec 12 17:32:24.677381 2025] [:error] [pid 26520:tid 26555] [client 130.33.54.142:27662] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/default.php"] [unique_id "aTvhKEG_frlY5vNXu_DY0gAAAEM"]
[Fri Dec 12 17:32:24.917979 2025] [:error] [pid 26519:tid 26526] [client 130.33.54.142:27665] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/default.php"] [unique_id "aTvhKM8TRgSGOeWqEhfP6wAAAAM"]
[Fri Dec 12 17:32:25.158619 2025] [:error] [pid 26520:tid 26564] [client 130.33.54.142:27649] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/default.php"] [unique_id "aTvhKUG_frlY5vNXu_DY1AAAAEw"]
[Fri Dec 12 17:32:25.392904 2025] [:error] [pid 26519:tid 26533] [client 130.33.54.142:27661] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/lv.php"] [unique_id "aTvhKc8TRgSGOeWqEhfP7AAAAAo"]
[Fri Dec 12 17:32:25.620961 2025] [:error] [pid 55760:tid 55786] [client 130.33.54.142:27650] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/lv.php"] [unique_id "aTvhKVObDQlftFDyGazZpwAAAZg"]
[Fri Dec 12 17:32:25.851681 2025] [:error] [pid 26521:tid 26595] [client 130.33.54.142:27747] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/lv.php"] [unique_id "aTvhKZdhcAPU617AKTA8uwAAAJA"]
[Fri Dec 12 17:32:26.103480 2025] [:error] [pid 26520:tid 26568] [client 130.33.54.142:27750] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/lv.php"] [unique_id "aTvhKkG_frlY5vNXu_DY1gAAAFA"]
[Fri Dec 12 17:32:26.338037 2025] [:error] [pid 26520:tid 26563] [client 130.33.54.142:13258] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "aTvhKkG_frlY5vNXu_DY1wAAAEs"]
[Fri Dec 12 17:32:26.567994 2025] [:error] [pid 26521:tid 26600] [client 130.33.54.142:27658] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "aTvhKpdhcAPU617AKTA8vgAAAJU"]
[Fri Dec 12 17:32:26.813487 2025] [:error] [pid 55760:tid 55778] [client 130.33.54.142:27655] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "aTvhKlObDQlftFDyGazZqAAAAZA"]
[Fri Dec 12 17:32:27.040507 2025] [:error] [pid 26519:tid 26545] [client 130.33.54.142:27734] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "aTvhK88TRgSGOeWqEhfP7QAAABY"]
[Fri Dec 12 17:32:27.286678 2025] [:error] [pid 26519:tid 26534] [client 130.33.54.142:27652] [client 130.33.54.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aTvhK88TRgSGOeWqEhfP7gAAAAs"]
[Fri Dec 12 17:32:27.530536 2025] [:error] [pid 26520:tid 26560] [client 130.33.54.142:27769] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/403.php"] [unique_id "aTvhK0G_frlY5vNXu_DY2QAAAEg"]
[Fri Dec 12 17:32:27.780786 2025] [:error] [pid 26520:tid 26562] [client 130.33.54.142:27726] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/403.php"] [unique_id "aTvhK0G_frlY5vNXu_DY2wAAAEo"]
[Fri Dec 12 17:32:28.035638 2025] [:error] [pid 27950:tid 27956] [client 130.33.54.142:27773] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/403.php"] [unique_id "aTvhLIVLRvkrdsSc1F1thgAAAUQ"]
[Fri Dec 12 17:32:28.299125 2025] [:error] [pid 27950:tid 27960] [client 130.33.54.142:27667] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/403.php"] [unique_id "aTvhLIVLRvkrdsSc1F1thwAAAUg"]
[Fri Dec 12 17:32:28.539986 2025] [:error] [pid 27950:tid 27952] [client 130.33.54.142:27732] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/css.php"] [unique_id "aTvhLIVLRvkrdsSc1F1tiQAAAUA"]
[Fri Dec 12 17:32:28.776985 2025] [:error] [pid 26607:tid 26621] [client 130.33.54.142:13295] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/css.php"] [unique_id "aTvhLMb_b0tOEWTL2Kl09gAAAMw"]
[Fri Dec 12 17:32:29.025094 2025] [:error] [pid 27950:tid 27976] [client 130.33.54.142:27723] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/css.php"] [unique_id "aTvhLYVLRvkrdsSc1F1tigAAAVg"]
[Fri Dec 12 17:32:29.266501 2025] [:error] [pid 26519:tid 26535] [client 130.33.54.142:27692] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/css.php"] [unique_id "aTvhLc8TRgSGOeWqEhfP7wAAAAw"]
[Fri Dec 12 17:32:29.509743 2025] [:error] [pid 26607:tid 26613] [client 130.33.54.142:27660] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/user/about.php"] [unique_id "aTvhLcb_b0tOEWTL2Kl09wAAAMQ"]
[Fri Dec 12 17:32:29.747739 2025] [:error] [pid 55760:tid 55777] [client 130.33.54.142:13266] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/user/about.php"] [unique_id "aTvhLVObDQlftFDyGazZqgAAAY8"]
[Fri Dec 12 17:32:29.980657 2025] [:error] [pid 26607:tid 26624] [client 130.33.54.142:27744] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/user/about.php"] [unique_id "aTvhLcb_b0tOEWTL2Kl0-QAAAM8"]
[Fri Dec 12 17:32:30.212306 2025] [:error] [pid 26607:tid 26620] [client 130.33.54.142:27765] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/user/about.php"] [unique_id "aTvhLsb_b0tOEWTL2Kl0-gAAAMs"]
[Fri Dec 12 17:32:30.456931 2025] [:error] [pid 26519:tid 26541] [client 130.33.54.142:27722] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/about.php"] [unique_id "aTvhLs8TRgSGOeWqEhfP8gAAABI"]
[Fri Dec 12 17:32:30.709136 2025] [:error] [pid 55760:tid 55767] [client 130.33.54.142:27741] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/about.php"] [unique_id "aTvhLlObDQlftFDyGazZqwAAAYU"]
[Fri Dec 12 17:32:30.938871 2025] [:error] [pid 26607:tid 26631] [client 130.33.54.142:27654] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/about.php"] [unique_id "aTvhLsb_b0tOEWTL2Kl0_QAAANY"]
[Fri Dec 12 17:32:31.176019 2025] [:error] [pid 26521:tid 26593] [client 130.33.54.142:13280] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/about.php"] [unique_id "aTvhL5dhcAPU617AKTA8yAAAAI4"]
[Fri Dec 12 17:32:31.410635 2025] [:error] [pid 26607:tid 26623] [client 130.33.54.142:27767] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/1.php"] [unique_id "aTvhL8b_b0tOEWTL2Kl0_gAAAM4"]
[Fri Dec 12 17:32:31.642671 2025] [:error] [pid 26521:tid 26597] [client 130.33.54.142:27749] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/1.php"] [unique_id "aTvhL5dhcAPU617AKTA8ygAAAJI"]
[Fri Dec 12 17:32:31.911690 2025] [:error] [pid 26519:tid 26537] [client 130.33.54.142:27742] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/1.php"] [unique_id "aTvhL88TRgSGOeWqEhfP8wAAAA4"]
[Fri Dec 12 17:32:32.139732 2025] [:error] [pid 26607:tid 26622] [client 130.33.54.142:27753] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/1.php"] [unique_id "aTvhMMb_b0tOEWTL2Kl0_wAAAM0"]
[Fri Dec 12 17:32:32.393939 2025] [:error] [pid 26521:tid 26579] [client 130.33.54.142:27706] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/about/function.php"] [unique_id "aTvhMJdhcAPU617AKTA8zAAAAIA"]
[Fri Dec 12 17:32:32.631927 2025] [:error] [pid 26519:tid 26539] [client 130.33.54.142:13259] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/about/function.php"] [unique_id "aTvhMM8TRgSGOeWqEhfP9AAAABA"]
[Fri Dec 12 17:32:32.869746 2025] [:error] [pid 55760:tid 55780] [client 130.33.54.142:27712] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/about/function.php"] [unique_id "aTvhMFObDQlftFDyGazZrQAAAZI"]
[Fri Dec 12 17:32:33.097472 2025] [:error] [pid 55760:tid 55775] [client 130.33.54.142:27759] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/about/function.php"] [unique_id "aTvhMVObDQlftFDyGazZrgAAAY0"]
[Fri Dec 12 17:32:33.327713 2025] [:error] [pid 26521:tid 26591] [client 130.33.54.142:27739] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/simple.php"] [unique_id "aTvhMZdhcAPU617AKTA8zwAAAIw"]
[Fri Dec 12 17:32:33.554566 2025] [:error] [pid 27950:tid 27954] [client 130.33.54.142:27664] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/simple.php"] [unique_id "aTvhMYVLRvkrdsSc1F1tkQAAAUI"]
[Fri Dec 12 17:32:33.829933 2025] [:error] [pid 26519:tid 26546] [client 130.33.54.142:27691] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/simple.php"] [unique_id "aTvhMc8TRgSGOeWqEhfP9QAAABc"]
[Fri Dec 12 17:32:34.108668 2025] [:error] [pid 26521:tid 26595] [client 130.33.54.142:27649] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/simple.php"] [unique_id "aTvhMpdhcAPU617AKTA80AAAAJA"]
[Fri Dec 12 17:32:34.388231 2025] [:error] [pid 60649:tid 60669] [client 130.33.54.142:27727] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/goat1.php"] [unique_id "aTvhMlOcUGKU3sgfHP_SWwAAARE"]
[Fri Dec 12 17:32:34.623189 2025] [:error] [pid 27950:tid 27959] [client 130.33.54.142:27678] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/goat1.php"] [unique_id "aTvhMoVLRvkrdsSc1F1tkgAAAUc"]
[Fri Dec 12 17:32:34.860519 2025] [:error] [pid 27950:tid 27963] [client 130.33.54.142:27709] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/goat1.php"] [unique_id "aTvhMoVLRvkrdsSc1F1tkwAAAUs"]
[Fri Dec 12 17:32:35.112024 2025] [:error] [pid 26519:tid 26536] [client 130.33.54.142:13250] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/goat1.php"] [unique_id "aTvhM88TRgSGOeWqEhfP9gAAAA0"]
[Fri Dec 12 17:32:35.349437 2025] [:error] [pid 27950:tid 27966] [client 130.33.54.142:13235] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/chosen.php"] [unique_id "aTvhM4VLRvkrdsSc1F1tlAAAAU4"]
[Fri Dec 12 17:32:35.589863 2025] [:error] [pid 26520:tid 26568] [client 130.33.54.142:13256] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/chosen.php"] [unique_id "aTvhM0G_frlY5vNXu_DY6AAAAFA"]
[Fri Dec 12 17:32:35.826742 2025] [:error] [pid 26519:tid 26527] [client 130.33.54.142:27652] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/chosen.php"] [unique_id "aTvhM88TRgSGOeWqEhfP9wAAAAQ"]
[Fri Dec 12 17:32:36.058061 2025] [:error] [pid 27950:tid 27962] [client 130.33.54.142:27718] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/chosen.php"] [unique_id "aTvhNIVLRvkrdsSc1F1tlQAAAUo"]
[Fri Dec 12 17:32:36.285687 2025] [:error] [pid 26521:tid 26588] [client 130.33.54.142:27768] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-cron.php"] [unique_id "aTvhNJdhcAPU617AKTA81wAAAIk"]
[Fri Dec 12 17:32:36.517780 2025] [:error] [pid 26521:tid 26589] [client 130.33.54.142:27685] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-cron.php"] [unique_id "aTvhNJdhcAPU617AKTA82AAAAIo"]
[Fri Dec 12 17:32:36.749231 2025] [:error] [pid 26521:tid 26586] [client 130.33.54.142:27757] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-cron.php"] [unique_id "aTvhNJdhcAPU617AKTA82QAAAIc"]
[Fri Dec 12 17:32:37.007331 2025] [:error] [pid 27950:tid 27965] [client 130.33.54.142:27675] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-cron.php"] [unique_id "aTvhNYVLRvkrdsSc1F1tlgAAAU0"]
[Fri Dec 12 17:32:37.239091 2025] [:error] [pid 26607:tid 26618] [client 130.33.54.142:27700] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/yanz.php"] [unique_id "aTvhNcb_b0tOEWTL2Kl1BAAAAMk"]
[Fri Dec 12 17:32:37.466903 2025] [:error] [pid 55760:tid 55762] [client 130.33.54.142:27772] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/yanz.php"] [unique_id "aTvhNVObDQlftFDyGazZsQAAAYA"]
[Fri Dec 12 17:32:37.725313 2025] [:error] [pid 27950:tid 27956] [client 130.33.54.142:27775] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/yanz.php"] [unique_id "aTvhNYVLRvkrdsSc1F1tlwAAAUQ"]
[Fri Dec 12 17:32:37.995616 2025] [:error] [pid 26521:tid 26594] [client 130.33.54.142:13263] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/yanz.php"] [unique_id "aTvhNZdhcAPU617AKTA83QAAAI8"]
[Fri Dec 12 17:32:38.246630 2025] [:error] [pid 26520:tid 26576] [client 130.33.54.142:27762] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/config.php"] [unique_id "aTvhNkG_frlY5vNXu_DY6QAAAFg"]
[Fri Dec 12 17:32:38.491996 2025] [:error] [pid 27950:tid 27970] [client 130.33.54.142:27670] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/config.php"] [unique_id "aTvhNoVLRvkrdsSc1F1tmAAAAVI"]
[Fri Dec 12 17:32:38.720651 2025] [:error] [pid 26607:tid 26610] [client 130.33.54.142:27743] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/config.php"] [unique_id "aTvhNsb_b0tOEWTL2Kl1BQAAAME"]
[Fri Dec 12 17:32:38.975851 2025] [:error] [pid 26519:tid 26531] [client 130.33.54.142:27745] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/config.php"] [unique_id "aTvhNs8TRgSGOeWqEhfP-QAAAAg"]
[Fri Dec 12 17:32:39.218454 2025] [:error] [pid 26607:tid 26621] [client 130.33.54.142:27710] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/network.php"] [unique_id "aTvhN8b_b0tOEWTL2Kl1BgAAAMw"]
[Fri Dec 12 17:32:39.535243 2025] [:error] [pid 60649:tid 60659] [client 130.33.54.142:13251] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/network.php"] [unique_id "aTvhN1OcUGKU3sgfHP_SYwAAAQc"]
[Fri Dec 12 17:32:39.854992 2025] [:error] [pid 26521:tid 26579] [client 130.33.54.142:13301] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/network.php"] [unique_id "aTvhN5dhcAPU617AKTA84AAAAIA"]
[Fri Dec 12 17:32:40.114646 2025] [:error] [pid 26519:tid 26529] [client 130.33.54.142:27730] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/network.php"] [unique_id "aTvhOM8TRgSGOeWqEhfP-gAAAAY"]
[Fri Dec 12 17:32:40.350218 2025] [:error] [pid 26521:tid 26583] [client 130.33.54.142:27774] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-2019.php"] [unique_id "aTvhOJdhcAPU617AKTA84gAAAIQ"]
[Fri Dec 12 17:32:40.580650 2025] [:error] [pid 26521:tid 26591] [client 130.33.54.142:27669] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-2019.php"] [unique_id "aTvhOJdhcAPU617AKTA84wAAAIw"]
[Fri Dec 12 17:32:40.811448 2025] [:error] [pid 26607:tid 26624] [client 130.33.54.142:27671] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-2019.php"] [unique_id "aTvhOMb_b0tOEWTL2Kl1BwAAAM8"]
[Fri Dec 12 17:32:41.089907 2025] [:error] [pid 26521:tid 26599] [client 130.33.54.142:13275] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-2019.php"] [unique_id "aTvhOZdhcAPU617AKTA85QAAAJQ"]
[Fri Dec 12 17:32:41.317440 2025] [:error] [pid 26521:tid 26598] [client 130.33.54.142:27676] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/bypass.php"] [unique_id "aTvhOZdhcAPU617AKTA85gAAAJM"]
[Fri Dec 12 17:32:41.564625 2025] [:error] [pid 26521:tid 26581] [client 130.33.54.142:27758] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/bypass.php"] [unique_id "aTvhOZdhcAPU617AKTA85wAAAII"]
[Fri Dec 12 17:32:41.836381 2025] [:error] [pid 26521:tid 26600] [client 130.33.54.142:27695] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/bypass.php"] [unique_id "aTvhOZdhcAPU617AKTA86QAAAJU"]
[Fri Dec 12 17:32:42.065792 2025] [:error] [pid 55760:tid 55771] [client 130.33.54.142:13272] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/bypass.php"] [unique_id "aTvhOlObDQlftFDyGazZswAAAYk"]
[Fri Dec 12 17:32:42.294306 2025] [:error] [pid 26519:tid 26533] [client 130.33.54.142:27668] [client 130.33.54.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aTvhOs8TRgSGOeWqEhfP-wAAAAo"]
[Fri Dec 12 17:32:42.524970 2025] [:error] [pid 26607:tid 26620] [client 130.33.54.142:13249] [client 130.33.54.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "aTvhOsb_b0tOEWTL2Kl1CAAAAMs"]
[Fri Dec 12 17:32:42.770118 2025] [:error] [pid 55760:tid 55765] [client 130.33.54.142:13212] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/tiny.php"] [unique_id "aTvhOlObDQlftFDyGazZtQAAAYM"]
[Fri Dec 12 17:32:43.018954 2025] [:error] [pid 26519:tid 26534] [client 130.33.54.142:27736] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/tiny.php"] [unique_id "aTvhO88TRgSGOeWqEhfP_AAAAAs"]
[Fri Dec 12 17:32:43.285255 2025] [:error] [pid 60649:tid 60675] [client 130.33.54.142:13274] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/tiny.php"] [unique_id "aTvhO1OcUGKU3sgfHP_SaAAAARc"]
[Fri Dec 12 17:32:43.532027 2025] [:error] [pid 26607:tid 26611] [client 130.33.54.142:13265] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/tiny.php"] [unique_id "aTvhO8b_b0tOEWTL2Kl1CQAAAMI"]
[Fri Dec 12 17:32:43.765024 2025] [:error] [pid 26607:tid 26628] [client 130.33.54.142:13269] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/lock.php"] [unique_id "aTvhO8b_b0tOEWTL2Kl1CgAAANM"]
[Fri Dec 12 17:32:44.031992 2025] [:error] [pid 26607:tid 26617] [client 130.33.54.142:27755] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/lock.php"] [unique_id "aTvhPMb_b0tOEWTL2Kl1CwAAAMg"]
[Fri Dec 12 17:32:44.260640 2025] [:error] [pid 55760:tid 55786] [client 130.33.54.142:27729] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/lock.php"] [unique_id "aTvhPFObDQlftFDyGazZtgAAAZg"]
[Fri Dec 12 17:32:44.510346 2025] [:error] [pid 26519:tid 26530] [client 130.33.54.142:13257] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/lock.php"] [unique_id "aTvhPM8TRgSGOeWqEhfP_gAAAAc"]
[Fri Dec 12 17:32:44.795378 2025] [:error] [pid 26519:tid 26535] [client 130.33.54.142:27657] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/mail.php"] [unique_id "aTvhPM8TRgSGOeWqEhfP_wAAAAw"]
[Fri Dec 12 17:32:45.082624 2025] [:error] [pid 55760:tid 55763] [client 130.33.54.142:13299] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/mail.php"] [unique_id "aTvhPVObDQlftFDyGazZtwAAAYE"]
[Fri Dec 12 17:32:45.340496 2025] [:error] [pid 26519:tid 26538] [client 130.33.54.142:27716] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/mail.php"] [unique_id "aTvhPc8TRgSGOeWqEhfQAgAAAA8"]
[Fri Dec 12 17:32:45.567906 2025] [:error] [pid 60649:tid 60653] [client 130.33.54.142:13276] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/mail.php"] [unique_id "aTvhPVOcUGKU3sgfHP_SawAAAQE"]
[Fri Dec 12 17:32:45.795179 2025] [:error] [pid 60649:tid 60669] [client 130.33.54.142:27651] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/system_log.php"] [unique_id "aTvhPVOcUGKU3sgfHP_SbAAAARE"]
[Fri Dec 12 17:32:46.037668 2025] [:error] [pid 60649:tid 60652] [client 130.33.54.142:27666] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/system_log.php"] [unique_id "aTvhPlOcUGKU3sgfHP_SbgAAAQA"]
[Fri Dec 12 17:32:46.266240 2025] [:error] [pid 55760:tid 55778] [client 130.33.54.142:13282] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/system_log.php"] [unique_id "aTvhPlObDQlftFDyGazZuAAAAZA"]
[Fri Dec 12 17:32:46.510018 2025] [:error] [pid 60649:tid 60666] [client 130.33.54.142:27721] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/system_log.php"] [unique_id "aTvhPlOcUGKU3sgfHP_SbwAAAQ4"]
[Fri Dec 12 17:32:46.759405 2025] [:error] [pid 60649:tid 60662] [client 130.33.54.142:13292] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/file.php"] [unique_id "aTvhPlOcUGKU3sgfHP_ScAAAAQo"]
[Fri Dec 12 17:32:46.990623 2025] [:error] [pid 26607:tid 26625] [client 130.33.54.142:13271] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/file.php"] [unique_id "aTvhPsb_b0tOEWTL2Kl1DgAAANA"]
[Fri Dec 12 17:32:47.238746 2025] [:error] [pid 55760:tid 55776] [client 130.33.54.142:13304] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/file.php"] [unique_id "aTvhP1ObDQlftFDyGazZugAAAY4"]
[Fri Dec 12 17:32:47.472127 2025] [:error] [pid 60649:tid 60668] [client 130.33.54.142:27684] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/file.php"] [unique_id "aTvhP1OcUGKU3sgfHP_ScQAAARA"]
[Fri Dec 12 17:32:47.731623 2025] [:error] [pid 60649:tid 60672] [client 130.33.54.142:13284] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/as.php"] [unique_id "aTvhP1OcUGKU3sgfHP_ScgAAARQ"]
[Fri Dec 12 17:32:47.963933 2025] [:error] [pid 60649:tid 60667] [client 130.33.54.142:13261] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/as.php"] [unique_id "aTvhP1OcUGKU3sgfHP_ScwAAAQ8"]
[Fri Dec 12 17:32:48.269941 2025] [:error] [pid 55760:tid 55767] [client 130.33.54.142:27707] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/as.php"] [unique_id "aTvhQFObDQlftFDyGazZvAAAAYU"]
[Fri Dec 12 17:32:48.518229 2025] [:error] [pid 55760:tid 55775] [client 130.33.54.142:13206] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/as.php"] [unique_id "aTvhQFObDQlftFDyGazZvgAAAY0"]
[Fri Dec 12 17:32:48.782535 2025] [:error] [pid 26520:tid 26565] [client 130.33.54.142:27766] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aTvhQEG_frlY5vNXu_DY6gAAAE0"]
[Fri Dec 12 17:32:49.025651 2025] [:error] [pid 60649:tid 60670] [client 130.33.54.142:27679] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aTvhQVOcUGKU3sgfHP_SdAAAARI"]
[Fri Dec 12 17:32:49.259295 2025] [:error] [pid 26607:tid 26615] [client 130.33.54.142:27715] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aTvhQcb_b0tOEWTL2Kl1EAAAAMY"]
[Fri Dec 12 17:32:49.498393 2025] [:error] [pid 55760:tid 55766] [client 130.33.54.142:27708] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aTvhQVObDQlftFDyGazZwAAAAYQ"]
[Fri Dec 12 17:32:49.731264 2025] [:error] [pid 26520:tid 26552] [client 130.33.54.142:27697] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "aTvhQUG_frlY5vNXu_DY6wAAAEA"]
[Fri Dec 12 17:32:50.027517 2025] [:error] [pid 26520:tid 26561] [client 130.33.54.142:27761] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "aTvhQkG_frlY5vNXu_DY7AAAAEk"]
[Fri Dec 12 17:32:50.268193 2025] [:error] [pid 26520:tid 26555] [client 130.33.54.142:27693] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "aTvhQkG_frlY5vNXu_DY7QAAAEM"]
[Fri Dec 12 17:32:50.548745 2025] [:error] [pid 26520:tid 26564] [client 130.33.54.142:13273] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "aTvhQkG_frlY5vNXu_DY7gAAAEw"]
[Fri Dec 12 17:32:50.797881 2025] [:error] [pid 26607:tid 26614] [client 130.33.54.142:27673] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/manager.php"] [unique_id "aTvhQsb_b0tOEWTL2Kl1EQAAAMU"]
[Fri Dec 12 17:32:51.046766 2025] [:error] [pid 26607:tid 26629] [client 130.33.54.142:27683] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/manager.php"] [unique_id "aTvhQ8b_b0tOEWTL2Kl1EgAAANQ"]
[Fri Dec 12 17:32:51.292987 2025] [:error] [pid 27950:tid 27954] [client 130.33.54.142:13264] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/manager.php"] [unique_id "aTvhQ4VLRvkrdsSc1F1tnwAAAUI"]
[Fri Dec 12 17:32:51.537370 2025] [:error] [pid 27950:tid 27955] [client 130.33.54.142:27648] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/manager.php"] [unique_id "aTvhQ4VLRvkrdsSc1F1toAAAAUM"]
[Fri Dec 12 17:32:51.795113 2025] [:error] [pid 55760:tid 55770] [client 130.33.54.142:13262] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/plugins/pwnd/as.php"] [unique_id "aTvhQ1ObDQlftFDyGazZwwAAAYg"]
[Fri Dec 12 17:32:52.050443 2025] [:error] [pid 26607:tid 26633] [client 130.33.54.142:13186] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/plugins/pwnd/as.php"] [unique_id "aTvhRMb_b0tOEWTL2Kl1EwAAANg"]
[Fri Dec 12 17:32:52.321497 2025] [:error] [pid 27950:tid 27957] [client 130.33.54.142:27746] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/plugins/pwnd/as.php"] [unique_id "aTvhRIVLRvkrdsSc1F1toQAAAUU"]
[Fri Dec 12 17:32:52.558367 2025] [:error] [pid 27950:tid 27958] [client 130.33.54.142:13213] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/plugins/pwnd/as.php"] [unique_id "aTvhRIVLRvkrdsSc1F1togAAAUY"]
[Fri Dec 12 17:32:52.796695 2025] [:error] [pid 27950:tid 27959] [client 130.33.54.142:13285] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-configs.php"] [unique_id "aTvhRIVLRvkrdsSc1F1towAAAUc"]
[Fri Dec 12 17:32:53.029698 2025] [:error] [pid 55760:tid 55762] [client 130.33.54.142:27703] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-configs.php"] [unique_id "aTvhRVObDQlftFDyGazZxQAAAYA"]
[Fri Dec 12 17:32:53.263243 2025] [:error] [pid 27950:tid 27963] [client 130.33.54.142:13234] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-configs.php"] [unique_id "aTvhRYVLRvkrdsSc1F1tpAAAAUs"]
[Fri Dec 12 17:32:53.531438 2025] [:error] [pid 27950:tid 27966] [client 130.33.54.142:13270] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-configs.php"] [unique_id "aTvhRYVLRvkrdsSc1F1tpgAAAU4"]
[Fri Dec 12 17:32:53.830292 2025] [:error] [pid 27950:tid 27953] [client 130.33.54.142:27711] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/html-api/wp-conflg.php"] [unique_id "aTvhRYVLRvkrdsSc1F1tpwAAAUE"]
[Fri Dec 12 17:32:54.155119 2025] [:error] [pid 60649:tid 60657] [client 130.33.54.142:13184] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/html-api/wp-conflg.php"] [unique_id "aTvhRlOcUGKU3sgfHP_SeQAAAQU"]
[Fri Dec 12 17:32:54.419955 2025] [:error] [pid 27950:tid 27962] [client 130.33.54.142:13291] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/html-api/wp-conflg.php"] [unique_id "aTvhRoVLRvkrdsSc1F1tqAAAAUo"]
[Fri Dec 12 17:32:54.773515 2025] [:error] [pid 27950:tid 27956] [client 130.33.54.142:13296] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/html-api/wp-conflg.php"] [unique_id "aTvhRoVLRvkrdsSc1F1tqgAAAUQ"]
[Fri Dec 12 17:32:55.031660 2025] [:error] [pid 27950:tid 27975] [client 130.33.54.142:27765] [client 130.33.54.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/js/crop/zmFM.php"] [unique_id "aTvhR4VLRvkrdsSc1F1tqwAAAVc"]
[Fri Dec 12 17:32:55.347655 2025] [:error] [pid 26607:tid 26626] [client 130.33.54.142:27743] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/rest-api/fields/index.php"] [unique_id "aTvhR8b_b0tOEWTL2Kl1FAAAANE"]
[Fri Dec 12 17:32:55.586717 2025] [:error] [pid 26521:tid 26599] [client 130.33.54.142:27686] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/rest-api/fields/index.php"] [unique_id "aTvhR5dhcAPU617AKTA89wAAAJQ"]
[Fri Dec 12 17:32:55.839945 2025] [:error] [pid 26521:tid 26601] [client 130.33.54.142:13308] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/rest-api/fields/index.php"] [unique_id "aTvhR5dhcAPU617AKTA8-AAAAJY"]
[Fri Dec 12 17:32:56.325890 2025] [:error] [pid 26521:tid 26595] [client 130.33.54.142:13248] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/index/fucku.php"] [unique_id "aTvhSJdhcAPU617AKTA8-QAAAJA"]
[Fri Dec 12 17:32:56.731608 2025] [:error] [pid 26521:tid 26596] [client 130.33.54.142:13217] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/index/fucku.php"] [unique_id "aTvhSJdhcAPU617AKTA8-gAAAJE"]
[Fri Dec 12 17:32:57.171890 2025] [:error] [pid 26521:tid 26588] [client 130.33.54.142:13220] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/index/fucku.php"] [unique_id "aTvhSZdhcAPU617AKTA8_AAAAIk"]
[Fri Dec 12 17:32:57.563730 2025] [:error] [pid 27950:tid 27969] [client 130.33.54.142:13298] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/index/fucku.php"] [unique_id "aTvhSYVLRvkrdsSc1F1trgAAAVE"]
[Fri Dec 12 17:32:57.860678 2025] [:error] [pid 55760:tid 55779] [client 130.33.54.142:27699] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/upload/wp-info.php"] [unique_id "aTvhSVObDQlftFDyGazZyQAAAZE"]
[Fri Dec 12 17:32:58.269455 2025] [:error] [pid 26521:tid 26589] [client 130.33.54.142:12940] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/upload/wp-info.php"] [unique_id "aTvhSpdhcAPU617AKTA8_gAAAIo"]
[Fri Dec 12 17:32:58.579115 2025] [:error] [pid 55760:tid 55765] [client 130.33.54.142:27690] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/upload/wp-info.php"] [unique_id "aTvhSlObDQlftFDyGazZygAAAYM"]
[Fri Dec 12 17:32:58.811757 2025] [:error] [pid 26521:tid 26586] [client 130.33.54.142:13260] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/upload/wp-info.php"] [unique_id "aTvhSpdhcAPU617AKTA9AAAAAIc"]
[Fri Dec 12 17:32:59.240352 2025] [:error] [pid 55760:tid 55784] [client 130.33.54.142:13279] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/post.php"] [unique_id "aTvhS1ObDQlftFDyGazZzAAAAZY"]
[Fri Dec 12 17:32:59.508273 2025] [:error] [pid 26520:tid 26575] [client 130.33.54.142:13287] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/post.php"] [unique_id "aTvhS0G_frlY5vNXu_DY7wAAAFc"]
[Fri Dec 12 17:32:59.754611 2025] [:error] [pid 26607:tid 26613] [client 130.33.54.142:13199] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/post.php"] [unique_id "aTvhS8b_b0tOEWTL2Kl1GAAAAMQ"]
[Fri Dec 12 17:33:00.027318 2025] [:error] [pid 26607:tid 26624] [client 130.33.54.142:13297] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/post.php"] [unique_id "aTvhTMb_b0tOEWTL2Kl1GQAAAM8"]
[Fri Dec 12 17:33:00.556780 2025] [:error] [pid 26520:tid 26572] [client 130.33.54.142:13194] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "aTvhTEG_frlY5vNXu_DY8AAAAFQ"]
[Fri Dec 12 17:33:01.109024 2025] [:error] [pid 27950:tid 27954] [client 130.33.54.142:13289] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "aTvhTYVLRvkrdsSc1F1trwAAAUI"]
[Fri Dec 12 17:33:01.676085 2025] [:error] [pid 26521:tid 26579] [client 130.33.54.142:13197] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "aTvhTZdhcAPU617AKTA9BwAAAIA"]
[Fri Dec 12 17:33:02.008607 2025] [:error] [pid 26521:tid 26602] [client 130.33.54.142:13252] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "aTvhTpdhcAPU617AKTA9CQAAAJc"]
[Fri Dec 12 17:33:02.763588 2025] [:error] [pid 60649:tid 60664] [client 130.33.54.142:27694] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/loads.PhP"] [unique_id "aTvhTlOcUGKU3sgfHP_SgQAAAQw"]
[Fri Dec 12 17:33:03.326182 2025] [:error] [pid 26520:tid 26568] [client 130.33.54.142:27711] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/loads.PhP"] [unique_id "aTvhT0G_frlY5vNXu_DY8gAAAFA"]
[Fri Dec 12 17:33:03.605014 2025] [:error] [pid 60649:tid 60652] [client 130.33.54.142:27656] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/loads.PhP"] [unique_id "aTvhT1OcUGKU3sgfHP_ShAAAAQA"]
[Fri Dec 12 17:33:03.878003 2025] [:error] [pid 26520:tid 26563] [client 130.33.54.142:27704] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/loads.PhP"] [unique_id "aTvhT0G_frlY5vNXu_DY8wAAAEs"]
[Fri Dec 12 17:33:04.138933 2025] [:error] [pid 26520:tid 26574] [client 130.33.54.142:13229] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/mj.php"] [unique_id "aTvhUEG_frlY5vNXu_DY9AAAAFY"]
[Fri Dec 12 17:33:04.375398 2025] [:error] [pid 55760:tid 55778] [client 130.33.54.142:27698] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/mj.php"] [unique_id "aTvhUFObDQlftFDyGazZzgAAAZA"]
[Fri Dec 12 17:33:04.722507 2025] [:error] [pid 27950:tid 27963] [client 130.33.54.142:27681] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/mj.php"] [unique_id "aTvhUIVLRvkrdsSc1F1ttAAAAUs"]
[Fri Dec 12 17:33:05.234607 2025] [:error] [pid 26521:tid 26588] [client 130.33.54.142:13268] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/mj.php"] [unique_id "aTvhUZdhcAPU617AKTA9DwAAAIk"]
[Fri Dec 12 17:33:05.588275 2025] [:error] [pid 26520:tid 26567] [client 130.33.54.142:13187] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/dichku.php"] [unique_id "aTvhUUG_frlY5vNXu_DY9QAAAE8"]
[Fri Dec 12 17:33:05.882108 2025] [:error] [pid 26520:tid 26560] [client 130.33.54.142:13198] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/dichku.php"] [unique_id "aTvhUUG_frlY5vNXu_DY9gAAAEg"]
[Fri Dec 12 17:33:06.200958 2025] [:error] [pid 60649:tid 60670] [client 130.33.54.142:13195] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/dichku.php"] [unique_id "aTvhUlOcUGKU3sgfHP_SiwAAARI"]
[Fri Dec 12 17:33:06.535183 2025] [:error] [pid 60649:tid 60674] [client 130.33.54.142:27770] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/dichku.php"] [unique_id "aTvhUlOcUGKU3sgfHP_SjQAAARY"]
[Fri Dec 12 17:33:06.901360 2025] [:error] [pid 55760:tid 55775] [client 130.33.54.142:13294] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/zsz.php"] [unique_id "aTvhUlObDQlftFDyGazZ0QAAAY0"]
[Fri Dec 12 17:33:07.151330 2025] [:error] [pid 60649:tid 60660] [client 130.33.54.142:13223] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/zsz.php"] [unique_id "aTvhU1OcUGKU3sgfHP_SjgAAAQg"]
[Fri Dec 12 17:33:07.607800 2025] [:error] [pid 26519:tid 26523] [client 130.33.54.142:13254] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/zsz.php"] [unique_id "aTvhU88TRgSGOeWqEhfQZAAAAAA"]
[Fri Dec 12 17:33:08.022942 2025] [:error] [pid 26520:tid 26562] [client 130.33.54.142:13193] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/zsz.php"] [unique_id "aTvhVEG_frlY5vNXu_DY9wAAAEo"]
[Fri Dec 12 17:33:08.316910 2025] [:error] [pid 55760:tid 55785] [client 130.33.54.142:27688] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/h2a2ck.php"] [unique_id "aTvhVFObDQlftFDyGazZ0wAAAZc"]
[Fri Dec 12 17:33:08.653186 2025] [:error] [pid 26520:tid 26558] [client 130.33.54.142:27683] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/h2a2ck.php"] [unique_id "aTvhVEG_frlY5vNXu_DY-AAAAEY"]
[Fri Dec 12 17:33:08.964896 2025] [:error] [pid 27950:tid 27965] [client 130.33.54.142:12972] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/h2a2ck.php"] [unique_id "aTvhVIVLRvkrdsSc1F1tuQAAAU0"]
[Fri Dec 12 17:33:09.290166 2025] [:error] [pid 26520:tid 26569] [client 130.33.54.142:13209] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/h2a2ck.php"] [unique_id "aTvhVUG_frlY5vNXu_DY-QAAAFE"]
[Fri Dec 12 17:33:09.586684 2025] [:error] [pid 55760:tid 55773] [client 130.33.54.142:27701] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/11.php"] [unique_id "aTvhVVObDQlftFDyGazZ1QAAAYs"]
[Fri Dec 12 17:33:09.938541 2025] [:error] [pid 27950:tid 27956] [client 130.33.54.142:27733] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/11.php"] [unique_id "aTvhVYVLRvkrdsSc1F1tuwAAAUQ"]
[Fri Dec 12 17:33:10.267471 2025] [:error] [pid 55760:tid 55768] [client 130.33.54.142:12990] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/11.php"] [unique_id "aTvhVlObDQlftFDyGazZ1wAAAYY"]
[Fri Dec 12 17:33:10.613028 2025] [:error] [pid 27950:tid 27960] [client 130.33.54.142:13202] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/11.php"] [unique_id "aTvhVoVLRvkrdsSc1F1tvwAAAUg"]
[Fri Dec 12 17:33:10.892461 2025] [:error] [pid 26607:tid 26627] [client 130.33.54.142:27714] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/fs6.php"] [unique_id "aTvhVsb_b0tOEWTL2Kl1GwAAANI"]
[Fri Dec 12 17:33:11.257935 2025] [:error] [pid 26607:tid 26612] [client 130.33.54.142:13281] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/fs6.php"] [unique_id "aTvhV8b_b0tOEWTL2Kl1HAAAAMM"]
[Fri Dec 12 17:33:11.638483 2025] [:error] [pid 26521:tid 26579] [client 130.33.54.142:13227] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/fs6.php"] [unique_id "aTvhV5dhcAPU617AKTA9FwAAAIA"]
[Fri Dec 12 17:33:11.903564 2025] [:error] [pid 26607:tid 26609] [client 130.33.54.142:27705] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/fs6.php"] [unique_id "aTvhV8b_b0tOEWTL2Kl1HgAAAMA"]
[Fri Dec 12 17:33:12.184914 2025] [:error] [pid 26607:tid 26616] [client 130.33.54.142:13214] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/byp.php"] [unique_id "aTvhWMb_b0tOEWTL2Kl1HwAAAMc"]
[Fri Dec 12 17:33:12.789209 2025] [:error] [pid 55760:tid 55782] [client 130.33.54.142:12979] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/byp.php"] [unique_id "aTvhWFObDQlftFDyGazZ2gAAAZQ"]
[Fri Dec 12 17:33:13.047807 2025] [:error] [pid 26607:tid 26630] [client 130.33.54.142:27728] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/byp.php"] [unique_id "aTvhWcb_b0tOEWTL2Kl1IQAAANU"]
[Fri Dec 12 17:33:13.373727 2025] [:error] [pid 26521:tid 26599] [client 130.33.54.142:13283] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/byp.php"] [unique_id "aTvhWZdhcAPU617AKTA9GQAAAJQ"]
[Fri Dec 12 17:33:13.608375 2025] [:error] [pid 26520:tid 26576] [client 130.33.54.142:27702] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/byp8.php"] [unique_id "aTvhWUG_frlY5vNXu_DY-wAAAFg"]
[Fri Dec 12 17:33:13.837606 2025] [:error] [pid 26520:tid 26570] [client 130.33.54.142:13228] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/byp8.php"] [unique_id "aTvhWUG_frlY5vNXu_DY_AAAAFI"]
[Fri Dec 12 17:33:14.107996 2025] [:error] [pid 26519:tid 26536] [client 130.33.54.142:27735] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/byp8.php"] [unique_id "aTvhWs8TRgSGOeWqEhfQaAAAAA0"]
[Fri Dec 12 17:33:14.343231 2025] [:error] [pid 26607:tid 26614] [client 130.33.54.142:12954] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/byp8.php"] [unique_id "aTvhWsb_b0tOEWTL2Kl1IwAAAMU"]
[Fri Dec 12 17:33:14.591093 2025] [:error] [pid 26521:tid 26598] [client 130.33.54.142:12944] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/an.php"] [unique_id "aTvhWpdhcAPU617AKTA9GwAAAJM"]
[Fri Dec 12 17:33:14.850839 2025] [:error] [pid 27950:tid 27962] [client 130.33.54.142:13247] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/an.php"] [unique_id "aTvhWoVLRvkrdsSc1F1t0AAAAUo"]
[Fri Dec 12 17:33:15.127586 2025] [:error] [pid 55760:tid 55766] [client 130.33.54.142:13293] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/an.php"] [unique_id "aTvhW1ObDQlftFDyGazZ4gAAAYQ"]
[Fri Dec 12 17:33:15.506292 2025] [:error] [pid 26520:tid 26559] [client 130.33.54.142:13306] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/an.php"] [unique_id "aTvhW0G_frlY5vNXu_DY_gAAAEc"]
[Fri Dec 12 17:33:15.906764 2025] [:error] [pid 27950:tid 27952] [client 130.33.54.142:13241] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/gm.php"] [unique_id "aTvhW4VLRvkrdsSc1F1t1QAAAUA"]
[Fri Dec 12 17:33:16.184291 2025] [:error] [pid 26520:tid 26554] [client 130.33.54.142:27771] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/gm.php"] [unique_id "aTvhXEG_frlY5vNXu_DY_wAAAEI"]
[Fri Dec 12 17:33:16.469237 2025] [:error] [pid 27950:tid 27960] [client 130.33.54.142:27748] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/gm.php"] [unique_id "aTvhXIVLRvkrdsSc1F1t1gAAAUg"]
[Fri Dec 12 17:33:16.774733 2025] [:error] [pid 26519:tid 26532] [client 130.33.54.142:12936] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/gm.php"] [unique_id "aTvhXM8TRgSGOeWqEhfQagAAAAk"]
[Fri Dec 12 17:33:17.054319 2025] [:error] [pid 26519:tid 26524] [client 130.33.54.142:12948] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/trplv.php"] [unique_id "aTvhXc8TRgSGOeWqEhfQawAAAAE"]
[Fri Dec 12 17:33:17.759232 2025] [:error] [pid 26521:tid 26595] [client 130.33.54.142:27751] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/trplv.php"] [unique_id "aTvhXZdhcAPU617AKTA9HQAAAJA"]
[Fri Dec 12 17:33:18.169046 2025] [:error] [pid 26521:tid 26588] [client 130.33.54.142:27760] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/trplv.php"] [unique_id "aTvhXpdhcAPU617AKTA9HgAAAIk"]
[Fri Dec 12 17:33:18.612636 2025] [:error] [pid 26520:tid 26557] [client 130.33.54.142:12931] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/trplv.php"] [unique_id "aTvhXkG_frlY5vNXu_DZAAAAAEU"]
[Fri Dec 12 17:33:18.925949 2025] [:error] [pid 60649:tid 60654] [client 130.33.54.142:13240] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ext.php"] [unique_id "aTvhXlOcUGKU3sgfHP_SqgAAAQI"]
[Fri Dec 12 17:33:19.349338 2025] [:error] [pid 26521:tid 26600] [client 130.33.54.142:12971] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ext.php"] [unique_id "aTvhX5dhcAPU617AKTA9IQAAAJU"]
[Fri Dec 12 17:33:48.052232 2025] [:error] [pid 26519:tid 26535] [client 130.33.54.142:27763] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/geck.php"] [unique_id "aTvhfM8TRgSGOeWqEhfQgwAAAAw"]
[Fri Dec 12 17:33:48.283775 2025] [:error] [pid 60649:tid 60658] [client 130.33.54.142:13225] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/geck.php"] [unique_id "aTvhfFOcUGKU3sgfHP_S5gAAAQY"]
[Fri Dec 12 17:33:48.623891 2025] [:error] [pid 26521:tid 26580] [client 130.33.54.142:13252] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/geck.php"] [unique_id "aTvhfJdhcAPU617AKTA9RwAAAIE"]
[Fri Dec 12 17:33:48.891392 2025] [:error] [pid 55760:tid 55772] [client 130.33.54.142:12961] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/geck.php"] [unique_id "aTvhfFObDQlftFDyGazZ8AAAAYo"]
[Fri Dec 12 17:33:49.129874 2025] [:error] [pid 26607:tid 26631] [client 130.33.54.142:13208] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/avaa.php"] [unique_id "aTvhfcb_b0tOEWTL2Kl1NgAAANY"]
[Fri Dec 12 17:33:49.437260 2025] [:error] [pid 26607:tid 26617] [client 130.33.54.142:13300] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/avaa.php"] [unique_id "aTvhfcb_b0tOEWTL2Kl1OAAAAMg"]
[Fri Dec 12 17:33:49.721728 2025] [:error] [pid 26607:tid 26627] [client 130.33.54.142:13210] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/avaa.php"] [unique_id "aTvhfcb_b0tOEWTL2Kl1OQAAANI"]
[Fri Dec 12 17:33:49.982977 2025] [:error] [pid 55760:tid 55765] [client 130.33.54.142:13253] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/avaa.php"] [unique_id "aTvhfVObDQlftFDyGazZ8QAAAYM"]
[Fri Dec 12 17:33:50.216011 2025] [:error] [pid 55760:tid 55782] [client 130.33.54.142:13278] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/yanz.php"] [unique_id "aTvhflObDQlftFDyGazZ8gAAAZQ"]
[Fri Dec 12 17:33:50.665662 2025] [:error] [pid 26607:tid 26619] [client 130.33.54.142:13196] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/yanz.php"] [unique_id "aTvhfsb_b0tOEWTL2Kl1OgAAAMo"]
[Fri Dec 12 17:33:50.935838 2025] [:error] [pid 55760:tid 55763] [client 130.33.54.142:13203] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/yanz.php"] [unique_id "aTvhflObDQlftFDyGazZ9AAAAYE"]
[Fri Dec 12 17:33:51.190332 2025] [:error] [pid 27950:tid 27968] [client 130.33.54.142:13255] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/yanz.php"] [unique_id "aTvhf4VLRvkrdsSc1F1t8QAAAVA"]
[Fri Dec 12 17:33:51.454131 2025] [:error] [pid 27950:tid 27972] [client 130.33.54.142:13189] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/bypass.php"] [unique_id "aTvhf4VLRvkrdsSc1F1t9QAAAVQ"]
[Fri Dec 12 17:33:51.737320 2025] [:error] [pid 27950:tid 27969] [client 130.33.54.142:13310] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/bypass.php"] [unique_id "aTvhf4VLRvkrdsSc1F1t9gAAAVE"]
[Fri Dec 12 17:33:52.057589 2025] [:error] [pid 26519:tid 26528] [client 130.33.54.142:13219] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/bypass.php"] [unique_id "aTvhgM8TRgSGOeWqEhfQhwAAAAU"]
[Fri Dec 12 17:33:52.342240 2025] [:error] [pid 26519:tid 26547] [client 130.33.54.142:27713] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/bypass.php"] [unique_id "aTvhgM8TRgSGOeWqEhfQiAAAABg"]
[Fri Dec 12 17:33:52.651936 2025] [:error] [pid 26521:tid 26589] [client 130.33.54.142:13221] [client 130.33.54.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/rk2.php"] [unique_id "aTvhgJdhcAPU617AKTA9SwAAAIo"]
[Fri Dec 12 17:33:52.943797 2025] [:error] [pid 26521:tid 26593] [client 130.33.54.142:13232] [client 130.33.54.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/js/js420.php"] [unique_id "aTvhgJdhcAPU617AKTA9TAAAAI4"]
[Fri Dec 12 17:34:03.735168 2025] [:error] [pid 60649:tid 60673] [client 45.8.17.25:49609] [client 45.8.17.25] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.25, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTvhi1OcUGKU3sgfHP_TBAAAARU"]
[Fri Dec 12 17:46:35.379778 2025] [:error] [pid 27950:tid 27971] [client 45.128.199.233:26259] [client 45.128.199.233] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.233, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTvke4VLRvkrdsSc1F1wAAAAAVM"]
[Fri Dec 12 17:59:04.141441 2025] [:error] [pid 55760:tid 55780] [client 45.128.199.108:60739] [client 45.128.199.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.108, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTvnaFObDQlftFDyGazgbQAAAZI"]
[Fri Dec 12 18:02:06.503765 2025] [:error] [pid 26520:tid 26559] [client 46.105.124.216:49538] [client 46.105.124.216] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 46.105.124.216, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTvoHkG_frlY5vNXu_DcgAAAAEc"]
[Fri Dec 12 18:11:30.646200 2025] [:error] [pid 26521:tid 26594] [client 45.128.199.140:22659] [client 45.128.199.140] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.140, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTvqUpdhcAPU617AKTBHbgAAAI8"]
[Fri Dec 12 18:36:22.416013 2025] [:error] [pid 55760:tid 55777] [client 45.128.199.252:52717] [client 45.128.199.252] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.252, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTvwJlObDQlftFDyGazpCwAAAY8"]
[Fri Dec 12 18:48:56.385878 2025] [:error] [pid 26521:tid 26597] [client 45.128.199.233:34751] [client 45.128.199.233] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.233, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTvzGJdhcAPU617AKTBQ8AAAAJI"]
[Fri Dec 12 19:01:29.954986 2025] [:error] [pid 26519:tid 26546] [client 45.128.199.128:63653] [client 45.128.199.128] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.128, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTv2Cc8TRgSGOeWqEhfcDAAAABc"]
[Fri Dec 12 19:14:03.293638 2025] [:error] [pid 26521:tid 26594] [client 45.8.17.29:43701] [client 45.8.17.29] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.29, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTv4-5dhcAPU617AKTBaKAAAAI8"]
[Fri Dec 12 19:38:58.515383 2025] [:error] [pid 26521:tid 26589] [client 45.128.199.252:29899] [client 45.128.199.252] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.252, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTv-0pdhcAPU617AKTBkFwAAAIo"]
[Fri Dec 12 19:47:01.359787 2025] [:error] [pid 26607:tid 26632] [client 152.53.37.34:44890] [client 152.53.37.34] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 152.53.37.34, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTwAtcb_b0tOEWTL2KmL6wAAANc"]
[Fri Dec 12 19:51:23.485631 2025] [:error] [pid 60649:tid 60652] [client 45.8.17.24:32197] [client 45.8.17.24] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.24, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTwBu1OcUGKU3sgfHP_q9wAAAQA"]
[Fri Dec 12 19:53:15.565297 2025] [:error] [pid 55760:tid 55769] [client 130.33.54.142:29067] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aTwCK1ObDQlftFDyGaz_XAAAAYc"]
[Fri Dec 12 19:53:15.797040 2025] [:error] [pid 55760:tid 55786] [client 130.33.54.142:29121] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aTwCK1ObDQlftFDyGaz_XgAAAZg"]
[Fri Dec 12 19:53:16.044642 2025] [:error] [pid 26521:tid 26590] [client 130.33.54.142:29138] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aTwCLJdhcAPU617AKTBocAAAAIs"]
[Fri Dec 12 19:53:16.289452 2025] [:error] [pid 26520:tid 26554] [client 130.33.54.142:29079] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aTwCLEG_frlY5vNXu_DvBgAAAEI"]
[Fri Dec 12 20:03:51.114028 2025] [:error] [pid 27950:tid 27956] [client 45.128.199.129:25733] [client 45.128.199.129] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.129, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTwEp4VLRvkrdsSc1F2Q6QAAAUQ"]
[Fri Dec 12 20:16:21.176032 2025] [:error] [pid 26520:tid 26574] [client 45.8.17.102:23721] [client 45.8.17.102] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.102, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTwHlUG_frlY5vNXu_DzjgAAAFY"]
[Fri Dec 12 20:28:50.140972 2025] [:error] [pid 55760:tid 55762] [client 45.8.17.102:60603] [client 45.8.17.102] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.102, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTwKglObDQlftFDyGawI7AAAAYA"]
[Fri Dec 12 20:41:14.386726 2025] [:error] [pid 26521:tid 26586] [client 45.8.17.247:53387] [client 45.8.17.247] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.247, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTwNapdhcAPU617AKTB4_wAAAIc"]
[Fri Dec 12 20:53:43.260993 2025] [:error] [pid 26521:tid 26597] [client 45.128.199.215:62137] [client 45.128.199.215] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.215, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTwQV5dhcAPU617AKTB76QAAAJI"]
[Fri Dec 12 21:06:16.163831 2025] [:error] [pid 26521:tid 26586] [client 45.128.199.233:32313] [client 45.128.199.233] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.233, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTwTSJdhcAPU617AKTCAfAAAAIc"]
[Fri Dec 12 21:13:27.138074 2025] [:error] [pid 26521:tid 26581] [client 162.62.231.139:58678] [client 162.62.231.139] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||paramountbaldivis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTwU95dhcAPU617AKTCDlwAAAII"]
[Fri Dec 12 21:18:47.782107 2025] [:error] [pid 60649:tid 60656] [client 45.128.199.233:53331] [client 45.128.199.233] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.233, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTwWN1OcUGKU3sgfHP_-KwAAAQQ"]
[Fri Dec 12 21:25:06.628294 2025] [:error] [pid 26607:tid 26631] [client 91.232.154.200:33438] [client 91.232.154.200] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.232.154.200, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTwXssb_b0tOEWTL2KmijAAAANY"]
[Fri Dec 12 21:31:15.143427 2025] [:error] [pid 55760:tid 55772] [client 45.128.199.233:51019] [client 45.128.199.233] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.233, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTwZI1ObDQlftFDyGawYGQAAAYo"]
[Fri Dec 12 21:43:36.376359 2025] [:error] [pid 26607:tid 26623] [client 45.128.199.110:58395] [client 45.128.199.110] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.110, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTwcCMb_b0tOEWTL2KmlMAAAAM4"]
[Fri Dec 12 21:55:58.380321 2025] [:error] [pid 26607:tid 26612] [client 45.128.199.108:40073] [client 45.128.199.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.108, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTwe7sb_b0tOEWTL2KmnGgAAAMM"]
[Fri Dec 12 22:08:21.217661 2025] [:error] [pid 26521:tid 26589] [client 45.8.17.29:31005] [client 45.8.17.29] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.29, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTwh1ZdhcAPU617AKTCW1AAAAIo"]
[Fri Dec 12 22:20:52.303821 2025] [:error] [pid 26520:tid 26561] [client 45.128.199.126:30695] [client 45.128.199.126] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.126, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTwkxEG_frlY5vNXu_AKcwAAAEk"]
[Fri Dec 12 22:33:24.943822 2025] [:error] [pid 27950:tid 27973] [client 45.128.199.200:26075] [client 45.128.199.200] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.200, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTwntIVLRvkrdsSc1F218wAAAVU"]
[Fri Dec 12 22:45:53.341452 2025] [:error] [pid 55760:tid 55768] [client 45.128.199.189:63395] [client 45.128.199.189] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.189, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTwqoVObDQlftFDyGawtgwAAAYY"]
[Fri Dec 12 22:59:04.092524 2025] [:error] [pid 26521:tid 26602] [client 45.128.199.109:23533] [client 45.128.199.109] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.109, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTwtuJdhcAPU617AKTClgwAAAJc"]
[Fri Dec 12 23:13:01.006091 2025] [:error] [pid 26520:tid 26553] [client 45.128.199.215:57853] [client 45.128.199.215] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.215, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTww_UG_frlY5vNXu_AV7QAAAEE"]
[Fri Dec 12 23:55:06.774681 2025] [:error] [pid 26519:tid 26534] [client 45.128.199.123:61617] [client 45.128.199.123] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.123, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTw62s8TRgSGOeWqEhcToQAAAAs"]
[Sat Dec 13 00:06:00.279137 2025] [:error] [pid 27950:tid 27974] [client 45.8.17.219:39789] [client 45.8.17.219] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.219, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTw9aIVLRvkrdsSc1F3NtAAAAVY"]
[Sat Dec 13 00:16:39.624132 2025] [:error] [pid 26520:tid 26568] [client 45.8.17.26:65189] [client 45.8.17.26] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.26, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTw_50G_frlY5vNXu_AjCwAAAFA"]
[Sat Dec 13 00:41:35.647622 2025] [:error] [pid 27950:tid 27964] [client 172.104.233.211:11470] [client 172.104.233.211] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.104.233.211, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTxFv4VLRvkrdsSc1F3VQwAAAUw"]
[Sat Dec 13 00:44:13.575900 2025] [:error] [pid 27950:tid 27953] [client 45.128.199.129:46943] [client 45.128.199.129] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.129, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTxGXYVLRvkrdsSc1F3VeQAAAUE"]
[Sat Dec 13 00:57:54.804647 2025] [:error] [pid 27950:tid 27953] [client 45.128.199.141:61879] [client 45.128.199.141] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.141, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTxJkoVLRvkrdsSc1F3XjQAAAUE"]
[Sat Dec 13 01:11:43.105662 2025] [:error] [pid 26520:tid 26568] [client 45.128.199.252:45213] [client 45.128.199.252] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.252, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTxMz0G_frlY5vNXu_AuMAAAAFA"]
[Sat Dec 13 01:25:52.156018 2025] [:error] [pid 26519:tid 26538] [client 45.8.17.219:57409] [client 45.8.17.219] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.219, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTxQIM8TRgSGOeWqEhcjeAAAAA8"]
[Sat Dec 13 01:39:46.508317 2025] [:error] [pid 27950:tid 27965] [client 45.8.17.46:50469] [client 45.8.17.46] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.46, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTxTYoVLRvkrdsSc1F3g2gAAAU0"]
[Sat Dec 13 01:53:31.297521 2025] [:error] [pid 26607:tid 26630] [client 45.8.17.25:51947] [client 45.8.17.25] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.25, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTxWm8b_b0tOEWTL2KnaugAAANU"]
[Sat Dec 13 02:07:22.004973 2025] [:error] [pid 61026:tid 61035] [client 45.128.199.114:65529] [client 45.128.199.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.114, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTxZ2vuRR7v2iVXoj1Nw0QAAAgY"]
[Sat Dec 13 02:21:28.647412 2025] [:error] [pid 27950:tid 27952] [client 45.8.17.102:54149] [client 45.8.17.102] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.102, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTxdKIVLRvkrdsSc1F3lrwAAAUA"]
[Sat Dec 13 02:22:18.076981 2025] [:error] [pid 26607:tid 26625] [client 139.59.227.128:40902] [client 139.59.227.128] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 139.59.227.128, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTxdWsb_b0tOEWTL2KnhoQAAANA"]
[Sat Dec 13 02:35:15.965362 2025] [:error] [pid 60991:tid 60994] [client 45.128.199.119:27975] [client 45.128.199.119] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.119, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTxgY25Xj6-M-KjdjNjW_QAAAcE"]
[Sat Dec 13 02:48:59.984231 2025] [:error] [pid 26520:tid 26555] [client 45.8.17.46:37781] [client 45.8.17.46] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.46, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTxjm0G_frlY5vNXu_BC7wAAAEM"]
[Sat Dec 13 03:02:56.140379 2025] [:error] [pid 55760:tid 55766] [client 45.128.199.128:33351] [client 45.128.199.128] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.128, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTxm4FObDQlftFDyGaxpbAAAAYQ"]
[Sat Dec 13 03:09:30.707043 2025] [:error] [pid 61026:tid 61049] [client 165.154.239.32:33152] [client 165.154.239.32] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.paramountbaldivis.com"] [uri "/robots.txt"] [unique_id "aTxoavuRR7v2iVXoj1N4_QAAAhQ"]
[Sat Dec 13 03:09:31.733269 2025] [:error] [pid 61027:tid 61068] [client 165.154.239.32:44050] [client 165.154.239.32] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.paramountbaldivis.com"] [uri "/robots.txt"] [unique_id "aTxoa6zAkXCoEs2QKBlpoAAAAkw"]
[Sat Dec 13 03:12:30.671700 2025] [:error] [pid 26607:tid 26610] [client 164.92.215.249:36836] [client 164.92.215.249] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/robots.txt"] [unique_id "aTxpHsb_b0tOEWTL2KnrkwAAAME"]
[Sat Dec 13 03:12:31.672652 2025] [:error] [pid 55760:tid 55779] [client 164.92.215.249:50002] [client 164.92.215.249] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/robots.txt"] [unique_id "aTxpH1ObDQlftFDyGaxqbwAAAZE"]
[Sat Dec 13 03:16:22.366148 2025] [:error] [pid 26520:tid 26568] [client 45.8.17.51:58475] [client 45.8.17.51] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.51, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTxqBkG_frlY5vNXu_BGaQAAAFA"]
[Sat Dec 13 03:41:30.822467 2025] [:error] [pid 61026:tid 61037] [client 38.97.60.82:52510] [client 38.97.60.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/css/"] [unique_id "aTxv6vuRR7v2iVXoj1N9HAAAAgg"], referer: binance.com
[Sat Dec 13 04:03:06.804426 2025] [:error] [pid 26357:tid 26432] [client 49.12.169.107:53848] [client 49.12.169.107] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 49.12.169.107, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTx0-vPACq96t_L1u0a0lQAAAJA"]
[Sat Dec 13 04:10:35.183804 2025] [:error] [pid 26357:tid 26419] [client 45.128.199.110:62725] [client 45.128.199.110] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.110, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTx2u_PACq96t_L1u0a3swAAAIM"]
[Sat Dec 13 04:16:31.484597 2025] [:error] [pid 64355:tid 64438] [client 38.97.60.82:58612] [client 38.97.60.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/css/"] [unique_id "aTx4H_zy6OXYeYq3qodqXgAAAIs"], referer: binance.com
[Sat Dec 13 04:24:09.607154 2025] [:error] [pid 43836:tid 43846] [client 45.8.17.51:51599] [client 45.8.17.51] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.51, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTx56WAEOBirsxb11nZinQAAAMg"]
[Sat Dec 13 04:37:59.785567 2025] [:error] [pid 43747:tid 43755] [client 45.128.199.189:51599] [client 45.128.199.189] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.189, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTx9J5Yw3twBd_JQEHiSOgAAAAQ"]
[Sat Dec 13 04:51:46.440472 2025] [:error] [pid 43749:tid 43813] [client 45.128.199.116:28111] [client 45.128.199.116] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.116, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTyAYnOk7VNylTjPi3x-VgAAAIc"]
[Sat Dec 13 05:05:22.725987 2025] [:error] [pid 43748:tid 43799] [client 45.128.199.140:49413] [client 45.128.199.140] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.140, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTyDkqrTT0VzE3gYjcArUQAAAFQ"]
[Sat Dec 13 05:18:46.465100 2025] [:error] [pid 43747:tid 43767] [client 45.128.199.122:35715] [client 45.128.199.122] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.122, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTyGtpYw3twBd_JQEHiciwAAABA"]
[Sat Dec 13 05:31:59.641212 2025] [:error] [pid 43747:tid 43756] [client 45.8.17.51:50973] [client 45.8.17.51] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.51, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTyJz5Yw3twBd_JQEHifMAAAAAU"]
[Sat Dec 13 05:45:01.656275 2025] [:error] [pid 43748:tid 43795] [client 45.8.17.46:31167] [client 45.8.17.46] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.46, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTyM3arTT0VzE3gYjcAzgwAAAFA"]
[Sat Dec 13 05:45:58.135289 2025] [:error] [pid 43748:tid 43791] [client 200.152.177.16:55854] [client 200.152.177.16] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 200.152.177.16, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTyNFqrTT0VzE3gYjcAzsQAAAEw"]
[Sat Dec 13 05:58:17.655492 2025] [:error] [pid 43748:tid 43781] [client 45.8.17.30:25241] [client 45.8.17.30] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.30, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTyP-arTT0VzE3gYjcA2UQAAAEI"]
[Sat Dec 13 06:11:45.490921 2025] [:error] [pid 43747:tid 43758] [client 45.128.199.127:37979] [client 45.128.199.127] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.127, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTyTIZYw3twBd_JQEHinfAAAAAc"]
[Sat Dec 13 06:25:20.575302 2025] [:error] [pid 43836:tid 43852] [client 45.8.17.26:52051] [client 45.8.17.26] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.26, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTyWUGAEOBirsxb11naPFAAAAM4"]
[Sat Dec 13 06:33:02.769763 2025] [:error] [pid 43749:tid 43814] [client 82.165.87.252:55456] [client 82.165.87.252] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 82.165.87.252, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTyYHnOk7VNylTjPi3yWZwAAAIg"]
[Sat Dec 13 06:33:10.186213 2025] [:error] [pid 43747:tid 43762] [client 82.165.87.252:55464] [client 82.165.87.252] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 82.165.87.252, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTyYJpYw3twBd_JQEHisNgAAAAs"]
[Sat Dec 13 07:05:33.821137 2025] [:error] [pid 39287:tid 39300] [client 45.8.17.247:28591] [client 45.8.17.247] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.247, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTyfvTBwBW1JRRoCYqYrtgAAAQs"]
[Sat Dec 13 07:18:58.925224 2025] [:error] [pid 43748:tid 43793] [client 45.8.17.26:25539] [client 45.8.17.26] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.26, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTyi4qrTT0VzE3gYjcBIPQAAAE4"]
[Sat Dec 13 07:26:10.857567 2025] [:error] [pid 43749:tid 43821] [client 62.84.186.201:55952] [client 62.84.186.201] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.84.186.201, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTykknOk7VNylTjPi3ykdgAAAI8"]
[Sat Dec 13 07:32:13.476883 2025] [:error] [pid 43747:tid 43756] [client 45.8.17.219:31101] [client 45.8.17.219] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.219, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTyl_ZYw3twBd_JQEHi6sAAAAAU"]
[Sat Dec 13 07:45:23.640695 2025] [:error] [pid 55037:tid 55061] [client 45.128.199.189:49647] [client 45.128.199.189] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.189, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTypExyx7iFaaIMvMOEpIAAAAVY"]
[Sat Dec 13 07:58:35.122802 2025] [:error] [pid 43749:tid 43810] [client 45.8.17.51:52791] [client 45.8.17.51] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.51, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTysK3Ok7VNylTjPi3yo_QAAAIQ"]
[Sat Dec 13 08:25:12.250380 2025] [:error] [pid 43747:tid 43769] [client 45.8.17.24:60173] [client 45.8.17.24] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.24, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTyyaJYw3twBd_JQEHjFUAAAABI"]
[Sat Dec 13 08:38:30.271960 2025] [:error] [pid 55037:tid 55042] [client 45.128.199.129:54027] [client 45.128.199.129] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.129, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTy1hhyx7iFaaIMvMOEu7wAAAUM"]
[Sat Dec 13 08:51:48.494936 2025] [:error] [pid 55071:tid 55079] [client 45.128.199.107:30991] [client 45.128.199.107] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.107, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTy4pMHSpNduhEZ_mjeBmwAAAYY"]
[Sat Dec 13 09:05:06.059208 2025] [:error] [pid 39287:tid 39290] [client 45.128.199.232:33099] [client 45.128.199.232] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.232, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTy7wjBwBW1JRRoCYqZDKAAAAQE"]
[Sat Dec 13 09:18:24.532308 2025] [:error] [pid 39287:tid 39296] [client 45.128.199.128:38361] [client 45.128.199.128] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.128, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTy-4DBwBW1JRRoCYqZFHgAAAQc"]
[Sat Dec 13 09:31:52.429622 2025] [:error] [pid 43749:tid 43819] [client 45.8.17.27:40439] [client 45.8.17.27] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.27, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTzCCHOk7VNylTjPi3y0qQAAAI0"]
[Sat Dec 13 09:45:10.957000 2025] [:error] [pid 39287:tid 39310] [client 45.128.199.109:40555] [client 45.128.199.109] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.109, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTzFJjBwBW1JRRoCYqZI1QAAARU"]
[Sat Dec 13 09:58:33.160104 2025] [:error] [pid 39287:tid 39291] [client 45.8.17.29:37619] [client 45.8.17.29] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.29, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTzISTBwBW1JRRoCYqZJswAAAQI"]
[Sat Dec 13 10:25:07.844110 2025] [:error] [pid 43749:tid 43821] [client 45.128.199.132:25671] [client 45.128.199.132] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.132, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTzOg3Ok7VNylTjPi3y5NQAAAI8"]
[Sat Dec 13 10:34:17.493865 2025] [:error] [pid 43836:tid 43844] [client 43.135.133.241:37256] [client 43.135.133.241] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||paramountbaldivis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTzQqWAEOBirsxb11na-SwAAAMY"]
[Sat Dec 13 10:41:01.823105 2025] [:error] [pid 55037:tid 55039] [client 45.8.17.51:42057] [client 45.8.17.51] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.51, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTzSPRyx7iFaaIMvMOE-lQAAAUA"]
[Sat Dec 13 10:47:45.097936 2025] [:error] [pid 43749:tid 43806] [client 159.198.46.173:33342] [client 159.198.46.173] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.198.46.173, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTzT0XOk7VNylTjPi3y8vQAAAIE"]
[Sat Dec 13 11:07:51.229311 2025] [:error] [pid 43749:tid 43805] [client 45.128.199.109:29641] [client 45.128.199.109] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.109, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTzYh3Ok7VNylTjPi3zB8gAAAIA"]
[Sat Dec 13 11:21:09.388999 2025] [:error] [pid 43749:tid 43821] [client 45.8.17.24:63401] [client 45.8.17.24] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.24, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTzbpXOk7VNylTjPi3zHBgAAAI8"]
[Sat Dec 13 11:47:29.641957 2025] [:error] [pid 55037:tid 55060] [client 45.8.17.26:34147] [client 45.8.17.26] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.26, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTzh0Ryx7iFaaIMvMOFHqQAAAVU"]
[Sat Dec 13 12:14:13.646234 2025] [:error] [pid 43749:tid 43827] [client 45.128.199.140:50857] [client 45.128.199.140] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.140, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTzoFXOk7VNylTjPi3zSwQAAAJU"]
[Sat Dec 13 12:26:59.983477 2025] [:error] [pid 43836:tid 43844] [client 137.184.230.10:34012] [client 137.184.230.10] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 137.184.230.10, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTzrE2AEOBirsxb11nbOuwAAAMY"]
[Sat Dec 13 12:54:20.499131 2025] [:error] [pid 43747:tid 43756] [client 45.128.199.114:42747] [client 45.128.199.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.114, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTzxfJYw3twBd_JQEHjz1AAAAAU"]
[Sat Dec 13 12:58:01.924480 2025] [:error] [pid 43836:tid 43860] [client 136.158.0.141:43840] [client 136.158.0.141] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.158.0.141, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aTzyWWAEOBirsxb11nbTXgAAANY"]
[Sat Dec 13 13:00:34.159481 2025] [:error] [pid 8181:tid 8196] [client 45.154.98.18:50370] [client 45.154.98.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTzy8ocsztoZQ9y1QdUPhAAAAgY"]
[Sat Dec 13 13:00:34.745092 2025] [:error] [pid 43836:tid 43859] [client 45.154.98.18:50644] [client 45.154.98.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTzy8mAEOBirsxb11nbT3AAAANU"]
[Sat Dec 13 13:00:35.569998 2025] [:error] [pid 8242:tid 8261] [client 45.154.98.18:51009] [client 45.154.98.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTzy8yNKA7vSGNUfnOEVawAAAk0"]
[Sat Dec 13 13:00:36.118650 2025] [:error] [pid 8242:tid 8251] [client 45.154.98.18:51910] [client 45.154.98.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTzy9CNKA7vSGNUfnOEVgQAAAkM"]
[Sat Dec 13 13:00:36.744262 2025] [:error] [pid 8242:tid 8262] [client 45.154.98.18:52804] [client 45.154.98.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aTzy9CNKA7vSGNUfnOEVlAAAAk4"]
[Sat Dec 13 13:07:38.263025 2025] [:error] [pid 8181:tid 8191] [client 45.128.199.111:29209] [client 45.128.199.111] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.111, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTz0mocsztoZQ9y1QdURKgAAAgE"]
[Sat Dec 13 13:20:59.014776 2025] [:error] [pid 43749:tid 43816] [client 45.128.199.250:58535] [client 45.128.199.250] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.250, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTz3u3Ok7VNylTjPi3ziJwAAAIo"]
[Sat Dec 13 13:34:14.446375 2025] [:error] [pid 43747:tid 43764] [client 45.128.199.129:59521] [client 45.128.199.129] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.129, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTz61pYw3twBd_JQEHj5yAAAAA0"]
[Sat Dec 13 13:47:28.644719 2025] [:error] [pid 55071:tid 55073] [client 45.128.199.128:54007] [client 45.128.199.128] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.128, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aTz98MHSpNduhEZ_mjeq7gAAAYA"]
[Sat Dec 13 14:00:32.694773 2025] [:error] [pid 8242:tid 8266] [client 45.128.199.109:33905] [client 45.128.199.109] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.109, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aT0BACNKA7vSGNUfnOEbJwAAAlI"]
[Sat Dec 13 14:52:33.875650 2025] [:error] [pid 39287:tid 39300] [client 45.8.17.247:59701] [client 45.8.17.247] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.247, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aT0NMTBwBW1JRRoCYqZuwQAAAQs"]
[Sat Dec 13 15:05:29.045134 2025] [:error] [pid 43748:tid 43786] [client 45.8.17.247:41883] [client 45.8.17.247] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.247, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aT0QOarTT0VzE3gYjcCSowAAAEc"]
[Sat Dec 13 15:31:39.257119 2025] [:error] [pid 8242:tid 8262] [client 45.8.17.46:54689] [client 45.8.17.46] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.46, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aT0WWyNKA7vSGNUfnOEjEAAAAk4"]
[Sat Dec 13 15:44:41.517721 2025] [:error] [pid 20799:tid 20814] [client 45.128.199.215:37097] [client 45.128.199.215] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.215, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aT0ZaaPz3eVRUTzZpOJeTgAAAs0"]
[Sat Dec 13 15:46:41.184914 2025] [:error] [pid 43748:tid 43799] [client 43.130.71.237:37578] [client 43.130.71.237] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.paramountbaldivis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.paramountbaldivis.com"] [uri "/"] [unique_id "aT0Z4arTT0VzE3gYjcCVfwAAAFQ"]
[Sat Dec 13 15:57:24.590457 2025] [:error] [pid 21342:tid 21349] [client 185.21.112.38:41006] [client 185.21.112.38] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.21.112.38, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aT0cZPBL0VVSMIEvqstARgAAAwM"]
[Sat Dec 13 16:10:44.939067 2025] [:error] [pid 21342:tid 21359] [client 45.128.199.107:59695] [client 45.128.199.107] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.107, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aT0fhPBL0VVSMIEvqstDggAAAw0"]
[Sat Dec 13 16:23:52.665258 2025] [:error] [pid 20799:tid 20811] [client 45.128.199.116:54241] [client 45.128.199.116] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.116, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aT0imKPz3eVRUTzZpOJilwAAAso"]
[Sat Dec 13 16:36:55.440001 2025] [:error] [pid 22505:tid 22508] [client 45.8.17.247:33601] [client 45.8.17.247] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.247, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aT0lpzvNI-35hW16TnUHhgAAA4E"]
[Sat Dec 13 17:16:09.089949 2025] [:error] [pid 55071:tid 55089] [client 45.128.199.132:62343] [client 45.128.199.132] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.132, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aT0u2cHSpNduhEZ_mje_SQAAAZA"]
[Sat Dec 13 17:42:15.718960 2025] [:error] [pid 39287:tid 39311] [client 45.128.199.116:62473] [client 45.128.199.116] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.116, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aT009zBwBW1JRRoCYqZ7ngAAARY"]
[Sat Dec 13 17:55:15.296053 2025] [:error] [pid 20799:tid 20805] [client 45.128.199.200:32567] [client 45.128.199.200] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.200, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aT04A6Pz3eVRUTzZpOJrRgAAAsQ"]
[Sat Dec 13 17:58:56.019274 2025] [:error] [pid 43836:tid 43855] [client 91.232.154.200:46178] [client 91.232.154.200] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.232.154.200, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aT044GAEOBirsxb11nbwPgAAANE"]
[Sat Dec 13 18:34:24.015682 2025] [:error] [pid 21342:tid 21366] [client 45.8.17.25:42503] [client 45.8.17.25] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.25, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aT1BMPBL0VVSMIEvqsteVwAAAxQ"]
[Sat Dec 13 18:43:12.630268 2025] [:error] [pid 8242:tid 8268] [client 43.140.247.223:45728] [client 43.140.247.223] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||paramountbaldivis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT1DQCNKA7vSGNUfnOEw3gAAAlQ"]
[Sat Dec 13 19:16:36.594150 2025] [:error] [pid 21342:tid 21354] [client 45.128.199.119:46041] [client 45.128.199.119] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.119, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aT1LFPBL0VVSMIEvqstpxQAAAwg"]
[Sat Dec 13 19:32:38.825634 2025] [:error] [pid 8242:tid 8259] [client 123.31.41.118:43610] [client 123.31.41.118] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 123.31.41.118, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aT1O1iNKA7vSGNUfnOE04wAAAks"]
[Sat Dec 13 20:34:16.012693 2025] [:error] [pid 21342:tid 21346] [client 45.128.199.112:43133] [client 45.128.199.112] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.112, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aT1dSPBL0VVSMIEvqst4iAAAAwA"]
[Sat Dec 13 21:00:24.690847 2025] [:error] [pid 20799:tid 20804] [client 45.128.199.112:34527] [client 45.128.199.112] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.112, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aT1jaKPz3eVRUTzZpOKC7wAAAsM"]
[Sat Dec 13 21:26:55.191864 2025] [:error] [pid 43836:tid 43846] [client 45.8.17.219:64511] [client 45.8.17.219] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.219, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aT1pn2AEOBirsxb11nYDeAAAAMg"]
[Sat Dec 13 21:40:09.262376 2025] [:error] [pid 43747:tid 43758] [client 45.128.199.130:64471] [client 45.128.199.130] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.130, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aT1suZYw3twBd_JQEHhCcwAAAAc"]
[Sat Dec 13 22:10:35.641017 2025] [:error] [pid 8242:tid 8269] [client 49.51.36.179:54968] [client 49.51.36.179] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.paramountbaldivis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.paramountbaldivis.com"] [uri "/"] [unique_id "aT1z2yNKA7vSGNUfnOFEYwAAAlU"]
[Sat Dec 13 22:19:32.350198 2025] [:error] [pid 8242:tid 8261] [client 45.128.199.109:20871] [client 45.128.199.109] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.109, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aT119CNKA7vSGNUfnOFF-AAAAk0"]
[Sat Dec 13 22:45:46.459833 2025] [:error] [pid 8242:tid 8268] [client 45.8.17.31:55349] [client 45.8.17.31] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.31, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aT18GiNKA7vSGNUfnOFIlgAAAlQ"]
[Sat Dec 13 23:43:20.576208 2025] [:error] [pid 43747:tid 43752] [client 91.245.204.99:9599] [client 91.245.204.99] ModSecurity: Access denied with code 403 (phase 2). Pattern match "![!+ ]\\\\[\\\\]" at ARGS:0. [file "/usr/local/apache/modsecurity-cwaf/rules/07_XSS_XSS.conf"] [line "173"] [id "213070"] [rev "1"] [msg "COMODO WAF: JSFuck / Hieroglyphy obfuscation detected||paramountbaldivis.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "XSS"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT2JmJYw3twBd_JQEHhb0wAAAAE"]
[Sun Dec 14 00:01:08.159075 2025] [:error] [pid 43748:tid 43799] [client 194.180.49.170:38646] [client 194.180.49.170] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paramountbaldivis.com"] [uri "/.git/config"] [unique_id "aT2NxKrTT0VzE3gYjcDGPwAAAFQ"]
[Sun Dec 14 00:01:09.693258 2025] [:error] [pid 39287:tid 39297] [client 194.180.49.170:31074] [client 194.180.49.170] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paramountbaldivis.com"] [uri "/.env"] [unique_id "aT2NxTBwBW1JRRoCYqaiuQAAAQg"]
[Sun Dec 14 00:01:40.791910 2025] [:error] [pid 23013:tid 23035] [client 194.180.49.170:43556] [client 194.180.49.170] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paramountbaldivis.com"] [uri "/.env.development"] [unique_id "aT2N5Ks9bDNWPQXUW1a-kAAAA9Q"]
[Sun Dec 14 00:01:42.333176 2025] [:error] [pid 23013:tid 23023] [client 194.180.49.170:43588] [client 194.180.49.170] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paramountbaldivis.com"] [uri "/.env.production"] [unique_id "aT2N5qs9bDNWPQXUW1a-kgAAA8g"]
[Sun Dec 14 00:01:43.542888 2025] [:error] [pid 55071:tid 55084] [client 194.180.49.170:43602] [client 194.180.49.170] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paramountbaldivis.com"] [uri "/api/.env"] [unique_id "aT2N58HSpNduhEZ_mjf1SQAAAYs"]
[Sun Dec 14 00:01:45.566403 2025] [:error] [pid 20799:tid 20819] [client 194.180.49.170:43624] [client 194.180.49.170] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paramountbaldivis.com"] [uri "/backend/.env"] [unique_id "aT2N6aPz3eVRUTzZpOKgjwAAAtI"]
[Sun Dec 14 00:05:08.339370 2025] [:error] [pid 55071:tid 55074] [client 45.128.199.111:60567] [client 45.128.199.111] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.111, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aT2OtMHSpNduhEZ_mjf1qwAAAYE"]
[Sun Dec 14 00:39:13.189860 2025] [:error] [pid 14689:tid 14697] [client 45.128.199.109:30987] [client 45.128.199.109] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.109, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aT2WsUEcifvaa9I7Snlm4wAAAUQ"]
[Sun Dec 14 01:09:11.494252 2025] [:error] [pid 3634:tid 3642] [client 41.190.86.180:35158] [client 41.190.86.180] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 41.190.86.180, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aT2dt4bt-wTl4d7Q7qp3jgAAAEQ"]
[Sun Dec 14 01:24:27.329753 2025] [:error] [pid 3634:tid 3645] [client 117.62.235.53:59947] [client 117.62.235.53] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.paramountbaldivis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.paramountbaldivis.com"] [uri "/"] [unique_id "aT2hS4bt-wTl4d7Q7qp7QQAAAEc"]
[Sun Dec 14 01:32:44.920674 2025] [:error] [pid 3636:tid 3705] [client 45.128.199.111:36405] [client 45.128.199.111] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.111, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aT2jPN4pNg3LXPqKgeY6VQAAAQ0"]
[Sun Dec 14 02:23:12.894522 2025] [:error] [pid 14689:tid 14702] [client 52.169.159.88:14552] [client 52.169.159.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "paramountbaldivis.com"] [uri "/fm.php"] [unique_id "aT2vEEEcifvaa9I7SnmNegAAAUk"]
[Sun Dec 14 02:23:23.639614 2025] [:error] [pid 14654:tid 14661] [client 52.169.159.88:9609] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/pepe.php"] [unique_id "aT2vGzqZP_N7tgSGeZc8YgAAAAQ"]
[Sun Dec 14 02:23:24.151138 2025] [:error] [pid 3720:tid 3743] [client 52.169.159.88:9649] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/pepe.php"] [unique_id "aT2vHO7_sgsCEY5RMYrrLgAAAJU"]
[Sun Dec 14 02:23:24.656235 2025] [:error] [pid 3720:tid 3731] [client 52.169.159.88:7844] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/pepe.php"] [unique_id "aT2vHO7_sgsCEY5RMYrrLwAAAIk"]
[Sun Dec 14 02:23:25.175603 2025] [:error] [pid 3720:tid 3726] [client 52.169.159.88:10834] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/pepe.php"] [unique_id "aT2vHe7_sgsCEY5RMYrrMAAAAIQ"]
[Sun Dec 14 02:23:25.719662 2025] [:error] [pid 3634:tid 3650] [client 52.169.159.88:16642] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/public/z.php"] [unique_id "aT2vHYbt-wTl4d7Q7qqFNAAAAEw"]
[Sun Dec 14 02:23:26.224610 2025] [:error] [pid 3634:tid 3648] [client 52.169.159.88:9609] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/public/z.php"] [unique_id "aT2vHobt-wTl4d7Q7qqFNwAAAEo"]
[Sun Dec 14 02:23:26.726074 2025] [:error] [pid 14654:tid 14678] [client 52.169.159.88:13421] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/public/z.php"] [unique_id "aT2vHjqZP_N7tgSGeZc8ZgAAABU"]
[Sun Dec 14 02:23:27.239748 2025] [:error] [pid 14654:tid 14681] [client 52.169.159.88:3702] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/public/z.php"] [unique_id "aT2vHzqZP_N7tgSGeZc8ZwAAABg"]
[Sun Dec 14 02:23:27.741739 2025] [:error] [pid 14689:tid 14706] [client 52.169.159.88:9662] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-update.php"] [unique_id "aT2vH0Ecifvaa9I7SnmNhgAAAU0"]
[Sun Dec 14 02:23:28.247514 2025] [:error] [pid 3720:tid 3737] [client 52.169.159.88:8021] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-update.php"] [unique_id "aT2vIO7_sgsCEY5RMYrrMQAAAI8"]
[Sun Dec 14 02:23:28.748214 2025] [:error] [pid 14654:tid 14677] [client 52.169.159.88:4754] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-update.php"] [unique_id "aT2vIDqZP_N7tgSGeZc8aAAAABQ"]
[Sun Dec 14 02:23:29.252240 2025] [:error] [pid 14654:tid 14665] [client 52.169.159.88:15664] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-update.php"] [unique_id "aT2vITqZP_N7tgSGeZc8aQAAAAg"]
[Sun Dec 14 02:23:29.752690 2025] [:error] [pid 14654:tid 14664] [client 52.169.159.88:16574] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/404.php"] [unique_id "aT2vITqZP_N7tgSGeZc8agAAAAc"]
[Sun Dec 14 02:23:30.312313 2025] [:error] [pid 14654:tid 14662] [client 52.169.159.88:16135] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/404.php"] [unique_id "aT2vIjqZP_N7tgSGeZc8bAAAAAU"]
[Sun Dec 14 02:23:30.822041 2025] [:error] [pid 14654:tid 14679] [client 52.169.159.88:3681] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/404.php"] [unique_id "aT2vIjqZP_N7tgSGeZc8bQAAABY"]
[Sun Dec 14 02:23:31.334541 2025] [:error] [pid 3720:tid 3733] [client 52.169.159.88:8983] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/404.php"] [unique_id "aT2vI-7_sgsCEY5RMYrrMgAAAIs"]
[Sun Dec 14 02:23:31.834185 2025] [:error] [pid 3720:tid 3732] [client 52.169.159.88:16525] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/chosen.php"] [unique_id "aT2vI-7_sgsCEY5RMYrrMwAAAIo"]
[Sun Dec 14 02:23:32.347688 2025] [:error] [pid 3634:tid 3657] [client 52.169.159.88:10637] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/chosen.php"] [unique_id "aT2vJIbt-wTl4d7Q7qqFOgAAAFM"]
[Sun Dec 14 02:23:32.849486 2025] [:error] [pid 14689:tid 14699] [client 52.169.159.88:16166] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/chosen.php"] [unique_id "aT2vJEEcifvaa9I7SnmNjQAAAUY"]
[Sun Dec 14 02:23:33.365382 2025] [:error] [pid 3634:tid 3654] [client 52.169.159.88:16648] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/chosen.php"] [unique_id "aT2vJYbt-wTl4d7Q7qqFOwAAAFA"]
[Sun Dec 14 02:23:33.864817 2025] [:error] [pid 14689:tid 14695] [client 52.169.159.88:13808] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/build.php"] [unique_id "aT2vJUEcifvaa9I7SnmNjwAAAUI"]
[Sun Dec 14 02:23:34.371385 2025] [:error] [pid 14689:tid 14715] [client 52.169.159.88:16281] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/build.php"] [unique_id "aT2vJkEcifvaa9I7SnmNkAAAAVY"]
[Sun Dec 14 02:23:34.869745 2025] [:error] [pid 3634:tid 3653] [client 52.169.159.88:10669] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/build.php"] [unique_id "aT2vJobt-wTl4d7Q7qqFPQAAAE8"]
[Sun Dec 14 02:23:35.392983 2025] [:error] [pid 3634:tid 3645] [client 52.169.159.88:16145] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/build.php"] [unique_id "aT2vJ4bt-wTl4d7Q7qqFPwAAAEc"]
[Sun Dec 14 02:23:35.896863 2025] [:error] [pid 14689:tid 14706] [client 52.169.159.88:16352] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/file4.php"] [unique_id "aT2vJ0Ecifvaa9I7SnmNkQAAAU0"]
[Sun Dec 14 02:23:36.414759 2025] [:error] [pid 3636:tid 3692] [client 52.169.159.88:6642] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/file4.php"] [unique_id "aT2vKN4pNg3LXPqKgeZDewAAAQA"]
[Sun Dec 14 02:23:36.918939 2025] [:error] [pid 14654:tid 14672] [client 52.169.159.88:1218] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/file4.php"] [unique_id "aT2vKDqZP_N7tgSGeZc8bgAAAA8"]
[Sun Dec 14 02:23:37.465329 2025] [:error] [pid 3636:tid 3714] [client 52.169.159.88:16129] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/file4.php"] [unique_id "aT2vKd4pNg3LXPqKgeZDfAAAARY"]
[Sun Dec 14 02:23:37.985834 2025] [:error] [pid 3634:tid 3642] [client 52.169.159.88:8551] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/manager.php"] [unique_id "aT2vKYbt-wTl4d7Q7qqFQAAAAEQ"]
[Sun Dec 14 02:23:38.497355 2025] [:error] [pid 3634:tid 3639] [client 52.169.159.88:13764] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/manager.php"] [unique_id "aT2vKobt-wTl4d7Q7qqFQQAAAEE"]
[Sun Dec 14 02:23:38.998615 2025] [:error] [pid 14654:tid 14675] [client 52.169.159.88:11294] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/manager.php"] [unique_id "aT2vKjqZP_N7tgSGeZc8cAAAABI"]
[Sun Dec 14 02:23:39.541659 2025] [:error] [pid 14654:tid 14659] [client 52.169.159.88:1703] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/manager.php"] [unique_id "aT2vKzqZP_N7tgSGeZc8cQAAAAI"]
[Sun Dec 14 02:23:40.046838 2025] [:error] [pid 14689:tid 14698] [client 52.169.159.88:4822] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/k.php"] [unique_id "aT2vLEEcifvaa9I7SnmNlAAAAUU"]
[Sun Dec 14 02:23:40.546883 2025] [:error] [pid 14689:tid 14701] [client 52.169.159.88:6633] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/k.php"] [unique_id "aT2vLEEcifvaa9I7SnmNlQAAAUg"]
[Sun Dec 14 02:23:41.051939 2025] [:error] [pid 14689:tid 14707] [client 52.169.159.88:7445] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/k.php"] [unique_id "aT2vLUEcifvaa9I7SnmNlwAAAU4"]
[Sun Dec 14 02:23:41.566217 2025] [:error] [pid 3635:tid 3669] [client 52.169.159.88:3582] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/k.php"] [unique_id "aT2vLTqfhzW7OpfKxKzzDAAAAMQ"]
[Sun Dec 14 02:23:42.082608 2025] [:error] [pid 3635:tid 3674] [client 52.169.159.88:16347] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ss.php"] [unique_id "aT2vLjqfhzW7OpfKxKzzDgAAAMk"]
[Sun Dec 14 02:23:42.597025 2025] [:error] [pid 3720:tid 3741] [client 52.169.159.88:4773] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ss.php"] [unique_id "aT2vLu7_sgsCEY5RMYrrOwAAAJM"]
[Sun Dec 14 02:23:43.116492 2025] [:error] [pid 3636:tid 3707] [client 52.169.159.88:1477] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp.php"] [unique_id "aT2vL94pNg3LXPqKgeZDfwAAAQ8"]
[Sun Dec 14 02:23:43.619967 2025] [:error] [pid 3720:tid 3725] [client 52.169.159.88:16671] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp.php"] [unique_id "aT2vL-7_sgsCEY5RMYrrPAAAAIM"]
[Sun Dec 14 02:23:44.131981 2025] [:error] [pid 3634:tid 3646] [client 52.169.159.88:8912] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp.php"] [unique_id "aT2vMIbt-wTl4d7Q7qqFRAAAAEg"]
[Sun Dec 14 02:23:44.644020 2025] [:error] [pid 3636:tid 3702] [client 52.169.159.88:13234] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp.php"] [unique_id "aT2vMN4pNg3LXPqKgeZDgAAAAQo"]
[Sun Dec 14 02:23:45.156896 2025] [:error] [pid 14654:tid 14678] [client 52.169.159.88:11270] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/v3.php"] [unique_id "aT2vMTqZP_N7tgSGeZc8cwAAABU"]
[Sun Dec 14 02:23:45.696619 2025] [:error] [pid 14689:tid 14715] [client 52.169.159.88:13204] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/v3.php"] [unique_id "aT2vMUEcifvaa9I7SnmNmQAAAVY"]
[Sun Dec 14 02:23:46.296089 2025] [:error] [pid 14689:tid 14710] [client 52.169.159.88:4784] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/lib.php"] [unique_id "aT2vMkEcifvaa9I7SnmNmgAAAVE"]
[Sun Dec 14 02:23:46.845338 2025] [:error] [pid 3635:tid 3665] [client 52.169.159.88:1721] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wsd.php"] [unique_id "aT2vMjqfhzW7OpfKxKzzEAAAAMA"]
[Sun Dec 14 02:23:47.355278 2025] [:error] [pid 3635:tid 3683] [client 52.169.159.88:16371] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ioxi-o.php"] [unique_id "aT2vMzqfhzW7OpfKxKzzEQAAANI"]
[Sun Dec 14 02:23:47.882909 2025] [:error] [pid 3720:tid 3743] [client 52.169.159.88:11589] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ioxi-o.php"] [unique_id "aT2vM-7_sgsCEY5RMYrrPQAAAJU"]
[Sun Dec 14 02:23:48.464913 2025] [:error] [pid 3634:tid 3640] [client 52.169.159.88:8924] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ioxi-o.php"] [unique_id "aT2vNIbt-wTl4d7Q7qqFRwAAAEI"]
[Sun Dec 14 02:23:48.981646 2025] [:error] [pid 14654:tid 14673] [client 52.169.159.88:8938] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ioxi-o.php"] [unique_id "aT2vNDqZP_N7tgSGeZc8dQAAABA"]
[Sun Dec 14 02:23:49.493893 2025] [:error] [pid 3636:tid 3713] [client 52.169.159.88:1471] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/gm.php"] [unique_id "aT2vNd4pNg3LXPqKgeZDggAAARU"]
[Sun Dec 14 02:23:50.038775 2025] [:error] [pid 3634:tid 3638] [client 52.169.159.88:11298] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/abc.php"] [unique_id "aT2vNobt-wTl4d7Q7qqFSQAAAEA"]
[Sun Dec 14 02:23:50.539858 2025] [:error] [pid 14654:tid 14671] [client 52.169.159.88:8919] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/abc.php"] [unique_id "aT2vNjqZP_N7tgSGeZc8eAAAAA4"]
[Sun Dec 14 02:23:51.201631 2025] [:error] [pid 14654:tid 14663] [client 52.169.159.88:13793] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/blox.php"] [unique_id "aT2vNzqZP_N7tgSGeZc8eQAAAAY"]
[Sun Dec 14 02:23:51.813149 2025] [:error] [pid 3635:tid 3680] [client 52.169.159.88:5931] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/mtvcrew.php"] [unique_id "aT2vNzqfhzW7OpfKxKzzFQAAAM8"]
[Sun Dec 14 02:23:52.367059 2025] [:error] [pid 3636:tid 3712] [client 52.169.159.88:4823] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/mtvcrew.php"] [unique_id "aT2vON4pNg3LXPqKgeZDhAAAARQ"]
[Sun Dec 14 02:23:52.920290 2025] [:error] [pid 14654:tid 14679] [client 52.169.159.88:11642] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/111.php"] [unique_id "aT2vODqZP_N7tgSGeZc8egAAABY"]
[Sun Dec 14 02:23:53.439456 2025] [:error] [pid 3634:tid 3653] [client 52.169.159.88:5835] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/great.php"] [unique_id "aT2vOYbt-wTl4d7Q7qqFTAAAAE8"]
[Sun Dec 14 02:23:53.962697 2025] [:error] [pid 14654:tid 14660] [client 52.169.159.88:11587] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/great.php"] [unique_id "aT2vOTqZP_N7tgSGeZc8fAAAAAM"]
[Sun Dec 14 02:23:54.497840 2025] [:error] [pid 14689:tid 14693] [client 52.169.159.88:7455] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/great.php"] [unique_id "aT2vOkEcifvaa9I7SnmNnAAAAUA"]
[Sun Dec 14 02:23:55.040306 2025] [:error] [pid 3720:tid 3737] [client 52.169.159.88:7108] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/great.php"] [unique_id "aT2vO-7_sgsCEY5RMYrrQAAAAI8"]
[Sun Dec 14 02:23:55.575034 2025] [:error] [pid 14689:tid 14703] [client 52.169.159.88:13810] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/akcc.php"] [unique_id "aT2vO0Ecifvaa9I7SnmNnQAAAUo"]
[Sun Dec 14 02:23:56.147687 2025] [:error] [pid 3636:tid 3695] [client 52.169.159.88:1267] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/akcc.php"] [unique_id "aT2vPN4pNg3LXPqKgeZDhwAAAQM"]
[Sun Dec 14 02:23:56.777081 2025] [:error] [pid 14689:tid 14708] [client 52.169.159.88:10683] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/akcc.php"] [unique_id "aT2vPEEcifvaa9I7SnmNngAAAU8"]
[Sun Dec 14 02:23:57.278975 2025] [:error] [pid 14689:tid 14700] [client 52.169.159.88:11592] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/p.php"] [unique_id "aT2vPUEcifvaa9I7SnmNnwAAAUc"]
[Sun Dec 14 02:23:57.811752 2025] [:error] [pid 14689:tid 14714] [client 52.169.159.88:1518] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wso.php"] [unique_id "aT2vPUEcifvaa9I7SnmNoAAAAVU"]
[Sun Dec 14 02:23:58.330255 2025] [:error] [pid 14654:tid 14678] [client 52.169.159.88:1418] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-good.php"] [unique_id "aT2vPjqZP_N7tgSGeZc8ggAAABU"]
[Sun Dec 14 02:23:58.842450 2025] [:error] [pid 14654:tid 14673] [client 52.169.159.88:7150] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/sid3.php"] [unique_id "aT2vPjqZP_N7tgSGeZc8gwAAABA"]
[Sun Dec 14 02:23:59.363568 2025] [:error] [pid 14689:tid 14701] [client 52.169.159.88:10685] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/sid3.php"] [unique_id "aT2vP0Ecifvaa9I7SnmNogAAAUg"]
[Sun Dec 14 02:23:59.879767 2025] [:error] [pid 14689:tid 14705] [client 52.169.159.88:8701] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/sid3.php"] [unique_id "aT2vP0Ecifvaa9I7SnmNpAAAAUw"]
[Sun Dec 14 02:24:00.384202 2025] [:error] [pid 14689:tid 14716] [client 52.169.159.88:8649] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/sid3.php"] [unique_id "aT2vQEEcifvaa9I7SnmNpgAAAVc"]
[Sun Dec 14 02:24:00.928699 2025] [:error] [pid 3634:tid 3645] [client 52.169.159.88:1525] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/lock360.php"] [unique_id "aT2vQIbt-wTl4d7Q7qqFTQAAAEc"]
[Sun Dec 14 02:24:01.449940 2025] [:error] [pid 14689:tid 14717] [client 52.169.159.88:11319] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/403.php"] [unique_id "aT2vQUEcifvaa9I7SnmNqAAAAVg"]
[Sun Dec 14 02:24:01.949628 2025] [:error] [pid 3634:tid 3661] [client 52.169.159.88:14275] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/403.php"] [unique_id "aT2vQYbt-wTl4d7Q7qqFTgAAAFc"]
[Sun Dec 14 02:24:02.452087 2025] [:error] [pid 3634:tid 3642] [client 52.169.159.88:4830] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/403.php"] [unique_id "aT2vQobt-wTl4d7Q7qqFTwAAAEQ"]
[Sun Dec 14 02:24:02.951142 2025] [:error] [pid 3634:tid 3639] [client 52.169.159.88:11090] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/shell.php"] [unique_id "aT2vQobt-wTl4d7Q7qqFUAAAAEE"]
[Sun Dec 14 02:24:03.490066 2025] [:error] [pid 3634:tid 3649] [client 52.169.159.88:6764] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/shell.php"] [unique_id "aT2vQ4bt-wTl4d7Q7qqFUQAAAEs"]
[Sun Dec 14 02:24:03.990379 2025] [:error] [pid 3636:tid 3706] [client 52.169.159.88:5849] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/shell.php"] [unique_id "aT2vQ94pNg3LXPqKgeZDjQAAAQ4"]
[Sun Dec 14 02:24:04.492750 2025] [:error] [pid 3636:tid 3713] [client 52.169.159.88:5895] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/shell.php"] [unique_id "aT2vRN4pNg3LXPqKgeZDjwAAARU"]
[Sun Dec 14 02:24:05.003828 2025] [:error] [pid 14689:tid 14715] [client 52.169.159.88:13729] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/public/moon.php"] [unique_id "aT2vRUEcifvaa9I7SnmNqgAAAVY"]
[Sun Dec 14 02:24:05.506029 2025] [:error] [pid 14689:tid 14710] [client 52.169.159.88:3635] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/public/moon.php"] [unique_id "aT2vRUEcifvaa9I7SnmNqwAAAVE"]
[Sun Dec 14 02:24:06.086455 2025] [:error] [pid 3636:tid 3708] [client 52.169.159.88:1455] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/f35.php"] [unique_id "aT2vRt4pNg3LXPqKgeZDkQAAARA"]
[Sun Dec 14 02:24:06.600298 2025] [:error] [pid 3636:tid 3710] [client 52.169.159.88:5900] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/hello.php"] [unique_id "aT2vRt4pNg3LXPqKgeZDkgAAARI"]
[Sun Dec 14 02:24:07.109103 2025] [:error] [pid 3634:tid 3650] [client 52.169.159.88:6301] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/hello.php"] [unique_id "aT2vR4bt-wTl4d7Q7qqFUgAAAEw"]
[Sun Dec 14 02:24:07.627157 2025] [:error] [pid 3634:tid 3643] [client 52.169.159.88:8407] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/hello.php"] [unique_id "aT2vR4bt-wTl4d7Q7qqFUwAAAEU"]
[Sun Dec 14 02:24:08.208177 2025] [:error] [pid 14689:tid 14695] [client 52.169.159.88:2870] [client 52.169.159.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/hello.php"] [unique_id "aT2vSEEcifvaa9I7SnmNrQAAAUI"]
[Sun Dec 14 03:22:48.089166 2025] [:error] [pid 14654:tid 14681] [client 149.202.183.73:44084] [client 149.202.183.73] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 149.202.183.73, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aT29CDqZP_N7tgSGeZdLDwAAABg"]
[Sun Dec 14 04:17:55.091971 2025] [:error] [pid 60303:tid 60308] [client 4.189.152.194:32267] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/moon.php"] [unique_id "aT3J84mEa7gFJNaM32W0rwAAAMM"]
[Sun Dec 14 04:17:56.164148 2025] [:error] [pid 60303:tid 60321] [client 4.189.152.194:32212] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/moon.php"] [unique_id "aT3J9ImEa7gFJNaM32W0sAAAANA"]
[Sun Dec 14 04:17:56.682677 2025] [:error] [pid 60303:tid 60324] [client 4.189.152.194:58665] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/moon.php"] [unique_id "aT3J9ImEa7gFJNaM32W0sgAAANM"]
[Sun Dec 14 04:17:57.232470 2025] [:error] [pid 60197:tid 60219] [client 4.189.152.194:58645] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/moon.php"] [unique_id "aT3J9T8SomGAPKtrxmMH7AAAAA0"]
[Sun Dec 14 04:17:57.867292 2025] [:error] [pid 60197:tid 60215] [client 4.189.152.194:32279] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/admin-post.php"] [unique_id "aT3J9T8SomGAPKtrxmMH7QAAAAk"]
[Sun Dec 14 04:17:58.716991 2025] [:error] [pid 60199:tid 60272] [client 4.189.152.194:14448] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/admin-post.php"] [unique_id "aT3J9unD9997ZntNVgPh9AAAAII"]
[Sun Dec 14 04:17:59.185823 2025] [:error] [pid 60198:tid 60263] [client 4.189.152.194:59362] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/admin-post.php"] [unique_id "aT3J94qU-ldNzmBSp5uRXAAAAFQ"]
[Sun Dec 14 04:18:00.123127 2025] [:error] [pid 60303:tid 60323] [client 4.189.152.194:59375] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/admin-post.php"] [unique_id "aT3J-ImEa7gFJNaM32W0swAAANI"]
[Sun Dec 14 04:18:01.056992 2025] [:error] [pid 60303:tid 60319] [client 4.189.152.194:58718] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/themes/admin.php"] [unique_id "aT3J-YmEa7gFJNaM32W0tgAAAM4"]
[Sun Dec 14 04:18:01.723222 2025] [:error] [pid 60197:tid 60223] [client 4.189.152.194:32248] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/themes/admin.php"] [unique_id "aT3J-T8SomGAPKtrxmMH7wAAABE"]
[Sun Dec 14 04:18:02.321100 2025] [:error] [pid 60303:tid 60326] [client 4.189.152.194:14424] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/themes/admin.php"] [unique_id "aT3J-omEa7gFJNaM32W0twAAANU"]
[Sun Dec 14 04:18:03.059704 2025] [:error] [pid 60198:tid 60248] [client 4.189.152.194:32197] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/themes/admin.php"] [unique_id "aT3J-4qU-ldNzmBSp5uRXwAAAEU"]
[Sun Dec 14 04:18:04.359757 2025] [:error] [pid 60303:tid 60306] [client 4.189.152.194:32206] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/gmo.php"] [unique_id "aT3J_ImEa7gFJNaM32W0vAAAAME"]
[Sun Dec 14 04:18:05.159962 2025] [:error] [pid 60199:tid 60271] [client 4.189.152.194:58681] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/gmo.php"] [unique_id "aT3J_enD9997ZntNVgPh-AAAAIE"]
[Sun Dec 14 04:18:05.643813 2025] [:error] [pid 60199:tid 60293] [client 4.189.152.194:32294] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/gmo.php"] [unique_id "aT3J_enD9997ZntNVgPh-gAAAJY"]
[Sun Dec 14 04:18:06.334185 2025] [:error] [pid 60199:tid 60286] [client 4.189.152.194:58652] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/gmo.php"] [unique_id "aT3J_unD9997ZntNVgPh_QAAAJA"]
[Sun Dec 14 04:18:06.890695 2025] [:error] [pid 60199:tid 60282] [client 4.189.152.194:35203] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "aT3J_unD9997ZntNVgPh_wAAAIw"]
[Sun Dec 14 04:18:07.206074 2025] [:error] [pid 60303:tid 60310] [client 4.189.152.194:59332] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "aT3J_4mEa7gFJNaM32W0xgAAAMU"]
[Sun Dec 14 04:18:07.526801 2025] [:error] [pid 60198:tid 60260] [client 4.189.152.194:32304] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "aT3J_4qU-ldNzmBSp5uRYwAAAFE"]
[Sun Dec 14 04:18:07.935012 2025] [:error] [pid 60197:tid 60208] [client 4.189.152.194:58726] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "aT3J_z8SomGAPKtrxmMH8QAAAAI"]
[Sun Dec 14 04:18:08.300155 2025] [:error] [pid 60199:tid 60294] [client 4.189.152.194:32317] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/alfa.php"] [unique_id "aT3KAOnD9997ZntNVgPiBgAAAJc"]
[Sun Dec 14 04:18:08.676966 2025] [:error] [pid 60303:tid 60319] [client 4.189.152.194:58698] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/alfa.php"] [unique_id "aT3KAImEa7gFJNaM32W0ygAAAM4"]
[Sun Dec 14 04:18:09.211029 2025] [:error] [pid 60198:tid 60250] [client 4.189.152.194:32214] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/alfa.php"] [unique_id "aT3KAYqU-ldNzmBSp5uRZwAAAEc"]
[Sun Dec 14 04:18:10.227581 2025] [:error] [pid 60303:tid 60326] [client 4.189.152.194:32258] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/alfa.php"] [unique_id "aT3KAomEa7gFJNaM32W0ywAAANU"]
[Sun Dec 14 04:18:10.634933 2025] [:error] [pid 60198:tid 60257] [client 4.189.152.194:14294] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/cong.php"] [unique_id "aT3KAoqU-ldNzmBSp5uRaQAAAE4"]
[Sun Dec 14 04:18:10.959154 2025] [:error] [pid 60197:tid 60206] [client 4.189.152.194:58722] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/cong.php"] [unique_id "aT3KAj8SomGAPKtrxmMH9gAAAAA"]
[Sun Dec 14 04:18:11.579708 2025] [:error] [pid 60199:tid 60282] [client 4.189.152.194:58695] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/cong.php"] [unique_id "aT3KA-nD9997ZntNVgPiEgAAAIw"]
[Sun Dec 14 04:18:12.665114 2025] [:error] [pid 60198:tid 60245] [client 4.189.152.194:32224] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/cong.php"] [unique_id "aT3KBIqU-ldNzmBSp5uRbQAAAEI"]
[Sun Dec 14 04:18:13.967691 2025] [:error] [pid 60197:tid 60217] [client 4.189.152.194:32318] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/123.php"] [unique_id "aT3KBT8SomGAPKtrxmMH-QAAAAs"]
[Sun Dec 14 04:18:15.056815 2025] [:error] [pid 60198:tid 60259] [client 4.189.152.194:59376] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/123.php"] [unique_id "aT3KB4qU-ldNzmBSp5uRcwAAAFA"]
[Sun Dec 14 04:18:15.619153 2025] [:error] [pid 60199:tid 60288] [client 4.189.152.194:58689] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/123.php"] [unique_id "aT3KB-nD9997ZntNVgPiIgAAAJI"]
[Sun Dec 14 04:18:16.969060 2025] [:error] [pid 60197:tid 60227] [client 4.189.152.194:58697] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/123.php"] [unique_id "aT3KCD8SomGAPKtrxmMIAAAAABU"]
[Sun Dec 14 04:18:18.106738 2025] [:error] [pid 60199:tid 60291] [client 4.189.152.194:58656] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/num.php"] [unique_id "aT3KCunD9997ZntNVgPiJgAAAJQ"]
[Sun Dec 14 04:18:19.394656 2025] [:error] [pid 60303:tid 60308] [client 4.189.152.194:32240] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/num.php"] [unique_id "aT3KC4mEa7gFJNaM32W01AAAAMM"]
[Sun Dec 14 04:18:20.403627 2025] [:error] [pid 60198:tid 60253] [client 4.189.152.194:32243] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/num.php"] [unique_id "aT3KDIqU-ldNzmBSp5uRfQAAAEo"]
[Sun Dec 14 04:18:22.016516 2025] [:error] [pid 60303:tid 60324] [client 4.189.152.194:59354] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/num.php"] [unique_id "aT3KDomEa7gFJNaM32W01wAAANM"]
[Sun Dec 14 04:18:23.249320 2025] [:error] [pid 60303:tid 60307] [client 4.189.152.194:59328] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/lock360.php"] [unique_id "aT3KD4mEa7gFJNaM32W02gAAAMI"]
[Sun Dec 14 04:18:24.270942 2025] [:error] [pid 60198:tid 60265] [client 4.189.152.194:32199] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/lock360.php"] [unique_id "aT3KEIqU-ldNzmBSp5uRggAAAFY"]
[Sun Dec 14 04:18:25.448520 2025] [:error] [pid 60198:tid 60257] [client 4.189.152.194:59389] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/lock360.php"] [unique_id "aT3KEYqU-ldNzmBSp5uRhQAAAE4"]
[Sun Dec 14 04:18:26.682212 2025] [:error] [pid 60303:tid 60328] [client 4.189.152.194:58633] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/lock360.php"] [unique_id "aT3KEomEa7gFJNaM32W04wAAANc"]
[Sun Dec 14 04:18:27.465085 2025] [:error] [pid 60199:tid 60280] [client 4.189.152.194:32286] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/css/colour.php"] [unique_id "aT3KE-nD9997ZntNVgPiMQAAAIo"]
[Sun Dec 14 04:18:29.165688 2025] [:error] [pid 60198:tid 60245] [client 4.189.152.194:32215] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/css/colour.php"] [unique_id "aT3KFYqU-ldNzmBSp5uRlAAAAEI"]
[Sun Dec 14 04:18:30.245492 2025] [:error] [pid 60199:tid 60290] [client 4.189.152.194:59372] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/css/colour.php"] [unique_id "aT3KFunD9997ZntNVgPiNwAAAJM"]
[Sun Dec 14 04:18:31.652407 2025] [:error] [pid 60199:tid 60293] [client 4.189.152.194:58626] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/css/colour.php"] [unique_id "aT3KF-nD9997ZntNVgPiPQAAAJY"]
[Sun Dec 14 04:18:32.620997 2025] [:error] [pid 60199:tid 60282] [client 4.189.152.194:53176] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/NewFile.php"] [unique_id "aT3KGOnD9997ZntNVgPiQgAAAIw"]
[Sun Dec 14 04:18:34.251910 2025] [:error] [pid 60198:tid 60248] [client 4.189.152.194:35767] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/NewFile.php"] [unique_id "aT3KGoqU-ldNzmBSp5uRnAAAAEU"]
[Sun Dec 14 04:18:34.842689 2025] [:error] [pid 60198:tid 60260] [client 4.189.152.194:53140] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/NewFile.php"] [unique_id "aT3KGoqU-ldNzmBSp5uRnQAAAFE"]
[Sun Dec 14 04:18:36.272879 2025] [:error] [pid 60199:tid 60285] [client 4.189.152.194:33039] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/NewFile.php"] [unique_id "aT3KHOnD9997ZntNVgPiTgAAAI8"]
[Sun Dec 14 04:18:36.942468 2025] [:error] [pid 60197:tid 60224] [client 4.189.152.194:39329] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-x7.php"] [unique_id "aT3KHD8SomGAPKtrxmMIEAAAABI"]
[Sun Dec 14 04:18:37.830641 2025] [:error] [pid 60199:tid 60271] [client 4.189.152.194:53788] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-x7.php"] [unique_id "aT3KHenD9997ZntNVgPiVQAAAIE"]
[Sun Dec 14 04:18:38.663393 2025] [:error] [pid 60199:tid 60283] [client 4.189.152.194:14225] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-x7.php"] [unique_id "aT3KHunD9997ZntNVgPiVwAAAI0"]
[Sun Dec 14 04:18:39.206770 2025] [:error] [pid 60199:tid 60273] [client 4.189.152.194:36843] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-x7.php"] [unique_id "aT3KH-nD9997ZntNVgPiWAAAAIM"]
[Sun Dec 14 04:18:39.581793 2025] [:error] [pid 60199:tid 60290] [client 4.189.152.194:38628] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/p.php"] [unique_id "aT3KH-nD9997ZntNVgPiWgAAAJM"]
[Sun Dec 14 04:18:40.883642 2025] [:error] [pid 60197:tid 60209] [client 4.189.152.194:36815] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/p.php"] [unique_id "aT3KID8SomGAPKtrxmMIEgAAAAM"]
[Sun Dec 14 04:18:41.975332 2025] [:error] [pid 60199:tid 60285] [client 4.189.152.194:13928] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/p.php"] [unique_id "aT3KIenD9997ZntNVgPiXwAAAI8"]
[Sun Dec 14 04:18:43.310814 2025] [:error] [pid 60197:tid 60213] [client 4.189.152.194:14601] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/p.php"] [unique_id "aT3KIz8SomGAPKtrxmMIEwAAAAc"]
[Sun Dec 14 04:18:44.074262 2025] [:error] [pid 60199:tid 60291] [client 4.189.152.194:58003] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/v3.php"] [unique_id "aT3KJOnD9997ZntNVgPiYQAAAJQ"]
[Sun Dec 14 04:18:44.847802 2025] [:error] [pid 60199:tid 60274] [client 4.189.152.194:34113] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/v3.php"] [unique_id "aT3KJOnD9997ZntNVgPiZAAAAIQ"]
[Sun Dec 14 04:18:46.315618 2025] [:error] [pid 60197:tid 60230] [client 4.189.152.194:14633] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/v3.php"] [unique_id "aT3KJj8SomGAPKtrxmMIFQAAABg"]
[Sun Dec 14 04:18:47.487659 2025] [:error] [pid 60198:tid 60263] [client 4.189.152.194:39359] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/v3.php"] [unique_id "aT3KJ4qU-ldNzmBSp5uRqQAAAFQ"]
[Sun Dec 14 04:18:48.260196 2025] [:error] [pid 60198:tid 60260] [client 4.189.152.194:39300] [client 4.189.152.194] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aT3KKIqU-ldNzmBSp5uRqgAAAFE"]
[Sun Dec 14 04:18:48.896068 2025] [:error] [pid 60198:tid 60255] [client 4.189.152.194:14139] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/system.php"] [unique_id "aT3KKIqU-ldNzmBSp5uRrAAAAEw"]
[Sun Dec 14 04:18:49.560638 2025] [:error] [pid 60198:tid 60251] [client 4.189.152.194:14258] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/system.php"] [unique_id "aT3KKYqU-ldNzmBSp5uRrwAAAEg"]
[Sun Dec 14 04:18:50.279563 2025] [:error] [pid 60198:tid 60261] [client 4.189.152.194:32785] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/system.php"] [unique_id "aT3KKoqU-ldNzmBSp5uRsAAAAFI"]
[Sun Dec 14 04:18:51.828160 2025] [:error] [pid 60198:tid 60247] [client 4.189.152.194:32830] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/system.php"] [unique_id "aT3KK4qU-ldNzmBSp5uRtQAAAEQ"]
[Sun Dec 14 04:19:19.765481 2025] [:error] [pid 60198:tid 60247] [client 4.189.152.194:14260] [client 4.189.152.194] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aT3KR4qU-ldNzmBSp5uR1wAAAEQ"]
[Sun Dec 14 04:19:25.346719 2025] [:error] [pid 60197:tid 60218] [client 4.189.152.194:50686] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ffile.php"] [unique_id "aT3KTT8SomGAPKtrxmMIQAAAAAw"]
[Sun Dec 14 04:19:26.465459 2025] [:error] [pid 60198:tid 60253] [client 4.189.152.194:50656] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ffile.php"] [unique_id "aT3KToqU-ldNzmBSp5uR4QAAAEo"]
[Sun Dec 14 04:19:28.685142 2025] [:error] [pid 60198:tid 60250] [client 4.189.152.194:50624] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ffile.php"] [unique_id "aT3KUIqU-ldNzmBSp5uR5gAAAEc"]
[Sun Dec 14 04:19:30.364336 2025] [:error] [pid 60303:tid 60313] [client 4.189.152.194:40563] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ffile.php"] [unique_id "aT3KUomEa7gFJNaM32W1LwAAAMg"]
[Sun Dec 14 04:19:31.314384 2025] [:error] [pid 60303:tid 60323] [client 4.189.152.194:18066] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/403.php"] [unique_id "aT3KU4mEa7gFJNaM32W1MwAAANI"]
[Sun Dec 14 04:19:32.565424 2025] [:error] [pid 60198:tid 60265] [client 4.189.152.194:40518] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/403.php"] [unique_id "aT3KVIqU-ldNzmBSp5uR6AAAAFY"]
[Sun Dec 14 04:19:33.398753 2025] [:error] [pid 60199:tid 60280] [client 4.189.152.194:14659] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/403.php"] [unique_id "aT3KVenD9997ZntNVgPikQAAAIo"]
[Sun Dec 14 04:19:34.487661 2025] [:error] [pid 60199:tid 60293] [client 4.189.152.194:56916] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/403.php"] [unique_id "aT3KVunD9997ZntNVgPikgAAAJY"]
[Sun Dec 14 04:19:35.522947 2025] [:error] [pid 60199:tid 60279] [client 4.189.152.194:18053] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp1.php"] [unique_id "aT3KV-nD9997ZntNVgPilQAAAIk"]
[Sun Dec 14 04:19:37.947590 2025] [:error] [pid 60198:tid 60255] [client 4.189.152.194:50652] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp1.php"] [unique_id "aT3KWYqU-ldNzmBSp5uR8wAAAEw"]
[Sun Dec 14 04:19:38.727328 2025] [:error] [pid 60198:tid 60263] [client 4.189.152.194:48476] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp1.php"] [unique_id "aT3KWoqU-ldNzmBSp5uR9QAAAFQ"]
[Sun Dec 14 04:19:39.636051 2025] [:error] [pid 60199:tid 60272] [client 4.189.152.194:18098] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp1.php"] [unique_id "aT3KW-nD9997ZntNVgPioAAAAII"]
[Sun Dec 14 04:19:40.617867 2025] [:error] [pid 60198:tid 60256] [client 4.189.152.194:56918] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/css/up.php"] [unique_id "aT3KXIqU-ldNzmBSp5uR-AAAAE0"]
[Sun Dec 14 04:19:41.887963 2025] [:error] [pid 60199:tid 60276] [client 4.189.152.194:50644] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/css/up.php"] [unique_id "aT3KXenD9997ZntNVgPioQAAAIY"]
[Sun Dec 14 04:19:42.532668 2025] [:error] [pid 60198:tid 60260] [client 4.189.152.194:56927] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/css/up.php"] [unique_id "aT3KXoqU-ldNzmBSp5uR-wAAAFE"]
[Sun Dec 14 04:19:43.621058 2025] [:error] [pid 60197:tid 60213] [client 4.189.152.194:56928] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/css/up.php"] [unique_id "aT3KXz8SomGAPKtrxmMIRwAAAAc"]
[Sun Dec 14 04:19:44.818787 2025] [:error] [pid 60199:tid 60278] [client 4.189.152.194:40537] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/aa.php"] [unique_id "aT3KYOnD9997ZntNVgPiogAAAIg"]
[Sun Dec 14 04:19:46.673496 2025] [:error] [pid 60303:tid 60315] [client 4.189.152.194:50677] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/aa.php"] [unique_id "aT3KYomEa7gFJNaM32W1YQAAAMo"]
[Sun Dec 14 04:19:47.698633 2025] [:error] [pid 60303:tid 60310] [client 4.189.152.194:18071] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/aa.php"] [unique_id "aT3KY4mEa7gFJNaM32W1awAAAMU"]
[Sun Dec 14 04:19:48.447510 2025] [:error] [pid 60303:tid 60328] [client 4.189.152.194:18077] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/aa.php"] [unique_id "aT3KZImEa7gFJNaM32W1cwAAANc"]
[Sun Dec 14 04:19:49.639449 2025] [:error] [pid 60199:tid 60292] [client 4.189.152.194:40561] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/666.php"] [unique_id "aT3KZenD9997ZntNVgPipgAAAJU"]
[Sun Dec 14 04:19:51.058885 2025] [:error] [pid 60199:tid 60285] [client 4.189.152.194:50636] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/666.php"] [unique_id "aT3KZ-nD9997ZntNVgPiqAAAAI8"]
[Sun Dec 14 04:19:53.034911 2025] [:error] [pid 60197:tid 60212] [client 4.189.152.194:40528] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/666.php"] [unique_id "aT3KaT8SomGAPKtrxmMITwAAAAY"]
[Sun Dec 14 04:19:54.085181 2025] [:error] [pid 60199:tid 60282] [client 4.189.152.194:48464] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/666.php"] [unique_id "aT3KaunD9997ZntNVgPirQAAAIw"]
[Sun Dec 14 04:19:55.141466 2025] [:error] [pid 60303:tid 60327] [client 4.189.152.194:48465] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wb.php"] [unique_id "aT3Ka4mEa7gFJNaM32W1lQAAANY"]
[Sun Dec 14 04:19:56.301112 2025] [:error] [pid 60303:tid 60315] [client 4.189.152.194:18048] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wb.php"] [unique_id "aT3KbImEa7gFJNaM32W1mQAAAMo"]
[Sun Dec 14 04:19:56.964923 2025] [:error] [pid 60199:tid 60276] [client 4.189.152.194:48475] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wb.php"] [unique_id "aT3KbOnD9997ZntNVgPisAAAAIY"]
[Sun Dec 14 04:19:57.341791 2025] [:error] [pid 60198:tid 60265] [client 4.189.152.194:56952] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wb.php"] [unique_id "aT3KbYqU-ldNzmBSp5uSAgAAAFY"]
[Sun Dec 14 04:19:58.749058 2025] [:error] [pid 60198:tid 60246] [client 4.189.152.194:48500] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/chosen.php"] [unique_id "aT3KboqU-ldNzmBSp5uSBAAAAEM"]
[Sun Dec 14 04:19:59.887958 2025] [:error] [pid 60303:tid 60320] [client 4.189.152.194:18103] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/chosen.php"] [unique_id "aT3Kb4mEa7gFJNaM32W1nAAAAM8"]
[Sun Dec 14 04:20:01.102162 2025] [:error] [pid 60303:tid 60308] [client 4.189.152.194:50683] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/chosen.php"] [unique_id "aT3KcYmEa7gFJNaM32W1nQAAAMM"]
[Sun Dec 14 04:20:01.854637 2025] [:error] [pid 60199:tid 60281] [client 4.189.152.194:56936] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/chosen.php"] [unique_id "aT3KcenD9997ZntNVgPitwAAAIs"]
[Sun Dec 14 04:20:03.324169 2025] [:error] [pid 60197:tid 60213] [client 4.189.152.194:40544] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/fs.php"] [unique_id "aT3Kcz8SomGAPKtrxmMIVwAAAAc"]
[Sun Dec 14 04:20:04.267268 2025] [:error] [pid 60198:tid 60263] [client 4.189.152.194:48472] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/fs.php"] [unique_id "aT3KdIqU-ldNzmBSp5uSCQAAAFQ"]
[Sun Dec 14 04:20:04.744611 2025] [:error] [pid 60198:tid 60252] [client 4.189.152.194:13886] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/fs.php"] [unique_id "aT3KdIqU-ldNzmBSp5uSDAAAAEk"]
[Sun Dec 14 04:20:05.694513 2025] [:error] [pid 60199:tid 60282] [client 4.189.152.194:18050] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/fs.php"] [unique_id "aT3KdenD9997ZntNVgPiugAAAIw"]
[Sun Dec 14 04:20:06.284284 2025] [:error] [pid 60199:tid 60273] [client 4.189.152.194:18076] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/0x.php"] [unique_id "aT3KdunD9997ZntNVgPiuwAAAIM"]
[Sun Dec 14 04:20:06.851356 2025] [:error] [pid 60199:tid 60280] [client 4.189.152.194:40532] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/0x.php"] [unique_id "aT3KdunD9997ZntNVgPivgAAAIo"]
[Sun Dec 14 04:20:07.499261 2025] [:error] [pid 60197:tid 60212] [client 4.189.152.194:50681] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/0x.php"] [unique_id "aT3Kdz8SomGAPKtrxmMIXQAAAAY"]
[Sun Dec 14 04:20:09.252292 2025] [:error] [pid 60197:tid 60221] [client 4.189.152.194:18054] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/0x.php"] [unique_id "aT3KeT8SomGAPKtrxmMIXgAAAA8"]
[Sun Dec 14 04:20:09.744816 2025] [:error] [pid 60199:tid 60277] [client 4.189.152.194:40547] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/bless11.php"] [unique_id "aT3KeenD9997ZntNVgPiwgAAAIc"]
[Sun Dec 14 04:20:10.572396 2025] [:error] [pid 60303:tid 60318] [client 4.189.152.194:40524] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/bless11.php"] [unique_id "aT3KeomEa7gFJNaM32W1rwAAAM0"]
[Sun Dec 14 04:20:11.279510 2025] [:error] [pid 60303:tid 60321] [client 4.189.152.194:48450] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/bless11.php"] [unique_id "aT3Ke4mEa7gFJNaM32W1tgAAANA"]
[Sun Dec 14 04:20:11.989501 2025] [:error] [pid 60198:tid 60253] [client 4.189.152.194:14658] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/bless11.php"] [unique_id "aT3Ke4qU-ldNzmBSp5uSDgAAAEo"]
[Sun Dec 14 04:20:13.328001 2025] [:error] [pid 60197:tid 60224] [client 4.189.152.194:18104] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/file.php"] [unique_id "aT3KfT8SomGAPKtrxmMIYQAAABI"]
[Sun Dec 14 04:20:14.091623 2025] [:error] [pid 60199:tid 60281] [client 4.189.152.194:13810] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/file.php"] [unique_id "aT3KfunD9997ZntNVgPixwAAAIs"]
[Sun Dec 14 04:20:14.974216 2025] [:error] [pid 60199:tid 60285] [client 4.189.152.194:56932] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/file.php"] [unique_id "aT3KfunD9997ZntNVgPiyAAAAI8"]
[Sun Dec 14 04:20:15.317742 2025] [:error] [pid 60197:tid 60217] [client 4.189.152.194:18095] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/file.php"] [unique_id "aT3Kfz8SomGAPKtrxmMIZQAAAAs"]
[Sun Dec 14 04:20:16.047356 2025] [:error] [pid 60197:tid 60219] [client 4.189.152.194:50673] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/indo.php"] [unique_id "aT3KgD8SomGAPKtrxmMIZgAAAA0"]
[Sun Dec 14 04:20:16.444968 2025] [:error] [pid 60197:tid 60210] [client 4.189.152.194:40535] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/indo.php"] [unique_id "aT3KgD8SomGAPKtrxmMIagAAAAQ"]
[Sun Dec 14 04:20:17.434122 2025] [:error] [pid 60199:tid 60287] [client 4.189.152.194:50675] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/indo.php"] [unique_id "aT3KgenD9997ZntNVgPiywAAAJE"]
[Sun Dec 14 04:20:18.025125 2025] [:error] [pid 60303:tid 60317] [client 4.189.152.194:18087] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/indo.php"] [unique_id "aT3KgomEa7gFJNaM32W1vgAAAMw"]
[Sun Dec 14 04:20:19.055327 2025] [:error] [pid 60198:tid 60252] [client 4.189.152.194:48499] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/card.php"] [unique_id "aT3Kg4qU-ldNzmBSp5uSFgAAAEk"]
[Sun Dec 14 04:20:20.003368 2025] [:error] [pid 60197:tid 60211] [client 4.189.152.194:40555] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/card.php"] [unique_id "aT3KhD8SomGAPKtrxmMIbwAAAAU"]
[Sun Dec 14 04:20:21.087209 2025] [:error] [pid 60303:tid 60323] [client 4.189.152.194:46022] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/card.php"] [unique_id "aT3KhYmEa7gFJNaM32W1wwAAANI"]
[Sun Dec 14 04:20:22.695142 2025] [:error] [pid 60303:tid 60315] [client 4.189.152.194:13847] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/card.php"] [unique_id "aT3KhomEa7gFJNaM32W1xgAAAMo"]
[Sun Dec 14 04:20:45.759689 2025] [proxy_fcgi:error] [pid 60197:tid 60219] [client 4.189.152.194:48488] AH01071: Got error 'Primary script unknown'
[Sun Dec 14 04:20:53.820641 2025] [:error] [pid 60197:tid 60222] [client 4.189.152.194:48488] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/k.php"] [unique_id "aT3KpT8SomGAPKtrxmMJUwAAABA"]
[Sun Dec 14 04:20:55.479718 2025] [:error] [pid 60198:tid 60243] [client 4.189.152.194:40558] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/k.php"] [unique_id "aT3Kp4qU-ldNzmBSp5uSuQAAAEA"]
[Sun Dec 14 04:20:56.748131 2025] [:error] [pid 60198:tid 60266] [client 4.189.152.194:18074] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/k.php"] [unique_id "aT3KqIqU-ldNzmBSp5uSyAAAAFc"]
[Sun Dec 14 04:20:57.665992 2025] [:error] [pid 60199:tid 60280] [client 4.189.152.194:56949] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/k.php"] [unique_id "aT3KqenD9997ZntNVgPjhAAAAIo"]
[Sun Dec 14 04:20:58.335849 2025] [:error] [pid 60198:tid 60261] [client 4.189.152.194:40567] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/admin.php"] [unique_id "aT3KqoqU-ldNzmBSp5uS3QAAAFI"]
[Sun Dec 14 04:20:59.750964 2025] [:error] [pid 60197:tid 60218] [client 4.189.152.194:48471] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/admin.php"] [unique_id "aT3Kqz8SomGAPKtrxmMJgQAAAAw"]
[Sun Dec 14 04:21:00.831059 2025] [:error] [pid 60198:tid 60249] [client 4.189.152.194:40513] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/admin.php"] [unique_id "aT3KrIqU-ldNzmBSp5uS_QAAAEY"]
[Sun Dec 14 04:21:02.245151 2025] [:error] [pid 60199:tid 60294] [client 4.189.152.194:40554] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/admin.php"] [unique_id "aT3KrunD9997ZntNVgPjnQAAAJc"]
[Sun Dec 14 04:21:03.528247 2025] [:error] [pid 60197:tid 60218] [client 4.189.152.194:48458] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/css.php"] [unique_id "aT3Krz8SomGAPKtrxmMJogAAAAw"]
[Sun Dec 14 04:21:03.969599 2025] [:error] [pid 60197:tid 60224] [client 4.189.152.194:56925] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/css.php"] [unique_id "aT3Krz8SomGAPKtrxmMJpQAAABI"]
[Sun Dec 14 04:21:04.824479 2025] [:error] [pid 60197:tid 60226] [client 4.189.152.194:48473] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/css.php"] [unique_id "aT3KsD8SomGAPKtrxmMJpgAAABQ"]
[Sun Dec 14 04:21:20.255456 2025] [:error] [pid 39523:tid 39535] [client 4.189.152.194:40556] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/file9.php"] [unique_id "aT3KwDQTQH1raAj2lkgRhQAAAAc"]
[Sun Dec 14 04:21:21.276326 2025] [:error] [pid 39524:tid 39558] [client 4.189.152.194:18063] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/file9.php"] [unique_id "aT3KwWrVGpbDzFtDE9P2LgAAAEI"]
[Sun Dec 14 04:21:22.364228 2025] [:error] [pid 39524:tid 39564] [client 4.189.152.194:14677] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/file9.php"] [unique_id "aT3KwmrVGpbDzFtDE9P2MwAAAEg"]
[Sun Dec 14 04:21:23.100239 2025] [:error] [pid 39524:tid 39567] [client 4.189.152.194:56941] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/file9.php"] [unique_id "aT3Kw2rVGpbDzFtDE9P2NgAAAEs"]
[Sun Dec 14 04:21:23.783468 2025] [:error] [pid 39525:tid 39586] [client 4.189.152.194:50641] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/hk.php"] [unique_id "aT3Kw01fX_pB_BrvE_5dkQAAAIM"]
[Sun Dec 14 04:21:24.878616 2025] [:error] [pid 39523:tid 39539] [client 4.189.152.194:40546] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/hk.php"] [unique_id "aT3KxDQTQH1raAj2lkgRngAAAAs"]
[Sun Dec 14 04:21:25.346998 2025] [:error] [pid 39525:tid 39599] [client 4.189.152.194:40552] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/hk.php"] [unique_id "aT3KxU1fX_pB_BrvE_5dmwAAAJA"]
[Sun Dec 14 04:21:26.177191 2025] [:error] [pid 39525:tid 39603] [client 4.189.152.194:48487] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/hk.php"] [unique_id "aT3Kxk1fX_pB_BrvE_5dngAAAJQ"]
[Sun Dec 14 04:21:26.902964 2025] [:error] [pid 39525:tid 39584] [client 4.189.152.194:13849] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/yas.php"] [unique_id "aT3Kxk1fX_pB_BrvE_5doQAAAIE"]
[Sun Dec 14 04:21:27.594911 2025] [:error] [pid 39525:tid 39587] [client 4.189.152.194:50679] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/yas.php"] [unique_id "aT3Kx01fX_pB_BrvE_5dpAAAAIQ"]
[Sun Dec 14 04:21:29.158115 2025] [:error] [pid 39614:tid 39625] [client 4.189.152.194:40574] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/yas.php"] [unique_id "aT3KyfxybG8-9MflbDdt9wAAAMk"]
[Sun Dec 14 04:21:30.993070 2025] [:error] [pid 39525:tid 39599] [client 4.189.152.194:40534] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/yas.php"] [unique_id "aT3Kyk1fX_pB_BrvE_5dqgAAAJA"]
[Sun Dec 14 04:21:31.758978 2025] [:error] [pid 39614:tid 39632] [client 4.189.152.194:13829] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp.php"] [unique_id "aT3Ky_xybG8-9MflbDdt-wAAANA"]
[Sun Dec 14 04:21:32.536937 2025] [:error] [pid 39614:tid 39634] [client 4.189.152.194:13863] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp.php"] [unique_id "aT3KzPxybG8-9MflbDdt_AAAANI"]
[Sun Dec 14 04:21:33.376127 2025] [:error] [pid 39614:tid 39637] [client 4.189.152.194:40512] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp.php"] [unique_id "aT3KzfxybG8-9MflbDdt_QAAANU"]
[Sun Dec 14 04:21:33.741415 2025] [:error] [pid 39614:tid 39638] [client 4.189.152.194:56919] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp.php"] [unique_id "aT3KzfxybG8-9MflbDdt_wAAANY"]
[Sun Dec 14 04:21:34.679653 2025] [:error] [pid 39525:tid 39593] [client 4.189.152.194:48505] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-gr.php"] [unique_id "aT3Kzk1fX_pB_BrvE_5dsgAAAIo"]
[Sun Dec 14 04:21:35.848763 2025] [:error] [pid 39614:tid 39627] [client 4.189.152.194:40526] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-gr.php"] [unique_id "aT3Kz_xybG8-9MflbDduCQAAAMs"]
[Sun Dec 14 04:21:36.983969 2025] [:error] [pid 39525:tid 39596] [client 4.189.152.194:50685] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-gr.php"] [unique_id "aT3K0E1fX_pB_BrvE_5dtwAAAI0"]
[Sun Dec 14 04:21:37.941114 2025] [:error] [pid 39614:tid 39637] [client 4.189.152.194:18088] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-gr.php"] [unique_id "aT3K0fxybG8-9MflbDduEQAAANU"]
[Sun Dec 14 04:21:38.664416 2025] [:error] [pid 39614:tid 39617] [client 4.189.152.194:56899] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/owl.php"] [unique_id "aT3K0vxybG8-9MflbDduFAAAAME"]
[Sun Dec 14 04:21:39.066639 2025] [:error] [pid 39525:tid 39586] [client 4.189.152.194:18049] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/owl.php"] [unique_id "aT3K001fX_pB_BrvE_5dvQAAAIM"]
[Sun Dec 14 04:21:39.869350 2025] [:error] [pid 39614:tid 39619] [client 4.189.152.194:18085] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/owl.php"] [unique_id "aT3K0_xybG8-9MflbDduFQAAAMM"]
[Sun Dec 14 04:21:40.824165 2025] [:error] [pid 39614:tid 39628] [client 4.189.152.194:50627] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/owl.php"] [unique_id "aT3K1PxybG8-9MflbDduHAAAAMw"]
[Sun Dec 14 04:21:41.870898 2025] [:error] [pid 39614:tid 39633] [client 4.189.152.194:48511] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/mo.php"] [unique_id "aT3K1fxybG8-9MflbDduIQAAANE"]
[Sun Dec 14 04:21:43.035048 2025] [:error] [pid 39525:tid 39596] [client 4.189.152.194:50667] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/mo.php"] [unique_id "aT3K101fX_pB_BrvE_5d1wAAAI0"]
[Sun Dec 14 04:21:44.019816 2025] [:error] [pid 39525:tid 39606] [client 4.189.152.194:50684] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/mo.php"] [unique_id "aT3K2E1fX_pB_BrvE_5d2gAAAJc"]
[Sun Dec 14 04:21:45.226872 2025] [:error] [pid 39525:tid 39590] [client 4.189.152.194:56913] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/mo.php"] [unique_id "aT3K2U1fX_pB_BrvE_5d4AAAAIc"]
[Sun Dec 14 04:21:45.982941 2025] [:error] [pid 39614:tid 39633] [client 4.189.152.194:48504] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/file21.php"] [unique_id "aT3K2fxybG8-9MflbDduLAAAANE"]
[Sun Dec 14 04:21:47.186112 2025] [:error] [pid 39614:tid 39618] [client 4.189.152.194:50639] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/file21.php"] [unique_id "aT3K2_xybG8-9MflbDduLwAAAMI"]
[Sun Dec 14 04:21:47.882224 2025] [:error] [pid 39614:tid 39639] [client 4.189.152.194:48484] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/file21.php"] [unique_id "aT3K2_xybG8-9MflbDduMgAAANc"]
[Sun Dec 14 04:21:48.409407 2025] [:error] [pid 39523:tid 39533] [client 4.189.152.194:40517] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/file21.php"] [unique_id "aT3K3DQTQH1raAj2lkgRvwAAAAU"]
[Sun Dec 14 04:21:49.092354 2025] [:error] [pid 39614:tid 39629] [client 4.189.152.194:50647] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ok.php"] [unique_id "aT3K3fxybG8-9MflbDduNQAAAM0"]
[Sun Dec 14 04:21:49.718011 2025] [:error] [pid 39614:tid 39616] [client 4.189.152.194:48468] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ok.php"] [unique_id "aT3K3fxybG8-9MflbDduNgAAAMA"]
[Sun Dec 14 04:21:50.694233 2025] [:error] [pid 39525:tid 39603] [client 4.189.152.194:56905] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ok.php"] [unique_id "aT3K3k1fX_pB_BrvE_5d5gAAAJQ"]
[Sun Dec 14 04:21:51.525900 2025] [:error] [pid 39523:tid 39537] [client 4.189.152.194:50650] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ok.php"] [unique_id "aT3K3zQTQH1raAj2lkgRwwAAAAk"]
[Sun Dec 14 04:22:22.549567 2025] [:error] [pid 39525:tid 39602] [client 4.189.152.194:56934] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/geck.php"] [unique_id "aT3K_k1fX_pB_BrvE_5eHAAAAJM"]
[Sun Dec 14 04:22:23.329652 2025] [:error] [pid 39614:tid 39623] [client 4.189.152.194:14656] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/geck.php"] [unique_id "aT3K__xybG8-9MflbDduiAAAAMc"]
[Sun Dec 14 04:22:24.735719 2025] [:error] [pid 39525:tid 39586] [client 4.189.152.194:18073] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/geck.php"] [unique_id "aT3LAE1fX_pB_BrvE_5eHgAAAIM"]
[Sun Dec 14 04:22:25.420756 2025] [:error] [pid 39523:tid 39552] [client 4.189.152.194:48478] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/geck.php"] [unique_id "aT3LATQTQH1raAj2lkgR7wAAABg"]
[Sun Dec 14 04:22:25.830875 2025] [:error] [pid 39525:tid 39599] [client 4.189.152.194:40519] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/inde.php"] [unique_id "aT3LAU1fX_pB_BrvE_5eHwAAAJA"]
[Sun Dec 14 04:22:26.664646 2025] [:error] [pid 39524:tid 39575] [client 4.189.152.194:48501] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/inde.php"] [unique_id "aT3LAmrVGpbDzFtDE9P2kwAAAFM"]
[Sun Dec 14 04:22:27.129625 2025] [:error] [pid 39523:tid 39533] [client 4.189.152.194:56951] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/inde.php"] [unique_id "aT3LAzQTQH1raAj2lkgR8QAAAAU"]
[Sun Dec 14 04:22:27.832298 2025] [:error] [pid 39614:tid 39639] [client 4.189.152.194:56911] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/inde.php"] [unique_id "aT3LA_xybG8-9MflbDdulQAAANc"]
[Sun Dec 14 04:22:29.000495 2025] [:error] [pid 39614:tid 39630] [client 4.189.152.194:13856] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/777.php"] [unique_id "aT3LBPxybG8-9MflbDdumQAAAM4"]
[Sun Dec 14 04:22:30.252359 2025] [:error] [pid 39523:tid 39548] [client 4.189.152.194:48460] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/777.php"] [unique_id "aT3LBjQTQH1raAj2lkgR-QAAABQ"]
[Sun Dec 14 04:22:31.851234 2025] [:error] [pid 39524:tid 39580] [client 4.189.152.194:56954] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/777.php"] [unique_id "aT3LB2rVGpbDzFtDE9P2lwAAAFg"]
[Sun Dec 14 04:22:33.602318 2025] [:error] [pid 39524:tid 39573] [client 4.189.152.194:13844] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/777.php"] [unique_id "aT3LCWrVGpbDzFtDE9P2mwAAAFE"]
[Sun Dec 14 04:22:34.544532 2025] [:error] [pid 39614:tid 39627] [client 4.189.152.194:50676] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/luxe.php"] [unique_id "aT3LCvxybG8-9MflbDduoAAAAMs"]
[Sun Dec 14 04:22:35.781366 2025] [:error] [pid 39524:tid 39560] [client 4.189.152.194:48466] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/luxe.php"] [unique_id "aT3LC2rVGpbDzFtDE9P2oAAAAEQ"]
[Sun Dec 14 04:22:36.748735 2025] [:error] [pid 39524:tid 39579] [client 4.189.152.194:18108] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/luxe.php"] [unique_id "aT3LDGrVGpbDzFtDE9P2owAAAFc"]
[Sun Dec 14 04:22:38.020772 2025] [:error] [pid 39525:tid 39606] [client 4.189.152.194:56908] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/luxe.php"] [unique_id "aT3LDk1fX_pB_BrvE_5eNgAAAJc"]
[Sun Dec 14 04:22:39.804408 2025] [:error] [pid 39524:tid 39561] [client 4.189.152.194:56948] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/2.php"] [unique_id "aT3LD2rVGpbDzFtDE9P2rgAAAEU"]
[Sun Dec 14 04:22:42.719307 2025] [:error] [pid 39525:tid 39587] [client 4.189.152.194:40540] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/2.php"] [unique_id "aT3LEk1fX_pB_BrvE_5eOwAAAIQ"]
[Sun Dec 14 04:22:43.726321 2025] [:error] [pid 39523:tid 39533] [client 4.189.152.194:50643] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/2.php"] [unique_id "aT3LEzQTQH1raAj2lkgSFwAAAAU"]
[Sun Dec 14 04:22:44.814840 2025] [:error] [pid 39523:tid 39546] [client 4.189.152.194:50670] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/2.php"] [unique_id "aT3LFDQTQH1raAj2lkgSHgAAABI"]
[Sun Dec 14 04:22:45.984737 2025] [:error] [pid 39523:tid 39544] [client 4.189.152.194:50629] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/zxin.php"] [unique_id "aT3LFTQTQH1raAj2lkgSKAAAABA"]
[Sun Dec 14 04:22:46.954605 2025] [:error] [pid 39523:tid 39536] [client 4.189.152.194:18056] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/zxin.php"] [unique_id "aT3LFjQTQH1raAj2lkgSMQAAAAg"]
[Sun Dec 14 04:22:47.641703 2025] [:error] [pid 39524:tid 39556] [client 4.189.152.194:50632] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/zxin.php"] [unique_id "aT3LF2rVGpbDzFtDE9P2vgAAAEA"]
[Sun Dec 14 04:22:48.442177 2025] [:error] [pid 39523:tid 39533] [client 4.189.152.194:40523] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/zxin.php"] [unique_id "aT3LGDQTQH1raAj2lkgSOgAAAAU"]
[Sun Dec 14 04:22:49.305712 2025] [:error] [pid 39523:tid 39536] [client 4.189.152.194:18079] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/xtt.php"] [unique_id "aT3LGTQTQH1raAj2lkgSPwAAAAg"]
[Sun Dec 14 04:22:49.709403 2025] [:error] [pid 39614:tid 39628] [client 4.189.152.194:13795] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/xtt.php"] [unique_id "aT3LGfxybG8-9MflbDduzQAAAMw"]
[Sun Dec 14 04:22:50.324864 2025] [:error] [pid 39614:tid 39617] [client 4.189.152.194:40538] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/xtt.php"] [unique_id "aT3LGvxybG8-9MflbDdu0wAAAME"]
[Sun Dec 14 04:22:51.608407 2025] [:error] [pid 39523:tid 39531] [client 4.189.152.194:40549] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/xtt.php"] [unique_id "aT3LGzQTQH1raAj2lkgSUQAAAAM"]
[Sun Dec 14 04:22:52.400553 2025] [:error] [pid 39614:tid 39638] [client 4.189.152.194:18090] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/index/function.php"] [unique_id "aT3LHPxybG8-9MflbDdu2wAAANY"]
[Sun Dec 14 04:22:55.715683 2025] [:error] [pid 39525:tid 39601] [client 4.189.152.194:56923] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/index/function.php"] [unique_id "aT3LH01fX_pB_BrvE_5eWwAAAJI"]
[Sun Dec 14 04:22:56.555520 2025] [:error] [pid 39614:tid 39623] [client 4.189.152.194:40569] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/index/function.php"] [unique_id "aT3LIPxybG8-9MflbDdu6AAAAMc"]
[Sun Dec 14 04:22:57.904221 2025] [:error] [pid 39523:tid 39539] [client 4.189.152.194:13819] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/index/function.php"] [unique_id "aT3LITQTQH1raAj2lkgSYAAAAAs"]
[Sun Dec 14 04:22:58.809684 2025] [:error] [pid 39614:tid 39624] [client 4.189.152.194:14700] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/noe.php"] [unique_id "aT3LIvxybG8-9MflbDdu7AAAAMg"]
[Sun Dec 14 04:23:00.241345 2025] [:error] [pid 39614:tid 39617] [client 4.189.152.194:56945] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/noe.php"] [unique_id "aT3LJPxybG8-9MflbDdu8gAAAME"]
[Sun Dec 14 04:23:01.576041 2025] [:error] [pid 39614:tid 39636] [client 4.189.152.194:50638] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/noe.php"] [unique_id "aT3LJfxybG8-9MflbDdu9wAAANQ"]
[Sun Dec 14 04:23:02.153835 2025] [:error] [pid 39524:tid 39567] [client 4.189.152.194:50674] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/noe.php"] [unique_id "aT3LJmrVGpbDzFtDE9P25QAAAEs"]
[Sun Dec 14 04:23:03.121657 2025] [:error] [pid 39614:tid 39624] [client 4.189.152.194:14692] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/class20.php"] [unique_id "aT3LJ_xybG8-9MflbDdu_gAAAMg"]
[Sun Dec 14 04:23:03.646966 2025] [:error] [pid 39523:tid 39537] [client 4.189.152.194:18065] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/class20.php"] [unique_id "aT3LJzQTQH1raAj2lkgScQAAAAk"]
[Sun Dec 14 04:23:04.789590 2025] [:error] [pid 39523:tid 39545] [client 4.189.152.194:56909] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/class20.php"] [unique_id "aT3LKDQTQH1raAj2lkgScwAAABE"]
[Sun Dec 14 04:23:05.765057 2025] [:error] [pid 39525:tid 39603] [client 4.189.152.194:46019] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/class20.php"] [unique_id "aT3LKU1fX_pB_BrvE_5ebAAAAJQ"]
[Sun Dec 14 04:23:06.664302 2025] [:error] [pid 39524:tid 39580] [client 4.189.152.194:56958] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/shellalfa.php"] [unique_id "aT3LKmrVGpbDzFtDE9P27gAAAFg"]
[Sun Dec 14 04:23:07.191108 2025] [:error] [pid 39525:tid 39597] [client 4.189.152.194:56957] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/shellalfa.php"] [unique_id "aT3LK01fX_pB_BrvE_5edgAAAI4"]
[Sun Dec 14 04:23:08.035055 2025] [:error] [pid 39525:tid 39607] [client 4.189.152.194:40527] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/shellalfa.php"] [unique_id "aT3LLE1fX_pB_BrvE_5eegAAAJg"]
[Sun Dec 14 04:23:08.658303 2025] [:error] [pid 39614:tid 39619] [client 4.189.152.194:14695] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/shellalfa.php"] [unique_id "aT3LLPxybG8-9MflbDdvGQAAAMM"]
[Sun Dec 14 04:23:09.907460 2025] [:error] [pid 39524:tid 39579] [client 4.189.152.194:56959] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/te.php"] [unique_id "aT3LLWrVGpbDzFtDE9P29QAAAFc"]
[Sun Dec 14 04:23:11.365751 2025] [:error] [pid 39525:tid 39590] [client 4.189.152.194:40564] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/te.php"] [unique_id "aT3LL01fX_pB_BrvE_5ehAAAAIc"]
[Sun Dec 14 04:23:12.280815 2025] [:error] [pid 39614:tid 39630] [client 4.189.152.194:18086] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/te.php"] [unique_id "aT3LMPxybG8-9MflbDdvLgAAAM4"]
[Sun Dec 14 04:23:13.868331 2025] [:error] [pid 39524:tid 39571] [client 4.189.152.194:14249] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/te.php"] [unique_id "aT3LMWrVGpbDzFtDE9P3CAAAAE8"]
[Sun Dec 14 04:23:14.509758 2025] [:error] [pid 39525:tid 39593] [client 4.189.152.194:56900] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/a2.php"] [unique_id "aT3LMk1fX_pB_BrvE_5elgAAAIo"]
[Sun Dec 14 04:23:15.844858 2025] [:error] [pid 39525:tid 39603] [client 4.189.152.194:48448] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/a2.php"] [unique_id "aT3LM01fX_pB_BrvE_5epAAAAJQ"]
[Sun Dec 14 04:23:17.443113 2025] [:error] [pid 39525:tid 39605] [client 4.189.152.194:48508] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/a2.php"] [unique_id "aT3LNU1fX_pB_BrvE_5eqgAAAJY"]
[Sun Dec 14 04:23:53.415050 2025] [:error] [pid 39524:tid 39570] [client 4.189.152.194:14162] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/000.php"] [unique_id "aT3LWWrVGpbDzFtDE9P3WAAAAE4"]
[Sun Dec 14 04:23:55.272134 2025] [:error] [pid 39524:tid 39563] [client 4.189.152.194:36400] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/000.php"] [unique_id "aT3LW2rVGpbDzFtDE9P3XAAAAEc"]
[Sun Dec 14 04:23:55.820362 2025] [:error] [pid 39614:tid 39634] [client 4.189.152.194:14566] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/000.php"] [unique_id "aT3LW_xybG8-9MflbDdvoAAAANI"]
[Sun Dec 14 04:23:57.056766 2025] [:error] [pid 39614:tid 39636] [client 4.189.152.194:39890] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/000.php"] [unique_id "aT3LXfxybG8-9MflbDdvpAAAANQ"]
[Sun Dec 14 04:23:58.908815 2025] [:error] [pid 39523:tid 39528] [client 4.189.152.194:59666] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/classwithtostring.php"] [unique_id "aT3LXjQTQH1raAj2lkgTGAAAAAA"]
[Sun Dec 14 04:24:01.669738 2025] [:error] [pid 39523:tid 39537] [client 4.189.152.194:47779] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/classwithtostring.php"] [unique_id "aT3LYTQTQH1raAj2lkgTIAAAAAk"]
[Sun Dec 14 04:24:03.342928 2025] [:error] [pid 39524:tid 39557] [client 4.189.152.194:14379] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/classwithtostring.php"] [unique_id "aT3LY2rVGpbDzFtDE9P3ZAAAAEE"]
[Sun Dec 14 04:24:05.531035 2025] [:error] [pid 39525:tid 39595] [client 4.189.152.194:33659] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/classwithtostring.php"] [unique_id "aT3LZU1fX_pB_BrvE_5fHAAAAIw"]
[Sun Dec 14 04:24:06.220612 2025] [:error] [pid 39523:tid 39547] [client 4.189.152.194:33634] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/uploads/index.php"] [unique_id "aT3LZjQTQH1raAj2lkgTJgAAABM"]
[Sun Dec 14 04:24:08.225462 2025] [:error] [pid 39523:tid 39544] [client 4.189.152.194:33542] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/uploads/index.php"] [unique_id "aT3LaDQTQH1raAj2lkgTLAAAABA"]
[Sun Dec 14 04:24:10.017532 2025] [:error] [pid 39524:tid 39571] [client 4.189.152.194:33554] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/uploads/index.php"] [unique_id "aT3LamrVGpbDzFtDE9P3bwAAAE8"]
[Sun Dec 14 04:24:11.689974 2025] [:error] [pid 39523:tid 39534] [client 4.189.152.194:44822] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/uploads/index.php"] [unique_id "aT3LazQTQH1raAj2lkgTLgAAAAY"]
[Sun Dec 14 04:24:13.444270 2025] [:error] [pid 39523:tid 39540] [client 4.189.152.194:49941] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/file18.php"] [unique_id "aT3LbTQTQH1raAj2lkgTMAAAAAw"]
[Sun Dec 14 04:24:14.629161 2025] [:error] [pid 39524:tid 39570] [client 4.189.152.194:37507] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/file18.php"] [unique_id "aT3LbmrVGpbDzFtDE9P3eAAAAE4"]
[Sun Dec 14 04:24:16.845797 2025] [:error] [pid 39523:tid 39538] [client 4.189.152.194:37564] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/file18.php"] [unique_id "aT3LcDQTQH1raAj2lkgTMQAAAAo"]
[Sun Dec 14 04:24:19.046473 2025] [:error] [pid 39523:tid 39552] [client 4.189.152.194:44830] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/file18.php"] [unique_id "aT3LczQTQH1raAj2lkgTNQAAABg"]
[Sun Dec 14 04:24:21.001740 2025] [:error] [pid 39614:tid 39630] [client 4.189.152.194:44814] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/v.php"] [unique_id "aT3LdfxybG8-9MflbDdvvwAAAM4"]
[Sun Dec 14 04:24:23.676345 2025] [:error] [pid 39614:tid 39637] [client 4.189.152.194:44838] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/v.php"] [unique_id "aT3Ld_xybG8-9MflbDdvxgAAANU"]
[Sun Dec 14 04:24:26.360476 2025] [:error] [pid 39614:tid 39640] [client 4.189.152.194:54341] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/v.php"] [unique_id "aT3LevxybG8-9MflbDdvyAAAANg"]
[Sun Dec 14 04:24:29.248823 2025] [:error] [pid 39614:tid 39639] [client 4.189.152.194:36315] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/v.php"] [unique_id "aT3LffxybG8-9MflbDdv0QAAANc"]
[Sun Dec 14 04:24:30.137926 2025] [:error] [pid 39614:tid 39628] [client 4.189.152.194:54367] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-good.php"] [unique_id "aT3LfvxybG8-9MflbDdv1QAAAMw"]
[Sun Dec 14 04:24:31.868753 2025] [:error] [pid 39614:tid 39617] [client 4.189.152.194:54362] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-good.php"] [unique_id "aT3Lf_xybG8-9MflbDdv3AAAAME"]
[Sun Dec 14 04:24:34.507806 2025] [:error] [pid 39614:tid 39629] [client 4.189.152.194:49949] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-good.php"] [unique_id "aT3LgvxybG8-9MflbDdv6AAAAM0"]
[Sun Dec 14 04:24:37.028285 2025] [:error] [pid 39614:tid 39628] [client 4.189.152.194:49953] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-good.php"] [unique_id "aT3LhfxybG8-9MflbDdv7QAAAMw"]
[Sun Dec 14 04:24:38.497692 2025] [:error] [pid 39523:tid 39532] [client 4.189.152.194:49923] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/bless.php"] [unique_id "aT3LhjQTQH1raAj2lkgTTwAAAAQ"]
[Sun Dec 14 04:24:40.332740 2025] [:error] [pid 39524:tid 39567] [client 4.189.152.194:49977] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/bless.php"] [unique_id "aT3LiGrVGpbDzFtDE9P3lQAAAEs"]
[Sun Dec 14 04:24:42.635863 2025] [:error] [pid 39614:tid 39619] [client 4.189.152.194:49973] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/bless.php"] [unique_id "aT3LivxybG8-9MflbDdwAQAAAMM"]
[Sun Dec 14 04:24:45.618429 2025] [:error] [pid 39525:tid 39585] [client 4.189.152.194:56954] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/bless.php"] [unique_id "aT3LjU1fX_pB_BrvE_5fMwAAAII"]
[Sun Dec 14 04:24:47.633770 2025] [:error] [pid 39524:tid 39573] [client 4.189.152.194:44813] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/acp.php"] [unique_id "aT3Lj2rVGpbDzFtDE9P3nQAAAFE"]
[Sun Dec 14 04:24:48.682247 2025] [:error] [pid 39525:tid 39605] [client 4.189.152.194:54349] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/acp.php"] [unique_id "aT3LkE1fX_pB_BrvE_5fNgAAAJY"]
[Sun Dec 14 04:24:50.229246 2025] [:error] [pid 39525:tid 39600] [client 4.189.152.194:36303] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/acp.php"] [unique_id "aT3Lkk1fX_pB_BrvE_5fOAAAAJE"]
[Sun Dec 14 04:24:51.243190 2025] [:error] [pid 39614:tid 39616] [client 4.189.152.194:13963] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/acp.php"] [unique_id "aT3Lk_xybG8-9MflbDdwCgAAAMA"]
[Sun Dec 14 04:25:21.209470 2025] [:error] [pid 39523:tid 39533] [client 4.189.152.194:13952] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/file5.php"] [unique_id "aT3LsTQTQH1raAj2lkgTlAAAAAU"]
[Sun Dec 14 04:25:25.060759 2025] [:error] [pid 39525:tid 39600] [client 4.189.152.194:58636] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/file5.php"] [unique_id "aT3LtU1fX_pB_BrvE_5fXAAAAJE"]
[Sun Dec 14 04:25:25.475331 2025] [:error] [pid 39614:tid 39627] [client 4.189.152.194:58670] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/file5.php"] [unique_id "aT3LtfxybG8-9MflbDdwRgAAAMs"]
[Sun Dec 14 04:25:27.000442 2025] [:error] [pid 39614:tid 39621] [client 4.189.152.194:13962] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/file5.php"] [unique_id "aT3LtvxybG8-9MflbDdwSAAAAMU"]
[Sun Dec 14 04:25:28.292047 2025] [:error] [pid 39523:tid 39550] [client 4.189.152.194:35229] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/lol.php"] [unique_id "aT3LuDQTQH1raAj2lkgTqwAAABY"]
[Sun Dec 14 04:25:29.962657 2025] [:error] [pid 39524:tid 39579] [client 4.189.152.194:13978] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/lol.php"] [unique_id "aT3LuWrVGpbDzFtDE9P3vQAAAFc"]
[Sun Dec 14 04:25:31.411787 2025] [:error] [pid 39525:tid 39585] [client 4.189.152.194:58627] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/lol.php"] [unique_id "aT3Lu01fX_pB_BrvE_5fZAAAAII"]
[Sun Dec 14 04:25:33.084024 2025] [:error] [pid 39614:tid 39619] [client 4.189.152.194:58665] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/lol.php"] [unique_id "aT3LvfxybG8-9MflbDdwXgAAAMM"]
[Sun Dec 14 04:25:33.948998 2025] [:error] [pid 39523:tid 39550] [client 4.189.152.194:36288] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/fileas.php"] [unique_id "aT3LvTQTQH1raAj2lkgTsgAAABY"]
[Sun Dec 14 04:25:36.437953 2025] [:error] [pid 39614:tid 39631] [client 4.189.152.194:36307] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/fileas.php"] [unique_id "aT3LwPxybG8-9MflbDdwYgAAAM8"]
[Sun Dec 14 04:25:37.632910 2025] [:error] [pid 39523:tid 39540] [client 4.189.152.194:14002] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/fileas.php"] [unique_id "aT3LwTQTQH1raAj2lkgTuAAAAAw"]
[Sun Dec 14 04:25:40.108323 2025] [:error] [pid 39524:tid 39579] [client 4.189.152.194:14013] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/fileas.php"] [unique_id "aT3LxGrVGpbDzFtDE9P4DgAAAFc"]
[Sun Dec 14 04:25:43.271955 2025] [:error] [pid 39524:tid 39573] [client 4.189.152.194:58641] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/n3.php"] [unique_id "aT3Lx2rVGpbDzFtDE9P4EwAAAFE"]
[Sun Dec 14 04:25:44.888407 2025] [:error] [pid 39525:tid 39586] [client 4.189.152.194:36306] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/n3.php"] [unique_id "aT3LyE1fX_pB_BrvE_5feQAAAIM"]
[Sun Dec 14 04:25:45.842254 2025] [:error] [pid 39525:tid 39599] [client 4.189.152.194:49954] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/n3.php"] [unique_id "aT3LyU1fX_pB_BrvE_5ffQAAAJA"]
[Sun Dec 14 04:25:48.543672 2025] [:error] [pid 39614:tid 39632] [client 4.189.152.194:44836] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/n3.php"] [unique_id "aT3LzPxybG8-9MflbDdweAAAANA"]
[Sun Dec 14 04:25:49.558493 2025] [:error] [pid 39614:tid 39628] [client 4.189.152.194:33548] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/an.php"] [unique_id "aT3LzfxybG8-9MflbDdwewAAAMw"]
[Sun Dec 14 04:25:50.629161 2025] [:error] [pid 39525:tid 39605] [client 4.189.152.194:40633] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/an.php"] [unique_id "aT3Lzk1fX_pB_BrvE_5fggAAAJY"]
[Sun Dec 14 04:25:51.591170 2025] [:error] [pid 39523:tid 39540] [client 4.189.152.194:59281] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/an.php"] [unique_id "aT3LzzQTQH1raAj2lkgTyAAAAAw"]
[Sun Dec 14 04:25:53.363615 2025] [:error] [pid 39523:tid 39532] [client 4.189.152.194:31749] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/an.php"] [unique_id "aT3L0TQTQH1raAj2lkgTzAAAAAQ"]
[Sun Dec 14 04:25:54.087645 2025] [:error] [pid 39523:tid 39530] [client 4.189.152.194:59310] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/error.php"] [unique_id "aT3L0jQTQH1raAj2lkgTzgAAAAI"]
[Sun Dec 14 04:25:55.069503 2025] [:error] [pid 39614:tid 39638] [client 4.189.152.194:59676] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/error.php"] [unique_id "aT3L0_xybG8-9MflbDdwfwAAANY"]
[Sun Dec 14 04:25:56.109015 2025] [:error] [pid 39524:tid 39557] [client 4.189.152.194:31797] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/error.php"] [unique_id "aT3L1GrVGpbDzFtDE9P4HgAAAEE"]
[Sun Dec 14 04:25:57.499352 2025] [:error] [pid 39525:tid 39602] [client 4.189.152.194:31770] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/error.php"] [unique_id "aT3L1U1fX_pB_BrvE_5fngAAAJM"]
[Sun Dec 14 04:25:58.335641 2025] [:error] [pid 39524:tid 39568] [client 4.189.152.194:32312] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wolv2.php"] [unique_id "aT3L1mrVGpbDzFtDE9P4HwAAAEw"]
[Sun Dec 14 04:25:59.373524 2025] [:error] [pid 39524:tid 39575] [client 4.189.152.194:47753] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wolv2.php"] [unique_id "aT3L12rVGpbDzFtDE9P4IQAAAFM"]
[Sun Dec 14 04:26:00.225505 2025] [:error] [pid 39523:tid 39545] [client 4.189.152.194:31750] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wolv2.php"] [unique_id "aT3L2DQTQH1raAj2lkgT0gAAABE"]
[Sun Dec 14 04:26:01.248638 2025] [:error] [pid 39525:tid 39606] [client 4.189.152.194:59280] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wolv2.php"] [unique_id "aT3L2U1fX_pB_BrvE_5frAAAAJc"]
[Sun Dec 14 04:26:02.217423 2025] [:error] [pid 39525:tid 39589] [client 4.189.152.194:59673] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-is.php"] [unique_id "aT3L2k1fX_pB_BrvE_5frwAAAIY"]
[Sun Dec 14 04:26:02.912876 2025] [:error] [pid 39525:tid 39587] [client 4.189.152.194:31803] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-is.php"] [unique_id "aT3L2k1fX_pB_BrvE_5fsQAAAIQ"]
[Sun Dec 14 04:26:04.037696 2025] [:error] [pid 39525:tid 39595] [client 4.189.152.194:59318] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-is.php"] [unique_id "aT3L3E1fX_pB_BrvE_5fswAAAIw"]
[Sun Dec 14 04:26:06.758310 2025] [:error] [pid 39523:tid 39538] [client 4.189.152.194:47786] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-is.php"] [unique_id "aT3L3jQTQH1raAj2lkgT2wAAAAo"]
[Sun Dec 14 04:26:09.131297 2025] [:error] [pid 41600:tid 41608] [client 4.189.152.194:47787] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ava.php"] [unique_id "aT3L4dFLTBZjcwNd_VvE4gAAAQU"]
[Sun Dec 14 04:26:10.978957 2025] [:error] [pid 39524:tid 39557] [client 4.189.152.194:31787] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ava.php"] [unique_id "aT3L4mrVGpbDzFtDE9P4LwAAAEE"]
[Sun Dec 14 04:26:11.962461 2025] [:error] [pid 39614:tid 39618] [client 4.189.152.194:32313] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ava.php"] [unique_id "aT3L4_xybG8-9MflbDdwpwAAAMI"]
[Sun Dec 14 04:26:13.823780 2025] [:error] [pid 41600:tid 41621] [client 4.189.152.194:31783] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ava.php"] [unique_id "aT3L5dFLTBZjcwNd_VvE6gAAARI"]
[Sun Dec 14 04:26:14.720066 2025] [:error] [pid 39525:tid 39600] [client 4.189.152.194:47769] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/m.php"] [unique_id "aT3L5k1fX_pB_BrvE_5fwgAAAJE"]
[Sun Dec 14 04:26:15.553913 2025] [:error] [pid 41600:tid 41605] [client 4.189.152.194:32278] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/m.php"] [unique_id "aT3L59FLTBZjcwNd_VvE7gAAAQI"]
[Sun Dec 14 04:26:16.098789 2025] [:error] [pid 39523:tid 39550] [client 4.189.152.194:59269] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/m.php"] [unique_id "aT3L6DQTQH1raAj2lkgT6QAAABY"]
[Sun Dec 14 04:26:17.147571 2025] [:error] [pid 39523:tid 39544] [client 4.189.152.194:32317] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/m.php"] [unique_id "aT3L6TQTQH1raAj2lkgT7QAAABA"]
[Sun Dec 14 04:26:17.791866 2025] [:error] [pid 39525:tid 39584] [client 4.189.152.194:59290] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/shell1.php"] [unique_id "aT3L6U1fX_pB_BrvE_5fxAAAAIE"]
[Sun Dec 14 04:26:18.856610 2025] [:error] [pid 39525:tid 39602] [client 4.189.152.194:31769] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/shell1.php"] [unique_id "aT3L6k1fX_pB_BrvE_5fxQAAAJM"]
[Sun Dec 14 04:26:50.775594 2025] [:error] [pid 41600:tid 41606] [client 4.189.152.194:59668] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/hello.php"] [unique_id "aT3MCtFLTBZjcwNd_VvFNgAAAQM"]
[Sun Dec 14 04:26:52.357205 2025] [:error] [pid 39524:tid 39562] [client 4.189.152.194:32273] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/hello.php"] [unique_id "aT3MDGrVGpbDzFtDE9P4UwAAAEY"]
[Sun Dec 14 04:26:54.269460 2025] [:error] [pid 39524:tid 39576] [client 4.189.152.194:32284] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/hello.php"] [unique_id "aT3MDmrVGpbDzFtDE9P4VQAAAFQ"]
[Sun Dec 14 04:26:56.148846 2025] [:error] [pid 39524:tid 39560] [client 4.189.152.194:47803] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/hello.php"] [unique_id "aT3MEGrVGpbDzFtDE9P4VwAAAEQ"]
[Sun Dec 14 04:26:57.779895 2025] [:error] [pid 39524:tid 39575] [client 4.189.152.194:31786] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/abt.php"] [unique_id "aT3MEWrVGpbDzFtDE9P4WQAAAFM"]
[Sun Dec 14 04:26:59.878852 2025] [:error] [pid 39523:tid 39532] [client 4.189.152.194:13700] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/abt.php"] [unique_id "aT3MEzQTQH1raAj2lkgUEgAAAAQ"]
[Sun Dec 14 04:27:01.912818 2025] [:error] [pid 41600:tid 41622] [client 4.189.152.194:59288] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/abt.php"] [unique_id "aT3MFdFLTBZjcwNd_VvFagAAARM"]
[Sun Dec 14 04:27:02.982125 2025] [:error] [pid 39524:tid 39575] [client 4.189.152.194:32267] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/abt.php"] [unique_id "aT3MFmrVGpbDzFtDE9P4bgAAAFM"]
[Sun Dec 14 04:27:04.408464 2025] [:error] [pid 39614:tid 39631] [client 4.189.152.194:31747] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/jmfi2.php"] [unique_id "aT3MGPxybG8-9MflbDdw1wAAAM8"]
[Sun Dec 14 04:27:05.802474 2025] [:error] [pid 41600:tid 41606] [client 4.189.152.194:14371] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/jmfi2.php"] [unique_id "aT3MGdFLTBZjcwNd_VvFbAAAAQM"]
[Sun Dec 14 04:27:07.223100 2025] [:error] [pid 39614:tid 39638] [client 4.189.152.194:31807] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/jmfi2.php"] [unique_id "aT3MG_xybG8-9MflbDdw2wAAANY"]
[Sun Dec 14 04:27:08.747683 2025] [:error] [pid 39523:tid 39551] [client 4.189.152.194:59298] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/jmfi2.php"] [unique_id "aT3MHDQTQH1raAj2lkgUGwAAABc"]
[Sun Dec 14 04:27:09.594970 2025] [:error] [pid 39614:tid 39633] [client 4.189.152.194:32268] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/layout.php"] [unique_id "aT3MHfxybG8-9MflbDdw4QAAANE"]
[Sun Dec 14 04:27:10.428149 2025] [:error] [pid 39614:tid 39640] [client 4.189.152.194:47807] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/layout.php"] [unique_id "aT3MHvxybG8-9MflbDdw4wAAANg"]
[Sun Dec 14 04:27:11.666830 2025] [:error] [pid 39614:tid 39622] [client 4.189.152.194:59300] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/layout.php"] [unique_id "aT3MH_xybG8-9MflbDdw5gAAAMY"]
[Sun Dec 14 04:27:12.259405 2025] [:error] [pid 39525:tid 39583] [client 4.189.152.194:32271] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/layout.php"] [unique_id "aT3MIE1fX_pB_BrvE_5gGgAAAIA"]
[Sun Dec 14 04:27:13.428170 2025] [:error] [pid 39523:tid 39532] [client 4.189.152.194:32277] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/up.php"] [unique_id "aT3MITQTQH1raAj2lkgUIQAAAAQ"]
[Sun Dec 14 04:27:14.510314 2025] [:error] [pid 39525:tid 39587] [client 4.189.152.194:14345] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/up.php"] [unique_id "aT3MIk1fX_pB_BrvE_5gHgAAAIQ"]
[Sun Dec 14 04:27:15.403452 2025] [:error] [pid 39524:tid 39559] [client 4.189.152.194:32262] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/up.php"] [unique_id "aT3MI2rVGpbDzFtDE9P4cgAAAEM"]
[Sun Dec 14 04:27:16.278322 2025] [:error] [pid 39523:tid 39530] [client 4.189.152.194:59705] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/up.php"] [unique_id "aT3MJDQTQH1raAj2lkgUIgAAAAI"]
[Sun Dec 14 04:27:17.065830 2025] [:error] [pid 41600:tid 41621] [client 4.189.152.194:59326] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/flower.php"] [unique_id "aT3MJdFLTBZjcwNd_VvFcQAAARI"]
[Sun Dec 14 04:27:18.156069 2025] [:error] [pid 41600:tid 41619] [client 4.189.152.194:31801] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/flower.php"] [unique_id "aT3MJtFLTBZjcwNd_VvFcwAAARA"]
[Sun Dec 14 04:27:19.888888 2025] [:error] [pid 39524:tid 39565] [client 4.189.152.194:40594] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/flower.php"] [unique_id "aT3MJ2rVGpbDzFtDE9P4dQAAAEk"]
[Sun Dec 14 04:27:20.730447 2025] [:error] [pid 39525:tid 39603] [client 4.189.152.194:59316] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/flower.php"] [unique_id "aT3MKE1fX_pB_BrvE_5gIAAAAJQ"]
[Sun Dec 14 04:27:21.327160 2025] [:error] [pid 39525:tid 39588] [client 4.189.152.194:59305] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/nope.php"] [unique_id "aT3MKU1fX_pB_BrvE_5gIQAAAIU"]
[Sun Dec 14 04:27:22.259620 2025] [:error] [pid 39524:tid 39566] [client 4.189.152.194:59672] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/nope.php"] [unique_id "aT3MKmrVGpbDzFtDE9P4eQAAAEo"]
[Sun Dec 14 04:27:22.982881 2025] [:error] [pid 39525:tid 39607] [client 4.189.152.194:47751] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/nope.php"] [unique_id "aT3MKk1fX_pB_BrvE_5gIgAAAJg"]
[Sun Dec 14 04:27:24.282044 2025] [:error] [pid 41600:tid 41625] [client 4.189.152.194:59675] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/nope.php"] [unique_id "aT3MLNFLTBZjcwNd_VvFegAAARY"]
[Sun Dec 14 04:27:25.292673 2025] [:error] [pid 39614:tid 39625] [client 4.189.152.194:59655] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/js.php"] [unique_id "aT3MLfxybG8-9MflbDdw_wAAAMk"]
[Sun Dec 14 04:27:27.355671 2025] [:error] [pid 41600:tid 41608] [client 4.189.152.194:14394] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/js.php"] [unique_id "aT3ML9FLTBZjcwNd_VvFfAAAAQU"]
[Sun Dec 14 04:27:27.694366 2025] [:error] [pid 39614:tid 39633] [client 4.189.152.194:32298] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/js.php"] [unique_id "aT3ML_xybG8-9MflbDdxAwAAANE"]
[Sun Dec 14 04:27:28.253203 2025] [:error] [pid 39525:tid 39596] [client 4.189.152.194:47768] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/js.php"] [unique_id "aT3MME1fX_pB_BrvE_5gLQAAAI0"]
[Sun Dec 14 04:27:29.134124 2025] [:error] [pid 41600:tid 41627] [client 4.189.152.194:31745] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/upgrade/index.php"] [unique_id "aT3MMdFLTBZjcwNd_VvFfQAAARg"]
[Sun Dec 14 04:27:29.907640 2025] [:error] [pid 41600:tid 41619] [client 4.189.152.194:59681] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/upgrade/index.php"] [unique_id "aT3MMdFLTBZjcwNd_VvFgQAAARA"]
[Sun Dec 14 04:27:30.772460 2025] [:error] [pid 41600:tid 41609] [client 4.189.152.194:32285] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/upgrade/index.php"] [unique_id "aT3MMtFLTBZjcwNd_VvFgwAAAQY"]
[Sun Dec 14 04:27:31.273535 2025] [:error] [pid 39614:tid 39622] [client 4.189.152.194:59709] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/upgrade/index.php"] [unique_id "aT3MM_xybG8-9MflbDdxCwAAAMY"]
[Sun Dec 14 04:27:31.996725 2025] [:error] [pid 39614:tid 39627] [client 4.189.152.194:47785] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/media.php"] [unique_id "aT3MM_xybG8-9MflbDdxDgAAAMs"]
[Sun Dec 14 04:27:32.655530 2025] [:error] [pid 39524:tid 39580] [client 4.189.152.194:47745] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/media.php"] [unique_id "aT3MNGrVGpbDzFtDE9P4ewAAAFg"]
[Sun Dec 14 04:27:33.362279 2025] [:error] [pid 39524:tid 39564] [client 4.189.152.194:59287] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/media.php"] [unique_id "aT3MNWrVGpbDzFtDE9P4fAAAAEg"]
[Sun Dec 14 04:27:34.204540 2025] [:error] [pid 39525:tid 39594] [client 4.189.152.194:32269] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/media.php"] [unique_id "aT3MNk1fX_pB_BrvE_5gNAAAAIs"]
[Sun Dec 14 04:27:34.631705 2025] [:error] [pid 39524:tid 39559] [client 4.189.152.194:32257] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/update/f35.php"] [unique_id "aT3MNmrVGpbDzFtDE9P4fwAAAEM"]
[Sun Dec 14 04:27:35.223195 2025] [:error] [pid 39614:tid 39619] [client 4.189.152.194:31784] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/update/f35.php"] [unique_id "aT3MN_xybG8-9MflbDdxEgAAAMM"]
[Sun Dec 14 04:27:36.721688 2025] [:error] [pid 39524:tid 39568] [client 4.189.152.194:31760] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/update/f35.php"] [unique_id "aT3MOGrVGpbDzFtDE9P4ggAAAEw"]
[Sun Dec 14 04:27:38.393561 2025] [:error] [pid 39524:tid 39573] [client 4.189.152.194:59702] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/update/f35.php"] [unique_id "aT3MOmrVGpbDzFtDE9P4hgAAAFE"]
[Sun Dec 14 04:27:40.318982 2025] [:error] [pid 39524:tid 39576] [client 4.189.152.194:59692] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/default.php"] [unique_id "aT3MPGrVGpbDzFtDE9P4hwAAAFQ"]
[Sun Dec 14 04:27:41.629664 2025] [:error] [pid 39523:tid 39529] [client 4.189.152.194:59667] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/default.php"] [unique_id "aT3MPTQTQH1raAj2lkgUMAAAAAE"]
[Sun Dec 14 04:27:43.701688 2025] [:error] [pid 39614:tid 39628] [client 4.189.152.194:50725] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/default.php"] [unique_id "aT3MP_xybG8-9MflbDdxHAAAAMw"]
[Sun Dec 14 04:27:45.077499 2025] [:error] [pid 41600:tid 41617] [client 4.189.152.194:50709] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/default.php"] [unique_id "aT3MQdFLTBZjcwNd_VvFmQAAAQ4"]
[Sun Dec 14 04:27:46.688123 2025] [:error] [pid 39524:tid 39579] [client 4.189.152.194:59309] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/uploads/wp-conflg.php"] [unique_id "aT3MQmrVGpbDzFtDE9P4jAAAAFc"]
[Sun Dec 14 04:27:48.881456 2025] [:error] [pid 41600:tid 41616] [client 4.189.152.194:32295] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/uploads/wp-conflg.php"] [unique_id "aT3MRNFLTBZjcwNd_VvFpQAAAQ0"]
[Sun Dec 14 04:28:22.621171 2025] [:error] [pid 41600:tid 41618] [client 4.189.152.194:32292] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ext.php"] [unique_id "aT3MZtFLTBZjcwNd_VvGQAAAAQ8"]
[Sun Dec 14 04:28:23.967360 2025] [:error] [pid 39523:tid 39552] [client 4.189.152.194:31771] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ext.php"] [unique_id "aT3MZzQTQH1raAj2lkgUmwAAABg"]
[Sun Dec 14 04:28:25.260271 2025] [:error] [pid 39523:tid 39539] [client 4.189.152.194:59666] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ext.php"] [unique_id "aT3MaTQTQH1raAj2lkgUogAAAAs"]
[Sun Dec 14 04:28:26.362328 2025] [:error] [pid 39525:tid 39605] [client 4.189.152.194:31791] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ext.php"] [unique_id "aT3Mak1fX_pB_BrvE_5gfAAAAJY"]
[Sun Dec 14 04:28:28.012400 2025] [:error] [pid 39525:tid 39606] [client 4.189.152.194:47794] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/himu.php"] [unique_id "aT3MbE1fX_pB_BrvE_5gfwAAAJc"]
[Sun Dec 14 04:28:28.770509 2025] [:error] [pid 39524:tid 39572] [client 4.189.152.194:13903] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/himu.php"] [unique_id "aT3MbGrVGpbDzFtDE9P5CwAAAFA"]
[Sun Dec 14 04:28:31.047985 2025] [:error] [pid 41600:tid 41611] [client 4.189.152.194:13912] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/himu.php"] [unique_id "aT3Mb9FLTBZjcwNd_VvGbQAAAQg"]
[Sun Dec 14 04:28:32.499108 2025] [:error] [pid 39523:tid 39550] [client 4.189.152.194:59653] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/himu.php"] [unique_id "aT3McDQTQH1raAj2lkgUsAAAABY"]
[Sun Dec 14 04:28:33.633291 2025] [:error] [pid 39524:tid 39563] [client 4.189.152.194:13890] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wfile.php"] [unique_id "aT3McWrVGpbDzFtDE9P5LAAAAEc"]
[Sun Dec 14 04:28:35.650613 2025] [:error] [pid 41600:tid 41611] [client 4.189.152.194:47762] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wfile.php"] [unique_id "aT3Mc9FLTBZjcwNd_VvGlwAAAQg"]
[Sun Dec 14 04:28:36.370587 2025] [:error] [pid 41600:tid 41622] [client 43.157.20.63:43904] [client 43.157.20.63] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.paramountbaldivis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.paramountbaldivis.com"] [uri "/"] [unique_id "aT3MdNFLTBZjcwNd_VvGnQAAARM"]
[Sun Dec 14 04:28:37.527049 2025] [:error] [pid 39525:tid 39594] [client 4.189.152.194:32318] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wfile.php"] [unique_id "aT3MdU1fX_pB_BrvE_5gpwAAAIs"]
[Sun Dec 14 04:28:38.591601 2025] [:error] [pid 39524:tid 39557] [client 4.189.152.194:13920] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wfile.php"] [unique_id "aT3MdmrVGpbDzFtDE9P5TgAAAEE"]
[Sun Dec 14 04:28:39.332848 2025] [:error] [pid 41600:tid 41622] [client 4.189.152.194:32300] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/pp.php"] [unique_id "aT3Md9FLTBZjcwNd_VvGqgAAARM"]
[Sun Dec 14 04:28:40.974767 2025] [:error] [pid 39523:tid 39530] [client 4.189.152.194:36841] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/pp.php"] [unique_id "aT3MeDQTQH1raAj2lkgUxAAAAAI"]
[Sun Dec 14 04:28:42.374620 2025] [:error] [pid 39523:tid 39538] [client 4.189.152.194:32287] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/pp.php"] [unique_id "aT3MejQTQH1raAj2lkgUzwAAAAo"]
[Sun Dec 14 04:28:45.238790 2025] [:error] [pid 41600:tid 41616] [client 4.189.152.194:32740] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/pp.php"] [unique_id "aT3MfdFLTBZjcwNd_VvGuwAAAQ0"]
[Sun Dec 14 04:28:48.927462 2025] [:error] [pid 39614:tid 39638] [client 4.189.152.194:13951] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/miansha.php"] [unique_id "aT3MgPxybG8-9MflbDdx3wAAANY"]
[Sun Dec 14 04:28:51.251516 2025] [:error] [pid 39525:tid 39590] [client 4.189.152.194:59663] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/miansha.php"] [unique_id "aT3Mg01fX_pB_BrvE_5g0AAAAIc"]
[Sun Dec 14 04:28:54.048962 2025] [:error] [pid 39525:tid 39605] [client 4.189.152.194:59697] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/miansha.php"] [unique_id "aT3Mhk1fX_pB_BrvE_5g2wAAAJY"]
[Sun Dec 14 04:28:56.063840 2025] [:error] [pid 39614:tid 39638] [client 4.189.152.194:36859] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/miansha.php"] [unique_id "aT3MiPxybG8-9MflbDdx7wAAANY"]
[Sun Dec 14 04:28:58.728316 2025] [:error] [pid 39524:tid 39579] [client 4.189.152.194:36837] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/test2.php"] [unique_id "aT3MimrVGpbDzFtDE9P5gAAAAFc"]
[Sun Dec 14 04:29:00.821457 2025] [:error] [pid 41600:tid 41609] [client 4.189.152.194:36804] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/test2.php"] [unique_id "aT3MjNFLTBZjcwNd_VvG3wAAAQY"]
[Sun Dec 14 04:29:02.228226 2025] [:error] [pid 39524:tid 39565] [client 4.189.152.194:36840] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/test2.php"] [unique_id "aT3MjmrVGpbDzFtDE9P5igAAAEk"]
[Sun Dec 14 04:29:03.092367 2025] [:error] [pid 39523:tid 39541] [client 4.189.152.194:32283] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/test2.php"] [unique_id "aT3MjzQTQH1raAj2lkgU6AAAAA0"]
[Sun Dec 14 04:29:04.031382 2025] [:error] [pid 39523:tid 39532] [client 4.189.152.194:32755] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/maint/index.php"] [unique_id "aT3MkDQTQH1raAj2lkgU7AAAAAQ"]
[Sun Dec 14 04:29:06.285516 2025] [:error] [pid 39524:tid 39579] [client 4.189.152.194:14095] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/maint/index.php"] [unique_id "aT3MkmrVGpbDzFtDE9P5jAAAAFc"]
[Sun Dec 14 04:29:08.417921 2025] [:error] [pid 39614:tid 39627] [client 4.189.152.194:14087] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/maint/index.php"] [unique_id "aT3MlPxybG8-9MflbDdx-AAAAMs"]
[Sun Dec 14 04:29:10.893481 2025] [:error] [pid 39614:tid 39635] [client 4.189.152.194:39316] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/maint/index.php"] [unique_id "aT3MlvxybG8-9MflbDdx_AAAANM"]
[Sun Dec 14 04:29:15.093961 2025] [:error] [pid 41600:tid 41608] [client 4.189.152.194:36812] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-links-opml.php"] [unique_id "aT3Mm9FLTBZjcwNd_VvG4wAAAQU"]
[Sun Dec 14 04:29:20.044612 2025] [:error] [pid 41600:tid 41619] [client 4.189.152.194:14133] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-links-opml.php"] [unique_id "aT3MoNFLTBZjcwNd_VvG5QAAARA"]
[Sun Dec 14 04:29:35.309918 2025] [:error] [pid 41600:tid 41617] [client 4.189.152.194:58012] [client 4.189.152.194] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/IXR/about.php"] [unique_id "aT3Mr9FLTBZjcwNd_VvG-wAAAQ4"]
[Sun Dec 14 04:29:59.175959 2025] [:error] [pid 41600:tid 41606] [client 4.189.152.194:59341] [client 4.189.152.194] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "paramountbaldivis.com"] [uri "/filemanager.php"] [unique_id "aT3Mx9FLTBZjcwNd_VvHKAAAAQM"]
[Sun Dec 14 04:30:05.686343 2025] [:error] [pid 41600:tid 41614] [client 4.189.152.194:58749] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/mail.php"] [unique_id "aT3MzdFLTBZjcwNd_VvHMQAAAQs"]
[Sun Dec 14 04:30:06.236447 2025] [:error] [pid 39524:tid 39567] [client 4.189.152.194:53163] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/mail.php"] [unique_id "aT3MzmrVGpbDzFtDE9P5vQAAAEs"]
[Sun Dec 14 04:30:06.996759 2025] [:error] [pid 39524:tid 39557] [client 4.189.152.194:58694] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/mail.php"] [unique_id "aT3MzmrVGpbDzFtDE9P5wQAAAEE"]
[Sun Dec 14 04:30:07.523765 2025] [:error] [pid 39614:tid 39616] [client 4.189.152.194:59737] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/mail.php"] [unique_id "aT3Mz_xybG8-9MflbDdyNQAAAMA"]
[Sun Dec 14 04:30:08.577758 2025] [:error] [pid 39614:tid 39628] [client 4.189.152.194:58729] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/CLA.php"] [unique_id "aT3M0PxybG8-9MflbDdyNwAAAMw"]
[Sun Dec 14 04:30:09.329570 2025] [:error] [pid 39614:tid 39618] [client 4.189.152.194:14474] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/CLA.php"] [unique_id "aT3M0fxybG8-9MflbDdyOQAAAMI"]
[Sun Dec 14 04:30:10.282803 2025] [:error] [pid 39523:tid 39542] [client 4.189.152.194:59736] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/CLA.php"] [unique_id "aT3M0jQTQH1raAj2lkgVMwAAAA4"]
[Sun Dec 14 04:30:12.597212 2025] [:error] [pid 41600:tid 41603] [client 4.189.152.194:59349] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/CLA.php"] [unique_id "aT3M1NFLTBZjcwNd_VvHOgAAAQA"]
[Sun Dec 14 04:30:14.234254 2025] [:error] [pid 39525:tid 39590] [client 4.189.152.194:59713] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ol.php"] [unique_id "aT3M1k1fX_pB_BrvE_5hVAAAAIc"]
[Sun Dec 14 04:30:15.462541 2025] [:error] [pid 39614:tid 39638] [client 4.189.152.194:58704] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ol.php"] [unique_id "aT3M1_xybG8-9MflbDdyPwAAANY"]
[Sun Dec 14 04:30:16.909165 2025] [:error] [pid 41600:tid 41613] [client 4.189.152.194:32777] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ol.php"] [unique_id "aT3M2NFLTBZjcwNd_VvHPAAAAQo"]
[Sun Dec 14 04:30:18.273111 2025] [:error] [pid 41600:tid 41627] [client 4.189.152.194:58014] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ol.php"] [unique_id "aT3M2tFLTBZjcwNd_VvHPgAAARg"]
[Sun Dec 14 04:30:20.182736 2025] [:error] [pid 39614:tid 39639] [client 4.189.152.194:14488] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ouh.php"] [unique_id "aT3M3PxybG8-9MflbDdyRwAAANc"]
[Sun Dec 14 04:30:22.458152 2025] [:error] [pid 41600:tid 41611] [client 4.189.152.194:13778] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ouh.php"] [unique_id "aT3M3tFLTBZjcwNd_VvHQAAAAQg"]
[Sun Dec 14 04:30:25.153071 2025] [:error] [pid 39524:tid 39562] [client 4.189.152.194:13783] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ouh.php"] [unique_id "aT3M4WrVGpbDzFtDE9P5yQAAAEY"]
[Sun Dec 14 04:30:27.021061 2025] [:error] [pid 39525:tid 39586] [client 4.189.152.194:13772] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ouh.php"] [unique_id "aT3M401fX_pB_BrvE_5hZwAAAIM"]
[Sun Dec 14 04:30:28.621138 2025] [:error] [pid 41600:tid 41627] [client 4.189.152.194:58024] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/bolt.php"] [unique_id "aT3M5NFLTBZjcwNd_VvHSgAAARg"]
[Sun Dec 14 04:30:30.041924 2025] [:error] [pid 39614:tid 39628] [client 4.189.152.194:54333] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/bolt.php"] [unique_id "aT3M5vxybG8-9MflbDdyYAAAAMw"]
[Sun Dec 14 04:30:30.671892 2025] [:error] [pid 39614:tid 39622] [client 4.189.152.194:31784] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/bolt.php"] [unique_id "aT3M5vxybG8-9MflbDdyZwAAAMY"]
[Sun Dec 14 04:30:31.533995 2025] [:error] [pid 39614:tid 39633] [client 4.189.152.194:32791] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/bolt.php"] [unique_id "aT3M5_xybG8-9MflbDdyaQAAANE"]
[Sun Dec 14 04:30:32.150967 2025] [:error] [pid 39614:tid 39624] [client 4.189.152.194:50624] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/shell.php"] [unique_id "aT3M6PxybG8-9MflbDdyawAAAMg"]
[Sun Dec 14 04:30:32.685266 2025] [:error] [pid 39614:tid 39621] [client 4.189.152.194:14163] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/shell.php"] [unique_id "aT3M6PxybG8-9MflbDdybAAAAMU"]
[Sun Dec 14 04:30:33.346252 2025] [:error] [pid 39524:tid 39574] [client 4.189.152.194:13822] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/shell.php"] [unique_id "aT3M6WrVGpbDzFtDE9P51gAAAFI"]
[Sun Dec 14 04:30:33.830095 2025] [:error] [pid 39614:tid 39617] [client 4.189.152.194:13790] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/shell.php"] [unique_id "aT3M6fxybG8-9MflbDdybwAAAME"]
[Sun Dec 14 04:30:35.150885 2025] [:error] [pid 39523:tid 39530] [client 4.189.152.194:14526] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/tgrs.php"] [unique_id "aT3M6zQTQH1raAj2lkgVQQAAAAI"]
[Sun Dec 14 04:30:35.604931 2025] [:error] [pid 41600:tid 41623] [client 4.189.152.194:54302] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/tgrs.php"] [unique_id "aT3M69FLTBZjcwNd_VvHUwAAARQ"]
[Sun Dec 14 04:30:36.194983 2025] [:error] [pid 39523:tid 39541] [client 4.189.152.194:14499] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/tgrs.php"] [unique_id "aT3M7DQTQH1raAj2lkgVQgAAAA0"]
[Sun Dec 14 04:30:37.332318 2025] [:error] [pid 41600:tid 41627] [client 4.189.152.194:13819] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/tgrs.php"] [unique_id "aT3M7dFLTBZjcwNd_VvHWAAAARg"]
[Sun Dec 14 04:30:38.836898 2025] [:error] [pid 41600:tid 41618] [client 4.189.152.194:14512] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/system_log.php"] [unique_id "aT3M7tFLTBZjcwNd_VvHXAAAAQ8"]
[Sun Dec 14 04:30:40.026887 2025] [:error] [pid 41600:tid 41623] [client 4.189.152.194:13802] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/system_log.php"] [unique_id "aT3M8NFLTBZjcwNd_VvHYgAAARQ"]
[Sun Dec 14 04:30:41.195935 2025] [:error] [pid 39524:tid 39571] [client 4.189.152.194:50668] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/system_log.php"] [unique_id "aT3M8WrVGpbDzFtDE9P52AAAAE8"]
[Sun Dec 14 04:30:42.758795 2025] [:error] [pid 39614:tid 39639] [client 4.189.152.194:54275] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/system_log.php"] [unique_id "aT3M8vxybG8-9MflbDdycwAAANc"]
[Sun Dec 14 04:30:43.904326 2025] [:error] [pid 39525:tid 39593] [client 4.189.152.194:54285] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/gifclass4.php"] [unique_id "aT3M801fX_pB_BrvE_5hcwAAAIo"]
[Sun Dec 14 04:30:45.894136 2025] [:error] [pid 39524:tid 39564] [client 4.189.152.194:14465] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/gifclass4.php"] [unique_id "aT3M9WrVGpbDzFtDE9P53AAAAEg"]
[Sun Dec 14 04:30:47.206606 2025] [:error] [pid 39524:tid 39558] [client 4.189.152.194:54313] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/gifclass4.php"] [unique_id "aT3M92rVGpbDzFtDE9P53wAAAEI"]
[Sun Dec 14 04:30:48.189524 2025] [:error] [pid 41600:tid 41613] [client 4.189.152.194:14707] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/gifclass4.php"] [unique_id "aT3M-NFLTBZjcwNd_VvHZwAAAQo"]
[Sun Dec 14 04:30:49.834197 2025] [:error] [pid 39523:tid 39550] [client 4.189.152.194:50643] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/z.php"] [unique_id "aT3M-TQTQH1raAj2lkgVTAAAABY"]
[Sun Dec 14 04:30:51.068726 2025] [:error] [pid 39525:tid 39595] [client 4.189.152.194:54274] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/z.php"] [unique_id "aT3M-01fX_pB_BrvE_5hdgAAAIw"]
[Sun Dec 14 04:30:52.087220 2025] [:error] [pid 41600:tid 41611] [client 4.189.152.194:54300] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/z.php"] [unique_id "aT3M_NFLTBZjcwNd_VvHbgAAAQg"]
[Sun Dec 14 04:30:52.630025 2025] [:error] [pid 39614:tid 39625] [client 4.189.152.194:54301] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/z.php"] [unique_id "aT3M_PxybG8-9MflbDdyfAAAAMk"]
[Sun Dec 14 04:30:53.558242 2025] [:error] [pid 41600:tid 41626] [client 4.189.152.194:50644] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/akcc.php"] [unique_id "aT3M_dFLTBZjcwNd_VvHbwAAARc"]
[Sun Dec 14 04:30:53.939843 2025] [:error] [pid 39614:tid 39617] [client 4.189.152.194:32780] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/akcc.php"] [unique_id "aT3M_fxybG8-9MflbDdyfwAAAME"]
[Sun Dec 14 04:30:55.111077 2025] [:error] [pid 41600:tid 41617] [client 4.189.152.194:14514] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/akcc.php"] [unique_id "aT3M_9FLTBZjcwNd_VvHcgAAAQ4"]
[Sun Dec 14 04:30:56.528304 2025] [:error] [pid 41600:tid 41609] [client 4.189.152.194:58025] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/akcc.php"] [unique_id "aT3NANFLTBZjcwNd_VvHcwAAAQY"]
[Sun Dec 14 04:30:57.532154 2025] [:error] [pid 39614:tid 39623] [client 4.189.152.194:14221] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/zxz.php"] [unique_id "aT3NAfxybG8-9MflbDdyhAAAAMc"]
[Sun Dec 14 04:30:58.286048 2025] [:error] [pid 41600:tid 41612] [client 4.189.152.194:33067] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/zxz.php"] [unique_id "aT3NAtFLTBZjcwNd_VvHdwAAAQk"]
[Sun Dec 14 04:30:58.634397 2025] [:error] [pid 39523:tid 39532] [client 4.189.152.194:46055] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/zxz.php"] [unique_id "aT3NAjQTQH1raAj2lkgVUQAAAAQ"]
[Sun Dec 14 04:31:00.682857 2025] [:error] [pid 39614:tid 39622] [client 4.189.152.194:46031] [client 4.189.152.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/zxz.php"] [unique_id "aT3NBPxybG8-9MflbDdyhgAAAMY"]
[Sun Dec 14 04:39:18.183011 2025] [autoindex:error] [pid 39523:tid 39537] [client 20.37.217.241:63973] AH01276: Cannot serve directory /home/baldivis/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Sun Dec 14 05:04:21.622165 2025] [:error] [pid 39524:tid 39579] [client 82.223.128.142:43854] [client 82.223.128.142] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 82.223.128.142, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aT3U1WrVGpbDzFtDE9MBlAAAAFc"]
[Sun Dec 14 05:34:56.073883 2025] [:error] [pid 41600:tid 41606] [client 43.135.36.201:56218] [client 43.135.36.201] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||paramountbaldivis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT3cANFLTBZjcwNd_VviWQAAAQM"]
[Sun Dec 14 07:21:36.298282 2025] [:error] [pid 39524:tid 39573] [client 45.148.31.197:50002] [client 45.148.31.197] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.148.31.197, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aT31AGrVGpbDzFtDE9MkIwAAAFE"]
[Sun Dec 14 09:04:23.118649 2025] [:error] [pid 41600:tid 41613] [client 195.154.208.64:58564] [client 195.154.208.64] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 195.154.208.64, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aT4NF9FLTBZjcwNd_Vsr0gAAAQo"]
[Sun Dec 14 10:51:07.298045 2025] [:error] [pid 39525:tid 39602] [client 78.47.142.186:52466] [client 78.47.142.186] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 78.47.142.186, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aT4mG01fX_pB_BrvE_6-EQAAAJM"]
[Sun Dec 14 12:23:21.823670 2025] [:error] [pid 39523:tid 39534] [client 106.222.204.33:16105] [client 106.222.204.33] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.222.204.33, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aT47uTQTQH1raAj2lkhwtgAAAAY"]
[Sun Dec 14 12:43:11.603379 2025] [:error] [pid 39525:tid 39605] [client 137.184.46.218:59534] [client 137.184.46.218] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 137.184.46.218, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aT5AX01fX_pB_BrvE_7SNgAAAJY"]
[Sun Dec 14 14:34:16.603191 2025] [:error] [pid 40595:tid 40607] [client 85.214.167.117:55618] [client 85.214.167.117] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.214.167.117, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aT5aaPjrht6y4RN-xKSVYQAAAYg"]
[Sun Dec 14 15:29:49.727843 2025] [:error] [pid 39525:tid 39595] [client 45.138.16.121:50941] [client 45.138.16.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/txets.php"] [unique_id "aT5nbU1fX_pB_BrvE_7kBgAAAIw"]
[Sun Dec 14 18:17:47.415817 2025] [:error] [pid 40595:tid 40622] [client 167.86.80.181:49796] [client 167.86.80.181] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 167.86.80.181, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aT6Oy_jrht6y4RN-xKTwHgAAAZc"]
[Sun Dec 14 19:22:25.771148 2025] [:error] [pid 13799:tid 13811] [client 37.19.199.236:45662] [client 37.19.199.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aT6d8XjPEin01ElFTNYqZgAAAgk"]
[Sun Dec 14 19:22:29.916488 2025] [:error] [pid 40595:tid 40620] [client 37.19.199.236:36052] [client 37.19.199.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aT6d9fjrht6y4RN-xKQLsAAAAZU"]
[Sun Dec 14 19:22:37.811800 2025] [:error] [pid 39525:tid 39592] [client 37.19.199.236:36828] [client 37.19.199.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "paramountbaldivis.com"] [uri "/tinyfilemanager.php"] [unique_id "aT6d_U1fX_pB_BrvE_46SwAAAIk"]
[Sun Dec 14 19:22:41.992525 2025] [:error] [pid 41600:tid 41623] [client 37.19.199.236:36842] [client 37.19.199.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/js/index.php"] [unique_id "aT6eAdFLTBZjcwNd_VvuZwAAARQ"]
[Sun Dec 14 19:22:49.901925 2025] [:error] [pid 39614:tid 39620] [client 37.19.199.236:52420] [client 37.19.199.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aT6eCfxybG8-9MflbDdY9QAAAMQ"]
[Sun Dec 14 19:22:51.590039 2025] [:error] [pid 39524:tid 39572] [client 37.19.199.236:34554] [client 37.19.199.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aT6eC2rVGpbDzFtDE9PRHAAAAFA"]
[Sun Dec 14 19:22:52.004505 2025] [:error] [pid 40596:tid 40632] [client 37.19.199.236:34558] [client 37.19.199.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aT6eDGvZZo4N2X7WoLx_NQAAAcY"]
[Sun Dec 14 19:22:52.422239 2025] [:error] [pid 40561:tid 40578] [client 37.19.199.236:34574] [client 37.19.199.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aT6eDIY6r869zoqRQkS_ugAAAU0"]
[Sun Dec 14 19:22:52.836907 2025] [:error] [pid 39614:tid 39635] [client 37.19.199.236:34590] [client 37.19.199.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aT6eDPxybG8-9MflbDdY-QAAANM"]
[Sun Dec 14 19:22:53.252568 2025] [:error] [pid 40561:tid 40588] [client 37.19.199.236:34592] [client 37.19.199.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aT6eDYY6r869zoqRQkS_vQAAAVc"]
[Sun Dec 14 19:22:54.920522 2025] [:error] [pid 41600:tid 41605] [client 37.19.199.236:34594] [client 37.19.199.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aT6eDtFLTBZjcwNd_VvulgAAAQI"]
[Sun Dec 14 19:22:56.852570 2025] [:error] [pid 41600:tid 41621] [client 37.19.199.236:34606] [client 37.19.199.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "paramountbaldivis.com"] [uri "/filemanager.php"] [unique_id "aT6eENFLTBZjcwNd_VvungAAARI"]
[Sun Dec 14 19:22:59.990183 2025] [:error] [pid 40596:tid 40646] [client 37.19.199.236:34610] [client 37.19.199.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aT6eE2vZZo4N2X7WoLx_QgAAAdQ"]
[Sun Dec 14 19:23:01.835373 2025] [:error] [pid 39523:tid 39534] [client 37.19.199.236:49342] [client 37.19.199.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aT6eFTQTQH1raAj2lkjSnQAAAAY"]
[Sun Dec 14 19:23:03.630448 2025] [:error] [pid 39524:tid 39580] [client 37.19.199.236:49350] [client 37.19.199.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aT6eF2rVGpbDzFtDE9PRLAAAAFg"]
[Sun Dec 14 19:23:11.635388 2025] [:error] [pid 39614:tid 39632] [client 37.19.199.236:49356] [client 37.19.199.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aT6eH_xybG8-9MflbDdZIQAAANA"]
[Sun Dec 14 19:23:13.285890 2025] [:error] [pid 39524:tid 39560] [client 37.19.199.236:48100] [client 37.19.199.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aT6eIWrVGpbDzFtDE9PRZwAAAEQ"]
[Sun Dec 14 19:23:16.242927 2025] [:error] [pid 39614:tid 39621] [client 37.19.199.236:48110] [client 37.19.199.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/defaults.php"] [unique_id "aT6eJPxybG8-9MflbDdZKQAAAMU"]
[Sun Dec 14 19:23:17.880679 2025] [:error] [pid 40595:tid 40607] [client 37.19.199.236:48118] [client 37.19.199.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/customize/index.php"] [unique_id "aT6eJfjrht6y4RN-xKQL4wAAAYg"]
[Sun Dec 14 19:23:23.421696 2025] [:error] [pid 13799:tid 13813] [client 37.19.199.236:48120] [client 37.19.199.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aT6eK3jPEin01ElFTNYqmwAAAgs"]
[Sun Dec 14 19:23:25.067180 2025] [:error] [pid 39523:tid 39534] [client 37.19.199.236:35724] [client 37.19.199.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aT6eLTQTQH1raAj2lkjSrgAAAAY"]
[Sun Dec 14 19:23:27.013387 2025] [:error] [pid 41600:tid 41616] [client 37.19.199.236:35732] [client 37.19.199.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/Requests/index.php"] [unique_id "aT6eL9FLTBZjcwNd_Vvu_wAAAQ0"]
[Sun Dec 14 19:23:27.430706 2025] [:error] [pid 13799:tid 13818] [client 37.19.199.236:35734] [client 37.19.199.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aT6eL3jPEin01ElFTNYqngAAAhA"]
[Sun Dec 14 19:23:27.848676 2025] [:error] [pid 39523:tid 39528] [client 37.19.199.236:35744] [client 37.19.199.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aT6eLzQTQH1raAj2lkjSrwAAAAA"]
[Sun Dec 14 19:23:32.137165 2025] [:error] [pid 41600:tid 41626] [client 37.19.199.236:35754] [client 37.19.199.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/assets/info.php"] [unique_id "aT6eNNFLTBZjcwNd_VvvCwAAARc"]
[Sun Dec 14 19:23:32.563795 2025] [:error] [pid 40596:tid 40629] [client 37.19.199.236:49314] [client 37.19.199.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/class.api.php"] [unique_id "aT6eNGvZZo4N2X7WoLx_cgAAAcM"]
[Sun Dec 14 19:23:32.997700 2025] [:error] [pid 39523:tid 39539] [client 37.19.199.236:49318] [client 37.19.199.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "aT6eNDQTQH1raAj2lkjSswAAAAs"]
[Sun Dec 14 19:23:43.266158 2025] [:error] [pid 39614:tid 39635] [client 37.19.199.236:49326] [client 37.19.199.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/admin.php"] [unique_id "aT6eP_xybG8-9MflbDdZPgAAANM"]
[Sun Dec 14 19:23:47.555945 2025] [:error] [pid 39523:tid 39534] [client 37.19.199.236:52850] [client 37.19.199.236] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.19.199.236, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aT6eQzQTQH1raAj2lkjSvQAAAAY"]
[Sun Dec 14 19:24:02.657956 2025] [:error] [pid 39523:tid 39531] [client 37.19.199.236:52850] [client 37.19.199.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aT6eUjQTQH1raAj2lkjSzgAAAAM"]
[Sun Dec 14 19:24:06.300978 2025] [:error] [pid 40595:tid 40623] [client 37.19.199.236:57512] [client 37.19.199.236] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.19.199.236, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aT6eVvjrht6y4RN-xKQMNgAAAZg"]
[Sun Dec 14 19:24:09.236670 2025] [:error] [pid 40595:tid 40599] [client 37.19.199.236:57512] [client 37.19.199.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/item.php"] [unique_id "aT6eWfjrht6y4RN-xKQMOQAAAYA"]
[Sun Dec 14 19:24:23.644873 2025] [:error] [pid 40595:tid 40605] [client 37.19.199.236:43470] [client 37.19.199.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aT6eZ_jrht6y4RN-xKQMRQAAAYY"]
[Sun Dec 14 19:24:34.070225 2025] [:error] [pid 39525:tid 39598] [client 37.19.199.236:50872] [client 37.19.199.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aT6eck1fX_pB_BrvE_46pwAAAI8"]
[Sun Dec 14 19:24:37.046678 2025] [:error] [pid 13799:tid 13814] [client 37.19.199.236:32998] [client 37.19.199.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aT6edXjPEin01ElFTNYqzgAAAgw"]
[Sun Dec 14 19:24:41.347852 2025] [:error] [pid 40595:tid 40605] [client 37.19.199.236:33006] [client 37.19.199.236] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.19.199.236, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/wp-login.php"] [unique_id "aT6eefjrht6y4RN-xKQMUgAAAYY"]
[Sun Dec 14 19:24:42.608152 2025] [:error] [pid 40595:tid 40618] [client 37.19.199.236:33006] [client 37.19.199.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aT6eevjrht6y4RN-xKQMVAAAAZM"]
[Sun Dec 14 19:25:10.182891 2025] [:error] [pid 40596:tid 40628] [client 37.19.199.229:48114] [client 37.19.199.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aT6elmvZZo4N2X7WoLyAGgAAAcI"]
[Sun Dec 14 19:25:14.461796 2025] [:error] [pid 40561:tid 40578] [client 37.19.199.229:35658] [client 37.19.199.229] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.19.199.229, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aT6emoY6r869zoqRQkTA5AAAAU0"]
[Sun Dec 14 19:25:19.581568 2025] [:error] [pid 40561:tid 40570] [client 37.19.199.229:35658] [client 37.19.199.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/assets/about.php"] [unique_id "aT6en4Y6r869zoqRQkTA8QAAAUU"]
[Sun Dec 14 19:25:21.304682 2025] [:error] [pid 41600:tid 41622] [client 37.19.199.229:59060] [client 37.19.199.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/infi.php"] [unique_id "aT6eodFLTBZjcwNd_VvwiwAAARM"]
[Sun Dec 14 19:25:24.106730 2025] [:error] [pid 41600:tid 41610] [client 37.19.199.229:59070] [client 37.19.199.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/IXR/index.php"] [unique_id "aT6epNFLTBZjcwNd_VvwkwAAAQc"]
[Sun Dec 14 19:25:30.597041 2025] [:error] [pid 40595:tid 40605] [client 37.19.199.229:59086] [client 37.19.199.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/pomo/about.php"] [unique_id "aT6eqvjrht6y4RN-xKQNOwAAAYY"]
[Sun Dec 14 19:25:31.011053 2025] [:error] [pid 39524:tid 39573] [client 37.19.199.229:53964] [client 37.19.199.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/pomo/index.php"] [unique_id "aT6eq2rVGpbDzFtDE9PSiQAAAFE"]
[Sun Dec 14 19:25:38.087745 2025] [:error] [pid 41600:tid 41624] [client 37.19.199.229:53968] [client 37.19.199.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aT6estFLTBZjcwNd_Vvw0QAAARU"]
[Sun Dec 14 19:25:39.771603 2025] [:error] [pid 39524:tid 39574] [client 37.19.199.229:53980] [client 37.19.199.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/certificates/about.php"] [unique_id "aT6es2rVGpbDzFtDE9PSwwAAAFI"]
[Sun Dec 14 19:25:43.974685 2025] [:error] [pid 39614:tid 39619] [client 37.19.199.229:58938] [client 37.19.199.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/edit.php"] [unique_id "aT6et_xybG8-9MflbDdZ3wAAAMM"]
[Sun Dec 14 19:25:48.077799 2025] [:error] [pid 39525:tid 39605] [client 37.19.199.229:58940] [client 37.19.199.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aT6evE1fX_pB_BrvE_47YwAAAJY"]
[Sun Dec 14 19:25:50.937418 2025] [:error] [pid 41600:tid 41606] [client 37.19.199.229:58956] [client 37.19.199.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/click.php"] [unique_id "aT6evtFLTBZjcwNd_Vvw6wAAAQM"]
[Sun Dec 14 19:25:55.256783 2025] [:error] [pid 39523:tid 39542] [client 37.19.199.229:53276] [client 37.19.199.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aT6ewzQTQH1raAj2lkjTYwAAAA4"]
[Sun Dec 14 19:26:05.144017 2025] [:error] [pid 40596:tid 40628] [client 37.19.199.229:53292] [client 37.19.199.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aT6ezWvZZo4N2X7WoLyAcAAAAcI"]
[Sun Dec 14 19:26:05.560140 2025] [:error] [pid 13799:tid 13802] [client 37.19.199.229:54628] [client 37.19.199.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/xl2023.php"] [unique_id "aT6ezXjPEin01ElFTNYrNwAAAgA"]
[Sun Dec 14 19:26:05.974728 2025] [:error] [pid 39523:tid 39536] [client 37.19.199.229:54638] [client 37.19.199.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aT6ezTQTQH1raAj2lkjTbwAAAAg"]
[Sun Dec 14 19:26:06.390090 2025] [:error] [pid 39523:tid 39535] [client 37.19.199.229:54646] [client 37.19.199.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aT6ezjQTQH1raAj2lkjTcQAAAAc"]
[Sun Dec 14 19:26:08.088002 2025] [:error] [pid 40561:tid 40582] [client 37.19.199.229:54658] [client 37.19.199.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aT6e0IY6r869zoqRQkTBogAAAVE"]
[Sun Dec 14 19:26:08.503545 2025] [:error] [pid 41600:tid 41624] [client 37.19.199.229:54670] [client 37.19.199.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/assets/index.php"] [unique_id "aT6e0NFLTBZjcwNd_VvxMQAAARU"]
[Sun Dec 14 19:26:12.817035 2025] [:error] [pid 39614:tid 39635] [client 37.19.199.229:54682] [client 37.19.199.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/css/index.php"] [unique_id "aT6e1PxybG8-9MflbDdaMwAAANM"]
[Sun Dec 14 19:26:13.231853 2025] [:error] [pid 39524:tid 39575] [client 37.19.199.229:41476] [client 37.19.199.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "aT6e1WrVGpbDzFtDE9PTNQAAAFM"]
[Sun Dec 14 19:26:13.645698 2025] [:error] [pid 13799:tid 13824] [client 37.19.199.229:41484] [client 37.19.199.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aT6e1XjPEin01ElFTNYrPwAAAhY"]
[Sun Dec 14 19:26:14.061010 2025] [:error] [pid 13799:tid 13817] [client 37.19.199.229:41500] [client 37.19.199.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/IXR/security.php"] [unique_id "aT6e1njPEin01ElFTNYrQAAAAg8"]
[Sun Dec 14 19:26:15.769135 2025] [:error] [pid 39525:tid 39594] [client 37.19.199.229:41510] [client 37.19.199.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aT6e101fX_pB_BrvE_47wgAAAIs"]
[Sun Dec 14 19:26:18.788674 2025] [:error] [pid 40596:tid 40634] [client 37.19.199.229:41516] [client 37.19.199.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/fonts/about.php"] [unique_id "aT6e2mvZZo4N2X7WoLyA-wAAAcg"]
[Sun Dec 14 19:26:24.697723 2025] [:error] [pid 39614:tid 39630] [client 37.19.199.229:34242] [client 37.19.199.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aT6e4PxybG8-9MflbDdaXwAAAM4"]
[Sun Dec 14 19:26:34.490698 2025] [:error] [pid 13799:tid 13807] [client 37.19.199.229:34248] [client 37.19.199.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/assets/file.php"] [unique_id "aT6e6njPEin01ElFTNYrbQAAAgU"]
[Sun Dec 14 19:26:38.846503 2025] [:error] [pid 39614:tid 39640] [client 37.19.199.229:52984] [client 37.19.199.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aT6e7vxybG8-9MflbDdajAAAANg"]
[Sun Dec 14 19:26:39.262584 2025] [:error] [pid 39525:tid 39586] [client 37.19.199.229:52556] [client 37.19.199.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aT6e701fX_pB_BrvE_47_QAAAIM"]
[Sun Dec 14 19:26:45.115926 2025] [:error] [pid 40596:tid 40633] [client 37.19.199.229:52560] [client 37.19.199.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aT6e9WvZZo4N2X7WoLyBfAAAAcc"]
[Sun Dec 14 19:26:49.878253 2025] [proxy_fcgi:error] [pid 41600:tid 41620] [client 37.19.199.229:52562] AH01071: Got error 'Primary script unknown'
[Sun Dec 14 19:26:50.089772 2025] [proxy_fcgi:error] [pid 41600:tid 41604] [client 37.19.199.229:52562] AH01071: Got error 'Primary script unknown'
[Sun Dec 14 19:26:50.301610 2025] [proxy_fcgi:error] [pid 41600:tid 41625] [client 37.19.199.229:52562] AH01071: Got error 'Primary script unknown'
[Sun Dec 14 19:26:54.553541 2025] [:error] [pid 41600:tid 41605] [client 37.19.199.229:52562] [client 37.19.199.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "aT6e_tFLTBZjcwNd_VvxvgAAAQI"]
[Sun Dec 14 19:26:54.968224 2025] [:error] [pid 40595:tid 40621] [client 37.19.199.229:52104] [client 37.19.199.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aT6e_vjrht6y4RN-xKQOaAAAAZY"]
[Sun Dec 14 19:26:55.383660 2025] [:error] [pid 39614:tid 39631] [client 37.19.199.229:52116] [client 37.19.199.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aT6e__xybG8-9MflbDda5wAAAM8"]
[Sun Dec 14 19:26:55.797045 2025] [:error] [pid 39524:tid 39572] [client 37.19.199.229:52122] [client 37.19.199.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aT6e_2rVGpbDzFtDE9PTzAAAAFA"]
[Sun Dec 14 19:26:56.211248 2025] [:error] [pid 41600:tid 41614] [client 37.19.199.229:52138] [client 37.19.199.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aT6fANFLTBZjcwNd_VvxwgAAAQs"]
[Sun Dec 14 19:26:56.625694 2025] [:error] [pid 39523:tid 39546] [client 37.19.199.229:52144] [client 37.19.199.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aT6fADQTQH1raAj2lkjULQAAABI"]
[Sun Dec 14 19:26:58.569761 2025] [:error] [pid 40561:tid 40575] [client 37.19.199.229:52156] [client 37.19.199.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/images/media/index.php"] [unique_id "aT6fAoY6r869zoqRQkTCrgAAAUo"]
[Sun Dec 14 19:26:58.985936 2025] [:error] [pid 41600:tid 41612] [client 37.19.199.229:52170] [client 37.19.199.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aT6fAtFLTBZjcwNd_Vvx0QAAAQk"]
[Sun Dec 14 19:26:59.401076 2025] [:error] [pid 40596:tid 40650] [client 37.19.199.229:48300] [client 37.19.199.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aT6fA2vZZo4N2X7WoLyBlQAAAdg"]
[Sun Dec 14 19:26:59.816017 2025] [:error] [pid 39523:tid 39537] [client 37.19.199.229:48308] [client 37.19.199.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aT6fAzQTQH1raAj2lkjULwAAAAk"]
[Sun Dec 14 19:27:04.297487 2025] [:error] [pid 39525:tid 39587] [client 37.19.199.229:48316] [client 37.19.199.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aT6fCE1fX_pB_BrvE_48iAAAAIQ"]
[Sun Dec 14 19:27:05.915613 2025] [:error] [pid 39614:tid 39622] [client 37.19.199.229:48320] [client 37.19.199.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/certificates/index.php"] [unique_id "aT6fCfxybG8-9MflbDda-AAAAMY"]
[Sun Dec 14 19:27:08.916008 2025] [:error] [pid 39525:tid 39595] [client 37.19.199.229:48322] [client 37.19.199.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aT6fDE1fX_pB_BrvE_48kwAAAIw"]
[Sun Dec 14 19:27:12.115712 2025] [:error] [pid 13799:tid 13821] [client 37.19.199.229:55982] [client 37.19.199.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/css/about.php"] [unique_id "aT6fEHjPEin01ElFTNYrvQAAAhM"]
[Sun Dec 14 19:27:16.619284 2025] [:error] [pid 13799:tid 13824] [client 37.19.199.229:55994] [client 37.19.199.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aT6fFHjPEin01ElFTNYrzQAAAhY"]
[Sun Dec 14 19:27:22.095431 2025] [:error] [pid 41600:tid 41607] [client 37.19.199.229:3711] [client 37.19.199.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/blocks/about.php"] [unique_id "aT6fGtFLTBZjcwNd_Vvx-gAAAQQ"]
[Sun Dec 14 19:27:23.850468 2025] [:error] [pid 13799:tid 13815] [client 37.19.199.229:52418] [client 37.19.199.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/wp-class.php"] [unique_id "aT6fG3jPEin01ElFTNYr4AAAAg0"]
[Sun Dec 14 19:27:44.031771 2025] [:error] [pid 40596:tid 40639] [client 37.19.199.229:52428] [client 37.19.199.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aT6fMGvZZo4N2X7WoLyCPwAAAc0"]
[Sun Dec 14 19:27:44.445960 2025] [:error] [pid 40561:tid 40571] [client 37.19.199.229:57780] [client 37.19.199.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aT6fMIY6r869zoqRQkTDRAAAAUY"]
[Sun Dec 14 19:27:44.860436 2025] [:error] [pid 40596:tid 40637] [client 37.19.199.229:57782] [client 37.19.199.229] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.19.199.229, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aT6fMGvZZo4N2X7WoLyCQgAAAcs"]
[Sun Dec 14 19:27:47.282634 2025] [:error] [pid 40596:tid 40644] [client 37.19.199.229:57782] [client 37.19.199.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aT6fM2vZZo4N2X7WoLyCSAAAAdI"]
[Sun Dec 14 19:27:50.380865 2025] [:error] [pid 39523:tid 39550] [client 37.19.199.229:57798] [client 37.19.199.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aT6fNjQTQH1raAj2lkjUigAAABY"]
[Sun Dec 14 19:27:50.801719 2025] [:error] [pid 41600:tid 41619] [client 37.19.199.229:45014] [client 37.19.199.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aT6fNtFLTBZjcwNd_VvykwAAARA"]
[Sun Dec 14 19:27:56.490040 2025] [:error] [pid 40596:tid 40646] [client 37.19.199.229:45030] [client 37.19.199.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aT6fPGvZZo4N2X7WoLyCYAAAAdQ"]
[Sun Dec 14 19:27:56.907737 2025] [:error] [pid 13799:tid 13820] [client 37.19.199.229:45046] [client 37.19.199.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "paramountbaldivis.com"] [uri "/fm.php"] [unique_id "aT6fPHjPEin01ElFTNYsFAAAAhI"]
[Sun Dec 14 19:28:04.735852 2025] [:error] [pid 40561:tid 40566] [client 37.19.199.229:45048] [client 37.19.199.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aT6fRIY6r869zoqRQkTDWAAAAUE"]
[Sun Dec 14 19:28:07.952222 2025] [proxy_fcgi:error] [pid 40561:tid 40589] [client 37.19.199.229:51918] AH01071: Got error 'Primary script unknown'
[Sun Dec 14 19:28:10.280363 2025] [:error] [pid 40561:tid 40570] [client 37.19.199.229:51918] [client 37.19.199.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/function.php"] [unique_id "aT6fSoY6r869zoqRQkTDYQAAAUU"]
[Sun Dec 14 19:28:10.701248 2025] [:error] [pid 41600:tid 41610] [client 37.19.199.229:59792] [client 37.19.199.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/plugins.php"] [unique_id "aT6fStFLTBZjcwNd_VvytAAAAQc"]
[Sun Dec 14 19:28:13.742317 2025] [:error] [pid 39524:tid 39557] [client 37.19.199.229:59794] [client 37.19.199.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/css/chosen.php"] [unique_id "aT6fTWrVGpbDzFtDE9PUngAAAEE"]
[Sun Dec 14 19:28:14.165533 2025] [:error] [pid 13799:tid 13818] [client 37.19.199.229:59800] [client 37.19.199.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "aT6fTnjPEin01ElFTNYsKgAAAhA"]
[Sun Dec 14 19:28:23.905264 2025] [:error] [pid 39523:tid 39531] [client 37.19.199.229:59806] [client 37.19.199.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/atomlib.php"] [unique_id "aT6fVzQTQH1raAj2lkjUpQAAAAM"]
[Sun Dec 14 19:28:24.326880 2025] [:error] [pid 39525:tid 39587] [client 37.19.199.229:45800] [client 37.19.199.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aT6fWE1fX_pB_BrvE_49QAAAAIQ"]
[Sun Dec 14 19:28:30.032363 2025] [:error] [pid 39525:tid 39586] [client 37.19.199.229:45806] [client 37.19.199.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/index.php"] [unique_id "aT6fXk1fX_pB_BrvE_49bQAAAIM"]
[Sun Dec 14 19:28:30.491196 2025] [:error] [pid 41600:tid 41603] [client 37.19.199.229:40026] [client 37.19.199.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aT6fXtFLTBZjcwNd_Vvy1wAAAQA"]
[Sun Dec 14 19:28:30.910842 2025] [:error] [pid 40595:tid 40618] [client 37.19.199.229:40034] [client 37.19.199.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aT6fXvjrht6y4RN-xKQPOgAAAZM"]
[Sun Dec 14 19:28:39.590110 2025] [:error] [pid 40561:tid 40584] [client 37.19.199.229:40048] [client 37.19.199.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "aT6fZ4Y6r869zoqRQkTDkQAAAVM"]
[Sun Dec 14 19:28:41.203171 2025] [:error] [pid 39524:tid 39560] [client 37.19.199.229:47778] [client 37.19.199.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aT6faWrVGpbDzFtDE9PVDgAAAEQ"]
[Sun Dec 14 19:28:49.595628 2025] [:error] [pid 40595:tid 40608] [client 37.19.199.229:47782] [client 37.19.199.229] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.19.199.229, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/js/wp-login.php"] [unique_id "aT6fcfjrht6y4RN-xKQPZgAAAYk"]
[Sun Dec 14 19:28:57.526073 2025] [:error] [pid 40595:tid 40613] [client 37.19.199.229:47782] [client 37.19.199.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/bk/index.php"] [unique_id "aT6fefjrht6y4RN-xKQPeAAAAY4"]
[Sun Dec 14 19:28:57.954479 2025] [:error] [pid 41600:tid 41621] [client 37.19.199.229:54494] [client 37.19.199.229] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.19.199.229, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aT6fedFLTBZjcwNd_VvzSAAAARI"]
[Sun Dec 14 19:29:18.938160 2025] [autoindex:error] [pid 40561:tid 40589] [client 37.19.199.229:47954] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 19:29:19.151845 2025] [autoindex:error] [pid 40561:tid 40567] [client 37.19.199.229:47954] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 19:29:19.367106 2025] [autoindex:error] [pid 40561:tid 40580] [client 37.19.199.229:47954] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 19:29:19.583722 2025] [autoindex:error] [pid 40561:tid 40578] [client 37.19.199.229:47954] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 19:29:22.472264 2025] [autoindex:error] [pid 40561:tid 40570] [client 37.19.199.229:47954] AH01276: Cannot serve directory /home/baldivis/public_html/wp-content/uploads/2023/11/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 19:29:22.688344 2025] [autoindex:error] [pid 40561:tid 40569] [client 37.19.199.229:47954] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/sodium_compat/lib/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 19:29:22.903070 2025] [autoindex:error] [pid 40561:tid 40573] [client 37.19.199.229:47954] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/blocks/file/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 19:29:23.119795 2025] [autoindex:error] [pid 40561:tid 40588] [client 37.19.199.229:47954] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 19:29:24.876977 2025] [autoindex:error] [pid 40561:tid 40576] [client 37.19.199.229:47954] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 19:29:26.739487 2025] [autoindex:error] [pid 40561:tid 40585] [client 37.19.199.229:47954] AH01276: Cannot serve directory /home/baldivis/public_html/wp-admin/css/colors/sunrise/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 19:29:26.953662 2025] [autoindex:error] [pid 40561:tid 40579] [client 37.19.199.229:47954] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/theme-compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 19:29:29.864977 2025] [autoindex:error] [pid 40561:tid 40567] [client 37.19.199.229:47954] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/blocks/query/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 19:29:30.079600 2025] [autoindex:error] [pid 40561:tid 40580] [client 37.19.199.229:47954] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/js/tinymce/langs/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 19:29:30.294152 2025] [autoindex:error] [pid 40561:tid 40578] [client 37.19.199.229:47954] AH01276: Cannot serve directory /home/baldivis/public_html/wp-admin/css/colors/ectoplasm/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 19:29:30.508051 2025] [autoindex:error] [pid 40561:tid 40587] [client 37.19.199.229:47954] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/blocks/group/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 19:29:36.541271 2025] [autoindex:error] [pid 40561:tid 40582] [client 37.19.199.229:47954] AH01276: Cannot serve directory /home/baldivis/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 19:29:39.320686 2025] [autoindex:error] [pid 40561:tid 40571] [client 37.19.199.229:47954] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 19:29:39.532212 2025] [autoindex:error] [pid 40561:tid 40584] [client 37.19.199.229:47954] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 19:29:39.748696 2025] [autoindex:error] [pid 40561:tid 40572] [client 37.19.199.229:47954] AH01276: Cannot serve directory /home/baldivis/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 19:29:43.714733 2025] [autoindex:error] [pid 40561:tid 40568] [client 37.19.199.229:47954] AH01276: Cannot serve directory /home/baldivis/public_html/wp-content/uploads/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 19:29:48.090776 2025] [autoindex:error] [pid 40561:tid 40573] [client 37.19.199.229:47954] AH01276: Cannot serve directory /home/baldivis/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 19:29:49.709490 2025] [autoindex:error] [pid 40561:tid 40566] [client 37.19.199.229:47954] AH01276: Cannot serve directory /home/baldivis/public_html/wp-admin/css/colors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 19:29:49.924622 2025] [autoindex:error] [pid 40561:tid 40576] [client 37.19.199.229:47954] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 19:29:50.353694 2025] [proxy_fcgi:error] [pid 40561:tid 40572] [client 37.19.199.229:47954] AH01071: Got error 'PHP message: PHP Warning: Use of undefined constant ABSPATH - assumed 'ABSPATH' (this will throw an Error in a future version of PHP) in /home/baldivis/public_html/wp-includes/blocks/index.php on line 9PHP message: PHP Warning: Use of undefined constant WPINC - assumed 'WPINC' (this will throw an Error in a future version of PHP) in /home/baldivis/public_html/wp-includes/blocks/index.php on line 9PHP message: PHP Warning: require(ABSPATHWPINC/blocks/archives.php): failed to open stream: No such file or directory in /home/baldivis/public_html/wp-includes/blocks/index.php on line 9PHP message: PHP Warning: require(ABSPATHWPINC/blocks/archives.php): failed to open stream: No such file or directory in /home/baldivis/public_html/wp-includes/blocks/index.php on line 9PHP message: PHP Fatal error: require(): Failed opening required 'ABSPATHWPINC/blocks/archives.php' (include_path='.:') in /home/baldivis/public_html/wp-includes/blocks/index.php on line 9'
[Sun Dec 14 19:29:50.774008 2025] [autoindex:error] [pid 40595:tid 40611] [client 37.19.199.229:48760] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 19:29:50.989160 2025] [autoindex:error] [pid 40595:tid 40620] [client 37.19.199.229:48760] AH01276: Cannot serve directory /home/baldivis/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 19:29:51.200707 2025] [autoindex:error] [pid 40595:tid 40599] [client 37.19.199.229:48760] AH01276: Cannot serve directory /home/baldivis/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 19:30:00.983860 2025] [autoindex:error] [pid 39523:tid 39529] [client 185.149.195.103:40292] AH01276: Cannot serve directory /home/baldivis/public_html/wp-content/uploads/2021/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 19:30:02.550910 2025] [autoindex:error] [pid 39523:tid 39530] [client 185.149.195.103:40292] AH01276: Cannot serve directory /home/baldivis/public_html/wp-content/mu-plugins/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 19:30:36.104920 2025] [autoindex:error] [pid 39523:tid 39540] [client 185.149.195.103:40292] AH01276: Cannot serve directory /home/baldivis/public_html/wp-admin/css/colors/light/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 19:30:36.324789 2025] [autoindex:error] [pid 39523:tid 39547] [client 185.149.195.103:40292] AH01276: Cannot serve directory /home/baldivis/public_html/wp-admin/css/colors/midnight/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 19:30:36.541154 2025] [autoindex:error] [pid 39523:tid 39529] [client 185.149.195.103:40292] AH01276: Cannot serve directory /home/baldivis/public_html/wp-admin/css/colors/modern/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 19:30:36.758467 2025] [autoindex:error] [pid 39523:tid 39548] [client 185.149.195.103:40292] AH01276: Cannot serve directory /home/baldivis/public_html/wp-admin/css/colors/ocean/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 19:30:38.220354 2025] [autoindex:error] [pid 39523:tid 39541] [client 185.149.195.103:40292] AH01276: Cannot serve directory /home/baldivis/public_html/wp-content/uploads/2022/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 19:30:38.442057 2025] [autoindex:error] [pid 39523:tid 39531] [client 185.149.195.103:40292] AH01276: Cannot serve directory /home/baldivis/public_html/wp-content/uploads/2023/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 19:30:38.658227 2025] [autoindex:error] [pid 39523:tid 39544] [client 185.149.195.103:40292] AH01276: Cannot serve directory /home/baldivis/public_html/wp-content/uploads/2024/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 19:30:40.234672 2025] [autoindex:error] [pid 39523:tid 39551] [client 185.149.195.103:40292] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 19:30:43.105699 2025] [autoindex:error] [pid 39523:tid 39540] [client 185.149.195.103:40292] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/images/crystal/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 19:30:43.327492 2025] [autoindex:error] [pid 39523:tid 39547] [client 185.149.195.103:40292] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/images/media/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 19:30:43.545265 2025] [autoindex:error] [pid 39523:tid 39529] [client 185.149.195.103:40292] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/images/smilies/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 19:30:43.763766 2025] [autoindex:error] [pid 39523:tid 39548] [client 185.149.195.103:40292] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/images/wlw/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 19:30:43.979788 2025] [autoindex:error] [pid 39523:tid 39552] [client 185.149.195.103:40292] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/js/codemirror/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 19:30:44.201904 2025] [autoindex:error] [pid 39523:tid 39534] [client 185.149.195.103:40292] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/js/plupload/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 19:30:44.418419 2025] [autoindex:error] [pid 39523:tid 39542] [client 185.149.195.103:40292] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 19:30:44.632764 2025] [autoindex:error] [pid 39523:tid 39549] [client 185.149.195.103:40292] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/sitemaps/providers/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 19:31:15.332090 2025] [autoindex:error] [pid 39523:tid 39528] [client 185.149.195.103:40292] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/js/tinymce/plugins/fullscreen/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 19:31:29.493616 2025] [autoindex:error] [pid 39523:tid 39549] [client 185.149.195.103:40292] AH01276: Cannot serve directory /home/baldivis/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 19:31:34.858483 2025] [autoindex:error] [pid 39523:tid 39528] [client 185.149.195.103:40292] AH01276: Cannot serve directory /home/baldivis/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 19:31:35.078321 2025] [autoindex:error] [pid 39523:tid 39530] [client 185.149.195.103:40292] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 19:31:35.298289 2025] [autoindex:error] [pid 39523:tid 39547] [client 185.149.195.103:40292] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/SimplePie/XML/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 19:31:39.415470 2025] [autoindex:error] [pid 39523:tid 39531] [client 185.149.195.103:40292] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 19:31:39.632625 2025] [autoindex:error] [pid 39523:tid 39544] [client 185.149.195.103:40292] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 19:31:39.851889 2025] [autoindex:error] [pid 39523:tid 39549] [client 185.149.195.103:40292] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 19:31:40.069818 2025] [autoindex:error] [pid 39523:tid 39550] [client 185.149.195.103:40292] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/Text/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 19:31:40.287450 2025] [autoindex:error] [pid 39523:tid 39543] [client 185.149.195.103:40292] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/Text/Diff/Renderer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 19:31:40.504856 2025] [autoindex:error] [pid 39523:tid 39548] [client 185.149.195.103:40292] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/customize/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 19:31:40.721249 2025] [autoindex:error] [pid 39523:tid 39538] [client 185.149.195.103:40292] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 19:31:40.937766 2025] [autoindex:error] [pid 39523:tid 39533] [client 185.149.195.103:40292] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/pomo/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 19:31:41.375082 2025] [autoindex:error] [pid 40561:tid 40587] [client 185.149.195.103:53976] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 19:32:08.025826 2025] [autoindex:error] [pid 40561:tid 40581] [client 185.149.195.103:53976] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/js/jcrop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 19:32:10.948455 2025] [autoindex:error] [pid 40561:tid 40579] [client 185.149.195.103:53976] AH01276: Cannot serve directory /home/baldivis/public_html/wp-content/maintenance/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 19:32:24.733494 2025] [autoindex:error] [pid 40561:tid 40567] [client 185.149.195.103:53976] AH01276: Cannot serve directory /home/baldivis/public_html/.tmb/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 14 20:15:09.698072 2025] [:error] [pid 39524:tid 39579] [client 45.128.199.206:27055] [client 45.128.199.206] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.206, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aT6qTWrVGpbDzFtDE9PohQAAAFc"]
[Sun Dec 14 20:16:17.179831 2025] [:error] [pid 41600:tid 41611] [client 209.126.12.10:46554] [client 209.126.12.10] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.126.12.10, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aT6qkdFLTBZjcwNd_VsOOgAAAQg"]
[Sun Dec 14 21:22:39.288245 2025] [:error] [pid 40596:tid 40643] [client 45.128.199.206:42269] [client 45.128.199.206] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.206, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aT66H2vZZo4N2X7WoLylTAAAAdE"]
[Sun Dec 14 22:10:44.040472 2025] [:error] [pid 41600:tid 41603] [client 178.62.32.109:48908] [client 178.62.32.109] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 178.62.32.109, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aT7FZNFLTBZjcwNd_VtGwgAAAQA"]
[Mon Dec 15 00:08:00.908489 2025] [:error] [pid 39614:tid 39636] [client 82.223.55.140:33880] [client 82.223.55.140] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 82.223.55.140, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aT7g4PxybG8-9MflbDevmQAAANQ"]
[Mon Dec 15 00:31:12.686087 2025] [:error] [pid 8339:tid 8354] [client 45.128.199.252:31179] [client 45.128.199.252] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.252, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aT7mULlqE6mJc-Y6giMleQAAAAs"]
[Mon Dec 15 00:58:26.819405 2025] [:error] [pid 9009:tid 9015] [client 45.128.199.117:54209] [client 45.128.199.117] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.117, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aT7ssghxwdgwYWQ8h8WIEAAAAQQ"]
[Mon Dec 15 02:10:06.022961 2025] [:error] [pid 56645:tid 56654] [client 134.90.137.88:36854] [client 134.90.137.88] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 134.90.137.88, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aT79fq__GSueqKs4nBnN9QAAAUY"]
[Mon Dec 15 03:04:14.546131 2025] [:error] [pid 9009:tid 9032] [client 180.110.203.108:57954] [client 180.110.203.108] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.paramountbaldivis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.paramountbaldivis.com"] [uri "/"] [unique_id "aT8KLghxwdgwYWQ8h8WtYgAAARU"]
[Mon Dec 15 04:19:39.202717 2025] [:error] [pid 35104:tid 35110] [client 94.23.209.194:42826] [client 94.23.209.194] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.23.209.194, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aT8b26WpPfWnBdEuPp4gDgAAAMM"]
[Mon Dec 15 06:17:48.398611 2025] [:error] [pid 35021:tid 35095] [client 5.39.65.19:48734] [client 5.39.65.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.39.65.19, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aT83jC9sSwxVqtYnS1ufBAAAAJI"]
[Mon Dec 15 06:22:27.264463 2025] [:error] [pid 35021:tid 35083] [client 66.249.64.101:40767] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT84oy9sSwxVqtYnS1ug6AAAAIY"]
[Mon Dec 15 10:01:34.669973 2025] [:error] [pid 9882:tid 9904] [client 66.249.64.101:52739] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT9r_nNmFf4TNOnZQ04qXgAAARQ"]
[Mon Dec 15 10:01:45.188356 2025] [:error] [pid 35020:tid 35061] [client 66.249.64.101:49180] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT9sCSBMuWbtFfQIRIZeXAAAAEs"]
[Mon Dec 15 10:01:55.702640 2025] [:error] [pid 35020:tid 35058] [client 66.249.64.101:48405] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT9sEyBMuWbtFfQIRIZeZgAAAEg"]
[Mon Dec 15 10:02:10.396991 2025] [:error] [pid 35020:tid 35064] [client 66.249.64.101:54624] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT9sIiBMuWbtFfQIRIZeoQAAAE4"]
[Mon Dec 15 10:05:46.487999 2025] [:error] [pid 9882:tid 9898] [client 66.249.64.101:51230] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT9s-nNmFf4TNOnZQ04r3AAAAQ4"]
[Mon Dec 15 10:05:47.484133 2025] [:error] [pid 35019:tid 35026] [client 66.249.64.101:45198] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT9s-62LAdKSfjdLIKIS7gAAAAM"]
[Mon Dec 15 10:06:25.934218 2025] [:error] [pid 35019:tid 35032] [client 66.249.64.101:49115] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT9tIa2LAdKSfjdLIKITDQAAAAk"]
[Mon Dec 15 10:08:37.472453 2025] [:error] [pid 35104:tid 35117] [client 66.249.64.101:47392] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT9tpaWpPfWnBdEuPp6V-gAAAMo"]
[Mon Dec 15 10:08:59.864235 2025] [:error] [pid 35019:tid 35024] [client 66.249.64.101:65302] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT9tu62LAdKSfjdLIKIT4gAAAAE"]
[Mon Dec 15 10:12:42.128677 2025] [:error] [pid 63653:tid 63669] [client 66.249.64.101:44121] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT9umsvHkJ_6ffg4W-_9_wAAAU4"]
[Mon Dec 15 10:12:53.834494 2025] [:error] [pid 35019:tid 35037] [client 66.249.64.101:37015] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT9upa2LAdKSfjdLIKIWDgAAAA4"]
[Mon Dec 15 10:13:17.223970 2025] [:error] [pid 9882:tid 9893] [client 66.249.64.101:61533] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT9uvXNmFf4TNOnZQ04u-AAAAQk"]
[Mon Dec 15 10:13:28.925826 2025] [:error] [pid 35104:tid 35109] [client 66.249.64.101:44471] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT9uyKWpPfWnBdEuPp6X_QAAAMI"]
[Mon Dec 15 10:16:36.106465 2025] [:error] [pid 63653:tid 63658] [client 66.249.64.101:40909] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT9vhMvHkJ_6ffg4W-__iAAAAUM"]
[Mon Dec 15 10:16:47.798810 2025] [:error] [pid 35021:tid 35088] [client 66.249.64.101:35925] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT9vjy9sSwxVqtYnS1vtlQAAAIs"]
[Mon Dec 15 10:16:59.491830 2025] [:error] [pid 35019:tid 35027] [client 66.249.64.101:55203] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT9vm62LAdKSfjdLIKIXRgAAAAQ"]
[Mon Dec 15 10:17:39.214449 2025] [:error] [pid 35104:tid 35123] [client 146.190.155.17:42546] [client 146.190.155.17] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 146.190.155.17, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aT9vw6WpPfWnBdEuPp6ZRgAAANA"]
[Mon Dec 15 10:20:53.574837 2025] [:error] [pid 9882:tid 9895] [client 66.249.64.101:61876] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT9whXNmFf4TNOnZQ04xaQAAAQs"]
[Mon Dec 15 10:40:58.417378 2025] [:error] [pid 39914:tid 39926] [client 66.249.64.101:44113] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT91Ol247O4ulGRu1dMJBwAAAAk"]
[Mon Dec 15 10:41:21.822749 2025] [:error] [pid 39828:tid 39882] [client 66.249.64.101:35855] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT91Ue0Kj9XWFkRmVbTBaQAAANg"]
[Mon Dec 15 10:41:33.517790 2025] [:error] [pid 39826:tid 39851] [client 66.249.64.101:38619] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT91XYdXWIOU_2oL0XYe-wAAAJQ"]
[Mon Dec 15 10:41:45.211941 2025] [:error] [pid 39914:tid 39929] [client 66.249.64.101:49635] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT91aV247O4ulGRu1dMJRAAAAAw"]
[Mon Dec 15 10:44:15.487805 2025] [:error] [pid 39914:tid 39939] [client 66.249.64.101:58977] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT91_1247O4ulGRu1dMLgAAAABY"]
[Mon Dec 15 10:44:26.003775 2025] [:error] [pid 39829:tid 39891] [client 66.249.64.101:41645] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT92CmegGfxg5ldkNeg9OQAAAYY"]
[Mon Dec 15 10:44:36.516244 2025] [:error] [pid 39914:tid 39934] [client 66.249.64.101:54910] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT92FF247O4ulGRu1dMLmQAAABE"]
[Mon Dec 15 10:44:42.371761 2025] [:error] [pid 39828:tid 39862] [client 66.249.64.101:43278] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT92Gu0Kj9XWFkRmVbTDCgAAAMQ"]
[Mon Dec 15 10:47:49.973990 2025] [:error] [pid 39914:tid 39941] [client 66.249.64.101:38643] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT921V247O4ulGRu1dMM6gAAABg"]
[Mon Dec 15 10:48:00.499011 2025] [:error] [pid 39828:tid 39859] [client 66.249.64.101:46437] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT924O0Kj9XWFkRmVbTEEwAAAME"]
[Mon Dec 15 10:48:11.017060 2025] [:error] [pid 39828:tid 39864] [client 66.249.64.101:52876] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT926-0Kj9XWFkRmVbTEKwAAAMY"]
[Mon Dec 15 10:48:11.147337 2025] [:error] [pid 39829:tid 39891] [client 66.249.64.101:49596] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT9262egGfxg5ldkNeg-VAAAAYY"]
[Mon Dec 15 10:48:12.006084 2025] [:error] [pid 39828:tid 39860] [client 66.249.64.101:46577] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT927O0Kj9XWFkRmVbTELwAAAMI"]
[Mon Dec 15 10:48:32.047819 2025] [:error] [pid 39828:tid 39860] [client 66.249.64.101:61840] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT93AO0Kj9XWFkRmVbTEOQAAAMI"]
[Mon Dec 15 10:50:48.771513 2025] [:error] [pid 39826:tid 39843] [client 66.249.64.101:51926] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT93iIdXWIOU_2oL0XYhyQAAAIw"]
[Mon Dec 15 10:50:55.051085 2025] [:error] [pid 39828:tid 39858] [client 66.249.64.101:42893] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT93j-0Kj9XWFkRmVbTE1AAAAMA"]
[Mon Dec 15 10:51:25.144712 2025] [:error] [pid 39914:tid 39929] [client 66.249.64.101:36309] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT93rV247O4ulGRu1dMPTAAAAAw"]
[Mon Dec 15 10:51:35.639855 2025] [:error] [pid 39826:tid 39838] [client 66.249.64.101:59177] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT93t4dXWIOU_2oL0XYh-wAAAIc"]
[Mon Dec 15 10:53:52.394202 2025] [:error] [pid 39914:tid 39936] [client 66.249.64.101:40934] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT94QF247O4ulGRu1dMQ-gAAABM"]
[Mon Dec 15 10:54:25.618635 2025] [:error] [pid 39828:tid 39864] [client 66.249.64.101:57446] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT94Ye0Kj9XWFkRmVbTG1gAAAMY"]
[Mon Dec 15 10:54:37.331826 2025] [:error] [pid 39829:tid 39895] [client 66.249.64.101:36314] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT94bWegGfxg5ldkNehBzgAAAYo"]
[Mon Dec 15 11:02:04.224225 2025] [:error] [pid 44555:tid 44561] [client 66.249.64.101:50391] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT96LGDHW0g-e9AKPr6hwAAAAEQ"]
[Mon Dec 15 11:02:25.904944 2025] [:error] [pid 44555:tid 44579] [client 66.249.64.101:61166] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT96QWDHW0g-e9AKPr6iMAAAAFY"]
[Mon Dec 15 11:02:36.976670 2025] [:error] [pid 39914:tid 39940] [client 66.249.64.101:50022] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT96TF247O4ulGRu1dMU5AAAABc"]
[Mon Dec 15 11:02:48.674828 2025] [:error] [pid 39828:tid 39860] [client 66.249.64.101:49316] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT96WO0Kj9XWFkRmVbTLzwAAAMI"]
[Mon Dec 15 11:03:00.368020 2025] [:error] [pid 39826:tid 39832] [client 66.249.64.101:53118] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT96ZIdXWIOU_2oL0XYm5wAAAIE"]
[Mon Dec 15 11:05:11.430635 2025] [:error] [pid 39826:tid 39844] [client 66.249.64.101:43602] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT9654dXWIOU_2oL0XYn0QAAAI0"]
[Mon Dec 15 11:05:22.220050 2025] [:error] [pid 39826:tid 39833] [client 66.249.64.101:38295] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT968odXWIOU_2oL0XYoEgAAAII"]
[Mon Dec 15 11:05:30.162109 2025] [:error] [pid 39914:tid 39922] [client 66.249.64.101:37621] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT96-l247O4ulGRu1dMWagAAAAU"]
[Mon Dec 15 11:05:38.131201 2025] [:error] [pid 39914:tid 39937] [client 66.249.64.101:35591] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT97Al247O4ulGRu1dMWcQAAABQ"]
[Mon Dec 15 11:05:46.087901 2025] [:error] [pid 39914:tid 39940] [client 66.249.64.101:38975] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT97Cl247O4ulGRu1dMWfQAAABc"]
[Mon Dec 15 11:05:54.052910 2025] [:error] [pid 39914:tid 39932] [client 66.249.64.101:57409] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT97El247O4ulGRu1dMWhgAAAA8"]
[Mon Dec 15 11:07:50.353065 2025] [:error] [pid 39829:tid 39898] [client 66.249.64.101:59913] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT97hmegGfxg5ldkNehI0wAAAY0"]
[Mon Dec 15 11:07:58.309108 2025] [:error] [pid 39829:tid 39909] [client 66.249.64.101:47502] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT97jmegGfxg5ldkNehI4AAAAZg"]
[Mon Dec 15 11:08:26.683675 2025] [:error] [pid 39828:tid 39874] [client 66.249.64.101:41293] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT97qu0Kj9XWFkRmVbTNrQAAANA"]
[Mon Dec 15 11:08:30.668903 2025] [:error] [pid 39829:tid 39891] [client 66.249.64.101:48984] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT97rmegGfxg5ldkNehJNAAAAYY"]
[Mon Dec 15 11:08:38.644271 2025] [:error] [pid 44555:tid 44558] [client 66.249.64.101:59270] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT97tmDHW0g-e9AKPr6lQQAAAEE"]
[Mon Dec 15 11:10:26.228633 2025] [:error] [pid 39826:tid 39846] [client 66.249.64.101:53057] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT98IodXWIOU_2oL0XYpGQAAAI8"]
[Mon Dec 15 11:10:32.774682 2025] [:error] [pid 39828:tid 39872] [client 66.249.64.101:43276] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT98KO0Kj9XWFkRmVbTOXAAAAM4"]
[Mon Dec 15 11:10:40.635026 2025] [:error] [pid 39829:tid 39890] [client 66.249.64.101:41524] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT98MGegGfxg5ldkNehJngAAAYU"]
[Mon Dec 15 11:10:53.075747 2025] [:error] [pid 44555:tid 44567] [client 66.249.64.101:43382] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT98PWDHW0g-e9AKPr6lxgAAAEo"]
[Mon Dec 15 11:11:05.013920 2025] [:error] [pid 39914:tid 39937] [client 66.249.64.101:62066] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT98SV247O4ulGRu1dMYNAAAABQ"]
[Mon Dec 15 11:11:12.488500 2025] [:error] [pid 39826:tid 39852] [client 66.249.64.101:64617] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT98UIdXWIOU_2oL0XYpzAAAAJU"]
[Mon Dec 15 11:12:32.093257 2025] [:error] [pid 44555:tid 44559] [client 66.249.64.101:46682] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT98oGDHW0g-e9AKPr6mOgAAAEI"]
[Mon Dec 15 11:12:40.054188 2025] [:error] [pid 39826:tid 39848] [client 66.249.64.101:50592] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT98qIdXWIOU_2oL0XYqOgAAAJE"]
[Mon Dec 15 11:12:48.018693 2025] [:error] [pid 39828:tid 39867] [client 66.249.64.101:58862] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT98sO0Kj9XWFkRmVbTPAQAAAMk"]
[Mon Dec 15 11:12:55.973193 2025] [:error] [pid 44555:tid 44571] [client 66.249.64.101:59180] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT98t2DHW0g-e9AKPr6mTwAAAE4"]
[Mon Dec 15 11:13:11.963006 2025] [:error] [pid 39914:tid 39939] [client 66.249.64.101:52148] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT98x1247O4ulGRu1dMYvQAAABY"]
[Mon Dec 15 11:13:19.854903 2025] [:error] [pid 39914:tid 39919] [client 66.249.64.101:57442] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT98z1247O4ulGRu1dMYwgAAAAI"]
[Mon Dec 15 11:14:55.381030 2025] [:error] [pid 39828:tid 39882] [client 66.249.64.101:36783] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT99L-0Kj9XWFkRmVbTP6gAAANg"]
[Mon Dec 15 11:15:03.341143 2025] [:error] [pid 39914:tid 39930] [client 66.249.64.101:49463] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT99N1247O4ulGRu1dMZpQAAAA0"]
[Mon Dec 15 11:15:16.366172 2025] [:error] [pid 44555:tid 44580] [client 66.249.64.101:36021] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT99RGDHW0g-e9AKPr6oKwAAAFc"]
[Mon Dec 15 11:15:20.243164 2025] [:error] [pid 44555:tid 44579] [client 66.249.64.101:51523] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT99SGDHW0g-e9AKPr6oLwAAAFY"]
[Mon Dec 15 11:15:27.278670 2025] [:error] [pid 39914:tid 39933] [client 66.249.64.101:61598] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT99T1247O4ulGRu1dMZwAAAABA"]
[Mon Dec 15 11:15:35.186923 2025] [:error] [pid 44555:tid 44571] [client 66.249.64.101:52755] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT99V2DHW0g-e9AKPr6oOwAAAE4"]
[Mon Dec 15 11:15:43.140714 2025] [:error] [pid 39914:tid 39930] [client 66.249.64.101:57350] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT99X1247O4ulGRu1dMZ1QAAAA0"]
[Mon Dec 15 11:17:10.705034 2025] [:error] [pid 39828:tid 39878] [client 66.249.64.101:46469] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT99tu0Kj9XWFkRmVbTQUwAAANQ"]
[Mon Dec 15 11:17:18.671297 2025] [:error] [pid 39829:tid 39887] [client 66.249.64.101:38562] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT99vmegGfxg5ldkNehL1wAAAYI"]
[Mon Dec 15 11:17:29.326107 2025] [:error] [pid 39829:tid 39892] [client 66.249.64.101:46279] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT99yWegGfxg5ldkNehL2QAAAYc"]
[Mon Dec 15 11:17:37.278306 2025] [:error] [pid 39829:tid 39905] [client 66.249.64.101:52379] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT990WegGfxg5ldkNehL3QAAAZQ"]
[Mon Dec 15 11:17:45.231278 2025] [:error] [pid 44555:tid 44566] [client 66.249.64.101:62563] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT992WDHW0g-e9AKPr6pVgAAAEk"]
[Mon Dec 15 11:17:53.193975 2025] [:error] [pid 44555:tid 44581] [client 66.249.64.101:53313] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT994WDHW0g-e9AKPr6pWgAAAFg"]
[Mon Dec 15 11:19:50.036558 2025] [:error] [pid 39829:tid 39907] [client 66.249.64.101:50913] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT9-VmegGfxg5ldkNehMOgAAAZY"]
[Mon Dec 15 11:19:57.428668 2025] [:error] [pid 44555:tid 44580] [client 66.249.64.101:58673] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT9-XWDHW0g-e9AKPr6qQwAAAFc"]
[Mon Dec 15 11:19:57.915855 2025] [:error] [pid 39826:tid 39844] [client 66.249.64.101:65171] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT9-XYdXWIOU_2oL0XYrvgAAAI0"]
[Mon Dec 15 11:20:13.816600 2025] [:error] [pid 39829:tid 39898] [client 66.249.64.101:55860] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT9-bWegGfxg5ldkNehMVgAAAY0"]
[Mon Dec 15 11:20:21.790363 2025] [:error] [pid 39826:tid 39841] [client 66.249.64.101:54235] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT9-dYdXWIOU_2oL0XYryQAAAIo"]
[Mon Dec 15 11:20:35.281605 2025] [:error] [pid 39828:tid 39871] [client 66.249.64.101:51176] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT9-g-0Kj9XWFkRmVbTQ0gAAAM0"]
[Mon Dec 15 11:20:39.184627 2025] [:error] [pid 39829:tid 39894] [client 66.249.64.101:63590] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT9-h2egGfxg5ldkNehMXwAAAYk"]
[Mon Dec 15 11:20:39.301721 2025] [:error] [pid 39829:tid 39907] [client 66.249.64.101:64811] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT9-h2egGfxg5ldkNehMYQAAAZY"]
[Mon Dec 15 11:22:37.104072 2025] [:error] [pid 39914:tid 39938] [client 66.249.64.101:45102] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT9-_V247O4ulGRu1dMc0gAAABU"]
[Mon Dec 15 11:22:45.067734 2025] [:error] [pid 39829:tid 39899] [client 66.249.64.101:63030] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT9_BWegGfxg5ldkNehNCQAAAY4"]
[Mon Dec 15 11:22:53.035319 2025] [:error] [pid 44555:tid 44565] [client 66.249.64.101:49941] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT9_DWDHW0g-e9AKPr6rdAAAAEg"]
[Mon Dec 15 11:23:08.944431 2025] [:error] [pid 44555:tid 44558] [client 66.249.64.101:40402] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT9_HGDHW0g-e9AKPr6r1gAAAEE"]
[Mon Dec 15 11:23:16.906941 2025] [:error] [pid 39826:tid 39855] [client 66.249.64.101:63204] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT9_JIdXWIOU_2oL0XYsnwAAAJg"]
[Mon Dec 15 11:23:24.874088 2025] [:error] [pid 44555:tid 44580] [client 66.249.64.101:59886] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT9_LGDHW0g-e9AKPr6r8QAAAFc"]
[Mon Dec 15 11:25:26.332532 2025] [:error] [pid 39828:tid 39864] [client 66.249.64.101:44363] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT9_pu0Kj9XWFkRmVbTS_wAAAMY"]
[Mon Dec 15 11:25:32.249847 2025] [:error] [pid 44555:tid 44576] [client 66.249.64.101:58121] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT9_rGDHW0g-e9AKPr6tZwAAAFM"]
[Mon Dec 15 11:25:40.219202 2025] [:error] [pid 39826:tid 39837] [client 66.249.64.101:63813] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT9_tIdXWIOU_2oL0XYuCAAAAIY"]
[Mon Dec 15 11:25:53.066722 2025] [:error] [pid 44555:tid 44560] [client 66.249.64.101:56803] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT9_wWDHW0g-e9AKPr6tlgAAAEM"]
[Mon Dec 15 11:25:57.055250 2025] [:error] [pid 44555:tid 44559] [client 66.249.64.101:61547] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT9_xWDHW0g-e9AKPr6tmgAAAEI"]
[Mon Dec 15 11:26:20.015297 2025] [:error] [pid 39829:tid 39897] [client 66.249.64.101:62000] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT9_3GegGfxg5ldkNehO-wAAAYw"]
[Mon Dec 15 11:36:58.411405 2025] [:error] [pid 44555:tid 44559] [client 66.249.64.101:53404] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-CWmDHW0g-e9AKPr6ylQAAAEI"]
[Mon Dec 15 11:37:04.877359 2025] [:error] [pid 39828:tid 39860] [client 66.249.64.101:62484] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-CYO0Kj9XWFkRmVbTYSgAAAMI"]
[Mon Dec 15 11:37:13.027334 2025] [:error] [pid 44555:tid 44572] [client 66.249.64.101:36479] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-CaWDHW0g-e9AKPr6yoAAAAE8"]
[Mon Dec 15 11:37:20.712115 2025] [:error] [pid 44555:tid 44560] [client 66.249.64.101:46522] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-CcGDHW0g-e9AKPr6y4gAAAEM"]
[Mon Dec 15 11:37:28.673685 2025] [:error] [pid 39914:tid 39923] [client 66.249.64.101:42190] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-CeF247O4ulGRu1dMjUwAAAAY"]
[Mon Dec 15 11:37:43.512763 2025] [:error] [pid 39914:tid 39941] [client 66.249.64.101:64443] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-Ch1247O4ulGRu1dMjWQAAABg"]
[Mon Dec 15 11:37:47.566228 2025] [:error] [pid 44555:tid 44576] [client 66.249.64.101:44656] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-Ci2DHW0g-e9AKPr6zKAAAAFM"]
[Mon Dec 15 11:39:36.037705 2025] [:error] [pid 39829:tid 39906] [client 66.249.64.101:59096] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-C-GegGfxg5ldkNehUfwAAAZU"]
[Mon Dec 15 11:39:44.006751 2025] [:error] [pid 44555:tid 44562] [client 66.249.64.101:57256] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-DAGDHW0g-e9AKPr60HwAAAEU"]
[Mon Dec 15 11:39:51.960504 2025] [:error] [pid 39826:tid 39836] [client 66.249.64.101:52878] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-DB4dXWIOU_2oL0XYytAAAAIU"]
[Mon Dec 15 11:39:59.927283 2025] [:error] [pid 39826:tid 39834] [client 66.249.64.101:45417] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-DD4dXWIOU_2oL0XYyuQAAAIM"]
[Mon Dec 15 11:40:07.877811 2025] [:error] [pid 39826:tid 39831] [client 66.249.64.101:53652] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-DF4dXWIOU_2oL0XYywwAAAIA"]
[Mon Dec 15 11:40:15.830367 2025] [:error] [pid 44555:tid 44560] [client 66.249.64.101:62386] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-DH2DHW0g-e9AKPr60WQAAAEM"]
[Mon Dec 15 11:40:23.798566 2025] [:error] [pid 39829:tid 39885] [client 66.249.64.101:40205] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-DJ2egGfxg5ldkNehUxQAAAYA"]
[Mon Dec 15 11:43:18.942361 2025] [:error] [pid 44555:tid 44576] [client 66.249.64.101:54921] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-D1mDHW0g-e9AKPr615wAAAFM"]
[Mon Dec 15 11:43:26.900663 2025] [:error] [pid 39829:tid 39891] [client 66.249.64.101:54039] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-D3megGfxg5ldkNehVkgAAAYY"]
[Mon Dec 15 11:43:34.864957 2025] [:error] [pid 39914:tid 39940] [client 66.249.64.101:44831] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-D5l247O4ulGRu1dMlmQAAABc"]
[Mon Dec 15 11:43:43.474005 2025] [:error] [pid 39828:tid 39861] [client 66.249.64.101:43694] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-D7-0Kj9XWFkRmVbTavAAAAMM"]
[Mon Dec 15 11:43:50.803868 2025] [:error] [pid 39826:tid 39845] [client 66.249.64.101:53955] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-D9odXWIOU_2oL0XY0PAAAAI4"]
[Mon Dec 15 11:43:58.750079 2025] [:error] [pid 39826:tid 39847] [client 66.249.64.101:47291] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-D_odXWIOU_2oL0XY0TwAAAJA"]
[Mon Dec 15 11:44:06.711662 2025] [:error] [pid 39826:tid 39831] [client 66.249.64.101:45619] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-EBodXWIOU_2oL0XY0VQAAAIA"]
[Mon Dec 15 11:46:26.496935 2025] [:error] [pid 44555:tid 44559] [client 66.249.64.101:51119] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-EkmDHW0g-e9AKPr63NgAAAEI"]
[Mon Dec 15 11:46:31.183691 2025] [:error] [pid 39828:tid 39871] [client 66.249.64.101:44351] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-El-0Kj9XWFkRmVbTbhQAAAM0"]
[Mon Dec 15 11:46:35.172686 2025] [:error] [pid 44555:tid 44568] [client 66.249.64.101:61934] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-Em2DHW0g-e9AKPr63PAAAAEs"]
[Mon Dec 15 11:46:39.147165 2025] [:error] [pid 39826:tid 39849] [client 66.249.64.101:61527] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-En4dXWIOU_2oL0XY06wAAAJI"]
[Mon Dec 15 11:46:45.932655 2025] [:error] [pid 39914:tid 39932] [client 66.249.64.101:35110] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-EpV247O4ulGRu1dMmLQAAAA8"]
[Mon Dec 15 11:46:54.151151 2025] [:error] [pid 39826:tid 39850] [client 66.249.64.101:48637] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-ErodXWIOU_2oL0XY09AAAAJM"]
[Mon Dec 15 11:47:02.086561 2025] [:error] [pid 39826:tid 39848] [client 66.249.64.101:46547] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-EtodXWIOU_2oL0XY0-gAAAJE"]
[Mon Dec 15 11:47:17.702372 2025] [:error] [pid 39828:tid 39867] [client 66.249.64.101:40349] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-Exe0Kj9XWFkRmVbTbuAAAAMk"]
[Mon Dec 15 11:48:53.290595 2025] [:error] [pid 39826:tid 39855] [client 66.249.64.101:42402] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-FJYdXWIOU_2oL0XY1RgAAAJg"]
[Mon Dec 15 11:49:17.185002 2025] [:error] [pid 39828:tid 39860] [client 66.249.64.101:42038] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-FPe0Kj9XWFkRmVbTcTQAAAMI"]
[Mon Dec 15 11:49:25.146382 2025] [:error] [pid 39828:tid 39876] [client 66.249.64.101:53788] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-FRe0Kj9XWFkRmVbTcUAAAANI"]
[Mon Dec 15 11:49:32.113351 2025] [:error] [pid 39826:tid 39837] [client 66.249.64.101:44325] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-FTIdXWIOU_2oL0XY1UwAAAIY"]
[Mon Dec 15 11:49:33.096831 2025] [:error] [pid 39828:tid 39861] [client 66.249.64.101:54143] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-FTe0Kj9XWFkRmVbTcVwAAAMM"]
[Mon Dec 15 11:49:41.056221 2025] [:error] [pid 39829:tid 39889] [client 66.249.64.101:36883] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-FVWegGfxg5ldkNehXPAAAAYQ"]
[Mon Dec 15 11:51:32.503615 2025] [:error] [pid 39828:tid 39860] [client 66.249.64.101:60737] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-FxO0Kj9XWFkRmVbTc-QAAAMI"]
[Mon Dec 15 11:51:40.470895 2025] [:error] [pid 39826:tid 39832] [client 66.249.64.101:46118] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-FzIdXWIOU_2oL0XY1_wAAAIE"]
[Mon Dec 15 11:51:48.122050 2025] [:error] [pid 39914:tid 39928] [client 66.249.64.101:59003] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-F1F247O4ulGRu1dMo3wAAAAs"]
[Mon Dec 15 11:51:48.427840 2025] [:error] [pid 39826:tid 39851] [client 66.249.64.101:65353] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-F1IdXWIOU_2oL0XY2QgAAAJQ"]
[Mon Dec 15 11:51:56.388914 2025] [:error] [pid 39914:tid 39941] [client 66.249.64.101:62939] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-F3F247O4ulGRu1dMo5QAAABg"]
[Mon Dec 15 11:52:12.307938 2025] [:error] [pid 39826:tid 39838] [client 66.249.64.101:34810] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-F7IdXWIOU_2oL0XY2iAAAAIc"]
[Mon Dec 15 11:52:20.270054 2025] [:error] [pid 39826:tid 39836] [client 66.249.64.101:59270] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-F9IdXWIOU_2oL0XY2mQAAAIU"]
[Mon Dec 15 11:53:55.719283 2025] [:error] [pid 39914:tid 39931] [client 66.249.64.101:62199] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-GU1247O4ulGRu1dMq4gAAAA4"]
[Mon Dec 15 11:54:03.751159 2025] [:error] [pid 44555:tid 44578] [client 66.249.64.101:63149] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-GW2DHW0g-e9AKPr67dwAAAFU"]
[Mon Dec 15 11:54:19.661889 2025] [:error] [pid 39828:tid 39870] [client 66.249.64.101:52418] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-Ga-0Kj9XWFkRmVbTeSAAAAMw"]
[Mon Dec 15 11:54:27.656966 2025] [:error] [pid 39828:tid 39872] [client 66.249.64.101:37565] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-Gc-0Kj9XWFkRmVbTeTAAAAM4"]
[Mon Dec 15 11:54:35.583150 2025] [:error] [pid 39828:tid 39877] [client 66.249.64.101:58382] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-Ge-0Kj9XWFkRmVbTeVAAAANM"]
[Mon Dec 15 12:01:53.399462 2025] [:error] [pid 39829:tid 39906] [client 66.249.64.101:58240] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-IMWegGfxg5ldkNehdWwAAAZU"]
[Mon Dec 15 12:02:01.371534 2025] [:error] [pid 39828:tid 39859] [client 66.249.64.101:50421] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-IOe0Kj9XWFkRmVbTgrwAAAME"]
[Mon Dec 15 12:02:17.916261 2025] [:error] [pid 39914:tid 39936] [client 66.249.64.101:50739] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-ISV247O4ulGRu1dMvMQAAABM"]
[Mon Dec 15 12:02:25.233983 2025] [:error] [pid 39826:tid 39845] [client 66.249.64.101:38486] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-IUYdXWIOU_2oL0XY7IQAAAI4"]
[Mon Dec 15 12:02:33.197051 2025] [:error] [pid 39914:tid 39922] [client 66.249.64.101:42761] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-IWV247O4ulGRu1dMvRgAAAAU"]
[Mon Dec 15 12:04:16.692075 2025] [:error] [pid 39914:tid 39923] [client 66.249.64.101:36416] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-IwF247O4ulGRu1dMwQwAAAAY"]
[Mon Dec 15 12:04:24.660987 2025] [:error] [pid 39829:tid 39902] [client 66.249.64.101:56492] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-IyGegGfxg5ldkNehfAAAAAZE"]
[Mon Dec 15 12:04:32.628896 2025] [:error] [pid 44555:tid 44578] [client 66.249.64.101:40409] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-I0GDHW0g-e9AKPr7DbQAAAFU"]
[Mon Dec 15 12:04:40.574202 2025] [:error] [pid 39914:tid 39923] [client 66.249.64.101:50409] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-I2F247O4ulGRu1dMwTwAAAAY"]
[Mon Dec 15 12:04:48.629215 2025] [:error] [pid 39826:tid 39837] [client 66.249.64.101:58832] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-I4IdXWIOU_2oL0XY7_QAAAIY"]
[Mon Dec 15 12:04:56.589016 2025] [:error] [pid 39828:tid 39865] [client 66.249.64.101:58611] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-I6O0Kj9XWFkRmVbTiLgAAAMc"]
[Mon Dec 15 12:06:31.344945 2025] [:error] [pid 39826:tid 39851] [client 66.249.64.101:62495] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-JR4dXWIOU_2oL0XY8fwAAAJQ"]
[Mon Dec 15 12:06:40.079946 2025] [:error] [pid 39829:tid 39896] [client 66.249.64.101:60734] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-JUGegGfxg5ldkNehf5QAAAYs"]
[Mon Dec 15 12:06:47.957808 2025] [:error] [pid 39826:tid 39836] [client 66.249.64.101:55592] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-JV4dXWIOU_2oL0XY8iQAAAIU"]
[Mon Dec 15 12:06:55.989389 2025] [:error] [pid 44555:tid 44559] [client 66.249.64.101:45298] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-JX2DHW0g-e9AKPr7ETgAAAEI"]
[Mon Dec 15 12:07:19.890017 2025] [:error] [pid 39829:tid 39898] [client 66.249.64.101:49927] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-Jd2egGfxg5ldkNehgJwAAAY0"]
[Mon Dec 15 12:08:47.995161 2025] [:error] [pid 44555:tid 44565] [client 66.249.64.101:61003] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-Jz2DHW0g-e9AKPr7FWAAAAEg"]
[Mon Dec 15 12:08:51.973052 2025] [:error] [pid 44555:tid 44576] [client 66.249.64.101:64868] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-J02DHW0g-e9AKPr7FYAAAAFM"]
[Mon Dec 15 12:08:55.954067 2025] [:error] [pid 44555:tid 44557] [client 66.249.64.101:55141] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-J12DHW0g-e9AKPr7FbAAAAEA"]
[Mon Dec 15 12:09:11.328710 2025] [:error] [pid 39828:tid 39872] [client 66.249.64.101:50823] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-J5-0Kj9XWFkRmVbTjJgAAAM4"]
[Mon Dec 15 12:09:19.284708 2025] [:error] [pid 39914:tid 39939] [client 66.249.64.101:40728] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-J71247O4ulGRu1dMxvAAAABY"]
[Mon Dec 15 12:09:27.239915 2025] [:error] [pid 39829:tid 39890] [client 66.249.64.101:64597] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-J92egGfxg5ldkNehgswAAAYU"]
[Mon Dec 15 12:10:56.373713 2025] [:error] [pid 44555:tid 44562] [client 66.249.64.101:62056] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-KUGDHW0g-e9AKPr7GkwAAAEU"]
[Mon Dec 15 12:11:18.699123 2025] [:error] [pid 44555:tid 44569] [client 66.249.64.101:51029] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-KZmDHW0g-e9AKPr7GygAAAEw"]
[Mon Dec 15 12:11:26.652776 2025] [:error] [pid 39826:tid 39851] [client 66.249.64.101:50593] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-KbodXWIOU_2oL0XY9tQAAAJQ"]
[Mon Dec 15 12:11:34.613961 2025] [:error] [pid 39828:tid 39877] [client 66.249.64.101:46271] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-Kdu0Kj9XWFkRmVbTjiQAAANM"]
[Mon Dec 15 12:11:42.573464 2025] [:error] [pid 39829:tid 39908] [client 66.249.64.101:56595] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-KfmegGfxg5ldkNehhXAAAAZc"]
[Mon Dec 15 12:11:50.534319 2025] [:error] [pid 39914:tid 39931] [client 66.249.64.101:53781] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-Khl247O4ulGRu1dMzCAAAAA4"]
[Mon Dec 15 12:13:47.936222 2025] [:error] [pid 39828:tid 39873] [client 66.249.64.101:52447] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-K--0Kj9XWFkRmVbTj6gAAAM8"]
[Mon Dec 15 12:13:52.690417 2025] [:error] [pid 39828:tid 39877] [client 66.249.64.101:45334] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-LAO0Kj9XWFkRmVbTj7QAAANM"]
[Mon Dec 15 12:13:57.908677 2025] [:error] [pid 44555:tid 44572] [client 66.249.64.101:45123] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-LBWDHW0g-e9AKPr7HdQAAAE8"]
[Mon Dec 15 12:14:05.866139 2025] [:error] [pid 39829:tid 39895] [client 66.249.64.101:49454] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-LDWegGfxg5ldkNehhwAAAAYo"]
[Mon Dec 15 12:14:09.556168 2025] [:error] [pid 39826:tid 39831] [client 66.249.64.101:52335] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-LEYdXWIOU_2oL0XY-RAAAAIA"]
[Mon Dec 15 12:14:20.799303 2025] [:error] [pid 44555:tid 44574] [client 66.249.64.101:38362] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-LHGDHW0g-e9AKPr7HjQAAAFE"]
[Mon Dec 15 12:14:23.481397 2025] [:error] [pid 44555:tid 44571] [client 66.249.64.101:51176] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-LH2DHW0g-e9AKPr7HkgAAAE4"]
[Mon Dec 15 12:14:31.752631 2025] [:error] [pid 44555:tid 44571] [client 66.249.64.101:53789] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-LJ2DHW0g-e9AKPr7HoQAAAE4"]
[Mon Dec 15 12:14:42.698641 2025] [:error] [pid 44555:tid 44564] [client 66.249.64.101:43379] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-LMmDHW0g-e9AKPr7HqAAAAEc"]
[Mon Dec 15 12:17:07.247833 2025] [:error] [pid 39826:tid 39831] [client 66.249.64.101:53830] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-Lw4dXWIOU_2oL0XY_GAAAAIA"]
[Mon Dec 15 12:17:25.955863 2025] [:error] [pid 39914:tid 39938] [client 66.249.64.101:36665] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-L1V247O4ulGRu1dM04AAAABU"]
[Mon Dec 15 12:17:29.934566 2025] [:error] [pid 44555:tid 44557] [client 66.249.64.101:49301] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-L2WDHW0g-e9AKPr7I3wAAAEA"]
[Mon Dec 15 12:17:40.882474 2025] [:error] [pid 39829:tid 39886] [client 66.249.64.101:59021] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-L5GegGfxg5ldkNehirQAAAYE"]
[Mon Dec 15 12:17:44.860697 2025] [:error] [pid 39828:tid 39881] [client 66.249.64.101:50931] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-L6O0Kj9XWFkRmVbTk9QAAANc"]
[Mon Dec 15 12:17:48.845882 2025] [:error] [pid 39829:tid 39905] [client 66.249.64.101:59411] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-L7GegGfxg5ldkNehisAAAAZQ"]
[Mon Dec 15 12:17:52.725104 2025] [:error] [pid 39829:tid 39895] [client 66.249.64.101:50616] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-L8GegGfxg5ldkNehitAAAAYo"]
[Mon Dec 15 12:17:59.765570 2025] [:error] [pid 39914:tid 39922] [client 66.249.64.101:36160] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-L91247O4ulGRu1dM06gAAAAU"]
[Mon Dec 15 12:19:45.460602 2025] [:error] [pid 39826:tid 39849] [client 66.249.64.101:35110] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-MYYdXWIOU_2oL0XY_qwAAAJI"]
[Mon Dec 15 12:19:58.178486 2025] [:error] [pid 39828:tid 39862] [client 66.249.64.101:55232] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-Mbu0Kj9XWFkRmVbTljQAAAMQ"]
[Mon Dec 15 12:20:02.162098 2025] [:error] [pid 39914:tid 39920] [client 66.249.64.101:62251] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-Mcl247O4ulGRu1dM10wAAAAM"]
[Mon Dec 15 12:20:14.017373 2025] [:error] [pid 39826:tid 39849] [client 66.249.64.101:61315] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-MfodXWIOU_2oL0XZABQAAAJI"]
[Mon Dec 15 12:20:24.957236 2025] [:error] [pid 39829:tid 39901] [client 66.249.64.101:53953] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-MiGegGfxg5ldkNehjjAAAAZA"]
[Mon Dec 15 12:20:28.945313 2025] [:error] [pid 44555:tid 44568] [client 66.249.64.101:62483] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-MjGDHW0g-e9AKPr7KbwAAAEs"]
[Mon Dec 15 12:20:33.017998 2025] [:error] [pid 39828:tid 39868] [client 66.249.64.101:44239] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-Mke0Kj9XWFkRmVbTlqAAAAMo"]
[Mon Dec 15 12:20:38.877342 2025] [:error] [pid 44555:tid 44575] [client 66.249.64.101:48622] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-MlmDHW0g-e9AKPr7KiQAAAFI"]
[Mon Dec 15 12:22:30.438494 2025] [:error] [pid 39828:tid 39863] [client 66.249.64.101:60109] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-NBu0Kj9XWFkRmVbTmaAAAAMU"]
[Mon Dec 15 12:22:38.396744 2025] [:error] [pid 39914:tid 39917] [client 66.249.64.101:41876] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-NDl247O4ulGRu1dM2owAAAAA"]
[Mon Dec 15 12:22:53.336274 2025] [:error] [pid 44555:tid 44566] [client 66.249.64.101:63066] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-NHWDHW0g-e9AKPr7LZgAAAEk"]
[Mon Dec 15 12:22:53.469044 2025] [:error] [pid 44555:tid 44561] [client 66.249.64.101:37931] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-NHWDHW0g-e9AKPr7LZwAAAEQ"]
[Mon Dec 15 12:22:57.211845 2025] [:error] [pid 39826:tid 39845] [client 66.249.64.101:49548] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-NIYdXWIOU_2oL0XZAtgAAAI4"]
[Mon Dec 15 12:23:02.285640 2025] [:error] [pid 39826:tid 39836] [client 66.249.64.101:57138] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-NJodXWIOU_2oL0XZAuQAAAIU"]
[Mon Dec 15 12:23:18.203091 2025] [:error] [pid 39829:tid 39899] [client 66.249.64.101:56519] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-NNmegGfxg5ldkNehkZgAAAY4"]
[Mon Dec 15 12:33:23.126195 2025] [:error] [pid 39828:tid 39864] [client 66.249.64.101:64588] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-Pk-0Kj9XWFkRmVbTp3QAAAMY"]
[Mon Dec 15 12:33:31.197981 2025] [:error] [pid 39829:tid 39901] [client 66.249.64.101:59553] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-Pm2egGfxg5ldkNehoqgAAAZA"]
[Mon Dec 15 12:33:40.878303 2025] [:error] [pid 39914:tid 39917] [client 66.249.64.101:47369] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-PpF247O4ulGRu1dM7_QAAAAA"]
[Mon Dec 15 12:33:47.117004 2025] [:error] [pid 44555:tid 44558] [client 66.249.64.101:62644] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-Pq2DHW0g-e9AKPr7REwAAAEE"]
[Mon Dec 15 12:33:54.969262 2025] [:error] [pid 44555:tid 44569] [client 66.249.64.101:56463] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-PsmDHW0g-e9AKPr7RKgAAAEw"]
[Mon Dec 15 12:34:02.938061 2025] [:error] [pid 39914:tid 39928] [client 66.249.64.101:62933] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-Pul247O4ulGRu1dM8GQAAAAs"]
[Mon Dec 15 12:35:38.459472 2025] [:error] [pid 39828:tid 39859] [client 66.249.64.101:48084] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-QGu0Kj9XWFkRmVbTqWQAAAME"]
[Mon Dec 15 12:35:46.526653 2025] [:error] [pid 39829:tid 39896] [client 66.249.64.101:54404] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-QImegGfxg5ldkNehpSwAAAYs"]
[Mon Dec 15 12:35:54.484331 2025] [:error] [pid 39829:tid 39891] [client 66.249.64.101:51170] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-QKmegGfxg5ldkNehpUAAAAYY"]
[Mon Dec 15 12:36:18.363124 2025] [:error] [pid 44555:tid 44567] [client 66.249.64.101:63651] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-QQmDHW0g-e9AKPr7SqwAAAEo"]
[Mon Dec 15 12:42:16.517305 2025] [:error] [pid 39828:tid 39872] [client 66.249.64.101:61578] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-RqO0Kj9XWFkRmVbTtigAAAM4"]
[Mon Dec 15 12:42:39.082696 2025] [:error] [pid 39828:tid 39872] [client 66.249.64.101:47715] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-Rv-0Kj9XWFkRmVbTtrQAAAM4"]
[Mon Dec 15 12:47:11.482658 2025] [:error] [pid 39828:tid 39867] [client 66.249.64.101:35596] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-Sz-0Kj9XWFkRmVbTu1QAAAMk"]
[Mon Dec 15 12:47:50.346420 2025] [:error] [pid 44555:tid 44577] [client 66.249.64.101:46114] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-S9mDHW0g-e9AKPr7afgAAAFQ"]
[Mon Dec 15 12:47:51.322272 2025] [:error] [pid 39914:tid 39924] [client 66.249.64.101:45727] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-S91247O4ulGRu1dNCvwAAAAc"]
[Mon Dec 15 13:16:53.572440 2025] [:error] [pid 39914:tid 39937] [client 66.249.64.101:46777] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-ZxV247O4ulGRu1dNNRAAAABQ"]
[Mon Dec 15 13:17:06.521278 2025] [:error] [pid 39829:tid 39893] [client 66.249.64.101:41850] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-Z0megGfxg5ldkNeh25QAAAYg"]
[Mon Dec 15 13:21:47.128653 2025] [:error] [pid 44555:tid 44573] [client 66.249.64.101:61924] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-a62DHW0g-e9AKPr7qPAAAAFA"]
[Mon Dec 15 13:22:00.086717 2025] [:error] [pid 44555:tid 44569] [client 66.249.64.101:57888] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-a-GDHW0g-e9AKPr7qUQAAAEw"]
[Mon Dec 15 13:22:00.337094 2025] [:error] [pid 39826:tid 39839] [client 66.249.64.101:56645] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-a-IdXWIOU_2oL0XZTowAAAIg"]
[Mon Dec 15 13:22:07.694964 2025] [:error] [pid 39828:tid 39871] [client 66.249.64.101:53508] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-a_-0Kj9XWFkRmVbT4EQAAAM0"]
[Mon Dec 15 13:32:30.554213 2025] [:error] [pid 39914:tid 39923] [client 66.249.64.101:35716] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-dbl247O4ulGRu1dNScQAAAAY"]
[Mon Dec 15 13:32:45.750664 2025] [:error] [pid 17595:tid 17606] [client 66.249.64.101:40834] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-dfSEZ31fZFzV3Us-oKQAAAQk"]
[Mon Dec 15 13:36:54.642615 2025] [:error] [pid 39826:tid 39853] [client 66.249.64.101:44034] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-edodXWIOU_2oL0XZX9AAAAJY"]
[Mon Dec 15 13:36:54.802787 2025] [:error] [pid 39914:tid 39919] [client 66.249.64.101:45792] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-edl247O4ulGRu1dNTaAAAAAI"]
[Mon Dec 15 13:41:46.944126 2025] [:error] [pid 39826:tid 39852] [client 66.249.64.101:48922] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-fmodXWIOU_2oL0XZYyAAAAJU"]
[Mon Dec 15 13:50:56.610693 2025] [:error] [pid 39914:tid 39928] [client 66.249.64.101:63936] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-hwF247O4ulGRu1dNWhQAAAAs"]
[Mon Dec 15 13:51:04.214309 2025] [:error] [pid 44555:tid 44578] [client 66.249.64.101:42673] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-hyGDHW0g-e9AKPr70EQAAAFU"]
[Mon Dec 15 14:05:23.660460 2025] [:error] [pid 39826:tid 39836] [client 66.249.64.101:49585] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-lI4dXWIOU_2oL0XZeIgAAAIU"]
[Mon Dec 15 14:35:45.959008 2025] [:error] [pid 17595:tid 17597] [client 117.53.154.8:34662] [client 117.53.154.8] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 117.53.154.8, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aT-sQSEZ31fZFzV3Us_FNgAAAQA"]
[Mon Dec 15 15:39:27.570407 2025] [:error] [pid 39914:tid 39940] [client 66.249.64.101:39857] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-7L1247O4ulGRu1dN-FQAAABc"]
[Mon Dec 15 15:39:40.144943 2025] [:error] [pid 17595:tid 17606] [client 66.249.64.101:40415] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-7PCEZ31fZFzV3Us_pVwAAAQk"]
[Mon Dec 15 15:39:51.715204 2025] [:error] [pid 17595:tid 17612] [client 66.249.64.101:48083] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-7RyEZ31fZFzV3Us_pXwAAAQ8"]
[Mon Dec 15 15:40:03.292795 2025] [:error] [pid 39826:tid 39853] [client 66.249.64.101:44756] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-7U4dXWIOU_2oL0XZ-8AAAAJY"]
[Mon Dec 15 15:43:54.270113 2025] [:error] [pid 17595:tid 17607] [client 66.249.64.101:46220] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT-8OiEZ31fZFzV3Us_q6gAAAQo"]
[Mon Dec 15 16:14:17.650845 2025] [:error] [pid 39914:tid 39938] [client 66.249.64.101:44326] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT_DWV247O4ulGRu1dOL_QAAABU"]
[Mon Dec 15 16:14:31.643678 2025] [:error] [pid 44555:tid 44576] [client 66.249.64.101:44683] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT_DZ2DHW0g-e9AKPr4x-wAAAFM"]
[Mon Dec 15 16:18:20.112569 2025] [:error] [pid 39828:tid 39880] [client 66.249.64.101:48939] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT_ETO0Kj9XWFkRmVbQsAwAAANY"]
[Mon Dec 15 16:18:45.337999 2025] [:error] [pid 39914:tid 39929] [client 66.249.64.101:46234] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT_EZV247O4ulGRu1dOOOgAAAAw"]
[Mon Dec 15 16:23:39.727767 2025] [:error] [pid 39914:tid 39918] [client 66.249.64.101:35000] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT_Fi1247O4ulGRu1dORlAAAAAE"]
[Mon Dec 15 16:23:42.496774 2025] [:error] [pid 39914:tid 39937] [client 66.249.64.101:37212] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT_Fjl247O4ulGRu1dORlQAAABQ"]
[Mon Dec 15 16:23:47.605522 2025] [:error] [pid 17595:tid 17620] [client 66.249.64.101:61834] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT_FkyEZ31fZFzV3Us_9EwAAARc"]
[Mon Dec 15 16:41:05.896737 2025] [:error] [pid 17595:tid 17599] [client 178.33.162.49:38142] [client 178.33.162.49] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 178.33.162.49, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aT_JoSEZ31fZFzV3Us8CbwAAAQI"]
[Mon Dec 15 16:47:27.582017 2025] [:error] [pid 39829:tid 39908] [client 66.249.64.101:60242] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT_LH2egGfxg5ldkNei55wAAAZc"]
[Mon Dec 15 16:47:53.293025 2025] [:error] [pid 44555:tid 44565] [client 66.249.64.101:51529] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT_LOWDHW0g-e9AKPr49awAAAEg"]
[Mon Dec 15 16:54:42.858518 2025] [:error] [pid 39828:tid 39868] [client 66.249.64.101:50165] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT_M0u0Kj9XWFkRmVbQ2vwAAAMo"]
[Mon Dec 15 16:54:54.430269 2025] [:error] [pid 44555:tid 44563] [client 66.249.64.101:49510] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT_M3mDHW0g-e9AKPr5BEAAAAEY"]
[Mon Dec 15 16:55:04.225665 2025] [:error] [pid 39914:tid 39921] [client 66.249.64.101:42431] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT_M6F247O4ulGRu1dOifAAAAAQ"]
[Mon Dec 15 16:55:18.121386 2025] [:error] [pid 44555:tid 44565] [client 66.249.64.101:48250] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT_M9mDHW0g-e9AKPr5BQgAAAEg"]
[Mon Dec 15 17:12:14.352501 2025] [:error] [pid 25827:tid 25871] [client 66.249.64.101:55586] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT_Q7p-kKR3hkSArAyJ4kwAAAM8"]
[Mon Dec 15 17:12:26.694904 2025] [:error] [pid 25827:tid 25866] [client 66.249.64.101:62295] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT_Q-p-kKR3hkSArAyJ4nwAAAMo"]
[Mon Dec 15 17:12:39.073676 2025] [:error] [pid 25886:tid 25909] [client 66.249.64.101:59888] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT_RB4DNBb5wk67wQWaqsgAAAFU"]
[Mon Dec 15 17:24:22.972949 2025] [:error] [pid 31374:tid 31448] [client 66.249.64.101:49387] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT_TxpzSh8b7uk6RWiEFpAAAAFA"]
[Mon Dec 15 17:24:44.252317 2025] [:error] [pid 31459:tid 31477] [client 66.249.64.101:63801] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT_T3DqerS0TDpViRzv3jwAAABA"]
[Mon Dec 15 17:24:54.282196 2025] [:error] [pid 31372:tid 31387] [client 66.249.64.101:52383] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT_T5gN06qRtpJxyxHhP9QAAAIs"]
[Mon Dec 15 17:28:12.169444 2025] [:error] [pid 31374:tid 31455] [client 66.249.64.101:48444] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT_UrJzSh8b7uk6RWiEHGgAAAFc"]
[Mon Dec 15 17:28:22.292966 2025] [:error] [pid 31373:tid 31416] [client 66.249.64.101:47241] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT_UtnFdnrU7ASwItVKNVQAAAMs"]
[Mon Dec 15 17:28:31.337713 2025] [:error] [pid 31374:tid 31441] [client 66.249.64.101:35339] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT_Uv5zSh8b7uk6RWiEHSwAAAEk"]
[Mon Dec 15 17:28:42.775407 2025] [:error] [pid 31373:tid 31423] [client 66.249.64.101:65155] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT_UynFdnrU7ASwItVKNcgAAANI"]
[Mon Dec 15 17:28:58.518473 2025] [:error] [pid 31374:tid 31451] [client 66.249.64.101:44823] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT_U2pzSh8b7uk6RWiEHlQAAAFM"]
[Mon Dec 15 17:32:14.296776 2025] [:error] [pid 31459:tid 31466] [client 66.249.64.101:50560] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT_VnjqerS0TDpViRzv7swAAAAU"]
[Mon Dec 15 17:32:33.815796 2025] [:error] [pid 31374:tid 31448] [client 66.249.64.101:39847] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT_VsZzSh8b7uk6RWiEJRgAAAFA"]
[Mon Dec 15 17:32:34.588849 2025] [:error] [pid 31459:tid 31477] [client 66.249.64.101:57627] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT_VsjqerS0TDpViRzv8MwAAABA"]
[Mon Dec 15 17:32:44.609245 2025] [:error] [pid 31374:tid 31441] [client 66.249.64.101:65215] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT_VvJzSh8b7uk6RWiEJjQAAAEk"]
[Mon Dec 15 17:34:54.052022 2025] [:error] [pid 31459:tid 31469] [client 66.249.64.101:38808] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT_WPjqerS0TDpViRzv_LAAAAAg"]
[Mon Dec 15 17:35:29.861783 2025] [:error] [pid 31372:tid 31387] [client 66.249.64.101:48953] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT_WYQN06qRtpJxyxHhWLAAAAIs"]
[Mon Dec 15 17:43:25.676955 2025] [:error] [pid 31372:tid 31389] [client 66.249.64.101:39654] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT_YPQN06qRtpJxyxHhYfQAAAI0"]
[Mon Dec 15 17:43:44.131898 2025] [:error] [pid 31459:tid 31480] [client 66.249.64.101:45117] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT_YUDqerS0TDpViRzsEfQAAABM"]
[Mon Dec 15 17:43:56.192096 2025] [:error] [pid 31373:tid 31408] [client 66.249.64.101:56298] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT_YXHFdnrU7ASwItVKUkAAAAMM"]
[Mon Dec 15 17:53:13.406740 2025] [:error] [pid 31372:tid 31376] [client 66.249.64.101:43284] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT_aiQN06qRtpJxyxHhdWAAAAIA"]
[Mon Dec 15 17:53:32.601795 2025] [:error] [pid 31374:tid 31452] [client 66.249.64.101:62550] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT_anJzSh8b7uk6RWiEU-gAAAFQ"]
[Mon Dec 15 17:53:44.180170 2025] [:error] [pid 31372:tid 31387] [client 66.249.64.101:61138] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT_aqAN06qRtpJxyxHhdxAAAAIs"]
[Mon Dec 15 18:07:48.755129 2025] [:error] [pid 31373:tid 31407] [client 66.249.64.101:63643] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT_d9HFdnrU7ASwItVKfYgAAAMI"]
[Mon Dec 15 18:15:56.355077 2025] [:error] [pid 31374:tid 31449] [client 66.249.64.101:61649] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT_f3JzSh8b7uk6RWiEh6AAAAFE"]
[Mon Dec 15 18:15:56.446566 2025] [:error] [pid 31459:tid 31474] [client 66.249.64.101:47084] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT_f3DqerS0TDpViRzscwAAAAA0"]
[Mon Dec 15 18:16:27.828109 2025] [:error] [pid 31372:tid 31393] [client 66.249.64.101:63368] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT_f-wN06qRtpJxyxHhooAAAAJE"]
[Mon Dec 15 18:16:37.652081 2025] [:error] [pid 31372:tid 31391] [client 66.249.64.101:40274] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT_gBQN06qRtpJxyxHhosgAAAI8"]
[Mon Dec 15 18:53:36.993458 2025] [:error] [pid 31372:tid 31389] [client 152.42.219.10:56820] [client 152.42.219.10] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 152.42.219.10, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aT_osAN06qRtpJxyxHh5VAAAAI0"]
[Mon Dec 15 19:01:51.041794 2025] [:error] [pid 31372:tid 31388] [client 66.249.64.101:50925] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT_qnwN06qRtpJxyxHh73gAAAIw"]
[Mon Dec 15 19:02:16.752802 2025] [:error] [pid 31372:tid 31385] [client 66.249.64.101:50475] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT_quAN06qRtpJxyxHh75gAAAIk"]
[Mon Dec 15 19:02:26.788190 2025] [:error] [pid 31374:tid 31435] [client 66.249.64.101:55414] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT_qwpzSh8b7uk6RWiE5fwAAAEM"]
[Mon Dec 15 19:04:37.242264 2025] [:error] [pid 31373:tid 31424] [client 66.249.64.101:36107] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT_rRXFdnrU7ASwItVK3wQAAANM"]
[Mon Dec 15 19:04:49.592718 2025] [:error] [pid 31459:tid 31470] [client 66.249.64.101:47574] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT_rUTqerS0TDpViRzs7XgAAAAk"]
[Mon Dec 15 19:05:14.912903 2025] [:error] [pid 31373:tid 31406] [client 66.249.64.101:64746] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT_ranFdnrU7ASwItVK4BAAAAME"]
[Mon Dec 15 19:19:04.339502 2025] [:error] [pid 31373:tid 31411] [client 66.249.64.101:58380] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT_uqHFdnrU7ASwItVK9hAAAAMY"]
[Mon Dec 15 19:19:22.621945 2025] [:error] [pid 31372:tid 31389] [client 66.249.64.101:58488] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT_uugN06qRtpJxyxHiB3AAAAI0"]
[Mon Dec 15 19:19:30.988961 2025] [:error] [pid 31459:tid 31477] [client 66.249.64.101:47014] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT_uwjqerS0TDpViRztBTgAAABA"]
[Mon Dec 15 19:19:39.335639 2025] [:error] [pid 31374:tid 31441] [client 66.249.64.101:55067] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT_uy5zSh8b7uk6RWiE_2QAAAEk"]
[Mon Dec 15 19:19:47.991289 2025] [:error] [pid 52155:tid 52174] [client 66.249.64.101:51855] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT_u0xaJK6javjid3xyCuAAAARA"]
[Mon Dec 15 19:19:52.322443 2025] [:error] [pid 31374:tid 31437] [client 66.249.64.101:63270] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT_u2JzSh8b7uk6RWiE_6gAAAEU"]
[Mon Dec 15 19:21:22.317114 2025] [:error] [pid 52155:tid 52166] [client 66.249.64.101:54834] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT_vMhaJK6javjid3xyDXwAAAQg"]
[Mon Dec 15 19:21:31.500886 2025] [:error] [pid 31374:tid 31433] [client 66.249.64.101:36356] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT_vO5zSh8b7uk6RWiFBFAAAAEE"]
[Mon Dec 15 19:21:40.692922 2025] [:error] [pid 52155:tid 52182] [client 66.249.64.101:58374] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT_vRBaJK6javjid3xyDkwAAARg"]
[Mon Dec 15 19:21:49.879272 2025] [:error] [pid 31372:tid 31395] [client 66.249.64.101:48296] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT_vTQN06qRtpJxyxHiCxAAAAJM"]
[Mon Dec 15 19:21:59.055949 2025] [:error] [pid 31374:tid 31449] [client 66.249.64.101:65513] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT_vV5zSh8b7uk6RWiFBPgAAAFE"]
[Mon Dec 15 19:24:37.920921 2025] [:error] [pid 31459:tid 31481] [client 66.249.64.101:51417] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT_v9TqerS0TDpViRztEwAAAABQ"]
[Mon Dec 15 19:24:46.282608 2025] [:error] [pid 52155:tid 52161] [client 66.249.64.101:39699] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT_v_haJK6javjid3xyG-wAAAQM"]
[Mon Dec 15 19:24:54.632687 2025] [:error] [pid 31372:tid 31396] [client 66.249.64.101:59765] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT_wBgN06qRtpJxyxHiEewAAAJQ"]
[Mon Dec 15 19:24:54.732042 2025] [:error] [pid 31372:tid 31394] [client 66.249.64.101:52353] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT_wBgN06qRtpJxyxHiEfgAAAJI"]
[Mon Dec 15 19:25:03.060083 2025] [:error] [pid 31459:tid 31484] [client 66.249.64.101:53120] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT_wDzqerS0TDpViRztEzQAAABc"]
[Mon Dec 15 19:25:11.395801 2025] [:error] [pid 31372:tid 31400] [client 66.249.64.101:59188] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT_wFwN06qRtpJxyxHiElAAAAJg"]
[Mon Dec 15 19:25:19.736376 2025] [:error] [pid 31374:tid 31446] [client 66.249.64.101:44842] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT_wH5zSh8b7uk6RWiFC-wAAAE4"]
[Mon Dec 15 20:12:31.191958 2025] [:error] [pid 31459:tid 31461] [client 66.249.64.101:50604] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT_7LzqerS0TDpViRztc6AAAAAA"]
[Mon Dec 15 20:12:40.362956 2025] [:error] [pid 52155:tid 52170] [client 66.249.64.101:47440] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT_7OBaJK6javjid3xynBgAAAQw"]
[Mon Dec 15 20:12:49.563812 2025] [:error] [pid 31372:tid 31387] [client 66.249.64.101:36038] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT_7QQN06qRtpJxyxHiYuQAAAIs"]
[Mon Dec 15 20:12:58.742117 2025] [:error] [pid 31459:tid 31464] [client 66.249.64.101:63857] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT_7SjqerS0TDpViRztc8AAAAAM"]
[Mon Dec 15 20:15:11.417329 2025] [:error] [pid 31373:tid 31419] [client 66.249.64.101:47251] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT_7z3FdnrU7ASwItVLX_gAAAM4"]
[Mon Dec 15 20:15:16.555432 2025] [:error] [pid 52155:tid 52178] [client 66.249.64.101:64829] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT_71BaJK6javjid3xynzQAAARQ"]
[Mon Dec 15 20:15:25.679300 2025] [:error] [pid 31374:tid 31438] [client 66.249.64.101:40825] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT_73ZzSh8b7uk6RWiFZOQAAAEY"]
[Mon Dec 15 20:15:34.931444 2025] [:error] [pid 31459:tid 31470] [client 66.249.64.101:41790] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT_75jqerS0TDpViRztd4AAAAAk"]
[Mon Dec 15 20:15:48.412976 2025] [:error] [pid 31373:tid 31427] [client 66.249.64.101:62458] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT_79HFdnrU7ASwItVLYRgAAANY"]
[Mon Dec 15 20:15:53.311386 2025] [:error] [pid 31374:tid 31444] [client 66.249.64.101:54256] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT_7-ZzSh8b7uk6RWiFZbQAAAEw"]
[Mon Dec 15 20:17:43.560934 2025] [:error] [pid 31373:tid 31415] [client 66.249.64.101:37941] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT_8Z3FdnrU7ASwItVLY1QAAAMo"]
[Mon Dec 15 20:17:52.753864 2025] [:error] [pid 31372:tid 31391] [client 66.249.64.101:56258] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT_8cAN06qRtpJxyxHiZ8AAAAI8"]
[Mon Dec 15 20:18:11.127607 2025] [:error] [pid 52155:tid 52160] [client 66.249.64.101:49481] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT_8gxaJK6javjid3xypNQAAAQI"]
[Mon Dec 15 20:18:27.549718 2025] [:error] [pid 31459:tid 31470] [client 66.249.64.101:62486] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT_8kzqerS0TDpViRzte1QAAAAk"]
[Mon Dec 15 20:20:27.031494 2025] [:error] [pid 31373:tid 31418] [client 66.249.64.101:61308] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT_9C3FdnrU7ASwItVLZXgAAAM0"]
[Mon Dec 15 20:20:28.114703 2025] [:error] [pid 31459:tid 31469] [client 66.249.64.101:41358] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT_9DDqerS0TDpViRztfXgAAAAg"]
[Mon Dec 15 20:20:31.610626 2025] [:error] [pid 31373:tid 31418] [client 66.249.64.101:52198] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT_9D3FdnrU7ASwItVLZZgAAAM0"]
[Mon Dec 15 20:20:38.247284 2025] [:error] [pid 52155:tid 52168] [client 66.249.64.101:54688] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT_9FhaJK6javjid3xyqOwAAAQo"]
[Mon Dec 15 20:20:47.426008 2025] [:error] [pid 31459:tid 31471] [client 66.249.64.101:42217] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT_9HzqerS0TDpViRztfaQAAAAo"]
[Mon Dec 15 20:20:48.405114 2025] [:error] [pid 52155:tid 52177] [client 66.249.64.101:53091] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT_9IBaJK6javjid3xyqSAAAARM"]
[Mon Dec 15 20:20:56.621819 2025] [:error] [pid 52155:tid 52174] [client 66.249.64.101:37708] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT_9KBaJK6javjid3xyqUAAAARA"]
[Mon Dec 15 20:23:05.149486 2025] [:error] [pid 31373:tid 31407] [client 66.249.64.101:57387] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT_9qXFdnrU7ASwItVLaVQAAAMI"]
[Mon Dec 15 20:23:14.436897 2025] [:error] [pid 31372:tid 31383] [client 66.249.64.101:49514] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT_9sgN06qRtpJxyxHibaAAAAIc"]
[Mon Dec 15 20:23:23.516588 2025] [:error] [pid 52155:tid 52165] [client 66.249.64.101:48399] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT_9uxaJK6javjid3xyrdgAAAQc"]
[Mon Dec 15 20:23:32.812622 2025] [:error] [pid 31373:tid 31406] [client 66.249.64.101:42251] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT_9xHFdnrU7ASwItVLacQAAAME"]
[Mon Dec 15 20:23:41.893195 2025] [:error] [pid 52155:tid 52161] [client 66.249.64.101:41898] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT_9zRaJK6javjid3xyr1AAAAQM"]
[Mon Dec 15 20:23:50.939329 2025] [:error] [pid 31373:tid 31411] [client 66.249.64.101:59146] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT_91nFdnrU7ASwItVLaeQAAAMY"]
[Mon Dec 15 20:23:51.171207 2025] [:error] [pid 31373:tid 31421] [client 66.249.64.101:59019] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT_913FdnrU7ASwItVLaegAAANA"]
[Mon Dec 15 20:26:08.999170 2025] [:error] [pid 31459:tid 31466] [client 66.249.64.101:43693] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT_-YDqerS0TDpViRzthBQAAAAU"]
[Mon Dec 15 20:26:18.093533 2025] [:error] [pid 31372:tid 31386] [client 66.249.64.101:37194] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT_-agN06qRtpJxyxHicFgAAAIo"]
[Mon Dec 15 20:26:27.369313 2025] [:error] [pid 31372:tid 31377] [client 66.249.64.101:59218] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT_-cwN06qRtpJxyxHicHQAAAIE"]
[Mon Dec 15 20:26:36.463090 2025] [:error] [pid 31374:tid 31448] [client 66.249.64.101:36557] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT_-fJzSh8b7uk6RWiFcuAAAAFA"]
[Mon Dec 15 20:26:45.737141 2025] [:error] [pid 52155:tid 52167] [client 66.249.64.101:57214] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aT_-hRaJK6javjid3xytBgAAAQk"]
[Mon Dec 15 20:47:26.141695 2025] [:error] [pid 31373:tid 31415] [client 66.249.64.101:47183] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUADXnFdnrU7ASwItVLjpAAAAMo"]
[Mon Dec 15 20:47:35.336655 2025] [:error] [pid 31373:tid 31419] [client 66.249.64.101:48628] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUADZ3FdnrU7ASwItVLjvgAAAM4"]
[Mon Dec 15 20:47:44.538625 2025] [:error] [pid 31374:tid 31435] [client 66.249.64.101:44465] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUADcJzSh8b7uk6RWiFlcgAAAEM"]
[Mon Dec 15 20:47:53.608542 2025] [:error] [pid 52155:tid 52175] [client 66.249.64.101:44386] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUADeRaJK6javjid3xy6dgAAARE"]
[Mon Dec 15 20:49:43.874054 2025] [:error] [pid 31373:tid 31416] [client 66.249.64.101:38175] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUAD53FdnrU7ASwItVLlSgAAAMs"]
[Mon Dec 15 20:49:59.657247 2025] [:error] [pid 52155:tid 52165] [client 66.249.64.101:42055] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUAD9xaJK6javjid3xy8NgAAAQc"]
[Mon Dec 15 20:50:23.812483 2025] [:error] [pid 31374:tid 31456] [client 66.249.64.101:39816] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUAED5zSh8b7uk6RWiFm2QAAAFg"]
[Mon Dec 15 20:50:33.004028 2025] [:error] [pid 31374:tid 31445] [client 66.249.64.101:62097] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUAEGZzSh8b7uk6RWiFm9wAAAE0"]
[Mon Dec 15 20:52:34.825180 2025] [:error] [pid 52155:tid 52179] [client 66.249.64.101:59097] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUAEkhaJK6javjid3xy91wAAARU"]
[Mon Dec 15 20:52:43.156387 2025] [:error] [pid 31374:tid 31446] [client 66.249.64.101:55149] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUAEm5zSh8b7uk6RWiFnxQAAAE4"]
[Mon Dec 15 20:52:51.492310 2025] [:error] [pid 52155:tid 52168] [client 66.249.64.101:44556] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUAEoxaJK6javjid3xy9_gAAAQo"]
[Mon Dec 15 20:53:00.261901 2025] [:error] [pid 31459:tid 31463] [client 66.249.64.101:54273] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUAErDqerS0TDpViRzttqQAAAAI"]
[Mon Dec 15 20:53:08.977410 2025] [:error] [pid 52155:tid 52163] [client 66.249.64.101:52488] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUAEtBaJK6javjid3xy-KwAAAQU"]
[Mon Dec 15 20:53:15.191034 2025] [:error] [pid 52155:tid 52168] [client 66.249.64.101:45393] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUAEuxaJK6javjid3xy-PgAAAQo"]
[Mon Dec 15 21:12:09.076659 2025] [:error] [pid 31374:tid 31434] [client 78.47.142.186:34368] [client 78.47.142.186] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 78.47.142.186, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aUAJKZzSh8b7uk6RWiFyRgAAAEI"]
[Mon Dec 15 21:24:53.308003 2025] [:error] [pid 31372:tid 31391] [client 66.249.64.101:50432] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUAMJQN06qRtpJxyxHi2zwAAAI8"]
[Mon Dec 15 21:25:01.643152 2025] [:error] [pid 31372:tid 31380] [client 66.249.64.101:50163] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUAMLQN06qRtpJxyxHi20wAAAIQ"]
[Mon Dec 15 21:25:09.916732 2025] [:error] [pid 31373:tid 31406] [client 66.249.64.101:41067] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUAMNXFdnrU7ASwItVL4NQAAAME"]
[Mon Dec 15 21:25:20.116782 2025] [:error] [pid 52155:tid 52162] [client 66.249.64.101:62248] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUAMQBaJK6javjid3xzXHAAAAQQ"]
[Mon Dec 15 21:25:28.459115 2025] [:error] [pid 31373:tid 31412] [client 66.249.64.101:58828] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUAMSHFdnrU7ASwItVL4SAAAAMc"]
[Mon Dec 15 21:25:38.653228 2025] [:error] [pid 31372:tid 31391] [client 66.249.64.101:44623] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUAMUgN06qRtpJxyxHi27wAAAI8"]
[Mon Dec 15 21:25:38.765155 2025] [:error] [pid 31373:tid 31429] [client 66.249.64.101:59278] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUAMUnFdnrU7ASwItVL4WwAAANg"]
[Mon Dec 15 21:52:10.877209 2025] [:error] [pid 31373:tid 31410] [client 66.249.64.101:50768] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUASinFdnrU7ASwItVIBRQAAAMU"]
[Mon Dec 15 21:52:17.759721 2025] [:error] [pid 52155:tid 52164] [client 66.249.64.101:44559] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUASkRaJK6javjid3xzoCAAAAQY"]
[Mon Dec 15 21:52:24.646138 2025] [:error] [pid 31373:tid 31408] [client 66.249.64.101:64642] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUASmHFdnrU7ASwItVIBVQAAAMM"]
[Mon Dec 15 21:52:33.834012 2025] [:error] [pid 31459:tid 31467] [client 66.249.64.101:54259] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUASoTqerS0TDpViRzuNDQAAAAY"]
[Mon Dec 15 21:52:40.708682 2025] [:error] [pid 52155:tid 52165] [client 66.249.64.101:40234] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUASqBaJK6javjid3xzoSQAAAQc"]
[Mon Dec 15 21:52:41.691917 2025] [:error] [pid 31373:tid 31415] [client 66.249.64.101:47767] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUASqXFdnrU7ASwItVIBaAAAAMo"]
[Mon Dec 15 21:52:48.567897 2025] [:error] [pid 31374:tid 31449] [client 66.249.64.101:36856] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUASsJzSh8b7uk6RWiGFWQAAAFE"]
[Mon Dec 15 21:52:55.447127 2025] [:error] [pid 31459:tid 31477] [client 66.249.64.101:63786] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUAStzqerS0TDpViRzuNOwAAABA"]
[Mon Dec 15 21:52:55.569771 2025] [:error] [pid 31373:tid 31411] [client 66.249.64.101:63762] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUASt3FdnrU7ASwItVIBeAAAAMY"]
[Mon Dec 15 21:52:59.041040 2025] [:error] [pid 31373:tid 31406] [client 66.249.64.101:64015] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUASu3FdnrU7ASwItVIBgQAAAME"]
[Mon Dec 15 21:54:29.869067 2025] [:error] [pid 31372:tid 31395] [client 66.249.64.101:58301] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUATFQN06qRtpJxyxHjBfwAAAJM"]
[Mon Dec 15 22:09:22.546855 2025] [:error] [pid 52155:tid 52160] [client 182.44.10.67:39270] [client 182.44.10.67] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||paramountbaldivis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUAWkhaJK6javjid3xzx-QAAAQI"]
[Mon Dec 15 23:33:45.635665 2025] [:error] [pid 52155:tid 52168] [client 66.249.64.101:44922] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUAqWRaJK6javjid3xwnrAAAAQo"]
[Mon Dec 15 23:33:54.376763 2025] [:error] [pid 31374:tid 31433] [client 66.249.64.101:55588] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUAqYpzSh8b7uk6RWiG12wAAAEE"]
[Mon Dec 15 23:33:54.516821 2025] [:error] [pid 31374:tid 31442] [client 66.249.64.101:52030] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUAqYpzSh8b7uk6RWiG13AAAAEo"]
[Mon Dec 15 23:33:58.907974 2025] [:error] [pid 52155:tid 52166] [client 66.249.64.101:40066] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUAqZhaJK6javjid3xwnvAAAAQg"]
[Mon Dec 15 23:34:13.330711 2025] [:error] [pid 52155:tid 52159] [client 66.249.64.101:43253] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUAqdRaJK6javjid3xwnzwAAAQE"]
[Mon Dec 15 23:34:20.462992 2025] [:error] [pid 52155:tid 52176] [client 66.249.64.101:37302] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUAqfBaJK6javjid3xwn9wAAARI"]
[Mon Dec 15 23:34:27.740537 2025] [:error] [pid 52155:tid 52175] [client 66.249.64.101:46156] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUAqgxaJK6javjid3xwn_gAAARE"]
[Mon Dec 15 23:34:34.935373 2025] [:error] [pid 31459:tid 31467] [client 66.249.64.101:40188] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUAqijqerS0TDpViRzu_5AAAAAY"]
[Mon Dec 15 23:36:24.566648 2025] [:error] [pid 52155:tid 52160] [client 66.249.64.101:61091] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUAq-BaJK6javjid3xwo3QAAAQI"]
[Mon Dec 15 23:36:31.171161 2025] [:error] [pid 31374:tid 31437] [client 66.249.64.101:64362] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUAq_5zSh8b7uk6RWiG3IAAAAEU"]
[Mon Dec 15 23:36:31.280519 2025] [:error] [pid 31374:tid 31440] [client 66.249.64.101:58648] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUAq_5zSh8b7uk6RWiG3IgAAAEg"]
[Mon Dec 15 23:36:37.875065 2025] [:error] [pid 31373:tid 31419] [client 66.249.64.101:60422] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUArBXFdnrU7ASwItVIuNgAAAM4"]
[Mon Dec 15 23:36:46.050276 2025] [:error] [pid 31373:tid 31412] [client 66.249.64.101:54983] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUArDnFdnrU7ASwItVIudAAAAMc"]
[Mon Dec 15 23:36:52.644419 2025] [:error] [pid 31373:tid 31412] [client 66.249.64.101:52254] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUArFHFdnrU7ASwItVIusAAAAMc"]
[Mon Dec 15 23:36:53.656238 2025] [:error] [pid 52155:tid 52166] [client 66.249.64.101:52936] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUArFRaJK6javjid3xwpjwAAAQg"]
[Mon Dec 15 23:36:56.249635 2025] [:error] [pid 52155:tid 52180] [client 66.249.64.101:50876] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUArGBaJK6javjid3xwpqgAAARY"]
[Mon Dec 15 23:36:59.856930 2025] [:error] [pid 31459:tid 31463] [client 66.249.64.101:59877] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUArGzqerS0TDpViRzvBbQAAAAI"]
[Mon Dec 15 23:37:55.646892 2025] [:error] [pid 52155:tid 52170] [client 91.232.154.200:52928] [client 91.232.154.200] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.232.154.200, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aUArUxaJK6javjid3xwq1gAAAQw"]
[Mon Dec 15 23:38:32.773663 2025] [:error] [pid 31374:tid 31432] [client 66.249.64.101:51512] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUAreJzSh8b7uk6RWiG5SAAAAEA"]
[Mon Dec 15 23:38:42.161313 2025] [:error] [pid 52155:tid 52176] [client 66.249.64.101:49551] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUArghaJK6javjid3xwr7AAAARI"]
[Mon Dec 15 23:38:47.184277 2025] [:error] [pid 31459:tid 31484] [client 66.249.64.101:42937] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUArhzqerS0TDpViRzvClwAAABc"]
[Mon Dec 15 23:38:53.078817 2025] [:error] [pid 31373:tid 31418] [client 66.249.64.101:38524] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUArjXFdnrU7ASwItVIvuwAAAM0"]
[Mon Dec 15 23:38:54.391922 2025] [:error] [pid 31374:tid 31446] [client 66.249.64.101:57186] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUArjpzSh8b7uk6RWiG5XQAAAE4"]
[Mon Dec 15 23:39:16.018410 2025] [:error] [pid 31459:tid 31479] [client 66.249.64.101:60618] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUArpDqerS0TDpViRzvCsQAAABI"]
[Mon Dec 15 23:39:23.214387 2025] [:error] [pid 52155:tid 52162] [client 66.249.64.101:53653] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUArqxaJK6javjid3xwsKwAAAQQ"]
[Mon Dec 15 23:40:57.817604 2025] [:error] [pid 31373:tid 31416] [client 66.249.64.101:56436] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUAsCXFdnrU7ASwItVIwZwAAAMs"]
[Mon Dec 15 23:41:18.517281 2025] [:error] [pid 52155:tid 52181] [client 66.249.64.101:40005] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUAsHhaJK6javjid3xwtKgAAARc"]
[Mon Dec 15 23:41:25.721207 2025] [:error] [pid 52155:tid 52169] [client 66.249.64.101:52288] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUAsJRaJK6javjid3xwtMgAAAQs"]
[Mon Dec 15 23:41:32.936931 2025] [:error] [pid 52155:tid 52172] [client 66.249.64.101:60665] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUAsLBaJK6javjid3xwtPwAAAQ4"]
[Mon Dec 15 23:41:40.136541 2025] [:error] [pid 31459:tid 31468] [client 66.249.64.101:58570] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUAsNDqerS0TDpViRzvDYgAAAAc"]
[Mon Dec 15 23:41:47.611174 2025] [:error] [pid 52155:tid 52174] [client 66.249.64.101:40895] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUAsOxaJK6javjid3xwtUgAAARA"]
[Mon Dec 15 23:43:10.016764 2025] [:error] [pid 31372:tid 31383] [client 66.249.64.101:35692] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUAsjgN06qRtpJxyxHjwOQAAAIc"]
[Mon Dec 15 23:43:19.044415 2025] [:error] [pid 52155:tid 52173] [client 66.249.64.101:61372] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUAslxaJK6javjid3xwudwAAAQ8"]
[Mon Dec 15 23:43:25.641140 2025] [:error] [pid 52155:tid 52165] [client 66.249.64.101:56616] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUAsnRaJK6javjid3xwuhAAAAQc"]
[Mon Dec 15 23:43:32.802044 2025] [:error] [pid 31373:tid 31426] [client 66.249.64.101:48554] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUAspHFdnrU7ASwItVIwwwAAANU"]
[Mon Dec 15 23:43:41.208241 2025] [:error] [pid 31372:tid 31386] [client 66.249.64.101:65124] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUAsrQN06qRtpJxyxHjwXAAAAIo"]
[Mon Dec 15 23:43:41.334032 2025] [:error] [pid 31372:tid 31376] [client 66.249.64.101:54637] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUAsrQN06qRtpJxyxHjwXQAAAIA"]
[Mon Dec 15 23:43:49.356134 2025] [:error] [pid 31374:tid 31452] [client 66.249.64.101:47533] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUAstZzSh8b7uk6RWiG6qAAAAFQ"]
[Mon Dec 15 23:43:55.961887 2025] [:error] [pid 31372:tid 31389] [client 66.249.64.101:55268] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUAsuwN06qRtpJxyxHjwcQAAAI0"]
[Mon Dec 15 23:45:36.058814 2025] [:error] [pid 31373:tid 31427] [client 66.249.64.101:49102] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUAtIHFdnrU7ASwItVIxfwAAANY"]
[Mon Dec 15 23:45:42.681495 2025] [:error] [pid 52155:tid 52160] [client 66.249.64.101:55077] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUAtJhaJK6javjid3xwwAAAAAQI"]
[Mon Dec 15 23:45:49.309059 2025] [:error] [pid 31374:tid 31441] [client 66.249.64.101:42285] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUAtLZzSh8b7uk6RWiG7qQAAAEk"]
[Mon Dec 15 23:45:55.914137 2025] [:error] [pid 31459:tid 31480] [client 66.249.64.101:60456] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUAtMzqerS0TDpViRzvF9gAAABM"]
[Mon Dec 15 23:46:02.525888 2025] [:error] [pid 52155:tid 52163] [client 66.249.64.101:50635] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUAtOhaJK6javjid3xwwLAAAAQU"]
[Mon Dec 15 23:46:17.481836 2025] [:error] [pid 52155:tid 52161] [client 66.249.64.101:38236] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUAtSRaJK6javjid3xwwTQAAAQM"]
[Mon Dec 15 23:46:21.232132 2025] [:error] [pid 52155:tid 52164] [client 66.249.64.101:50500] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUAtTRaJK6javjid3xwwUgAAAQY"]
[Mon Dec 15 23:48:08.042119 2025] [:error] [pid 52155:tid 52159] [client 66.249.64.101:43846] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUAtuBaJK6javjid3xwxBQAAAQE"]
[Mon Dec 15 23:48:14.649378 2025] [:error] [pid 31374:tid 31437] [client 66.249.64.101:36854] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUAtvpzSh8b7uk6RWiG8hQAAAEU"]
[Mon Dec 15 23:48:21.251861 2025] [:error] [pid 31373:tid 31429] [client 66.249.64.101:40786] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUAtxXFdnrU7ASwItVIyTAAAANg"]
[Mon Dec 15 23:48:27.847083 2025] [:error] [pid 31372:tid 31393] [client 66.249.64.101:58124] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUAtywN06qRtpJxyxHjx6wAAAJE"]
[Mon Dec 15 23:48:34.578028 2025] [:error] [pid 52155:tid 52173] [client 66.249.64.101:49152] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUAt0haJK6javjid3xwxOQAAAQ8"]
[Mon Dec 15 23:48:38.174508 2025] [:error] [pid 31459:tid 31481] [client 66.249.64.101:48720] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUAt1jqerS0TDpViRzvHQQAAABQ"]
[Mon Dec 15 23:48:50.370988 2025] [:error] [pid 31374:tid 31441] [client 66.249.64.101:58014] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUAt4pzSh8b7uk6RWiG8qwAAAEk"]
[Mon Dec 15 23:50:13.888779 2025] [:error] [pid 52155:tid 52179] [client 66.249.64.101:47198] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUAuNRaJK6javjid3xwyAwAAARU"]
[Mon Dec 15 23:50:20.497928 2025] [:error] [pid 52155:tid 52172] [client 66.249.64.101:46084] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUAuPBaJK6javjid3xwyJQAAAQ4"]
[Mon Dec 15 23:50:21.493476 2025] [:error] [pid 31372:tid 31398] [client 66.249.64.101:50360] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUAuPQN06qRtpJxyxHjyWgAAAJY"]
[Mon Dec 15 23:50:24.104038 2025] [:error] [pid 31373:tid 31407] [client 66.249.64.101:48825] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUAuQHFdnrU7ASwItVIy9gAAAMI"]
[Mon Dec 15 23:50:30.712050 2025] [:error] [pid 31459:tid 31471] [client 66.249.64.101:56564] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUAuRjqerS0TDpViRzvH5AAAAAo"]
[Mon Dec 15 23:50:37.323606 2025] [:error] [pid 31374:tid 31446] [client 66.249.64.101:57354] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUAuTZzSh8b7uk6RWiG9PQAAAE4"]
[Mon Dec 15 23:50:43.937778 2025] [:error] [pid 31374:tid 31433] [client 66.249.64.101:42088] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUAuU5zSh8b7uk6RWiG9SAAAAEE"]
[Mon Dec 15 23:50:49.311208 2025] [:error] [pid 31373:tid 31425] [client 66.249.64.101:59175] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUAuWXFdnrU7ASwItVIzDwAAANQ"]
[Mon Dec 15 23:50:55.941266 2025] [:error] [pid 52155:tid 52176] [client 66.249.64.101:53769] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUAuXxaJK6javjid3xwycQAAARI"]
[Mon Dec 15 23:50:56.058878 2025] [:error] [pid 31373:tid 31416] [client 66.249.64.101:51939] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUAuYHFdnrU7ASwItVIzJQAAAMs"]
[Mon Dec 15 23:52:44.382522 2025] [:error] [pid 31459:tid 31472] [client 66.249.64.101:63215] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUAuzDqerS0TDpViRzvIuAAAAAs"]
[Mon Dec 15 23:52:50.984241 2025] [:error] [pid 31374:tid 31447] [client 66.249.64.101:52320] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUAu0pzSh8b7uk6RWiG-AQAAAE8"]
[Mon Dec 15 23:52:57.591212 2025] [:error] [pid 31374:tid 31456] [client 66.249.64.101:37016] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUAu2ZzSh8b7uk6RWiG-CwAAAFg"]
[Mon Dec 15 23:53:01.257511 2025] [:error] [pid 31374:tid 31449] [client 66.249.64.101:49212] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUAu3ZzSh8b7uk6RWiG-IAAAAFE"]
[Mon Dec 15 23:53:04.832016 2025] [:error] [pid 31374:tid 31439] [client 66.249.64.101:49300] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUAu4JzSh8b7uk6RWiG-JQAAAEc"]
[Mon Dec 15 23:53:10.150603 2025] [:error] [pid 52155:tid 52182] [client 66.249.64.101:41205] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUAu5haJK6javjid3xwzkgAAARg"]
[Mon Dec 15 23:53:12.036481 2025] [:error] [pid 31373:tid 31407] [client 66.249.64.101:39714] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUAu6HFdnrU7ASwItVI0EQAAAMI"]
[Mon Dec 15 23:53:19.237917 2025] [:error] [pid 31373:tid 31418] [client 66.249.64.101:62771] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUAu73FdnrU7ASwItVI0HAAAAM0"]
[Mon Dec 15 23:53:26.441050 2025] [:error] [pid 52155:tid 52178] [client 66.249.64.101:37081] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUAu9haJK6javjid3xwzxwAAARQ"]
[Mon Dec 15 23:53:33.655706 2025] [:error] [pid 52155:tid 52166] [client 66.249.64.101:53313] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUAu_RaJK6javjid3xwz2QAAAQg"]
[Mon Dec 15 23:55:00.135451 2025] [:error] [pid 31372:tid 31386] [client 66.249.64.101:60480] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUAvVAN06qRtpJxyxHj0AQAAAIo"]
[Mon Dec 15 23:55:17.803026 2025] [:error] [pid 52155:tid 52166] [client 66.249.64.101:53879] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUAvZRaJK6javjid3xw1LgAAAQg"]
[Mon Dec 15 23:55:24.678061 2025] [:error] [pid 31372:tid 31381] [client 66.249.64.101:65439] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUAvbAN06qRtpJxyxHj0FAAAAIU"]
[Mon Dec 15 23:55:31.813502 2025] [:error] [pid 31373:tid 31415] [client 66.249.64.101:47430] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUAvc3FdnrU7ASwItVI08gAAAMo"]
[Mon Dec 15 23:55:38.426311 2025] [:error] [pid 31373:tid 31405] [client 66.249.64.101:46405] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUAvenFdnrU7ASwItVI0-AAAAMA"]
[Mon Dec 15 23:55:45.029700 2025] [:error] [pid 31374:tid 31445] [client 66.249.64.101:53569] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUAvgZzSh8b7uk6RWiG_mgAAAE0"]
[Mon Dec 15 23:55:51.627045 2025] [:error] [pid 31373:tid 31407] [client 66.249.64.101:42097] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUAvh3FdnrU7ASwItVI0_wAAAMI"]
[Mon Dec 15 23:57:11.338778 2025] [:error] [pid 52155:tid 52179] [client 66.249.64.101:47479] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUAv1xaJK6javjid3xw2QQAAARU"]
[Mon Dec 15 23:57:17.937058 2025] [:error] [pid 31374:tid 31443] [client 66.249.64.101:42534] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUAv3ZzSh8b7uk6RWiG_1QAAAEs"]
[Mon Dec 15 23:57:24.536924 2025] [:error] [pid 52155:tid 52160] [client 66.249.64.101:58468] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUAv5BaJK6javjid3xw2UAAAAQI"]
[Mon Dec 15 23:57:36.770904 2025] [:error] [pid 31459:tid 31480] [client 66.249.64.101:60877] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUAv8DqerS0TDpViRzvLbwAAABM"]
[Mon Dec 15 23:57:36.892250 2025] [:error] [pid 31373:tid 31427] [client 66.249.64.101:41681] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUAv8HFdnrU7ASwItVI1VgAAANY"]
[Mon Dec 15 23:57:43.500538 2025] [:error] [pid 31374:tid 31453] [client 66.249.64.101:41079] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUAv95zSh8b7uk6RWiG_4wAAAFU"]
[Mon Dec 15 23:57:47.098397 2025] [:error] [pid 31459:tid 31485] [client 66.249.64.101:57558] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUAv-zqerS0TDpViRzvLegAAABg"]
[Mon Dec 15 23:57:53.112260 2025] [:error] [pid 31459:tid 31477] [client 66.249.64.101:56724] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUAwATqerS0TDpViRzvLgAAAABA"]
[Mon Dec 15 23:58:00.316414 2025] [:error] [pid 31372:tid 31378] [client 66.249.64.101:35402] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUAwCAN06qRtpJxyxHj0iQAAAII"]
[Mon Dec 15 23:59:31.183083 2025] [:error] [pid 31373:tid 31406] [client 66.249.64.101:52124] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUAwY3FdnrU7ASwItVI1sgAAAME"]
[Mon Dec 15 23:59:37.780695 2025] [:error] [pid 31459:tid 31471] [client 66.249.64.101:42263] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUAwaTqerS0TDpViRzvL7wAAAAo"]
[Mon Dec 15 23:59:44.388248 2025] [:error] [pid 31459:tid 31464] [client 66.249.64.101:43300] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUAwcDqerS0TDpViRzvL-gAAAAM"]
[Mon Dec 15 23:59:51.109866 2025] [:error] [pid 31372:tid 31376] [client 66.249.64.101:44782] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUAwdwN06qRtpJxyxHj03QAAAIA"]
[Mon Dec 15 23:59:58.566403 2025] [:error] [pid 31372:tid 31389] [client 66.249.64.101:64250] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUAwfgN06qRtpJxyxHj05AAAAI0"]
[Tue Dec 16 00:00:07.875602 2025] [:error] [pid 31373:tid 31429] [client 66.249.64.101:48711] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUAwh3FdnrU7ASwItVI11gAAANg"]
[Tue Dec 16 00:00:18.751980 2025] [:error] [pid 52155:tid 52173] [client 66.249.64.101:36776] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUAwkhaJK6javjid3xw3KAAAAQ8"]
[Tue Dec 16 00:00:25.364405 2025] [:error] [pid 52155:tid 52173] [client 66.249.64.101:64652] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUAwmRaJK6javjid3xw3RQAAAQ8"]
[Tue Dec 16 00:02:00.452528 2025] [:error] [pid 52155:tid 52170] [client 66.249.64.101:64943] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUAw-BaJK6javjid3xw32gAAAQw"]
[Tue Dec 16 00:02:07.076339 2025] [:error] [pid 52155:tid 52160] [client 66.249.64.101:41707] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUAw_xaJK6javjid3xw37QAAAQI"]
[Tue Dec 16 00:02:15.187030 2025] [:error] [pid 31374:tid 31448] [client 66.249.64.101:35657] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUAxB5zSh8b7uk6RWiHA8QAAAFA"]
[Tue Dec 16 00:02:15.283953 2025] [:error] [pid 31374:tid 31435] [client 66.249.64.101:44155] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUAxB5zSh8b7uk6RWiHA8gAAAEM"]
[Tue Dec 16 00:10:08.236299 2025] [:error] [pid 34409:tid 34432] [client 66.249.64.101:37848] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUAy4Iwgv-_jDvPU81FjagAAANI"]
[Tue Dec 16 00:10:15.442746 2025] [:error] [pid 34409:tid 34419] [client 66.249.64.101:39980] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUAy54wgv-_jDvPU81FjeQAAAMU"]
[Tue Dec 16 00:10:22.652533 2025] [:error] [pid 34495:tid 34516] [client 66.249.64.101:61589] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUAy7mZCUf_mSR4srxtZbQAAAVM"]
[Tue Dec 16 00:10:29.863020 2025] [:error] [pid 34495:tid 34498] [client 66.249.64.101:38278] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUAy9WZCUf_mSR4srxtZgAAAAUE"]
[Tue Dec 16 00:10:37.050532 2025] [:error] [pid 34495:tid 34500] [client 66.249.64.101:45388] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUAy_WZCUf_mSR4srxtZjAAAAUM"]
[Tue Dec 16 00:10:44.269531 2025] [:error] [pid 34495:tid 34519] [client 66.249.64.101:49139] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUAzBGZCUf_mSR4srxtZnAAAAVY"]
[Tue Dec 16 00:10:55.889980 2025] [:error] [pid 34495:tid 34514] [client 66.249.64.101:49532] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUAzD2ZCUf_mSR4srxtZtAAAAVE"]
[Tue Dec 16 00:10:56.003530 2025] [:error] [pid 34409:tid 34429] [client 66.249.64.101:45814] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUAzEIwgv-_jDvPU81FjogAAAM8"]
[Tue Dec 16 00:10:59.493516 2025] [:error] [pid 34411:tid 34484] [client 66.249.64.101:61781] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUAzEx05Egz6aV0buEyZhgAAABA"]
[Tue Dec 16 00:12:38.865359 2025] [:error] [pid 34410:tid 34463] [client 66.249.64.101:38542] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUAzdsWDXTJsXAHPFUmMaAAAAFY"]
[Tue Dec 16 00:12:46.770294 2025] [:error] [pid 34495:tid 34502] [client 66.249.64.101:37193] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUAzfmZCUf_mSR4srxtcGwAAAUU"]
[Tue Dec 16 00:13:08.396506 2025] [:error] [pid 34410:tid 34448] [client 66.249.64.101:61399] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUAzlMWDXTJsXAHPFUmMwwAAAEc"]
[Tue Dec 16 00:13:18.454655 2025] [:error] [pid 34410:tid 34463] [client 66.249.64.101:52493] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUAznsWDXTJsXAHPFUmM_gAAAFY"]
[Tue Dec 16 00:13:25.172164 2025] [:error] [pid 34411:tid 34475] [client 66.249.64.101:53805] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUAzpR05Egz6aV0buEycoQAAAAc"]
[Tue Dec 16 00:14:52.619928 2025] [:error] [pid 34409:tid 34437] [client 66.249.64.101:59981] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUAz_Iwgv-_jDvPU81FmawAAANc"]
[Tue Dec 16 00:14:56.485322 2025] [:error] [pid 34495:tid 34499] [client 66.249.64.101:62410] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUA0AGZCUf_mSR4srxtdyQAAAUI"]
[Tue Dec 16 00:15:03.700428 2025] [:error] [pid 34411:tid 34478] [client 66.249.64.101:51593] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUA0Bx05Egz6aV0buEydwgAAAAo"]
[Tue Dec 16 00:15:10.898809 2025] [:error] [pid 34495:tid 34501] [client 66.249.64.101:56359] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUA0DmZCUf_mSR4srxtd5AAAAUQ"]
[Tue Dec 16 00:15:18.116112 2025] [:error] [pid 34410:tid 34443] [client 66.249.64.101:40052] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUA0FsWDXTJsXAHPFUmOCgAAAEI"]
[Tue Dec 16 00:15:27.769230 2025] [:error] [pid 34409:tid 34425] [client 66.249.64.101:61141] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUA0H4wgv-_jDvPU81FmnQAAAMs"]
[Tue Dec 16 00:15:32.527696 2025] [:error] [pid 34409:tid 34437] [client 66.249.64.101:61559] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUA0JIwgv-_jDvPU81FmpwAAANc"]
[Tue Dec 16 00:15:39.729966 2025] [:error] [pid 34411:tid 34487] [client 66.249.64.101:46699] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUA0Kx05Egz6aV0buEyd-QAAABM"]
[Tue Dec 16 00:15:46.937135 2025] [:error] [pid 34411:tid 34488] [client 66.249.64.101:50286] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUA0Mh05Egz6aV0buEyd_QAAABQ"]
[Tue Dec 16 00:17:10.790466 2025] [:error] [pid 34411:tid 34492] [client 34.186.18.245:49928] [client 34.186.18.245] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paramountbaldivis.com"] [uri "/.git/config"] [unique_id "aUA0hh05Egz6aV0buEyeqwAAABg"]
[Tue Dec 16 00:17:35.048306 2025] [:error] [pid 34410:tid 34450] [client 66.249.64.101:45224] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUA0n8WDXTJsXAHPFUmOzAAAAEk"]
[Tue Dec 16 00:17:36.038687 2025] [:error] [pid 34410:tid 34447] [client 66.249.64.101:36162] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUA0oMWDXTJsXAHPFUmOzgAAAEY"]
[Tue Dec 16 00:17:42.255754 2025] [:error] [pid 34410:tid 34444] [client 66.249.64.101:42710] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUA0psWDXTJsXAHPFUmO1AAAAEM"]
[Tue Dec 16 00:17:49.450938 2025] [:error] [pid 34410:tid 34454] [client 66.249.64.101:52720] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUA0rcWDXTJsXAHPFUmO4AAAAE0"]
[Tue Dec 16 00:18:03.867930 2025] [:error] [pid 34410:tid 34443] [client 66.249.64.101:48443] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUA0u8WDXTJsXAHPFUmO-gAAAEI"]
[Tue Dec 16 00:18:11.078097 2025] [:error] [pid 34411:tid 34470] [client 66.249.64.101:43255] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUA0wx05Egz6aV0buEyfTQAAAAI"]
[Tue Dec 16 00:18:18.364872 2025] [:error] [pid 34409:tid 34429] [client 66.249.64.101:59235] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUA0yowgv-_jDvPU81FnpwAAAM8"]
[Tue Dec 16 00:18:25.483922 2025] [:error] [pid 34411:tid 34469] [client 66.249.64.101:41158] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUA00R05Egz6aV0buEyfbQAAAAE"]
[Tue Dec 16 00:20:06.371357 2025] [:error] [pid 34411:tid 34484] [client 66.249.64.101:40000] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUA1Nh05Egz6aV0buEygCQAAABA"]
[Tue Dec 16 00:20:14.984290 2025] [:error] [pid 34411:tid 34491] [client 66.249.64.101:61089] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUA1Ph05Egz6aV0buEygFQAAABc"]
[Tue Dec 16 00:20:21.584101 2025] [:error] [pid 34411:tid 34483] [client 66.249.64.101:62471] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUA1RR05Egz6aV0buEygHAAAAA8"]
[Tue Dec 16 00:20:28.186350 2025] [:error] [pid 34409:tid 34432] [client 66.249.64.101:41492] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUA1TIwgv-_jDvPU81FocAAAANI"]
[Tue Dec 16 00:20:28.319561 2025] [:error] [pid 34410:tid 34459] [client 66.249.64.101:41506] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUA1TMWDXTJsXAHPFUmQAAAAAFI"]
[Tue Dec 16 00:20:40.545973 2025] [:error] [pid 34411:tid 34480] [client 66.249.64.101:35804] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUA1WB05Egz6aV0buEygNAAAAAw"]
[Tue Dec 16 00:20:47.155705 2025] [:error] [pid 34495:tid 34514] [client 66.249.64.101:48089] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUA1X2ZCUf_mSR4srxthOAAAAVE"]
[Tue Dec 16 00:20:51.076286 2025] [:error] [pid 34410:tid 34464] [client 66.249.64.101:45937] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUA1Y8WDXTJsXAHPFUmQGAAAAFc"]
[Tue Dec 16 00:20:57.681186 2025] [:error] [pid 34410:tid 34451] [client 66.249.64.101:55937] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUA1acWDXTJsXAHPFUmQHAAAAEo"]
[Tue Dec 16 00:22:33.186468 2025] [:error] [pid 34410:tid 34445] [client 66.249.64.101:53791] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUA1ycWDXTJsXAHPFUmQuwAAAEQ"]
[Tue Dec 16 00:22:39.912043 2025] [:error] [pid 34411:tid 34486] [client 66.249.64.101:45239] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUA1zx05Egz6aV0buEyhJQAAABI"]
[Tue Dec 16 00:22:48.033238 2025] [:error] [pid 34410:tid 34445] [client 66.249.64.101:37796] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUA12MWDXTJsXAHPFUmQ5gAAAEQ"]
[Tue Dec 16 00:23:13.761290 2025] [:error] [pid 34495:tid 34513] [client 66.249.64.101:55203] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUA18WZCUf_mSR4srxticAAAAVA"]
[Tue Dec 16 00:23:20.970183 2025] [:error] [pid 34411:tid 34470] [client 66.249.64.101:47406] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUA1-B05Egz6aV0buEyhWQAAAAI"]
[Tue Dec 16 00:25:52.656373 2025] [:error] [pid 34411:tid 34481] [client 66.249.64.101:47256] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUA2kB05Egz6aV0buEyimAAAAA0"]
[Tue Dec 16 00:25:59.262742 2025] [:error] [pid 34411:tid 34469] [client 66.249.64.101:37046] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUA2lx05Egz6aV0buEyipAAAAAE"]
[Tue Dec 16 00:26:22.621315 2025] [:error] [pid 34411:tid 34478] [client 66.249.64.101:63467] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUA2rh05Egz6aV0buEyiwAAAAAo"]
[Tue Dec 16 00:26:26.132030 2025] [:error] [pid 34495:tid 34518] [client 66.249.64.101:41329] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUA2smZCUf_mSR4srxtkyAAAAVU"]
[Tue Dec 16 00:26:29.738878 2025] [:error] [pid 34410:tid 34453] [client 66.249.64.101:51048] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUA2tcWDXTJsXAHPFUmSOAAAAEw"]
[Tue Dec 16 00:26:35.564651 2025] [:error] [pid 34410:tid 34459] [client 66.249.64.101:65371] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUA2u8WDXTJsXAHPFUmSRwAAAFI"]
[Tue Dec 16 00:26:43.260102 2025] [:error] [pid 34495:tid 34498] [client 66.249.64.101:48884] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUA2w2ZCUf_mSR4srxtk6QAAAUE"]
[Tue Dec 16 00:28:26.585146 2025] [:error] [pid 34495:tid 34502] [client 66.249.64.101:36827] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUA3KmZCUf_mSR4srxtl0AAAAUU"]
[Tue Dec 16 00:28:33.180400 2025] [:error] [pid 31566:tid 31571] [client 66.249.64.101:53166] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUA3Mfp1NDLK4uehYB9FJQAAAIE"]
[Tue Dec 16 00:28:39.864265 2025] [:error] [pid 34495:tid 34500] [client 66.249.64.101:44021] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUA3N2ZCUf_mSR4srxtmDAAAAUM"]
[Tue Dec 16 00:28:47.568360 2025] [:error] [pid 31566:tid 31590] [client 66.249.64.101:45119] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUA3P_p1NDLK4uehYB9FTwAAAJQ"]
[Tue Dec 16 00:28:54.182735 2025] [:error] [pid 34409:tid 34435] [client 66.249.64.101:46668] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUA3Rowgv-_jDvPU81Fr8wAAANU"]
[Tue Dec 16 00:28:54.300242 2025] [:error] [pid 34409:tid 34422] [client 66.249.64.101:52527] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUA3Rowgv-_jDvPU81Fr9AAAAMg"]
[Tue Dec 16 00:29:01.317422 2025] [:error] [pid 34495:tid 34521] [client 66.249.64.101:44825] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUA3TWZCUf_mSR4srxtmPAAAAVg"]
[Tue Dec 16 00:30:33.415770 2025] [:error] [pid 34410:tid 34463] [client 66.249.64.101:38296] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUA3qcWDXTJsXAHPFUmTmAAAAFY"]
[Tue Dec 16 00:30:40.620071 2025] [:error] [pid 34411:tid 34481] [client 66.249.64.101:44437] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUA3sB05Egz6aV0buEykoQAAAA0"]
[Tue Dec 16 00:30:47.744641 2025] [:error] [pid 34411:tid 34483] [client 66.249.64.101:61409] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUA3tx05Egz6aV0buEykrgAAAA8"]
[Tue Dec 16 00:30:55.943410 2025] [:error] [pid 31566:tid 31571] [client 66.249.64.101:38803] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUA3v_p1NDLK4uehYB9GwQAAAIE"]
[Tue Dec 16 00:31:02.554237 2025] [:error] [pid 34410:tid 34457] [client 66.249.64.101:40905] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUA3xsWDXTJsXAHPFUmT5AAAAFA"]
[Tue Dec 16 00:31:14.873792 2025] [:error] [pid 31566:tid 31572] [client 66.249.64.101:50377] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUA30vp1NDLK4uehYB9G4gAAAII"]
[Tue Dec 16 00:32:44.287567 2025] [:error] [pid 34411:tid 34479] [client 66.249.64.101:46859] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUA4LB05Egz6aV0buEylQQAAAAs"]
[Tue Dec 16 00:32:50.884767 2025] [:error] [pid 31566:tid 31577] [client 66.249.64.101:59256] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUA4Mvp1NDLK4uehYB9IAwAAAIc"]
[Tue Dec 16 00:33:11.183241 2025] [:error] [pid 34411:tid 34470] [client 66.249.64.101:37348] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUA4Rx05Egz6aV0buEyldAAAAAI"]
[Tue Dec 16 00:33:20.425843 2025] [:error] [pid 34410:tid 34454] [client 66.249.64.101:37609] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUA4UMWDXTJsXAHPFUmUxgAAAE0"]
[Tue Dec 16 00:33:27.037165 2025] [:error] [pid 34410:tid 34465] [client 66.249.64.101:54166] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUA4V8WDXTJsXAHPFUmUzAAAAFg"]
[Tue Dec 16 00:33:28.613742 2025] [:error] [pid 34409:tid 34429] [client 66.249.64.101:37260] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUA4WIwgv-_jDvPU81FtyQAAAM8"]
[Tue Dec 16 00:33:30.795343 2025] [:error] [pid 34495:tid 34514] [client 66.249.64.101:55945] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUA4WmZCUf_mSR4srxtn9AAAAVE"]
[Tue Dec 16 00:34:52.871068 2025] [:error] [pid 34495:tid 34517] [client 66.249.64.101:55507] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUA4rGZCUf_mSR4srxtolgAAAVQ"]
[Tue Dec 16 00:35:09.851419 2025] [:error] [pid 31566:tid 31587] [client 66.249.64.101:48478] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUA4vfp1NDLK4uehYB9JawAAAJE"]
[Tue Dec 16 00:35:16.553660 2025] [:error] [pid 31566:tid 31589] [client 66.249.64.101:52295] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUA4xPp1NDLK4uehYB9JdwAAAJM"]
[Tue Dec 16 00:35:23.256371 2025] [:error] [pid 34409:tid 34432] [client 66.249.64.101:38920] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUA4y4wgv-_jDvPU81FuaAAAANI"]
[Tue Dec 16 00:37:24.255965 2025] [:error] [pid 34409:tid 34416] [client 66.249.64.101:57227] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUA5RIwgv-_jDvPU81FvFQAAAMI"]
[Tue Dec 16 00:37:31.515645 2025] [:error] [pid 34411:tid 34482] [client 66.249.64.101:42883] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUA5Sx05Egz6aV0buEynMgAAAA4"]
[Tue Dec 16 00:37:38.630660 2025] [:error] [pid 34410:tid 34445] [client 66.249.64.101:42693] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUA5UsWDXTJsXAHPFUmWTgAAAEQ"]
[Tue Dec 16 00:37:53.029350 2025] [:error] [pid 31566:tid 31590] [client 66.249.64.101:50824] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUA5Yfp1NDLK4uehYB9LkgAAAJQ"]
[Tue Dec 16 00:39:41.127647 2025] [:error] [pid 31566:tid 31575] [client 66.249.64.101:45679] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUA5zfp1NDLK4uehYB9NYgAAAIU"]
[Tue Dec 16 00:39:47.842724 2025] [:error] [pid 34409:tid 34438] [client 66.249.64.101:64198] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUA504wgv-_jDvPU81FwmwAAANg"]
[Tue Dec 16 00:39:48.476947 2025] [:error] [pid 34495:tid 34519] [client 66.249.64.101:47646] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUA51GZCUf_mSR4srxtrGAAAAVY"]
[Tue Dec 16 00:39:55.544747 2025] [:error] [pid 34409:tid 34432] [client 66.249.64.101:51977] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUA524wgv-_jDvPU81FwqQAAANI"]
[Tue Dec 16 00:40:02.756404 2025] [:error] [pid 34495:tid 34507] [client 66.249.64.101:48224] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUA54mZCUf_mSR4srxtrMgAAAUo"]
[Tue Dec 16 00:40:09.947512 2025] [:error] [pid 34411:tid 34476] [client 66.249.64.101:43927] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUA56R05Egz6aV0buEyo_AAAAAg"]
[Tue Dec 16 00:40:31.566491 2025] [:error] [pid 34409:tid 34414] [client 66.249.64.101:41550] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUA5_4wgv-_jDvPU81FwxwAAAMA"]
[Tue Dec 16 00:40:32.266966 2025] [:error] [pid 34411:tid 34468] [client 66.249.64.101:46804] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUA6AB05Egz6aV0buEypEwAAAAA"]
[Tue Dec 16 00:58:32.540578 2025] [:error] [pid 34495:tid 34501] [client 66.249.64.101:61064] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUA-OGZCUf_mSR4srxtzGAAAAUQ"]
[Tue Dec 16 00:58:53.549811 2025] [:error] [pid 34411:tid 34478] [client 66.249.64.101:48273] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUA-TR05Egz6aV0buEywWQAAAAo"]
[Tue Dec 16 00:58:53.663754 2025] [:error] [pid 34411:tid 34475] [client 66.249.64.101:60382] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUA-TR05Egz6aV0buEywWgAAAAc"]
[Tue Dec 16 00:59:01.379635 2025] [:error] [pid 31566:tid 31586] [client 66.249.64.101:40625] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUA-Vfp1NDLK4uehYB9WlQAAAJA"]
[Tue Dec 16 01:00:54.760347 2025] [:error] [pid 34495:tid 34501] [client 209.141.61.93:11601] [client 209.141.61.93] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.141.61.93, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aUA-xmZCUf_mSR4srxt0oAAAAUQ"]
[Tue Dec 16 01:01:11.094339 2025] [:error] [pid 34411:tid 34480] [client 66.249.64.102:54308] [client 66.249.64.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUA-1x05Egz6aV0buEyxuwAAAAw"]
[Tue Dec 16 01:06:49.786951 2025] [:error] [pid 34410:tid 34465] [client 66.249.64.101:53382] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUBAKcWDXTJsXAHPFUmhjAAAAFg"]
[Tue Dec 16 01:06:50.528004 2025] [:error] [pid 34495:tid 34519] [client 209.141.61.93:53169] [client 209.141.61.93] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.141.61.93, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aUBAKmZCUf_mSR4srxt29wAAAVY"]
[Tue Dec 16 01:07:20.509000 2025] [:error] [pid 34409:tid 34428] [client 66.249.64.101:38131] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUBASIwgv-_jDvPU81F6kAAAAM4"]
[Tue Dec 16 01:07:27.116513 2025] [:error] [pid 31566:tid 31570] [client 66.249.64.101:49488] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUBAT_p1NDLK4uehYB9cdAAAAIA"]
[Tue Dec 16 01:07:33.855740 2025] [:error] [pid 34495:tid 34518] [client 66.249.64.101:57995] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUBAVWZCUf_mSR4srxt3QAAAAVU"]
[Tue Dec 16 01:07:40.238924 2025] [:error] [pid 34409:tid 34417] [client 66.249.64.101:42889] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUBAXIwgv-_jDvPU81F6sQAAAMM"]
[Tue Dec 16 01:08:59.507481 2025] [:error] [pid 34409:tid 34438] [client 66.249.64.101:57879] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUBAq4wgv-_jDvPU81F7GwAAANg"]
[Tue Dec 16 01:09:13.911354 2025] [:error] [pid 34411:tid 34492] [client 66.249.64.101:39837] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUBAuR05Egz6aV0buEy02AAAABg"]
[Tue Dec 16 01:09:21.123848 2025] [:error] [pid 34495:tid 34514] [client 66.249.64.101:63523] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUBAwWZCUf_mSR4srxt3zwAAAVE"]
[Tue Dec 16 01:09:39.118746 2025] [:error] [pid 34411:tid 34471] [client 66.249.64.101:38795] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUBA0x05Egz6aV0buEy08wAAAAM"]
[Tue Dec 16 01:16:28.745406 2025] [:error] [pid 31566:tid 31577] [client 66.249.64.101:62063] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUBCbPp1NDLK4uehYB9g-AAAAIc"]
[Tue Dec 16 01:58:06.853890 2025] [:error] [pid 34411:tid 34469] [client 159.89.42.101:53004] [client 159.89.42.101] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paramountbaldivis.com"] [uri "/.git/config"] [unique_id "aUBMLh05Egz6aV0buEzJKwAAAAE"]
[Tue Dec 16 03:07:44.757435 2025] [:error] [pid 34410:tid 34462] [client 66.249.64.101:55923] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUBcgMWDXTJsXAHPFUnOHwAAAFU"]
[Tue Dec 16 03:08:50.650613 2025] [:error] [pid 34410:tid 34441] [client 174.138.83.242:40078] [client 174.138.83.242] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.paramountbaldivis.com"] [uri "/.git/config"] [unique_id "aUBcwsWDXTJsXAHPFUnOqwAAAEA"]
[Tue Dec 16 05:35:23.897944 2025] [:error] [pid 18408:tid 18434] [client 66.249.64.101:57364] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUB_Gzi2Gr8pDzjrVBD2uQAAANg"]
[Tue Dec 16 05:36:00.334159 2025] [:error] [pid 51991:tid 52008] [client 66.249.64.101:39162] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUB_QK7zKCVJSuwV1xY3qAAAAQ8"]
[Tue Dec 16 06:01:32.470189 2025] [:error] [pid 18408:tid 18430] [client 45.148.10.204:13638] [client 45.148.10.204] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paramountbaldivis.com"] [uri "/.git/config"] [unique_id "aUCFPDi2Gr8pDzjrVBABOwAAANQ"]
[Tue Dec 16 06:01:33.928677 2025] [:error] [pid 51991:tid 52013] [client 45.148.10.204:13646] [client 45.148.10.204] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paramountbaldivis.com"] [uri "/.env"] [unique_id "aUCFPa7zKCVJSuwV1xZE6AAAARQ"]
[Tue Dec 16 06:01:35.074051 2025] [:error] [pid 18322:tid 18348] [client 45.148.10.204:48220] [client 45.148.10.204] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paramountbaldivis.com"] [uri "/.env.example"] [unique_id "aUCFP5sCeWBjrw28XtwQ0wAAABY"]
[Tue Dec 16 06:01:36.848420 2025] [:error] [pid 51991:tid 52010] [client 45.148.10.204:48222] [client 45.148.10.204] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paramountbaldivis.com"] [uri "/.env.development"] [unique_id "aUCFQK7zKCVJSuwV1xZE9gAAARE"]
[Tue Dec 16 06:01:38.303786 2025] [:error] [pid 18324:tid 18388] [client 45.148.10.204:48226] [client 45.148.10.204] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paramountbaldivis.com"] [uri "/.env.production"] [unique_id "aUCFQqG4um2mD1VpJHKauQAAAIg"]
[Tue Dec 16 06:01:39.443687 2025] [:error] [pid 18324:tid 18385] [client 45.148.10.204:48234] [client 45.148.10.204] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paramountbaldivis.com"] [uri "/api/.env"] [unique_id "aUCFQ6G4um2mD1VpJHKaugAAAIU"]
[Tue Dec 16 06:01:41.219720 2025] [:error] [pid 18324:tid 18395] [client 45.148.10.204:48250] [client 45.148.10.204] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paramountbaldivis.com"] [uri "/backend/.env"] [unique_id "aUCFRaG4um2mD1VpJHKauwAAAI8"]
[Tue Dec 16 06:02:26.342960 2025] [:error] [pid 18322:tid 18332] [client 45.148.10.204:20440] [client 45.148.10.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/debug.log"] [unique_id "aUCFcpsCeWBjrw28XtwQ_QAAAAY"]
[Tue Dec 16 08:32:52.122357 2025] [:error] [pid 51991:tid 52006] [client 170.106.197.109:38410] [client 170.106.197.109] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||paramountbaldivis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUCotK7zKCVJSuwV1xaXWgAAAQ0"]
[Tue Dec 16 09:25:10.588424 2025] [:error] [pid 51991:tid 51996] [client 144.217.252.106:48992] [client 144.217.252.106] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.217.252.106, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aUC09q7zKCVJSuwV1xa0bQAAAQM"]
[Tue Dec 16 09:56:43.131435 2025] [:error] [pid 18408:tid 18420] [client 13.74.149.244:13441] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/pu.php"] [unique_id "aUC8Wzi2Gr8pDzjrVBBb5gAAAMo"]
[Tue Dec 16 09:56:43.665174 2025] [:error] [pid 18408:tid 18428] [client 13.74.149.244:10914] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/pu.php"] [unique_id "aUC8Wzi2Gr8pDzjrVBBb5wAAANI"]
[Tue Dec 16 09:56:44.200486 2025] [:error] [pid 12330:tid 12337] [client 13.74.149.244:2105] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/pu.php"] [unique_id "aUC8XF6iIQEVCIh8V1m-KgAAAYM"]
[Tue Dec 16 09:56:44.735245 2025] [:error] [pid 18323:tid 18363] [client 13.74.149.244:15334] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/pu.php"] [unique_id "aUC8XDJB6UFxIutsA8aZxgAAAEo"]
[Tue Dec 16 09:56:45.271951 2025] [:error] [pid 18324:tid 18402] [client 13.74.149.244:3097] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/666.php"] [unique_id "aUC8XaG4um2mD1VpJHL1XAAAAJY"]
[Tue Dec 16 09:56:45.808015 2025] [:error] [pid 18324:tid 18399] [client 13.74.149.244:3687] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/666.php"] [unique_id "aUC8XaG4um2mD1VpJHL1XQAAAJM"]
[Tue Dec 16 09:56:46.343310 2025] [:error] [pid 18324:tid 18383] [client 13.74.149.244:5090] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/666.php"] [unique_id "aUC8XqG4um2mD1VpJHL1XwAAAIM"]
[Tue Dec 16 09:56:46.879126 2025] [:error] [pid 18324:tid 18394] [client 13.74.149.244:12329] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/666.php"] [unique_id "aUC8XqG4um2mD1VpJHL1YAAAAI4"]
[Tue Dec 16 09:56:47.414934 2025] [:error] [pid 12330:tid 12352] [client 13.74.149.244:3115] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/sfcl.php"] [unique_id "aUC8X16iIQEVCIh8V1m-LwAAAZI"]
[Tue Dec 16 09:56:47.952378 2025] [:error] [pid 12330:tid 12346] [client 13.74.149.244:10156] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/sfcl.php"] [unique_id "aUC8X16iIQEVCIh8V1m-MAAAAYw"]
[Tue Dec 16 09:56:48.487469 2025] [:error] [pid 18323:tid 18354] [client 13.74.149.244:13314] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/sfcl.php"] [unique_id "aUC8YDJB6UFxIutsA8aZyQAAAEE"]
[Tue Dec 16 09:56:49.024660 2025] [:error] [pid 51991:tid 51995] [client 13.74.149.244:3706] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/sfcl.php"] [unique_id "aUC8Ya7zKCVJSuwV1xa_SwAAAQI"]
[Tue Dec 16 09:56:49.560103 2025] [:error] [pid 51991:tid 52008] [client 13.74.149.244:8227] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/npcs7k.php"] [unique_id "aUC8Ya7zKCVJSuwV1xa_TAAAAQ8"]
[Tue Dec 16 09:56:50.094509 2025] [:error] [pid 18324:tid 18388] [client 13.74.149.244:10605] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/npcs7k.php"] [unique_id "aUC8YqG4um2mD1VpJHL1YwAAAIg"]
[Tue Dec 16 09:56:50.629329 2025] [:error] [pid 12330:tid 12356] [client 13.74.149.244:10616] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/npcs7k.php"] [unique_id "aUC8Yl6iIQEVCIh8V1m-MwAAAZY"]
[Tue Dec 16 09:56:51.163518 2025] [:error] [pid 51991:tid 51996] [client 13.74.149.244:3200] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/npcs7k.php"] [unique_id "aUC8Y67zKCVJSuwV1xa_TgAAAQM"]
[Tue Dec 16 11:31:17.622679 2025] [:error] [pid 18323:tid 18364] [client 207.244.254.77:48292] [client 207.244.254.77] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 207.244.254.77, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aUDShTJB6UFxIutsA8ayPQAAAEs"]
[Tue Dec 16 12:33:37.222816 2025] [:error] [pid 18322:tid 18339] [client 125.16.53.46:51977] [client 125.16.53.46] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 125.16.53.46, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aUDhIZsCeWBjrw28XtyeMQAAAA0"]
[Tue Dec 16 12:34:00.329654 2025] [:error] [pid 12330:tid 12356] [client 125.161.27.22:52923] [client 125.161.27.22] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 125.161.27.22, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aUDhOF6iIQEVCIh8V1kDqQAAAZY"]
[Tue Dec 16 13:48:04.338281 2025] [:error] [pid 51991:tid 52002] [client 77.95.113.65:47896] [client 77.95.113.65] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 77.95.113.65, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aUDylK7zKCVJSuwV1xYZMwAAAQk"]
[Tue Dec 16 15:05:23.382490 2025] [:error] [pid 18322:tid 18329] [client 43.159.152.184:58070] [client 43.159.152.184] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||paramountbaldivis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUEEs5sCeWBjrw28XtzJtQAAAAM"]
[Tue Dec 16 16:10:42.874450 2025] [:error] [pid 35998:tid 36004] [client 51.38.135.40:39162] [client 51.38.135.40] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 51.38.135.40, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aUEUAhKnhGuuhGxBSLOISgAAAUM"]
[Tue Dec 16 16:58:18.300964 2025] [:error] [pid 18324:tid 18391] [client 182.44.9.147:53588] [client 182.44.9.147] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.paramountbaldivis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.paramountbaldivis.com"] [uri "/"] [unique_id "aUEfKqG4um2mD1VpJHJ0ZwAAAIs"]
[Tue Dec 16 20:09:56.263105 2025] [:error] [pid 51991:tid 52004] [client 43.166.1.243:53116] [client 43.166.1.243] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.paramountbaldivis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.paramountbaldivis.com"] [uri "/"] [unique_id "aUFMFK7zKCVJSuwV1xa2LwAAAQs"]
[Tue Dec 16 20:55:54.441408 2025] [:error] [pid 18408:tid 18421] [client 5.135.142.201:47010] [client 5.135.142.201] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.135.142.201, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aUFW2ji2Gr8pDzjrVBAufAAAAMs"]
[Tue Dec 16 21:42:10.162586 2025] [:error] [pid 12330:tid 12355] [client 124.117.192.214:59240] [client 124.117.192.214] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.paramountbaldivis.com"] [uri "/"] [unique_id "aUFhsl6iIQEVCIh8V1mfoQAAAZU"]
[Tue Dec 16 23:00:54.463717 2025] [:error] [pid 12330:tid 12346] [client 159.26.120.29:59476] [client 159.26.120.29] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 159.26.120.29, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aUF0Jl6iIQEVCIh8V1m0dAAAAYw"]
[Tue Dec 16 23:00:57.557519 2025] [:error] [pid 12330:tid 12348] [client 159.26.120.29:59476] [client 159.26.120.29] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||paramountbaldivis.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "paramountbaldivis.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aUF0KV6iIQEVCIh8V1m0dgAAAY4"]
[Tue Dec 16 23:00:59.205829 2025] [:error] [pid 12330:tid 12342] [client 159.26.120.29:59476] [client 159.26.120.29] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 159.26.120.29, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aUF0K16iIQEVCIh8V1m0eQAAAYg"]
[Tue Dec 16 23:01:02.692326 2025] [:error] [pid 18408:tid 18431] [client 159.26.120.29:43402] [client 159.26.120.29] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 159.26.120.29, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aUF0Lji2Gr8pDzjrVBBdpQAAANU"]
[Tue Dec 16 23:01:05.095375 2025] [:error] [pid 18324:tid 18389] [client 159.26.120.29:49614] [client 159.26.120.29] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 159.26.120.29, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aUF0MaG4um2mD1VpJHLNMQAAAIk"]
[Tue Dec 16 23:01:05.095530 2025] [:error] [pid 18324:tid 18389] [client 159.26.120.29:49614] [client 159.26.120.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 159.26.120.29, counter = 7"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aUF0MaG4um2mD1VpJHLNMQAAAIk"]
[Tue Dec 16 23:32:25.910590 2025] [:error] [pid 51991:tid 51995] [client 137.184.76.185:50742] [client 137.184.76.185] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 137.184.76.185, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aUF7ia7zKCVJSuwV1xb8wgAAAQI"]
[Tue Dec 16 23:40:53.576605 2025] [:error] [pid 35998:tid 36023] [client 36.41.75.167:37806] [client 36.41.75.167] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||paramountbaldivis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUF9hRKnhGuuhGxBSLPgQQAAAVY"]
[Wed Dec 17 01:48:34.538707 2025] [:error] [pid 7514:tid 7529] [client 94.205.249.38:15784] [client 94.205.249.38] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.205.249.38, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aUGbckJ2oigi4i7K2nCougAAAQ0"]
[Wed Dec 17 02:30:57.576140 2025] [:error] [pid 64837:tid 64917] [client 66.249.64.101:50022] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUGlYboJEzr5Ydl6WcRTpAAAAJc"]
[Wed Dec 17 02:31:11.756287 2025] [:error] [pid 7514:tid 7524] [client 66.249.64.101:51286] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUGlb0J2oigi4i7K2nC_7AAAAQg"]
[Wed Dec 17 02:31:33.154208 2025] [:error] [pid 7514:tid 7520] [client 66.249.64.101:40780] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUGlhUJ2oigi4i7K2nDAZgAAAQQ"]
[Wed Dec 17 03:56:05.026277 2025] [:error] [pid 58316:tid 58439] [client 85.239.234.122:44076] [client 85.239.234.122] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.239.234.122, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aUG5VaCLvZcOdxvy5Q1h_AAAAI4"]
[Wed Dec 17 03:56:43.855125 2025] [:error] [pid 58316:tid 58442] [client 162.19.25.160:48654] [client 162.19.25.160] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.19.25.160, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aUG5e6CLvZcOdxvy5Q1ijQAAAJE"]
[Wed Dec 17 04:06:44.674770 2025] [:error] [pid 30784:tid 30789] [client 104.7.227.11:59740] [client 104.7.227.11] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.7.227.11, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aUG71AVENh3j2WfqiT3Z2AAAAMM"]
[Wed Dec 17 04:07:17.599750 2025] [:error] [pid 30691:tid 30751] [client 74.222.168.76:57416] [client 74.222.168.76] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 74.222.168.76, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aUG79TRNSskdld15l1edlAAAAIE"]
[Wed Dec 17 05:49:09.113812 2025] [:error] [pid 13215:tid 13226] [client 137.184.46.218:33902] [client 137.184.46.218] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 137.184.46.218, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aUHT1XpS_Sk4Oyp_UPFIPAAAAAY"]
[Wed Dec 17 07:36:09.468135 2025] [:error] [pid 13215:tid 13234] [client 66.249.64.101:42281] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUHs6XpS_Sk4Oyp_UPFyRgAAAA4"]
[Wed Dec 17 07:39:51.240033 2025] [:error] [pid 7715:tid 7734] [client 147.182.243.3:47122] [client 147.182.243.3] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 147.182.243.3, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aUHtx5AcSlSgZepNKb_Y7gAAARE"]
[Wed Dec 17 08:03:51.338762 2025] [:error] [pid 7715:tid 7737] [client 66.249.64.101:37636] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUHzZ5AcSlSgZepNKb_jHQAAARQ"]
[Wed Dec 17 08:31:48.052782 2025] [:error] [pid 7715:tid 7721] [client 219.98.129.7:54770] [client 219.98.129.7] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 219.98.129.7, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aUH59JAcSlSgZepNKb_zJwAAAQQ"]
[Wed Dec 17 08:42:20.443905 2025] [:error] [pid 13217:tid 13289] [client 66.249.64.101:65200] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUH8bLKPEDQzeQkr6QJnAAAAAI8"]
[Wed Dec 17 08:42:54.968414 2025] [:error] [pid 13215:tid 13223] [client 66.249.64.101:40255] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUH8jnpS_Sk4Oyp_UPGHOgAAAAM"]
[Wed Dec 17 08:54:56.590132 2025] [:error] [pid 13216:tid 13248] [client 66.249.64.101:38325] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUH_YNkjYVDtADMjze5inwAAAEE"]
[Wed Dec 17 08:55:14.508482 2025] [:error] [pid 7715:tid 7729] [client 66.249.64.101:46653] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUH_cpAcSlSgZepNKb8BMAAAAQw"]
[Wed Dec 17 08:55:23.827121 2025] [:error] [pid 13215:tid 13230] [client 66.249.64.101:48328] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUH_e3pS_Sk4Oyp_UPGKjQAAAAo"]
[Wed Dec 17 08:55:45.012842 2025] [:error] [pid 13302:tid 13305] [client 66.249.64.101:40035] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUH_kRDfKV-_W5RvJZ_mIQAAAME"]
[Wed Dec 17 09:29:43.318934 2025] [:error] [pid 45532:tid 45603] [client 66.249.64.101:54186] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUIHhweWB-JXOyTKNs1EvQAAAI0"]
[Wed Dec 17 09:29:54.242681 2025] [:error] [pid 45621:tid 45645] [client 66.249.64.101:47719] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUIHkuVNGQfJ1rR90pRIggAAANM"]
[Wed Dec 17 09:37:13.195663 2025] [:error] [pid 45621:tid 45630] [client 164.132.49.123:32988] [client 164.132.49.123] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 164.132.49.123, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aUIJSeVNGQfJ1rR90pROQAAAAMQ"]
[Wed Dec 17 11:30:29.245861 2025] [:error] [pid 45532:tid 45609] [client 78.129.161.92:46608] [client 78.129.161.92] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 78.129.161.92, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aUIj1QeWB-JXOyTKNs2ANwAAAJM"]
[Wed Dec 17 11:59:55.088388 2025] [:error] [pid 45531:tid 45568] [client 14.215.163.132:47651] [client 14.215.163.132] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||paramountbaldivis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUIqu4juE-Fd-sBWjvXYxQAAAEU"]
[Wed Dec 17 13:24:44.644798 2025] [:error] [pid 45532:tid 45608] [client 148.113.189.81:42230] [client 148.113.189.81] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 148.113.189.81, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aUI-nAeWB-JXOyTKNs2t6wAAAJI"]
[Wed Dec 17 15:21:29.753540 2025] [:error] [pid 45530:tid 45549] [client 82.223.101.71:45546] [client 82.223.101.71] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 82.223.101.71, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aUJZ-W4IsXcKlf7LWf-Y2gAAAA4"]
[Wed Dec 17 17:20:46.745801 2025] [:error] [pid 45532:tid 45597] [client 5.101.50.197:50738] [client 5.101.50.197] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.101.50.197, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aUJ17geWB-JXOyTKNs0LqAAAAIc"]
[Wed Dec 17 18:13:18.789666 2025] [:error] [pid 45531:tid 45585] [client 172.192.79.140:60542] [client 172.192.79.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aUKCPojuE-Fd-sBWjvVlNQAAAFY"]
[Wed Dec 17 18:13:20.091206 2025] [:error] [pid 11733:tid 11759] [client 172.192.79.140:60521] [client 172.192.79.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aUKCQDzmtBRXExJb1PEB7wAAARg"]
[Wed Dec 17 18:13:22.816994 2025] [:error] [pid 45532:tid 45608] [client 172.192.79.140:60486] [client 172.192.79.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aUKCQgeWB-JXOyTKNs0iwgAAAJI"]
[Wed Dec 17 18:13:23.866842 2025] [:error] [pid 45621:tid 45642] [client 172.192.79.140:60495] [client 172.192.79.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aUKCQ-VNGQfJ1rR90pRJ8AAAANA"]
[Wed Dec 17 19:21:11.790827 2025] [:error] [pid 45621:tid 45642] [client 45.90.160.201:45834] [client 45.90.160.201] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.90.160.201, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aUKSJ-VNGQfJ1rR90pR5-wAAANA"]
[Wed Dec 17 20:20:10.109524 2025] [:error] [pid 45531:tid 45584] [client 66.249.64.101:36832] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUKf-ojuE-Fd-sBWjvWMfwAAAFU"]
[Wed Dec 17 20:29:18.934397 2025] [:error] [pid 45621:tid 45636] [client 66.249.64.101:41977] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUKiHuVNGQfJ1rR90pSLNgAAAMo"]
[Wed Dec 17 20:40:26.100254 2025] [:error] [pid 16746:tid 16757] [client 66.249.64.101:45767] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUKkuo-UihQezEh5cyO7uAAAAgU"]
[Wed Dec 17 20:40:38.463195 2025] [:error] [pid 16861:tid 16890] [client 66.249.64.101:46481] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUKkxlmas3wxi8EVIZq_8wAAAoM"]
[Wed Dec 17 20:41:04.593510 2025] [:error] [pid 16666:tid 16688] [client 66.249.64.101:61771] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUKk4FAThvYvBwbndYLxWgAAAZM"]
[Wed Dec 17 20:46:15.800846 2025] [:error] [pid 16577:tid 16609] [client 66.249.64.101:64678] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUKmF-OuBdGpNNQaNL455QAAAVU"]
[Wed Dec 17 20:46:18.197632 2025] [:error] [pid 16861:tid 16907] [client 66.249.64.101:52769] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUKmGlmas3wxi8EVIZrBUAAAApQ"]
[Wed Dec 17 21:46:29.919897 2025] [:error] [pid 16704:tid 16727] [client 66.249.64.101:51732] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUK0NaAnp3ottQtykbRyEQAAAdI"]
[Wed Dec 17 23:09:00.396917 2025] [:error] [pid 16861:tid 16906] [client 66.249.64.101:49745] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aULHjFmas3wxi8EVIZrhrQAAApM"]
[Wed Dec 17 23:09:25.779641 2025] [:error] [pid 16704:tid 16723] [client 66.249.64.101:61782] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aULHpaAnp3ottQtykbR_KAAAAc4"]
[Wed Dec 17 23:40:22.467710 2025] [:error] [pid 16577:tid 16596] [client 162.55.209.139:46107] [client 162.55.209.139] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 162.55.209.139, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aULO5uOuBdGpNNQaNL5T6wAAAUg"]
[Thu Dec 18 00:58:36.533581 2025] [:error] [pid 26117:tid 26163] [client 182.44.9.147:57535] [client 182.44.9.147] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||paramountbaldivis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aULhPDGiVc9lQS6PcL3P1AAAAU0"]
[Thu Dec 18 03:42:36.858046 2025] [:error] [pid 39946:tid 39958] [client 150.109.180.208:56778] [client 150.109.180.208] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 150.109.180.208, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aUMHrCVkImF_xpK-Kp-mKwAAAMo"]
[Thu Dec 18 05:08:18.757245 2025] [:error] [pid 61508:tid 61523] [client 45.130.203.148:54163] [client 45.130.203.148] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.paramountbaldivis.com"] [uri "/.git/HEAD"] [unique_id "aUMbwlsZttQPQPH_vMuHuwAAAc0"]
[Thu Dec 18 05:28:00.610691 2025] [:error] [pid 21013:tid 21058] [client 104.28.214.54:48576] [client 104.28.214.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/style.php"] [unique_id "aUMgYE0TTmwxNsSeIa4rhwAAAE4"]
[Thu Dec 18 05:28:01.328476 2025] [:error] [pid 21014:tid 21086] [client 104.28.214.54:51527] [client 104.28.214.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/style.php"] [unique_id "aUMgYaFhLsSDH3Y60sxnuwAAAI8"]
[Thu Dec 18 05:28:02.018054 2025] [:error] [pid 21012:tid 21034] [client 104.28.214.54:51177] [client 104.28.214.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-content/themes/style.php"] [unique_id "aUMgYpp8j5M7lvw_J3RiNwAAABE"]
[Thu Dec 18 05:28:02.708789 2025] [:error] [pid 61508:tid 61530] [client 104.28.214.54:20465] [client 104.28.214.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/style.php"] [unique_id "aUMgYlsZttQPQPH_vMuNxAAAAdQ"]
[Thu Dec 18 05:28:03.403798 2025] [:error] [pid 21013:tid 21066] [client 104.28.214.54:20466] [client 104.28.214.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/style.php"] [unique_id "aUMgY00TTmwxNsSeIa4riwAAAFY"]
[Thu Dec 18 05:28:04.117467 2025] [:error] [pid 21012:tid 21027] [client 104.28.246.54:45780] [client 104.28.246.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/chosen.php"] [unique_id "aUMgZJp8j5M7lvw_J3RiOgAAAAo"]
[Thu Dec 18 05:28:04.831680 2025] [:error] [pid 21013:tid 21063] [client 104.28.214.54:12503] [client 104.28.214.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/file.php"] [unique_id "aUMgZE0TTmwxNsSeIa4rjgAAAFM"]
[Thu Dec 18 05:28:08.526241 2025] [:error] [pid 61412:tid 61441] [client 104.28.214.54:54489] [client 104.28.214.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/flower.php"] [unique_id "aUMgaF0DnBxN2Bf0TMReyAAAAYA"]
[Thu Dec 18 05:28:12.230958 2025] [:error] [pid 61411:tid 61422] [client 104.28.246.54:46394] [client 104.28.246.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/gifclass.php"] [unique_id "aUMgbM96VmGlI7f6ZcBk5QAAAUg"]
[Thu Dec 18 05:28:41.969248 2025] [:error] [pid 21014:tid 21084] [client 52.169.163.135:2170] [client 52.169.163.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/gaestebuch.php"] [unique_id "aUMgiaFhLsSDH3Y60sxn4AAAAI0"]
[Thu Dec 18 05:28:42.543168 2025] [:error] [pid 21013:tid 21049] [client 52.169.163.135:2224] [client 52.169.163.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/gaestebuch.php"] [unique_id "aUMgik0TTmwxNsSeIa4rwAAAAEU"]
[Thu Dec 18 05:28:43.128320 2025] [:error] [pid 61508:tid 61527] [client 52.169.163.135:2774] [client 52.169.163.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/upload.php"] [unique_id "aUMgi1sZttQPQPH_vMuN7AAAAdE"]
[Thu Dec 18 05:28:43.699724 2025] [:error] [pid 21013:tid 21065] [client 52.169.163.135:3020] [client 52.169.163.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/upload.php"] [unique_id "aUMgi00TTmwxNsSeIa4r3QAAAFU"]
[Thu Dec 18 05:28:44.275786 2025] [:error] [pid 21012:tid 21031] [client 52.169.163.135:8340] [client 52.169.163.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/upload.php"] [unique_id "aUMgjJp8j5M7lvw_J3RiYgAAAA4"]
[Thu Dec 18 05:28:44.848428 2025] [:error] [pid 61411:tid 61430] [client 52.169.163.135:2207] [client 52.169.163.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/upload.php"] [unique_id "aUMgjM96VmGlI7f6ZcBlDgAAAVA"]
[Thu Dec 18 05:28:45.421412 2025] [:error] [pid 61508:tid 61513] [client 52.169.163.135:2170] [client 52.169.163.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/shell.php"] [unique_id "aUMgjVsZttQPQPH_vMuN7QAAAcM"]
[Thu Dec 18 05:28:46.019367 2025] [:error] [pid 61411:tid 61431] [client 52.169.163.135:15014] [client 52.169.163.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/adminer-4.6.1.php"] [unique_id "aUMgjs96VmGlI7f6ZcBlEQAAAVE"]
[Thu Dec 18 05:28:46.553975 2025] [:error] [pid 61412:tid 61463] [client 52.169.163.135:8490] [client 52.169.163.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/adminer-4.6.1.php"] [unique_id "aUMgjl0DnBxN2Bf0TMRe4QAAAZY"]
[Thu Dec 18 05:28:47.127167 2025] [:error] [pid 21100:tid 21113] [client 52.169.163.135:8760] [client 52.169.163.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/adminer-4.6.1.php"] [unique_id "aUMgjymdf0GusoIGpFXhmgAAAMo"]
[Thu Dec 18 05:28:47.704017 2025] [:error] [pid 21013:tid 21065] [client 52.169.163.135:12823] [client 52.169.163.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/adminer-4.6.1.php"] [unique_id "aUMgj00TTmwxNsSeIa4r6gAAAFU"]
[Thu Dec 18 05:28:48.274377 2025] [:error] [pid 21013:tid 21064] [client 52.169.163.135:14681] [client 52.169.163.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/adminer-4.6.0.php"] [unique_id "aUMgkE0TTmwxNsSeIa4r7AAAAFQ"]
[Thu Dec 18 05:28:48.856754 2025] [:error] [pid 21014:tid 21074] [client 52.169.163.135:13072] [client 52.169.163.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/adminer-4.6.0.php"] [unique_id "aUMgkKFhLsSDH3Y60sxn7AAAAIM"]
[Thu Dec 18 05:28:49.429912 2025] [:error] [pid 21100:tid 21116] [client 52.169.163.135:8338] [client 52.169.163.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/adminer-4.6.0.php"] [unique_id "aUMgkSmdf0GusoIGpFXhnAAAAM0"]
[Thu Dec 18 05:28:50.016350 2025] [:error] [pid 21100:tid 21119] [client 52.169.163.135:3039] [client 52.169.163.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/adminer-4.5.0.php"] [unique_id "aUMgkimdf0GusoIGpFXhnQAAANA"]
[Thu Dec 18 05:28:50.589912 2025] [:error] [pid 61373:tid 61382] [client 52.169.163.135:12479] [client 52.169.163.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/adminer-4.5.0.php"] [unique_id "aUMgksLBOEHRzMQT-3XEMwAAAQc"]
[Thu Dec 18 05:28:51.125719 2025] [:error] [pid 61412:tid 61447] [client 52.169.163.135:12118] [client 52.169.163.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/adminer-4.5.0.php"] [unique_id "aUMgk10DnBxN2Bf0TMRe5QAAAYY"]
[Thu Dec 18 05:28:51.697132 2025] [:error] [pid 21100:tid 21111] [client 52.169.163.135:4265] [client 52.169.163.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/adminer-4.5.0.php"] [unique_id "aUMgkymdf0GusoIGpFXhoAAAAMg"]
[Thu Dec 18 05:28:52.266849 2025] [:error] [pid 61412:tid 61445] [client 52.169.163.135:12127] [client 52.169.163.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/adminer-4.4.0.php"] [unique_id "aUMglF0DnBxN2Bf0TMRe5gAAAYQ"]
[Thu Dec 18 05:28:52.836978 2025] [:error] [pid 61373:tid 61387] [client 52.169.163.135:14992] [client 52.169.163.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/adminer-4.4.0.php"] [unique_id "aUMglMLBOEHRzMQT-3XENwAAAQw"]
[Thu Dec 18 05:28:53.418756 2025] [:error] [pid 21013:tid 21047] [client 52.169.163.135:5692] [client 52.169.163.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/adminer-4.2.4.php"] [unique_id "aUMglU0TTmwxNsSeIa4r8AAAAEM"]
[Thu Dec 18 05:28:53.989101 2025] [:error] [pid 21012:tid 21032] [client 52.169.163.135:14998] [client 52.169.163.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/adminer-4.2.4.php"] [unique_id "aUMglZp8j5M7lvw_J3RiaAAAAA8"]
[Thu Dec 18 05:28:54.561982 2025] [:error] [pid 61411:tid 61419] [client 52.169.163.135:14699] [client 52.169.163.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/adminer-4.2.4.php"] [unique_id "aUMgls96VmGlI7f6ZcBlGQAAAUU"]
[Thu Dec 18 05:28:55.141790 2025] [:error] [pid 21014:tid 21084] [client 52.169.163.135:14984] [client 52.169.163.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/adminer-4.2.4.php"] [unique_id "aUMgl6FhLsSDH3Y60sxn8gAAAI0"]
[Thu Dec 18 05:28:55.719160 2025] [:error] [pid 21100:tid 21127] [client 52.169.163.135:8374] [client 52.169.163.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/adminer-4.2.0.php"] [unique_id "aUMglymdf0GusoIGpFXhpAAAANg"]
[Thu Dec 18 05:28:56.287832 2025] [:error] [pid 21013:tid 21063] [client 52.169.163.135:12454] [client 52.169.163.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/adminer-4.2.0.php"] [unique_id "aUMgmE0TTmwxNsSeIa4r9QAAAFM"]
[Thu Dec 18 05:28:56.878268 2025] [:error] [pid 61373:tid 61378] [client 52.169.163.135:7247] [client 52.169.163.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/adminer-4.2.0.php"] [unique_id "aUMgmMLBOEHRzMQT-3XEPwAAAQM"]
[Thu Dec 18 05:28:57.451868 2025] [:error] [pid 61508:tid 61512] [client 52.169.163.135:12461] [client 52.169.163.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/adminer-4.2.0.php"] [unique_id "aUMgmVsZttQPQPH_vMuN8QAAAcI"]
[Thu Dec 18 05:28:58.024934 2025] [:error] [pid 21014:tid 21086] [client 52.169.163.135:14663] [client 52.169.163.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/adminer-4.1.0.php"] [unique_id "aUMgmqFhLsSDH3Y60sxoAAAAAI8"]
[Thu Dec 18 05:28:58.560324 2025] [:error] [pid 21100:tid 21121] [client 52.169.163.135:8488] [client 52.169.163.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/adminer-4.1.0.php"] [unique_id "aUMgmimdf0GusoIGpFXhpQAAANI"]
[Thu Dec 18 05:28:59.133890 2025] [:error] [pid 61411:tid 61420] [client 52.169.163.135:14673] [client 52.169.163.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/adminer-4.1.0.php"] [unique_id "aUMgm896VmGlI7f6ZcBlHAAAAUY"]
[Thu Dec 18 05:28:59.706622 2025] [:error] [pid 21014:tid 21075] [client 52.169.163.135:10524] [client 52.169.163.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/adminer-4.1.0.php"] [unique_id "aUMgm6FhLsSDH3Y60sxoAQAAAIQ"]
[Thu Dec 18 05:29:00.241714 2025] [:error] [pid 21013:tid 21057] [client 52.169.163.135:12418] [client 52.169.163.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/adminer-4.0.3.php"] [unique_id "aUMgnE0TTmwxNsSeIa4r9gAAAE0"]
[Thu Dec 18 05:29:00.830630 2025] [:error] [pid 21013:tid 21045] [client 52.169.163.135:5691] [client 52.169.163.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/adminer-4.0.3.php"] [unique_id "aUMgnE0TTmwxNsSeIa4r-AAAAEE"]
[Thu Dec 18 05:29:01.403105 2025] [:error] [pid 21100:tid 21126] [client 52.169.163.135:2295] [client 52.169.163.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/adminer-4.0.3.php"] [unique_id "aUMgnSmdf0GusoIGpFXhpgAAANc"]
[Thu Dec 18 05:29:01.987397 2025] [:error] [pid 21100:tid 21103] [client 52.169.163.135:2957] [client 52.169.163.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/adminer-4.0.3.php"] [unique_id "aUMgnSmdf0GusoIGpFXhpwAAAMA"]
[Thu Dec 18 05:29:02.561246 2025] [:error] [pid 21014:tid 21077] [client 52.169.163.135:12857] [client 52.169.163.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/adminer-4.0.2.php"] [unique_id "aUMgnqFhLsSDH3Y60sxoAwAAAIY"]
[Thu Dec 18 05:29:03.133978 2025] [:error] [pid 21014:tid 21085] [client 52.169.163.135:2242] [client 52.169.163.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/adminer-4.0.2.php"] [unique_id "aUMgn6FhLsSDH3Y60sxoBAAAAI4"]
[Thu Dec 18 05:29:03.675063 2025] [:error] [pid 21100:tid 21116] [client 52.169.163.135:8465] [client 52.169.163.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/adminer-4.0.2.php"] [unique_id "aUMgnymdf0GusoIGpFXhqQAAAM0"]
[Thu Dec 18 05:29:04.248982 2025] [:error] [pid 21100:tid 21119] [client 52.169.163.135:8467] [client 52.169.163.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/adminer-4.0.2.php"] [unique_id "aUMgoCmdf0GusoIGpFXhqgAAANA"]
[Thu Dec 18 05:29:04.823202 2025] [:error] [pid 21100:tid 21110] [client 52.169.163.135:8511] [client 52.169.163.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/adminer-4.0.1.php"] [unique_id "aUMgoCmdf0GusoIGpFXhqwAAAMc"]
[Thu Dec 18 05:41:31.776753 2025] [:error] [pid 61411:tid 61432] [client 54.37.76.193:54772] [client 54.37.76.193] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.37.76.193, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aUMji896VmGlI7f6ZcBniwAAAVI"]
[Thu Dec 18 06:50:42.601588 2025] [autoindex:error] [pid 24542:tid 24562] [client 193.19.109.210:54597] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 18 06:50:43.092018 2025] [autoindex:error] [pid 24542:tid 24568] [client 193.19.109.210:54597] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 18 06:50:43.516165 2025] [autoindex:error] [pid 24542:tid 24553] [client 193.19.109.210:54597] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 18 06:50:43.948954 2025] [autoindex:error] [pid 24542:tid 24548] [client 193.19.109.210:54597] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 18 06:50:57.100280 2025] [autoindex:error] [pid 24542:tid 24555] [client 193.19.109.210:54597] AH01276: Cannot serve directory /home/baldivis/public_html/wp-content/uploads/2023/11/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 18 06:50:57.555270 2025] [autoindex:error] [pid 24542:tid 24562] [client 193.19.109.210:54597] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/sodium_compat/lib/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 18 06:50:57.915413 2025] [autoindex:error] [pid 24542:tid 24550] [client 193.19.109.210:54597] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/blocks/file/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 18 06:50:58.355462 2025] [autoindex:error] [pid 24542:tid 24564] [client 193.19.109.210:54597] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 18 06:51:07.335256 2025] [autoindex:error] [pid 24542:tid 24563] [client 193.19.109.210:54597] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 18 07:32:44.872050 2025] [:error] [pid 25357:tid 25377] [client 85.214.10.56:47840] [client 85.214.10.56] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.214.10.56, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aUM9nIaT7bsEXnJVfJdt3wAAAdI"]
[Thu Dec 18 09:02:20.941877 2025] [:error] [pid 23556:tid 23574] [client 205.164.158.28:35035] [client 205.164.158.28] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 205.164.158.28, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aUNSnBnmLlk3u5yt9kEwdwAAAA4"]
[Thu Dec 18 09:02:44.048821 2025] [:error] [pid 23558:tid 23616] [client 223.185.44.120:18544] [client 223.185.44.120] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.185.44.120, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aUNStOHam9NbgPQa9uZd8QAAAME"]
[Thu Dec 18 09:16:57.387257 2025] [:error] [pid 23558:tid 23635] [client 49.51.73.183:34690] [client 49.51.73.183] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.paramountbaldivis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.paramountbaldivis.com"] [uri "/"] [unique_id "aUNWCeHam9NbgPQa9uZf0wAAANQ"]
[Thu Dec 18 09:21:11.691987 2025] [:error] [pid 25357:tid 25372] [client 139.59.37.240:34192] [client 139.59.37.240] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 139.59.37.240, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aUNXB4aT7bsEXnJVfJeTjAAAAc0"]
[Thu Dec 18 11:04:54.345347 2025] [:error] [pid 12035:tid 12065] [client 43.164.197.177:48680] [client 43.164.197.177] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||paramountbaldivis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUNvVrcVHrNSHjCo-0osiAAAAhY"]
[Thu Dec 18 13:07:15.562505 2025] [:error] [pid 12383:tid 12401] [client 51.89.116.113:34399] [client 51.89.116.113] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 51.89.116.113, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aUOMA_dgllo9h1cyxGZqPwAAAs8"]
[Thu Dec 18 13:19:50.020242 2025] [:error] [pid 12239:tid 12265] [client 182.42.105.144:46949] [client 182.42.105.144] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||paramountbaldivis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUOO9tNnXxfGIuWO6amf3AAAApU"]
[Thu Dec 18 15:02:34.744806 2025] [:error] [pid 24433:tid 24440] [client 45.195.75.44:38290] [client 45.195.75.44] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.195.75.44, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aUOnCp4pN9ycmipm8TiUmgAAAQQ"]
[Thu Dec 18 16:36:14.563508 2025] [:error] [pid 24433:tid 24437] [client 4.241.218.229:29245] [client 4.241.218.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/file15.php"] [unique_id "aUO8_p4pN9ycmipm8TikngAAAQE"]
[Thu Dec 18 16:36:18.786763 2025] [:error] [pid 23558:tid 23630] [client 4.241.218.229:19754] [client 4.241.218.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/file15.php"] [unique_id "aUO9AuHam9NbgPQa9ubPRwAAAM8"]
[Thu Dec 18 16:36:19.486639 2025] [:error] [pid 24433:tid 24446] [client 4.241.218.229:12663] [client 4.241.218.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/file15.php"] [unique_id "aUO9A54pN9ycmipm8TikpAAAAQo"]
[Thu Dec 18 16:36:22.185092 2025] [:error] [pid 24433:tid 24441] [client 4.241.218.229:34434] [client 4.241.218.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/file15.php"] [unique_id "aUO9Bp4pN9ycmipm8TikpwAAAQU"]
[Thu Dec 18 16:36:24.286920 2025] [:error] [pid 24542:tid 24562] [client 4.241.218.229:33315] [client 4.241.218.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/readme.php"] [unique_id "aUO9CEtQz4H2oS3NrDa2AAAAAVI"]
[Thu Dec 18 16:36:26.100952 2025] [:error] [pid 23558:tid 23630] [client 4.241.218.229:12649] [client 4.241.218.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/readme.php"] [unique_id "aUO9CuHam9NbgPQa9ubPWAAAAM8"]
[Thu Dec 18 16:36:28.216951 2025] [:error] [pid 23558:tid 23620] [client 4.241.218.229:12670] [client 4.241.218.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/readme.php"] [unique_id "aUO9DOHam9NbgPQa9ubPWwAAAMU"]
[Thu Dec 18 16:36:28.925709 2025] [:error] [pid 23556:tid 23573] [client 4.241.218.229:23596] [client 4.241.218.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/readme.php"] [unique_id "aUO9DBnmLlk3u5yt9kGsuAAAAA0"]
[Thu Dec 18 16:36:29.678207 2025] [:error] [pid 12239:tid 12251] [client 4.241.218.229:23574] [client 4.241.218.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/max.php"] [unique_id "aUO9DdNnXxfGIuWO6anMwgAAAoc"]
[Thu Dec 18 16:36:33.624018 2025] [:error] [pid 23645:tid 23664] [client 4.241.218.229:34482] [client 4.241.218.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/max.php"] [unique_id "aUO9ETf_Rx0Y0ao_QJgjHgAAAJE"]
[Thu Dec 18 16:36:34.177182 2025] [:error] [pid 12239:tid 12268] [client 4.241.218.229:12622] [client 4.241.218.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/max.php"] [unique_id "aUO9EtNnXxfGIuWO6anMygAAApg"]
[Thu Dec 18 16:36:34.612331 2025] [:error] [pid 23645:tid 23650] [client 4.241.218.229:22178] [client 4.241.218.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/max.php"] [unique_id "aUO9Ejf_Rx0Y0ao_QJgjIwAAAIM"]
[Thu Dec 18 16:36:34.956465 2025] [:error] [pid 12239:tid 12266] [client 4.241.218.229:12637] [client 4.241.218.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/css/index.php"] [unique_id "aUO9EtNnXxfGIuWO6anMzAAAApY"]
[Thu Dec 18 16:36:36.432991 2025] [:error] [pid 24433:tid 24451] [client 4.241.218.229:24772] [client 4.241.218.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/css/index.php"] [unique_id "aUO9FJ4pN9ycmipm8TiksgAAAQ8"]
[Thu Dec 18 16:36:40.581070 2025] [:error] [pid 12239:tid 12259] [client 4.241.218.229:12884] [client 4.241.218.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/css/index.php"] [unique_id "aUO9GNNnXxfGIuWO6anM1QAAAo8"]
[Thu Dec 18 16:36:41.740923 2025] [:error] [pid 25357:tid 25375] [client 4.241.218.229:23603] [client 4.241.218.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/css/index.php"] [unique_id "aUO9GYaT7bsEXnJVfJcpSgAAAdA"]
[Thu Dec 18 16:36:43.378246 2025] [:error] [pid 25357:tid 25368] [client 4.241.218.229:34464] [client 4.241.218.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/mpxct.php"] [unique_id "aUO9G4aT7bsEXnJVfJcpSwAAAck"]
[Thu Dec 18 16:36:45.958718 2025] [:error] [pid 23558:tid 23627] [client 4.241.218.229:23564] [client 4.241.218.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/mpxct.php"] [unique_id "aUO9HeHam9NbgPQa9ubPhQAAAMw"]
[Thu Dec 18 16:36:49.529964 2025] [:error] [pid 23558:tid 23624] [client 4.241.218.229:12908] [client 4.241.218.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/mpxct.php"] [unique_id "aUO9IeHam9NbgPQa9ubPigAAAMk"]
[Thu Dec 18 16:36:53.198705 2025] [:error] [pid 12239:tid 12257] [client 4.241.218.229:34436] [client 4.241.218.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/mpxct.php"] [unique_id "aUO9JdNnXxfGIuWO6anM4gAAAo0"]
[Thu Dec 18 16:36:55.336479 2025] [:error] [pid 23558:tid 23639] [client 4.241.218.229:62662] [client 4.241.218.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/s.php"] [unique_id "aUO9J-Ham9NbgPQa9ubPjwAAANg"]
[Thu Dec 18 16:36:56.628562 2025] [:error] [pid 23645:tid 23647] [client 4.241.218.229:32430] [client 4.241.218.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/s.php"] [unique_id "aUO9KDf_Rx0Y0ao_QJgjNQAAAIA"]
[Thu Dec 18 16:36:58.428339 2025] [:error] [pid 24958:tid 24981] [client 4.241.218.229:25790] [client 4.241.218.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/s.php"] [unique_id "aUO9KskDOrUkd0wNm2GcJgAAAZQ"]
[Thu Dec 18 16:37:00.624194 2025] [:error] [pid 25357:tid 25376] [client 4.241.218.229:24788] [client 4.241.218.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/s.php"] [unique_id "aUO9LIaT7bsEXnJVfJcpYQAAAdE"]
[Thu Dec 18 16:37:02.345190 2025] [:error] [pid 23645:tid 23649] [client 4.241.218.229:32419] [client 4.241.218.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ioxi-o.php"] [unique_id "aUO9Ljf_Rx0Y0ao_QJgjOgAAAII"]
[Thu Dec 18 16:37:04.671145 2025] [:error] [pid 23558:tid 23636] [client 4.241.218.229:25331] [client 4.241.218.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ioxi-o.php"] [unique_id "aUO9MOHam9NbgPQa9ubPqgAAANU"]
[Thu Dec 18 16:37:09.040711 2025] [:error] [pid 23558:tid 23623] [client 4.241.218.229:25757] [client 4.241.218.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ioxi-o.php"] [unique_id "aUO9NeHam9NbgPQa9ubP2gAAAMg"]
[Thu Dec 18 16:37:11.815661 2025] [:error] [pid 23556:tid 23582] [client 4.241.218.229:32396] [client 4.241.218.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ioxi-o.php"] [unique_id "aUO9NxnmLlk3u5yt9kGs4AAAABY"]
[Thu Dec 18 16:37:43.756901 2025] [:error] [pid 23556:tid 23560] [client 4.241.218.229:25343] [client 4.241.218.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/tajj.php"] [unique_id "aUO9VxnmLlk3u5yt9kGtCgAAAAA"]
[Thu Dec 18 16:37:47.316172 2025] [:error] [pid 25357:tid 25366] [client 4.241.218.229:20529] [client 4.241.218.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/tajj.php"] [unique_id "aUO9W4aT7bsEXnJVfJcppwAAAcc"]
[Thu Dec 18 16:37:51.152995 2025] [:error] [pid 23556:tid 23577] [client 4.241.218.229:20166] [client 4.241.218.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/tajj.php"] [unique_id "aUO9XxnmLlk3u5yt9kGtEgAAABE"]
[Thu Dec 18 16:37:53.132913 2025] [:error] [pid 23558:tid 23639] [client 4.241.218.229:31049] [client 4.241.218.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/tajj.php"] [unique_id "aUO9YeHam9NbgPQa9ubQRAAAANg"]
[Thu Dec 18 16:37:56.317060 2025] [:error] [pid 12035:tid 12063] [client 4.241.218.229:26871] [client 4.241.218.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/lock360.php"] [unique_id "aUO9ZLcVHrNSHjCo-0pnTwAAAhQ"]
[Thu Dec 18 16:37:58.324786 2025] [:error] [pid 25357:tid 25359] [client 4.241.218.229:19795] [client 4.241.218.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/lock360.php"] [unique_id "aUO9ZoaT7bsEXnJVfJcpxAAAAcA"]
[Thu Dec 18 16:38:00.464081 2025] [:error] [pid 25357:tid 25376] [client 4.241.218.229:23261] [client 4.241.218.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/lock360.php"] [unique_id "aUO9aIaT7bsEXnJVfJcpygAAAdE"]
[Thu Dec 18 16:38:03.497491 2025] [:error] [pid 25357:tid 25365] [client 4.241.218.229:19800] [client 4.241.218.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/lock360.php"] [unique_id "aUO9a4aT7bsEXnJVfJcpzwAAAcY"]
[Thu Dec 18 16:38:05.199745 2025] [:error] [pid 12383:tid 12389] [client 4.241.218.229:22820] [client 4.241.218.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/admin.php"] [unique_id "aUO9bfdgllo9h1cyxGaUUgAAAsM"]
[Thu Dec 18 16:38:06.926480 2025] [:error] [pid 24542:tid 24559] [client 4.241.218.229:19200] [client 4.241.218.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/admin.php"] [unique_id "aUO9bktQz4H2oS3NrDa2OAAAAU8"]
[Thu Dec 18 16:38:07.790440 2025] [:error] [pid 24433:tid 24438] [client 4.241.218.229:32340] [client 4.241.218.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/admin.php"] [unique_id "aUO9b54pN9ycmipm8Tik5wAAAQI"]
[Thu Dec 18 16:38:08.255907 2025] [:error] [pid 12383:tid 12399] [client 4.241.218.229:20928] [client 4.241.218.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/admin.php"] [unique_id "aUO9cPdgllo9h1cyxGaUVwAAAs0"]
[Thu Dec 18 16:38:09.351987 2025] [:error] [pid 12383:tid 12397] [client 4.241.218.229:20905] [client 4.241.218.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/neshe"] [unique_id "aUO9cfdgllo9h1cyxGaUWgAAAss"]
[Thu Dec 18 16:38:10.365333 2025] [:error] [pid 23556:tid 23560] [client 4.241.218.229:61082] [client 4.241.218.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/neshe"] [unique_id "aUO9chnmLlk3u5yt9kGtJwAAAAA"]
[Thu Dec 18 16:38:11.616269 2025] [:error] [pid 25357:tid 25369] [client 4.241.218.229:32692] [client 4.241.218.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/neshe"] [unique_id "aUO9c4aT7bsEXnJVfJcp1gAAAco"]
[Thu Dec 18 16:38:14.370938 2025] [:error] [pid 25357:tid 25375] [client 4.241.218.229:9873] [client 4.241.218.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/neshe"] [unique_id "aUO9doaT7bsEXnJVfJcp2wAAAdA"]
[Thu Dec 18 16:38:16.259570 2025] [:error] [pid 25357:tid 25360] [client 4.241.218.229:31985] [client 4.241.218.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/pp.php"] [unique_id "aUO9eIaT7bsEXnJVfJcp4gAAAcE"]
[Thu Dec 18 16:38:18.470371 2025] [:error] [pid 23558:tid 23628] [client 4.241.218.229:9909] [client 4.241.218.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/pp.php"] [unique_id "aUO9euHam9NbgPQa9ubQVgAAAM0"]
[Thu Dec 18 16:38:22.694033 2025] [:error] [pid 23558:tid 23635] [client 4.241.218.229:20903] [client 4.241.218.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/pp.php"] [unique_id "aUO9fuHam9NbgPQa9ubQaAAAANQ"]
[Thu Dec 18 16:38:26.455030 2025] [:error] [pid 23556:tid 23564] [client 4.241.218.229:31555] [client 4.241.218.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/pp.php"] [unique_id "aUO9ghnmLlk3u5yt9kGtRwAAAAQ"]
[Thu Dec 18 16:38:27.328388 2025] [:error] [pid 23645:tid 23666] [client 4.241.218.229:33089] [client 4.241.218.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wfile.php"] [unique_id "aUO9gzf_Rx0Y0ao_QJgjmQAAAJM"]
[Thu Dec 18 16:38:29.341612 2025] [:error] [pid 23556:tid 23565] [client 4.241.218.229:33035] [client 4.241.218.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wfile.php"] [unique_id "aUO9hRnmLlk3u5yt9kGtTwAAAAU"]
[Thu Dec 18 16:38:32.024469 2025] [:error] [pid 23556:tid 23581] [client 4.241.218.229:36507] [client 4.241.218.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wfile.php"] [unique_id "aUO9iBnmLlk3u5yt9kGtUgAAABU"]
[Thu Dec 18 16:38:33.204987 2025] [:error] [pid 23556:tid 23574] [client 4.241.218.229:33105] [client 4.241.218.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wfile.php"] [unique_id "aUO9iRnmLlk3u5yt9kGtUwAAAA4"]
[Thu Dec 18 16:38:33.932087 2025] [:error] [pid 25357:tid 25366] [client 4.241.218.229:31608] [client 4.241.218.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aUO9iYaT7bsEXnJVfJcqFwAAAcc"]
[Thu Dec 18 16:38:37.788680 2025] [:error] [pid 12035:tid 12042] [client 4.241.218.229:35207] [client 4.241.218.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aUO9jbcVHrNSHjCo-0pnfQAAAgA"]
[Thu Dec 18 16:38:38.175768 2025] [:error] [pid 12035:tid 12045] [client 4.241.218.229:31568] [client 4.241.218.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aUO9jrcVHrNSHjCo-0pnfgAAAgM"]
[Thu Dec 18 16:38:38.825655 2025] [:error] [pid 23645:tid 23648] [client 4.241.218.229:31632] [client 4.241.218.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aUO9jjf_Rx0Y0ao_QJgjowAAAIE"]
[Thu Dec 18 16:38:39.588260 2025] [:error] [pid 23558:tid 23615] [client 4.241.218.229:31969] [client 4.241.218.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/plss3.php"] [unique_id "aUO9j-Ham9NbgPQa9ubQiwAAAMA"]
[Thu Dec 18 16:38:40.604982 2025] [:error] [pid 23558:tid 23622] [client 4.241.218.229:27989] [client 4.241.218.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/plss3.php"] [unique_id "aUO9kOHam9NbgPQa9ubQjgAAAMc"]
[Thu Dec 18 16:38:41.478760 2025] [:error] [pid 23558:tid 23629] [client 4.241.218.229:10157] [client 4.241.218.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/plss3.php"] [unique_id "aUO9keHam9NbgPQa9ubQjwAAAM4"]
[Thu Dec 18 16:39:09.101265 2025] [autoindex:error] [pid 12383:tid 12395] [client 4.241.218.229:31956] AH01276: Cannot serve directory /home/baldivis/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Dec 18 16:39:15.476240 2025] [:error] [pid 12239:tid 12254] [client 4.241.218.229:35250] [client 4.241.218.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/up.php"] [unique_id "aUO9s9NnXxfGIuWO6anNkAAAAoo"]
[Thu Dec 18 16:39:17.785882 2025] [:error] [pid 25357:tid 25379] [client 4.241.218.229:21999] [client 4.241.218.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/up.php"] [unique_id "aUO9tYaT7bsEXnJVfJcqNAAAAdQ"]
[Thu Dec 18 16:39:19.295814 2025] [:error] [pid 23645:tid 23661] [client 4.241.218.229:33050] [client 4.241.218.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/up.php"] [unique_id "aUO9tzf_Rx0Y0ao_QJgjuQAAAI4"]
[Thu Dec 18 16:39:20.695721 2025] [:error] [pid 23556:tid 23560] [client 4.241.218.229:28783] [client 4.241.218.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/up.php"] [unique_id "aUO9uBnmLlk3u5yt9kGtagAAAAA"]
[Thu Dec 18 16:39:21.568032 2025] [:error] [pid 23645:tid 23669] [client 4.241.218.229:9879] [client 4.241.218.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/vee.php"] [unique_id "aUO9uTf_Rx0Y0ao_QJgjuwAAAJY"]
[Thu Dec 18 16:39:22.475090 2025] [:error] [pid 24958:tid 24978] [client 4.241.218.229:33149] [client 4.241.218.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/vee.php"] [unique_id "aUO9uskDOrUkd0wNm2GcfAAAAZE"]
[Thu Dec 18 16:39:23.742679 2025] [:error] [pid 23645:tid 23665] [client 4.241.218.229:23974] [client 4.241.218.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/vee.php"] [unique_id "aUO9uzf_Rx0Y0ao_QJgjvgAAAJI"]
[Thu Dec 18 16:39:26.694499 2025] [:error] [pid 12239:tid 12265] [client 4.241.218.229:23942] [client 4.241.218.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/vee.php"] [unique_id "aUO9vtNnXxfGIuWO6anNlwAAApU"]
[Thu Dec 18 16:39:32.631208 2025] [:error] [pid 25357:tid 25367] [client 4.241.218.229:33398] [client 4.241.218.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/about.php"] [unique_id "aUO9xIaT7bsEXnJVfJcqRQAAAcg"]
[Thu Dec 18 16:39:33.720380 2025] [:error] [pid 24542:tid 24548] [client 4.241.218.229:29895] [client 4.241.218.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/about.php"] [unique_id "aUO9xUtQz4H2oS3NrDa2fgAAAUQ"]
[Thu Dec 18 16:39:35.799223 2025] [:error] [pid 23558:tid 23635] [client 4.241.218.229:34412] [client 4.241.218.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/about.php"] [unique_id "aUO9x-Ham9NbgPQa9ubRYAAAANQ"]
[Thu Dec 18 16:39:38.142559 2025] [:error] [pid 23558:tid 23626] [client 4.241.218.229:29928] [client 4.241.218.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/about.php"] [unique_id "aUO9yuHam9NbgPQa9ubRawAAAMs"]
[Thu Dec 18 16:39:39.600255 2025] [:error] [pid 25357:tid 25370] [client 4.241.218.229:63302] [client 4.241.218.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/file7.php"] [unique_id "aUO9y4aT7bsEXnJVfJcqTgAAAcs"]
[Thu Dec 18 16:39:42.093508 2025] [:error] [pid 12239:tid 12258] [client 4.241.218.229:63305] [client 4.241.218.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/file7.php"] [unique_id "aUO9ztNnXxfGIuWO6anNswAAAo4"]
[Thu Dec 18 16:39:44.060632 2025] [:error] [pid 23556:tid 23567] [client 4.241.218.229:20521] [client 4.241.218.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/file7.php"] [unique_id "aUO90BnmLlk3u5yt9kGtbQAAAAc"]
[Thu Dec 18 16:39:45.854040 2025] [:error] [pid 23558:tid 23624] [client 4.241.218.229:9981] [client 4.241.218.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/file7.php"] [unique_id "aUO90eHam9NbgPQa9ubRggAAAMk"]
[Thu Dec 18 16:39:47.860940 2025] [:error] [pid 25357:tid 25383] [client 4.241.218.229:19266] [client 4.241.218.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/lopst.php"] [unique_id "aUO904aT7bsEXnJVfJcqWgAAAdg"]
[Thu Dec 18 16:39:51.131057 2025] [:error] [pid 23558:tid 23619] [client 4.241.218.229:32386] [client 4.241.218.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/lopst.php"] [unique_id "aUO91-Ham9NbgPQa9ubRigAAAMQ"]
[Thu Dec 18 16:39:53.063898 2025] [:error] [pid 24542:tid 24550] [client 4.241.218.229:34785] [client 4.241.218.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/lopst.php"] [unique_id "aUO92UtQz4H2oS3NrDa2twAAAUY"]
[Thu Dec 18 16:39:57.247013 2025] [:error] [pid 12383:tid 12401] [client 4.241.218.229:35176] [client 4.241.218.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/lopst.php"] [unique_id "aUO93fdgllo9h1cyxGaUrAAAAs8"]
[Thu Dec 18 16:39:58.838541 2025] [:error] [pid 24433:tid 24446] [client 4.241.218.229:21409] [client 4.241.218.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/alfa.php"] [unique_id "aUO93p4pN9ycmipm8TilPAAAAQo"]
[Thu Dec 18 16:40:02.580952 2025] [:error] [pid 23556:tid 23577] [client 4.241.218.229:35363] [client 4.241.218.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/alfa.php"] [unique_id "aUO94hnmLlk3u5yt9kGtmQAAABE"]
[Thu Dec 18 16:40:06.548385 2025] [:error] [pid 24958:tid 24969] [client 4.241.218.229:34040] [client 4.241.218.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/alfa.php"] [unique_id "aUO95skDOrUkd0wNm2GcswAAAYg"]
[Thu Dec 18 16:40:07.988774 2025] [:error] [pid 25357:tid 25370] [client 4.241.218.229:30616] [client 4.241.218.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/alfa.php"] [unique_id "aUO954aT7bsEXnJVfJcqmQAAAcs"]
[Thu Dec 18 16:40:09.278113 2025] [:error] [pid 23645:tid 23652] [client 4.241.218.229:30598] [client 4.241.218.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/fileas.php"] [unique_id "aUO96Tf_Rx0Y0ao_QJgj7AAAAIU"]
[Thu Dec 18 16:40:10.862973 2025] [:error] [pid 24433:tid 24460] [client 4.241.218.229:34095] [client 4.241.218.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/fileas.php"] [unique_id "aUO96p4pN9ycmipm8TilRwAAARg"]
[Thu Dec 18 16:40:55.139640 2025] [:error] [pid 23556:tid 23569] [client 4.241.218.229:20098] [client 4.241.218.229] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.241.218.229, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aUO-FxnmLlk3u5yt9kGtxgAAAAk"]
[Thu Dec 18 16:41:08.714907 2025] [:error] [pid 23556:tid 23581] [client 4.241.218.229:20098] [client 4.241.218.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/NewFile.php"] [unique_id "aUO-JBnmLlk3u5yt9kGt2wAAABU"]
[Thu Dec 18 16:41:09.874738 2025] [:error] [pid 25357:tid 25376] [client 4.241.218.229:35445] [client 4.241.218.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/NewFile.php"] [unique_id "aUO-JYaT7bsEXnJVfJcq6AAAAdE"]
[Thu Dec 18 16:41:11.511970 2025] [:error] [pid 23556:tid 23576] [client 4.241.218.229:9669] [client 4.241.218.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/NewFile.php"] [unique_id "aUO-JxnmLlk3u5yt9kGt3QAAABA"]
[Thu Dec 18 16:41:13.546821 2025] [:error] [pid 24958:tid 24967] [client 4.241.218.229:24356] [client 4.241.218.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/NewFile.php"] [unique_id "aUO-KckDOrUkd0wNm2GcywAAAYY"]
[Thu Dec 18 16:41:15.677643 2025] [:error] [pid 12239:tid 12268] [client 4.241.218.229:35412] [client 4.241.218.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-trackback.php"] [unique_id "aUO-K9NnXxfGIuWO6anN_gAAApg"]
[Thu Dec 18 16:41:18.934129 2025] [:error] [pid 24542:tid 24548] [client 4.241.218.229:9618] [client 4.241.218.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-trackback.php"] [unique_id "aUO-LktQz4H2oS3NrDa3AwAAAUQ"]
[Thu Dec 18 16:41:20.092433 2025] [:error] [pid 24958:tid 24973] [client 4.241.218.229:12908] [client 4.241.218.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-trackback.php"] [unique_id "aUO-MMkDOrUkd0wNm2Gc0wAAAYw"]
[Thu Dec 18 16:41:20.936720 2025] [:error] [pid 12239:tid 12265] [client 4.241.218.229:9641] [client 4.241.218.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-trackback.php"] [unique_id "aUO-MNNnXxfGIuWO6anOAQAAApU"]
[Thu Dec 18 16:41:21.384660 2025] [:error] [pid 24433:tid 24457] [client 4.241.218.229:9614] [client 4.241.218.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/lala.php"] [unique_id "aUO-MZ4pN9ycmipm8TildAAAARU"]
[Thu Dec 18 16:41:22.815255 2025] [:error] [pid 23558:tid 23623] [client 4.241.218.229:23571] [client 4.241.218.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/lala.php"] [unique_id "aUO-MuHam9NbgPQa9ubSPgAAAMg"]
[Thu Dec 18 16:41:25.894809 2025] [:error] [pid 12035:tid 12055] [client 4.241.218.229:23569] [client 4.241.218.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/lala.php"] [unique_id "aUO-NbcVHrNSHjCo-0pn7QAAAgw"]
[Thu Dec 18 16:41:28.170370 2025] [:error] [pid 12239:tid 12268] [client 4.241.218.229:20099] [client 4.241.218.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/lala.php"] [unique_id "aUO-ONNnXxfGIuWO6anODQAAApg"]
[Thu Dec 18 16:41:30.428843 2025] [:error] [pid 24958:tid 24979] [client 4.241.218.229:9659] [client 4.241.218.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/alexantr/filemanager"] [unique_id "aUO-OskDOrUkd0wNm2Gc3gAAAZI"]
[Thu Dec 18 16:41:32.210978 2025] [:error] [pid 24958:tid 24977] [client 4.241.218.229:29534] [client 4.241.218.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/alexantr/filemanager"] [unique_id "aUO-PMkDOrUkd0wNm2Gc4QAAAZA"]
[Thu Dec 18 16:41:33.774563 2025] [:error] [pid 23645:tid 23668] [client 4.241.218.229:12923] [client 4.241.218.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/alexantr/filemanager"] [unique_id "aUO-PTf_Rx0Y0ao_QJgkFwAAAJU"]
[Thu Dec 18 16:41:34.987212 2025] [:error] [pid 12383:tid 12396] [client 4.241.218.229:33280] [client 4.241.218.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/alexantr/filemanager"] [unique_id "aUO-Pvdgllo9h1cyxGaU2gAAAso"]
[Thu Dec 18 16:41:36.020443 2025] [:error] [pid 24542:tid 24558] [client 4.241.218.229:63233] [client 4.241.218.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/33.php"] [unique_id "aUO-QEtQz4H2oS3NrDa3HgAAAU4"]
[Thu Dec 18 16:41:37.373948 2025] [:error] [pid 12383:tid 12401] [client 4.241.218.229:62683] [client 4.241.218.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/33.php"] [unique_id "aUO-Qfdgllo9h1cyxGaU2wAAAs8"]
[Thu Dec 18 16:41:39.277108 2025] [:error] [pid 24542:tid 24564] [client 4.241.218.229:25738] [client 4.241.218.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/33.php"] [unique_id "aUO-Q0tQz4H2oS3NrDa3IgAAAVQ"]
[Thu Dec 18 16:41:41.593807 2025] [:error] [pid 23556:tid 23581] [client 4.241.218.229:12926] [client 4.241.218.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/33.php"] [unique_id "aUO-RRnmLlk3u5yt9kGt-QAAABU"]
[Thu Dec 18 16:41:43.593210 2025] [:error] [pid 24958:tid 24979] [client 4.241.218.229:29505] [client 4.241.218.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/abcd.phphttp://unidadmedicalasvegas.com/xsas.php"] [unique_id "aUO-R8kDOrUkd0wNm2Gc6wAAAZI"]
[Thu Dec 18 16:41:44.176074 2025] [:error] [pid 12383:tid 12400] [client 4.241.218.229:29531] [client 4.241.218.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/abcd.phphttp://unidadmedicalasvegas.com/xsas.php"] [unique_id "aUO-SPdgllo9h1cyxGaU3wAAAs4"]
[Thu Dec 18 16:41:46.403142 2025] [:error] [pid 12383:tid 12392] [client 4.241.218.229:9613] [client 4.241.218.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/abcd.phphttp://unidadmedicalasvegas.com/xsas.php"] [unique_id "aUO-Svdgllo9h1cyxGaU4QAAAsY"]
[Thu Dec 18 16:41:47.411256 2025] [:error] [pid 24433:tid 24440] [client 4.241.218.229:23587] [client 4.241.218.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/abcd.phphttp://unidadmedicalasvegas.com/xsas.php"] [unique_id "aUO-S54pN9ycmipm8TilgwAAAQQ"]
[Thu Dec 18 16:41:48.824399 2025] [:error] [pid 23558:tid 23615] [client 4.241.218.229:29515] [client 4.241.218.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/sf.php"] [unique_id "aUO-TOHam9NbgPQa9ubSSwAAAMA"]
[Thu Dec 18 16:41:50.487007 2025] [:error] [pid 23558:tid 23624] [client 4.241.218.229:12667] [client 4.241.218.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/sf.php"] [unique_id "aUO-TuHam9NbgPQa9ubSUAAAAMk"]
[Thu Dec 18 16:41:54.147008 2025] [:error] [pid 23645:tid 23664] [client 4.241.218.229:29548] [client 4.241.218.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/sf.php"] [unique_id "aUO-Ujf_Rx0Y0ao_QJgkJQAAAJE"]
[Thu Dec 18 16:41:55.880357 2025] [:error] [pid 12239:tid 12262] [client 4.241.218.229:33290] [client 4.241.218.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/sf.php"] [unique_id "aUO-U9NnXxfGIuWO6anOHQAAApI"]
[Thu Dec 18 16:41:58.851598 2025] [:error] [pid 24958:tid 24961] [client 4.241.218.229:33311] [client 4.241.218.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/file2.php"] [unique_id "aUO-VskDOrUkd0wNm2Gc7wAAAYA"]
[Thu Dec 18 16:42:01.240112 2025] [:error] [pid 12383:tid 12390] [client 4.241.218.229:22894] [client 4.241.218.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/file2.php"] [unique_id "aUO-Wfdgllo9h1cyxGaU6wAAAsQ"]
[Thu Dec 18 16:42:03.132227 2025] [:error] [pid 23556:tid 23562] [client 4.241.218.229:23261] [client 4.241.218.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/file2.php"] [unique_id "aUO-WxnmLlk3u5yt9kGuDwAAAAI"]
[Thu Dec 18 16:42:05.455420 2025] [:error] [pid 23556:tid 23573] [client 4.241.218.229:23605] [client 4.241.218.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/file2.php"] [unique_id "aUO-XRnmLlk3u5yt9kGuEgAAAA0"]
[Thu Dec 18 16:42:06.423984 2025] [:error] [pid 24542:tid 24565] [client 4.241.218.229:12875] [client 4.241.218.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/classwithtostring.php"] [unique_id "aUO-XktQz4H2oS3NrDa3OwAAAVU"]
[Thu Dec 18 20:48:50.537482 2025] [:error] [pid 24542:tid 24556] [client 54.38.195.241:36906] [client 54.38.195.241] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.38.195.241, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aUP4MktQz4H2oS3NrDYTPAAAAUw"]
[Thu Dec 18 22:35:39.796659 2025] [:error] [pid 25357:tid 25382] [client 144.217.252.106:48750] [client 144.217.252.106] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.217.252.106, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aUQRO4aT7bsEXnJVfJd85gAAAdc"]
[Fri Dec 19 00:18:08.664490 2025] [:error] [pid 45738:tid 45791] [client 1.53.102.85:62275] [client 1.53.102.85] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 1.53.102.85, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aUQpQHnw52b7ekJTIU2xIAAAANc"]
[Fri Dec 19 02:08:27.359931 2025] [:error] [pid 45825:tid 45846] [client 87.106.94.234:50160] [client 87.106.94.234] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 87.106.94.234, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aURDG9ES1ifyzuzFwz8vYgAAAFM"]
[Fri Dec 19 03:58:00.389930 2025] [:error] [pid 61923:tid 61983] [client 62.84.186.201:51544] [client 62.84.186.201] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.84.186.201, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aURcyOIJyAkgoURyh1i6uwAAAIQ"]
[Fri Dec 19 04:14:40.637740 2025] [:error] [pid 61921:tid 61937] [client 209.38.92.24:57060] [client 209.38.92.24] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paramountbaldivis.com"] [uri "/.env"] [unique_id "aURgsCI5bruBgrPWiCCsAAAAAAw"]
[Fri Dec 19 04:14:43.271133 2025] [:error] [pid 61922:tid 61963] [client 209.38.92.24:57110] [client 209.38.92.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/vendor/laravel-filemanager/js/script.js"] [unique_id "aURgsxsDXYvsvN0FFlAdSgAAAEs"]
[Fri Dec 19 04:14:43.603730 2025] [:error] [pid 62008:tid 62018] [client 209.38.92.24:1114] [client 209.38.92.24] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paramountbaldivis.com"] [uri "/.git/config"] [unique_id "aURgs5JCOG7NAlbm_ORCTAAAAMc"]
[Fri Dec 19 05:45:38.317772 2025] [:error] [pid 62008:tid 62018] [client 177.96.15.46:50868] [client 177.96.15.46] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.96.15.46, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aUR2ApJCOG7NAlbm_ORkcwAAAMc"]
[Fri Dec 19 05:48:28.511787 2025] [:error] [pid 61922:tid 61975] [client 82.124.51.92:54592] [client 82.124.51.92] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 82.124.51.92, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aUR2rBsDXYvsvN0FFlA2pgAAAFY"]
[Fri Dec 19 08:34:27.728161 2025] [:error] [pid 62008:tid 62029] [client 223.15.245.170:57482] [client 223.15.245.170] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.paramountbaldivis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.paramountbaldivis.com"] [uri "/"] [unique_id "aUSdk5JCOG7NAlbm_OSkKAAAANI"]
[Fri Dec 19 09:08:58.646157 2025] [:error] [pid 41298:tid 41371] [client 191.242.48.126:36512] [client 191.242.48.126] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 191.242.48.126, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aUSlqrpk9Akl8XPXCOQYIAAAAJA"]
[Fri Dec 19 09:09:01.119033 2025] [:error] [pid 41298:tid 41371] [client 191.242.48.126:36512] [client 191.242.48.126] ModSecurity: Audit log: Failed to lock global mutex: Invalid argument [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aUSlqrpk9Akl8XPXCOQYIAAAAJA"]
[Fri Dec 19 09:09:01.119312 2025] [:error] [pid 41298:tid 41371] [client 191.242.48.126:36512] [client 191.242.48.126] ModSecurity: Audit log: Failed to unlock global mutex: Invalid argument [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aUSlqrpk9Akl8XPXCOQYIAAAAJA"]
[Fri Dec 19 09:45:35.728399 2025] [:error] [pid 41890:tid 41946] [client 49.51.204.74:38220] [client 49.51.204.74] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||paramountbaldivis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUSuP5p7boJAsmsdn9EZrwAAAVQ"]
[Fri Dec 19 10:33:50.630367 2025] [:error] [pid 46781:tid 46808] [client 195.245.203.9:33804] [client 195.245.203.9] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 195.245.203.9, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aUS5juU9o3uerz7jjehLnQAAABc"]
[Fri Dec 19 11:50:45.688130 2025] [:error] [pid 20581:tid 20626] [client 192.145.44.37:53412] [client 192.145.44.37] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.145.44.37, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aUTLlfxEv7WXNhnFD1nsXQAAAIs"]
[Fri Dec 19 13:13:49.763498 2025] [:error] [pid 20675:tid 20699] [client 135.235.137.93:54134] [client 135.235.137.93] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 135.235.137.93, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aUTfDbMyJ3XqeDRsbQnPDgAAAQs"]
[Fri Dec 19 14:28:00.896129 2025] [:error] [pid 20675:tid 20694] [client 104.28.246.54:44378] [client 104.28.246.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "paramountbaldivis.com"] [uri "/style.php"] [unique_id "aUTwcLMyJ3XqeDRsbQn2zwAAAQY"]
[Fri Dec 19 14:28:58.446081 2025] [:error] [pid 20582:tid 20643] [client 82.223.55.140:33598] [client 82.223.55.140] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 82.223.55.140, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aUTwqspAnrkQKZ4b5gbFngAAAME"]
[Fri Dec 19 15:54:33.906916 2025] [autoindex:error] [pid 20675:tid 20710] [client 144.91.111.74:52792] AH01276: Cannot serve directory /home/baldivis/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Fri Dec 19 16:47:53.829813 2025] [:error] [pid 20675:tid 20710] [client 43.165.67.57:33700] [client 43.165.67.57] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||paramountbaldivis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUURObMyJ3XqeDRsbQkpjAAAARY"]
[Fri Dec 19 20:27:15.702182 2025] [:error] [pid 20582:tid 20663] [client 89.74.227.109:4636] [client 89.74.227.109] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.74.227.109, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aUVEo8pAnrkQKZ4b5gYymQAAANU"]
[Fri Dec 19 21:58:49.379003 2025] [:error] [pid 20582:tid 20652] [client 51.210.183.228:33506] [client 51.210.183.228] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 51.210.183.228, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aUVaGcpAnrkQKZ4b5gZNjQAAAMo"]
[Fri Dec 19 22:00:18.337964 2025] [:error] [pid 20581:tid 20635] [client 170.106.11.6:50674] [client 170.106.11.6] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.paramountbaldivis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.paramountbaldivis.com"] [uri "/"] [unique_id "aUVacvxEv7WXNhnFD1mW5wAAAJQ"]
[Fri Dec 19 22:11:32.577918 2025] [:error] [pid 20581:tid 20615] [client 4.194.48.125:3590] [client 4.194.48.125] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paramountbaldivis.com"] [uri "/wp-config.php"] [unique_id "aUVdFPxEv7WXNhnFD1mZxAAAAIA"]
[Fri Dec 19 22:11:43.762240 2025] [:error] [pid 16026:tid 16031] [client 4.194.48.125:28078] [client 4.194.48.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/er.php"] [unique_id "aUVdH0LVfhf4Jb3enmNP4wAAAUI"]
[Fri Dec 19 22:12:00.082956 2025] [:error] [pid 20581:tid 20635] [client 4.194.48.125:21952] [client 4.194.48.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/logs.php"] [unique_id "aUVdMPxEv7WXNhnFD1mZzwAAAJQ"]
[Fri Dec 19 22:12:04.272574 2025] [:error] [pid 20582:tid 20660] [client 4.194.48.125:3126] [client 4.194.48.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/logs.php"] [unique_id "aUVdNMpAnrkQKZ4b5gZTOAAAANI"]
[Fri Dec 19 22:12:08.175790 2025] [:error] [pid 18438:tid 18444] [client 4.194.48.125:44978] [client 4.194.48.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/logs.php"] [unique_id "aUVdOJRArClWV1iij_Sx1QAAAYM"]
[Fri Dec 19 22:12:11.473262 2025] [:error] [pid 16026:tid 16034] [client 4.194.48.125:24996] [client 4.194.48.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/logs.php"] [unique_id "aUVdO0LVfhf4Jb3enmNP5gAAAUU"]
[Fri Dec 19 22:12:20.091092 2025] [:error] [pid 41451:tid 41470] [client 4.194.48.125:3084] [client 4.194.48.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/tt.php"] [unique_id "aUVdRAYXFn-DbZghZBHxJgAAABA"]
[Fri Dec 19 22:12:37.402416 2025] [:error] [pid 20582:tid 20646] [client 4.194.48.125:44975] [client 4.194.48.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/testphp.php"] [unique_id "aUVdVcpAnrkQKZ4b5gZTXwAAAMQ"]
[Fri Dec 19 22:14:21.278494 2025] [:error] [pid 20581:tid 20624] [client 4.194.48.125:22483] [client 4.194.48.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/mob.php"] [unique_id "aUVdvfxEv7WXNhnFD1ma2gAAAIk"]
[Fri Dec 19 22:15:00.297263 2025] [:error] [pid 20675:tid 20688] [client 4.194.48.125:20925] [client 4.194.48.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/adminer-4.6.6.php"] [unique_id "aUVd5LMyJ3XqeDRsbQmzjAAAAQA"]
[Fri Dec 19 22:15:03.125698 2025] [:error] [pid 20582:tid 20662] [client 4.194.48.125:58508] [client 4.194.48.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/adminer-4.6.6.php"] [unique_id "aUVd58pAnrkQKZ4b5gZUOgAAANQ"]
[Fri Dec 19 22:17:25.160785 2025] [:error] [pid 20582:tid 20645] [client 4.194.48.125:23729] [client 4.194.48.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/adminer-4.7.3.php"] [unique_id "aUVedcpAnrkQKZ4b5gZU3QAAAMM"]
[Fri Dec 19 22:17:28.148795 2025] [:error] [pid 16026:tid 16049] [client 4.194.48.125:23936] [client 4.194.48.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/adminer-4.7.3.php"] [unique_id "aUVeeELVfhf4Jb3enmNRTgAAAVQ"]
[Fri Dec 19 22:17:50.565362 2025] [:error] [pid 20582:tid 20645] [client 4.194.48.125:28451] [client 4.194.48.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/adminer-4.7.4.php"] [unique_id "aUVejspAnrkQKZ4b5gZU-AAAAMM"]
[Fri Dec 19 22:17:58.007986 2025] [:error] [pid 41451:tid 41462] [client 4.194.48.125:21965] [client 4.194.48.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/adminer-4.7.4.php"] [unique_id "aUVelgYXFn-DbZghZBHyigAAAAg"]
[Fri Dec 19 22:17:59.578816 2025] [:error] [pid 20581:tid 20619] [client 4.194.48.125:44951] [client 4.194.48.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/adminer-4.7.4.php"] [unique_id "aUVel_xEv7WXNhnFD1mbrwAAAIQ"]
[Fri Dec 19 22:18:07.022682 2025] [:error] [pid 20582:tid 20649] [client 4.194.48.125:28851] [client 4.194.48.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/adminer-4.7.5.php"] [unique_id "aUVen8pAnrkQKZ4b5gZVFwAAAMc"]
[Fri Dec 19 22:18:09.432680 2025] [:error] [pid 20582:tid 20642] [client 4.194.48.125:26911] [client 4.194.48.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/adminer-4.7.5.php"] [unique_id "aUVeocpAnrkQKZ4b5gZVHQAAAMA"]
[Fri Dec 19 22:18:15.099954 2025] [:error] [pid 20582:tid 20647] [client 4.194.48.125:32347] [client 4.194.48.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/adminer-4.7.5.php"] [unique_id "aUVep8pAnrkQKZ4b5gZVIgAAAMU"]
[Fri Dec 19 23:14:57.394941 2025] [:error] [pid 41451:tid 41471] [client 49.51.252.146:40600] [client 49.51.252.146] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||paramountbaldivis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUVr8QYXFn-DbZghZBECoAAAABE"]
[Fri Dec 19 23:22:55.032761 2025] [:error] [pid 18438:tid 18458] [client 161.35.158.4:44390] [client 161.35.158.4] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 161.35.158.4, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aUVtz5RArClWV1iij_TQYgAAAZE"]
[Sat Dec 20 00:42:44.793360 2025] [:error] [pid 39268:tid 39332] [client 159.223.46.12:49158] [client 159.223.46.12] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.223.46.12, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aUWAhOTCMRSRXPuXZF_3lgAAARY"]
[Sat Dec 20 01:57:34.620503 2025] [:error] [pid 35711:tid 35724] [client 123.31.41.118:49058] [client 123.31.41.118] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 123.31.41.118, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aUWSDixTWUmlILwAM_e-cAAAAAs"]
[Sat Dec 20 04:32:06.978186 2025] [:error] [pid 39577:tid 39580] [client 82.34.189.137:42096] [client 82.34.189.137] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||paramountbaldivis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUW2RrviRnt1rJiSOfxiYwAAAME"]
[Sat Dec 20 04:38:36.575403 2025] [:error] [pid 39493:tid 39569] [client 146.190.155.17:60636] [client 146.190.155.17] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 146.190.155.17, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aUW3zGhjL2VG_FmIHqDuGQAAAJQ"]
[Sat Dec 20 05:51:42.722878 2025] [:error] [pid 39491:tid 39499] [client 172.104.233.211:53736] [client 172.104.233.211] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.104.233.211, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aUXI7ltw2ggYvDxu2EC4ZwAAAAQ"]
[Sat Dec 20 07:42:08.027360 2025] [autoindex:error] [pid 14286:tid 14291] [client 45.86.202.54:63731] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 07:42:08.354891 2025] [autoindex:error] [pid 14286:tid 14310] [client 45.86.202.54:63731] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 07:42:08.673806 2025] [autoindex:error] [pid 14286:tid 14294] [client 45.86.202.54:63731] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 07:42:08.982757 2025] [autoindex:error] [pid 14286:tid 14296] [client 45.86.202.54:63731] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 08:20:53.281547 2025] [:error] [pid 39491:tid 39519] [client 82.165.10.186:36070] [client 82.165.10.186] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 82.165.10.186, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aUXr5Vtw2ggYvDxu2EAB_AAAABg"]
[Sat Dec 20 08:46:12.589894 2025] [:error] [pid 39491:tid 39519] [client 43.133.220.37:54756] [client 43.133.220.37] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.paramountbaldivis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.paramountbaldivis.com"] [uri "/"] [unique_id "aUXx1Ftw2ggYvDxu2EAFsAAAABg"]
[Sat Dec 20 09:40:09.457081 2025] [:error] [pid 39491:tid 39512] [client 46.105.76.214:31796] [client 46.105.76.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 46.105.76.214, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aUX-eVtw2ggYvDxu2EAOAAAAABE"]
[Sat Dec 20 11:07:39.781598 2025] [:error] [pid 18807:tid 18814] [client 49.51.73.183:35942] [client 49.51.73.183] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||paramountbaldivis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUYS-2RP9n5OCTllYeVsFAAAAYU"]
[Sat Dec 20 12:04:43.170434 2025] [:error] [pid 39577:tid 39591] [client 88.99.148.122:59468] [client 88.99.148.122] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 88.99.148.122, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aUYgW7viRnt1rJiSOfzwtAAAAMw"]
[Sat Dec 20 13:13:43.844099 2025] [:error] [pid 39493:tid 39567] [client 49.13.10.24:59002] [client 49.13.10.24] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 49.13.10.24, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aUYwh2hjL2VG_FmIHqCQVwAAAJI"]
[Sat Dec 20 15:35:05.443867 2025] [:error] [pid 39493:tid 39552] [client 80.239.207.207:44766] [client 80.239.207.207] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 80.239.207.207, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aUZRqWhjL2VG_FmIHqCu4gAAAIM"]
[Sat Dec 20 16:47:46.377985 2025] [:error] [pid 18807:tid 18821] [client 83.96.201.169:44590] [client 83.96.201.169] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 83.96.201.169, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aUZismRP9n5OCTllYeXQzQAAAYw"]
[Sat Dec 20 18:05:12.598309 2025] [:error] [pid 39492:tid 39523] [client 170.106.187.106:48278] [client 170.106.187.106] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.paramountbaldivis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.paramountbaldivis.com"] [uri "/"] [unique_id "aUZ02Is_ZYP1UQNM9hYyfQAAAEE"]
[Sat Dec 20 19:16:11.465652 2025] [:error] [pid 14286:tid 14310] [client 103.185.212.159:42154] [client 103.185.212.159] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.185.212.159, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aUaFe57rbXIrw6rGSdZalgAAAVQ"]
[Sat Dec 20 19:16:49.064192 2025] [:error] [pid 39577:tid 39595] [client 178.128.32.235:49802] [client 178.128.32.235] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 178.128.32.235, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aUaFobviRnt1rJiSOfxFMwAAANA"]
[Sat Dec 20 20:32:23.244878 2025] [:error] [pid 33844:tid 33852] [client 95.223.75.153:59063] [client 95.223.75.153] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 95.223.75.153, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aUaXVyaNtwGsyqqVmQHnyQAAAwY"]
[Sat Dec 20 21:50:17.936712 2025] [:error] [pid 39493:tid 39555] [client 91.245.210.195:42162] [client 91.245.210.195] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.245.210.195, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aUapmWhjL2VG_FmIHqAMygAAAIY"]
[Sat Dec 20 21:50:24.337334 2025] [:error] [pid 39577:tid 39597] [client 85.203.34.20:62351] [client 85.203.34.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "aUapoLviRnt1rJiSOfx6XAAAANI"]
[Sat Dec 20 21:50:28.981870 2025] [:error] [pid 14286:tid 14302] [client 85.203.34.6:33371] [client 85.203.34.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/bk/index.php"] [unique_id "aUappJ7rbXIrw6rGSdaYLgAAAUw"]
[Sat Dec 20 21:50:59.486054 2025] [:error] [pid 14286:tid 14313] [client 85.203.34.41:53195] [client 85.203.34.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/theme-compat/chosen.php"] [unique_id "aUapw57rbXIrw6rGSdaZCQAAAVc"]
[Sat Dec 20 21:51:08.329491 2025] [:error] [pid 14247:tid 14269] [client 85.203.34.19:49019] [client 85.203.34.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/IXR/chosen.php"] [unique_id "aUapzCDv9TtKKdJQn9kmiAAAARQ"]
[Sat Dec 20 21:51:08.938300 2025] [:error] [pid 33749:tid 33760] [client 85.203.34.7:35217] [client 85.203.34.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/js/chosen.php"] [unique_id "aUapzNoInXJnb96wei-ArgAAAok"]
[Sat Dec 20 21:51:09.485585 2025] [:error] [pid 39493:tid 39563] [client 85.203.34.46:44025] [client 85.203.34.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/pomo/wp-conflg.php"] [unique_id "aUapzWhjL2VG_FmIHqAPXQAAAI4"]
[Sat Dec 20 21:51:10.076091 2025] [:error] [pid 39577:tid 39587] [client 85.203.34.34:52095] [client 85.203.34.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/js/autoload_classmap.php"] [unique_id "aUapzrviRnt1rJiSOfx8fQAAAMg"]
[Sat Dec 20 21:51:18.470621 2025] [:error] [pid 14247:tid 14250] [client 85.203.34.9:64717] [client 85.203.34.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aUap1iDv9TtKKdJQn9km3QAAAQE"]
[Sat Dec 20 21:51:26.788833 2025] [:error] [pid 39577:tid 39602] [client 85.203.34.29:47063] [client 85.203.34.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "aUap3rviRnt1rJiSOfx9RgAAANc"]
[Sat Dec 20 21:52:03.123755 2025] [:error] [pid 33687:tid 33703] [client 85.203.34.13:27673] [client 85.203.34.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aUaqAzYMR4qK1N4g7vjjuQAAAk0"]
[Sat Dec 20 21:52:03.694927 2025] [:error] [pid 33687:tid 33711] [client 85.203.34.23:62751] [client 85.203.34.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aUaqAzYMR4qK1N4g7vjjvwAAAlU"]
[Sat Dec 20 21:52:04.331092 2025] [:error] [pid 33844:tid 33851] [client 85.203.34.19:43979] [client 85.203.34.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/up/main.php"] [unique_id "aUaqBCaNtwGsyqqVmQEK8gAAAwU"]
[Sat Dec 20 21:53:42.415931 2025] [:error] [pid 33687:tid 33694] [client 85.203.34.3:40623] [client 85.203.34.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/updates.php"] [unique_id "aUaqZjYMR4qK1N4g7vjmiAAAAkQ"]
[Sat Dec 20 21:55:46.412887 2025] [:error] [pid 33749:tid 33767] [client 85.203.34.27:51995] [client 85.203.34.27] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.203.34.27, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aUaq4toInXJnb96wei-RyQAAApA"]
[Sat Dec 20 21:56:17.043327 2025] [:error] [pid 33749:tid 33764] [client 85.203.34.27:51995] [client 85.203.34.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/css/modules.php"] [unique_id "aUarAdoInXJnb96wei-ShAAAAo0"]
[Sat Dec 20 21:57:23.272962 2025] [:error] [pid 14286:tid 14309] [client 85.203.34.36:56887] [client 85.203.34.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/codeboy1877_up.php"] [unique_id "aUarQ57rbXIrw6rGSdamggAAAVM"]
[Sat Dec 20 22:00:02.831041 2025] [:error] [pid 33687:tid 33701] [client 85.203.34.5:37853] [client 85.203.34.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/lx.php"] [unique_id "aUar4jYMR4qK1N4g7vjtRAAAAks"]
[Sat Dec 20 22:03:57.382000 2025] [:error] [pid 39577:tid 39601] [client 85.203.34.26:24753] [client 85.203.34.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/css/F0x.php"] [unique_id "aUaszbviRnt1rJiSOfyMggAAANY"]
[Sat Dec 20 22:06:00.126087 2025] [:error] [pid 39493:tid 39572] [client 85.203.34.35:31905] [client 85.203.34.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/IXR/index.php"] [unique_id "aUatSGhjL2VG_FmIHqAfJwAAAJc"]
[Sat Dec 20 22:06:00.716685 2025] [:error] [pid 62124:tid 62148] [client 85.203.34.3:24371] [client 85.203.34.3] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 85.203.34.3, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aUatSFs94zPA9ULQOjmkfgAAABY"]
[Sat Dec 20 22:06:13.487614 2025] [:error] [pid 62124:tid 62129] [client 85.203.34.3:24371] [client 85.203.34.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aUatVVs94zPA9ULQOjmkmgAAAAM"]
[Sat Dec 20 22:06:56.066420 2025] [:error] [pid 33749:tid 33774] [client 85.203.34.38:29203] [client 85.203.34.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "aUatgNoInXJnb96wei-XhQAAApc"]
[Sat Dec 20 22:08:00.539040 2025] [:error] [pid 33793:tid 33813] [client 85.203.34.3:49939] [client 85.203.34.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/css/index.php"] [unique_id "aUatwFSicyB0BFmbRMz0DwAAAtI"]
[Sat Dec 20 22:08:01.249743 2025] [:error] [pid 33749:tid 33760] [client 85.203.34.11:42609] [client 85.203.34.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "aUatwdoInXJnb96wei-X5wAAAok"]
[Sat Dec 20 22:08:01.808628 2025] [:error] [pid 62124:tid 62145] [client 85.203.34.44:50641] [client 85.203.34.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/Text/about.php"] [unique_id "aUatwVs94zPA9ULQOjmlsAAAABM"]
[Sat Dec 20 22:08:03.432385 2025] [:error] [pid 33793:tid 33815] [client 85.203.34.5:25533] [client 85.203.34.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/css/about.php"] [unique_id "aUatw1SicyB0BFmbRMz0EQAAAtQ"]
[Sat Dec 20 22:08:19.274909 2025] [:error] [pid 33687:tid 33699] [client 85.203.34.15:41263] [client 85.203.34.15] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.203.34.15, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/images/wp-login.php"] [unique_id "aUat0zYMR4qK1N4g7vjvsAAAAkk"]
[Sat Dec 20 22:09:13.147913 2025] [:error] [pid 33687:tid 33695] [client 85.203.34.15:41263] [client 85.203.34.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/blocks/about.php"] [unique_id "aUauCTYMR4qK1N4g7vjv_wAAAkU"]
[Sat Dec 20 22:09:26.592720 2025] [:error] [pid 39577:tid 39602] [client 85.203.34.11:28603] [client 85.203.34.11] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.203.34.11, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aUauFrviRnt1rJiSOfyO8AAAANc"]
[Sat Dec 20 22:09:55.531676 2025] [:error] [pid 39577:tid 39590] [client 85.203.34.11:28603] [client 85.203.34.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/makeasmtp.php"] [unique_id "aUauM7viRnt1rJiSOfyPHwAAAMs"]
[Sat Dec 20 22:09:56.225977 2025] [:error] [pid 33749:tid 33761] [client 185.92.25.139:26517] [client 185.92.25.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/about.php"] [unique_id "aUauNNoInXJnb96wei-ZLQAAAoo"]
[Sat Dec 20 22:10:11.839206 2025] [autoindex:error] [pid 39493:tid 39569] [client 85.203.34.7:59927] AH01276: Cannot serve directory /home/baldivis/public_html/.well-known/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 22:10:12.409050 2025] [autoindex:error] [pid 39493:tid 39565] [client 85.203.34.7:59927] AH01276: Cannot serve directory /home/baldivis/public_html/.well-known/pki-validation/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 22:10:12.731752 2025] [autoindex:error] [pid 39493:tid 39572] [client 85.203.34.7:59927] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 22:10:16.712645 2025] [autoindex:error] [pid 39493:tid 39556] [client 85.203.34.7:59927] AH01276: Cannot serve directory /home/baldivis/public_html/wp-content/uploads/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 22:10:30.515741 2025] [autoindex:error] [pid 39493:tid 39562] [client 85.203.34.7:59927] AH01276: Cannot serve directory /home/baldivis/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 22:10:36.169628 2025] [autoindex:error] [pid 39493:tid 39551] [client 85.203.34.7:59927] AH01276: Cannot serve directory /home/baldivis/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 22:10:36.546161 2025] [autoindex:error] [pid 39493:tid 39566] [client 85.203.34.7:59927] AH01276: Cannot serve directory /home/baldivis/public_html/wp-admin/css/colors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 22:10:36.885875 2025] [autoindex:error] [pid 39493:tid 39564] [client 85.203.34.7:59927] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 22:10:37.196584 2025] [autoindex:error] [pid 39493:tid 39557] [client 85.203.34.7:59927] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 22:10:37.519421 2025] [autoindex:error] [pid 39493:tid 39552] [client 85.203.34.7:59927] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 22:10:39.999695 2025] [proxy_fcgi:error] [pid 39493:tid 39563] [client 85.203.34.7:59927] AH01071: Got error 'PHP message: PHP Warning: Use of undefined constant ABSPATH - assumed 'ABSPATH' (this will throw an Error in a future version of PHP) in /home/baldivis/public_html/wp-includes/blocks/index.php on line 9PHP message: PHP Warning: Use of undefined constant WPINC - assumed 'WPINC' (this will throw an Error in a future version of PHP) in /home/baldivis/public_html/wp-includes/blocks/index.php on line 9PHP message: PHP Warning: require(ABSPATHWPINC/blocks/archives.php): failed to open stream: No such file or directory in /home/baldivis/public_html/wp-includes/blocks/index.php on line 9PHP message: PHP Warning: require(ABSPATHWPINC/blocks/archives.php): failed to open stream: No such file or directory in /home/baldivis/public_html/wp-includes/blocks/index.php on line 9PHP message: PHP Fatal error: require(): Failed opening required 'ABSPATHWPINC/blocks/archives.php' (include_path='.:') in /home/baldivis/public_html/wp-includes/blocks/index.php on line 9'
[Sat Dec 20 22:10:40.671218 2025] [autoindex:error] [pid 14247:tid 14263] [client 85.203.34.2:50285] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 22:10:41.002090 2025] [autoindex:error] [pid 14247:tid 14258] [client 85.203.34.2:50285] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 22:10:41.364032 2025] [autoindex:error] [pid 14247:tid 14249] [client 85.203.34.2:50285] AH01276: Cannot serve directory /home/baldivis/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 22:10:41.718065 2025] [autoindex:error] [pid 14247:tid 14255] [client 85.203.34.2:50285] AH01276: Cannot serve directory /home/baldivis/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 22:10:59.391857 2025] [autoindex:error] [pid 14247:tid 14253] [client 85.203.34.2:50285] AH01276: Cannot serve directory /home/baldivis/public_html/wp-content/uploads/2021/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 22:11:03.094739 2025] [autoindex:error] [pid 14247:tid 14273] [client 85.203.34.2:50285] AH01276: Cannot serve directory /home/baldivis/public_html/wp-content/mu-plugins/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 22:12:30.645811 2025] [autoindex:error] [pid 14247:tid 14268] [client 85.203.34.2:50285] AH01276: Cannot serve directory /home/baldivis/public_html/wp-admin/css/colors/ectoplasm/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 22:12:30.995215 2025] [autoindex:error] [pid 14247:tid 14249] [client 85.203.34.2:50285] AH01276: Cannot serve directory /home/baldivis/public_html/wp-admin/css/colors/light/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 22:12:31.317213 2025] [autoindex:error] [pid 14247:tid 14269] [client 85.203.34.2:50285] AH01276: Cannot serve directory /home/baldivis/public_html/wp-admin/css/colors/midnight/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 22:12:31.622172 2025] [autoindex:error] [pid 14247:tid 14254] [client 85.203.34.2:50285] AH01276: Cannot serve directory /home/baldivis/public_html/wp-admin/css/colors/modern/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 22:12:31.941332 2025] [autoindex:error] [pid 14247:tid 14257] [client 85.203.34.2:50285] AH01276: Cannot serve directory /home/baldivis/public_html/wp-admin/css/colors/ocean/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 22:12:32.254722 2025] [autoindex:error] [pid 14247:tid 14258] [client 85.203.34.2:50285] AH01276: Cannot serve directory /home/baldivis/public_html/wp-admin/css/colors/sunrise/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 22:12:32.798690 2025] [autoindex:error] [pid 14247:tid 14262] [client 85.203.34.2:50285] AH01276: Cannot serve directory /home/baldivis/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 22:12:36.381095 2025] [autoindex:error] [pid 14247:tid 14267] [client 85.203.34.2:50285] AH01276: Cannot serve directory /home/baldivis/public_html/wp-content/uploads/2022/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 22:12:36.696449 2025] [autoindex:error] [pid 14247:tid 14265] [client 85.203.34.2:50285] AH01276: Cannot serve directory /home/baldivis/public_html/wp-content/uploads/2023/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 22:12:37.028647 2025] [autoindex:error] [pid 14247:tid 14272] [client 85.203.34.2:50285] AH01276: Cannot serve directory /home/baldivis/public_html/wp-content/uploads/2024/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 22:12:40.889387 2025] [autoindex:error] [pid 14247:tid 14250] [client 85.203.34.2:50285] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 22:12:44.215524 2025] [autoindex:error] [pid 14247:tid 14252] [client 85.203.34.2:50285] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/images/crystal/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 22:12:44.528719 2025] [autoindex:error] [pid 14247:tid 14269] [client 85.203.34.2:50285] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/images/media/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 22:12:44.840415 2025] [autoindex:error] [pid 14247:tid 14257] [client 85.203.34.2:50285] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/images/smilies/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 22:12:45.130195 2025] [autoindex:error] [pid 14247:tid 14262] [client 85.203.34.2:50285] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/images/wlw/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 22:12:45.455844 2025] [autoindex:error] [pid 14247:tid 14259] [client 85.203.34.2:50285] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/js/codemirror/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 22:12:45.769425 2025] [autoindex:error] [pid 14247:tid 14263] [client 85.203.34.2:50285] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/js/plupload/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 22:12:46.087032 2025] [autoindex:error] [pid 14247:tid 14256] [client 85.203.34.2:50285] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 22:12:46.389991 2025] [autoindex:error] [pid 14247:tid 14272] [client 85.203.34.2:50285] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 22:12:46.699874 2025] [autoindex:error] [pid 14247:tid 14271] [client 85.203.34.2:50285] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/sitemaps/providers/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 22:14:19.960797 2025] [autoindex:error] [pid 14247:tid 14272] [client 85.203.34.2:50285] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/js/tinymce/plugins/fullscreen/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 22:14:51.860813 2025] [autoindex:error] [pid 14247:tid 14259] [client 85.203.34.2:50285] AH01276: Cannot serve directory /home/baldivis/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 22:15:03.904446 2025] [autoindex:error] [pid 33844:tid 33866] [client 85.203.34.47:54291] AH01276: Cannot serve directory /home/baldivis/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 22:15:04.224517 2025] [autoindex:error] [pid 33844:tid 33862] [client 85.203.34.47:54291] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 22:15:04.530951 2025] [autoindex:error] [pid 33844:tid 33854] [client 85.203.34.47:54291] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/SimplePie/XML/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 22:15:11.930438 2025] [autoindex:error] [pid 33844:tid 33852] [client 85.203.34.47:54291] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 22:15:12.260568 2025] [autoindex:error] [pid 33844:tid 33868] [client 85.203.34.47:54291] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 22:15:12.587771 2025] [autoindex:error] [pid 33844:tid 33859] [client 85.203.34.47:54291] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 22:15:12.921226 2025] [autoindex:error] [pid 33844:tid 33866] [client 85.203.34.47:54291] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/Text/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 22:15:13.233646 2025] [autoindex:error] [pid 33844:tid 33861] [client 85.203.34.47:54291] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/Text/Diff/Renderer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 22:15:13.575047 2025] [autoindex:error] [pid 33844:tid 33862] [client 85.203.34.47:54291] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/customize/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 22:15:13.906671 2025] [autoindex:error] [pid 33844:tid 33857] [client 85.203.34.47:54291] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 22:15:14.234443 2025] [autoindex:error] [pid 33844:tid 33867] [client 85.203.34.47:54291] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/pomo/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 22:15:14.560421 2025] [autoindex:error] [pid 33844:tid 33858] [client 85.203.34.47:54291] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 22:15:14.887044 2025] [autoindex:error] [pid 33844:tid 33848] [client 85.203.34.47:54291] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 22:15:41.122211 2025] [autoindex:error] [pid 33844:tid 33856] [client 85.203.34.47:54291] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/theme-compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 22:16:10.746124 2025] [autoindex:error] [pid 33844:tid 33848] [client 85.203.34.47:54291] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 22:16:11.089349 2025] [autoindex:error] [pid 33844:tid 33857] [client 85.203.34.47:54291] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/js/jcrop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 22:16:16.324081 2025] [autoindex:error] [pid 33844:tid 33847] [client 85.203.34.47:54291] AH01276: Cannot serve directory /home/baldivis/public_html/wp-content/maintenance/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 22:16:38.608705 2025] [autoindex:error] [pid 33844:tid 33849] [client 85.203.34.47:54291] AH01276: Cannot serve directory /home/baldivis/public_html/.tmb/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 22:16:48.985960 2025] [autoindex:error] [pid 33844:tid 33849] [client 85.203.34.47:54291] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/js/tinymce/plugins/paste/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 22:16:53.686597 2025] [autoindex:error] [pid 33844:tid 33856] [client 85.203.34.47:54291] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/block-supports/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 22:17:03.674107 2025] [autoindex:error] [pid 33844:tid 33847] [client 85.203.34.47:54291] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/js/tinymce/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 22:17:07.240749 2025] [autoindex:error] [pid 33844:tid 33853] [client 85.203.34.47:54291] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/Text/Diff/Engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 22:17:12.279375 2025] [autoindex:error] [pid 33844:tid 33852] [client 85.203.34.47:54291] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/js/tinymce/plugins/directionality/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 22:17:19.919990 2025] [autoindex:error] [pid 62124:tid 62142] [client 85.203.34.34:43117] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/rest-api/search/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 22:17:20.251558 2025] [autoindex:error] [pid 62124:tid 62149] [client 85.203.34.34:43117] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/js/tinymce/plugins/compat3x/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 22:17:22.764464 2025] [autoindex:error] [pid 62124:tid 62144] [client 85.203.34.34:43117] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/block-patterns/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 22:17:31.481662 2025] [autoindex:error] [pid 62124:tid 62145] [client 85.203.34.34:43117] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/js/tinymce/plugins/compat3x/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 22:17:34.012615 2025] [proxy_fcgi:error] [pid 62124:tid 62142] [client 85.203.34.34:43117] AH01071: Got error 'PHP message: PHP Fatal error: Uncaught Error: Call to undefined function get_header() in /home/baldivis/public_html/wp-content/themes/twentytwentyone/index.php:17\nStack trace:\n#0 {main}\n thrown in /home/baldivis/public_html/wp-content/themes/twentytwentyone/index.php on line 17'
[Sat Dec 20 22:18:04.076363 2025] [autoindex:error] [pid 33844:tid 33867] [client 85.203.34.48:24021] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/blocks/paragraph/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 22:18:10.181202 2025] [autoindex:error] [pid 33844:tid 33866] [client 85.203.34.48:24021] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/SimplePie/HTTP/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 22:18:16.922268 2025] [autoindex:error] [pid 33844:tid 33865] [client 85.203.34.48:24021] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/css/dist/nux/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 22:18:20.534850 2025] [autoindex:error] [pid 33844:tid 33849] [client 85.203.34.48:24021] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/js/tinymce/plugins/lists/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 22:18:20.850095 2025] [autoindex:error] [pid 33844:tid 33867] [client 85.203.34.48:24021] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/js/tinymce/skins/lightgray/img/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 22:18:48.872909 2025] [autoindex:error] [pid 33844:tid 33867] [client 85.203.34.48:24021] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/SimplePie/Decode/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 22:19:38.291723 2025] [autoindex:error] [pid 33844:tid 33848] [client 85.203.34.48:24021] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/sodium_compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 22:19:43.460945 2025] [autoindex:error] [pid 33844:tid 33863] [client 85.203.34.48:24021] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/blocks/social-links/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 22:20:19.261391 2025] [autoindex:error] [pid 33844:tid 33850] [client 85.203.34.48:24021] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/sodium_compat/src/Core/Curve25519/Ge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 23:05:28.556271 2025] [:error] [pid 39493:tid 39562] [client 148.251.75.141:57978] [client 148.251.75.141] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 148.251.75.141, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aUa7OGhjL2VG_FmIHqAoswAAAI0"]
[Sun Dec 21 00:18:55.401519 2025] [:error] [pid 8751:tid 8770] [client 159.223.217.167:55598] [client 159.223.217.167] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.223.217.167, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aUbMb2vrnuGjNP7vtDQE3AAAABE"]
[Sun Dec 21 00:55:07.834441 2025] [:error] [pid 8640:tid 8665] [client 43.159.128.155:50638] [client 43.159.128.155] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.paramountbaldivis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.paramountbaldivis.com"] [uri "/"] [unique_id "aUbU6_VclzlEWWhvYtlbVQAAAI8"]
[Sun Dec 21 01:13:57.127917 2025] [:error] [pid 8642:tid 8725] [client 45.88.186.197:58207] [client 45.88.186.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUbZVSJkiik8k41igp0INAAAARQ"]
[Sun Dec 21 01:13:57.550182 2025] [:error] [pid 22338:tid 22401] [client 45.88.186.197:58364] [client 45.88.186.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUbZVXGYQSUt-opKpSIMkQAAAFA"]
[Sun Dec 21 01:13:57.994622 2025] [:error] [pid 8751:tid 8761] [client 45.88.186.197:58532] [client 45.88.186.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUbZVWvrnuGjNP7vtDQXhwAAAAg"]
[Sun Dec 21 01:13:58.402818 2025] [:error] [pid 8751:tid 8764] [client 45.88.186.197:58712] [client 45.88.186.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUbZVmvrnuGjNP7vtDQXygAAAAs"]
[Sun Dec 21 01:13:58.817030 2025] [:error] [pid 8751:tid 8772] [client 45.88.186.197:58872] [client 45.88.186.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUbZVmvrnuGjNP7vtDQX6QAAABM"]
[Sun Dec 21 02:35:50.369561 2025] [:error] [pid 8751:tid 8775] [client 43.166.136.24:32922] [client 43.166.136.24] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||paramountbaldivis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUbshmvrnuGjNP7vtDRYDAAAABY"]
[Sun Dec 21 02:41:33.535649 2025] [:error] [pid 8641:tid 8707] [client 31.171.130.140:34373] [client 31.171.130.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aUbt3XE703usYSvQGLSJ_QAAANc"]
[Sun Dec 21 02:41:44.574714 2025] [:error] [pid 44515:tid 44526] [client 31.171.130.136:23173] [client 31.171.130.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aUbt6JZAdBRP9gwGvJ5W0gAAAYg"]
[Sun Dec 21 02:42:04.341368 2025] [:error] [pid 44515:tid 44524] [client 31.171.130.132:39333] [client 31.171.130.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "paramountbaldivis.com"] [uri "/tinyfilemanager.php"] [unique_id "aUbt_JZAdBRP9gwGvJ5XZQAAAYY"]
[Sun Dec 21 02:42:16.400851 2025] [:error] [pid 43680:tid 43684] [client 31.171.130.163:59593] [client 31.171.130.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/js/index.php"] [unique_id "aUbuCEDkAAJVjNqC6UXGDgAAAUA"]
[Sun Dec 21 02:42:42.115231 2025] [:error] [pid 8640:tid 8666] [client 31.171.130.114:36189] [client 31.171.130.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aUbuIvVclzlEWWhvYtmRAwAAAJA"]
[Sun Dec 21 02:42:47.118543 2025] [:error] [pid 22338:tid 22390] [client 31.171.130.158:28041] [client 31.171.130.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aUbuJ3GYQSUt-opKpSJKwgAAAEY"]
[Sun Dec 21 02:42:47.721627 2025] [:error] [pid 8751:tid 8770] [client 31.171.130.109:57265] [client 31.171.130.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aUbuJ2vrnuGjNP7vtDRmRgAAABE"]
[Sun Dec 21 02:42:48.326050 2025] [:error] [pid 44515:tid 44542] [client 31.171.130.111:47565] [client 31.171.130.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aUbuKJZAdBRP9gwGvJ5Y5QAAAZg"]
[Sun Dec 21 02:42:48.966632 2025] [:error] [pid 8642:tid 8724] [client 31.171.130.147:26831] [client 31.171.130.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aUbuKCJkiik8k41igp07fQAAARM"]
[Sun Dec 21 02:42:49.568755 2025] [:error] [pid 8751:tid 8756] [client 31.171.130.113:41819] [client 31.171.130.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aUbuKWvrnuGjNP7vtDRmVgAAAAM"]
[Sun Dec 21 02:42:55.222084 2025] [:error] [pid 8640:tid 8674] [client 31.171.130.110:49241] [client 31.171.130.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aUbuL_VclzlEWWhvYtmRQQAAAJg"]
[Sun Dec 21 02:43:01.390668 2025] [:error] [pid 44515:tid 44522] [client 31.171.130.151:58107] [client 31.171.130.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "paramountbaldivis.com"] [uri "/filemanager.php"] [unique_id "aUbuNZZAdBRP9gwGvJ5ZSQAAAYQ"]
[Sun Dec 21 02:43:10.176625 2025] [:error] [pid 8640:tid 8653] [client 31.171.130.129:48839] [client 31.171.130.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aUbuPvVclzlEWWhvYtmRyAAAAIM"]
[Sun Dec 21 02:43:13.250253 2025] [:error] [pid 43680:tid 43707] [client 31.171.130.135:28011] [client 31.171.130.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aUbuQUDkAAJVjNqC6UXHjAAAAVc"]
[Sun Dec 21 02:43:16.836933 2025] [:error] [pid 43680:tid 43688] [client 31.171.130.112:26847] [client 31.171.130.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aUbuREDkAAJVjNqC6UXHmQAAAUQ"]
[Sun Dec 21 02:43:44.890816 2025] [:error] [pid 8641:tid 8683] [client 31.171.130.116:57713] [client 31.171.130.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aUbuYHE703usYSvQGLSNKgAAAMU"]
[Sun Dec 21 02:43:48.768536 2025] [:error] [pid 8640:tid 8655] [client 31.171.130.158:33065] [client 31.171.130.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aUbuZPVclzlEWWhvYtmSuQAAAIU"]
[Sun Dec 21 02:44:01.303845 2025] [:error] [pid 8751:tid 8768] [client 31.171.130.129:36189] [client 31.171.130.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/defaults.php"] [unique_id "aUbucWvrnuGjNP7vtDRoMgAAAA8"]
[Sun Dec 21 02:44:05.929647 2025] [:error] [pid 8642:tid 8726] [client 59.125.102.227:53024] [client 59.125.102.227] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 59.125.102.227, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aUbudSJkiik8k41igp09hAAAARU"]
[Sun Dec 21 02:44:06.133837 2025] [:error] [pid 8751:tid 8762] [client 31.171.130.148:46081] [client 31.171.130.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/customize/index.php"] [unique_id "aUbudmvrnuGjNP7vtDRoVAAAAAk"]
[Sun Dec 21 02:44:16.766738 2025] [autoindex:error] [pid 8642:tid 8706] [client 31.171.130.129:61011] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:44:17.074395 2025] [autoindex:error] [pid 8642:tid 8697] [client 31.171.130.129:61011] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:44:17.377693 2025] [autoindex:error] [pid 8642:tid 8723] [client 31.171.130.129:61011] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:44:17.694890 2025] [autoindex:error] [pid 8642:tid 8711] [client 31.171.130.129:61011] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:44:25.988737 2025] [autoindex:error] [pid 8642:tid 8699] [client 31.171.130.129:61011] AH01276: Cannot serve directory /home/baldivis/public_html/wp-content/uploads/2023/11/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:44:26.282438 2025] [autoindex:error] [pid 8642:tid 8725] [client 31.171.130.129:61011] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/sodium_compat/lib/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:44:26.598585 2025] [autoindex:error] [pid 8642:tid 8697] [client 31.171.130.129:61011] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/blocks/file/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:44:26.960352 2025] [autoindex:error] [pid 8642:tid 8728] [client 31.171.130.129:61011] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:44:32.706440 2025] [autoindex:error] [pid 8642:tid 8722] [client 31.171.130.129:61011] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:44:40.471858 2025] [autoindex:error] [pid 8642:tid 8724] [client 31.171.130.129:61011] AH01276: Cannot serve directory /home/baldivis/public_html/wp-admin/css/colors/sunrise/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:44:40.796152 2025] [autoindex:error] [pid 8642:tid 8729] [client 31.171.130.129:61011] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/theme-compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:44:48.665304 2025] [autoindex:error] [pid 8642:tid 8716] [client 31.171.130.129:61011] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/blocks/query/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:44:49.015509 2025] [autoindex:error] [pid 8642:tid 8722] [client 31.171.130.129:61011] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/js/tinymce/langs/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:44:49.327945 2025] [autoindex:error] [pid 8642:tid 8721] [client 31.171.130.129:61011] AH01276: Cannot serve directory /home/baldivis/public_html/wp-admin/css/colors/ectoplasm/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:44:49.655305 2025] [autoindex:error] [pid 8642:tid 8701] [client 31.171.130.129:61011] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/blocks/group/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:45:06.088921 2025] [autoindex:error] [pid 8642:tid 8728] [client 31.171.130.129:61011] AH01276: Cannot serve directory /home/baldivis/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:45:12.761457 2025] [autoindex:error] [pid 8642:tid 8726] [client 31.171.130.129:61011] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:45:13.110997 2025] [autoindex:error] [pid 8642:tid 8724] [client 31.171.130.129:61011] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:45:13.430131 2025] [autoindex:error] [pid 8642:tid 8720] [client 31.171.130.129:61011] AH01276: Cannot serve directory /home/baldivis/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:45:26.517635 2025] [autoindex:error] [pid 8642:tid 8721] [client 31.171.130.129:61011] AH01276: Cannot serve directory /home/baldivis/public_html/wp-content/uploads/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:45:39.410838 2025] [autoindex:error] [pid 8642:tid 8728] [client 31.171.130.129:61011] AH01276: Cannot serve directory /home/baldivis/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:45:43.321288 2025] [autoindex:error] [pid 8642:tid 8714] [client 31.171.130.129:61011] AH01276: Cannot serve directory /home/baldivis/public_html/wp-admin/css/colors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:45:43.646474 2025] [autoindex:error] [pid 8642:tid 8701] [client 31.171.130.129:61011] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:45:44.490598 2025] [proxy_fcgi:error] [pid 8642:tid 8713] [client 31.171.130.129:61011] AH01071: Got error 'PHP message: PHP Warning: Use of undefined constant ABSPATH - assumed 'ABSPATH' (this will throw an Error in a future version of PHP) in /home/baldivis/public_html/wp-includes/blocks/index.php on line 9PHP message: PHP Warning: Use of undefined constant WPINC - assumed 'WPINC' (this will throw an Error in a future version of PHP) in /home/baldivis/public_html/wp-includes/blocks/index.php on line 9PHP message: PHP Warning: require(ABSPATHWPINC/blocks/archives.php): failed to open stream: No such file or directory in /home/baldivis/public_html/wp-includes/blocks/index.php on line 9PHP message: PHP Warning: require(ABSPATHWPINC/blocks/archives.php): failed to open stream: No such file or directory in /home/baldivis/public_html/wp-includes/blocks/index.php on line 9PHP message: PHP Fatal error: require(): Failed opening required 'ABSPATHWPINC/blocks/archives.php' (include_path='.:') in /home/baldivis/public_html/wp-includes/blocks/index.php on line 9'
[Sun Dec 21 02:45:45.114519 2025] [autoindex:error] [pid 22338:tid 22400] [client 31.171.130.141:57851] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:45:45.441759 2025] [autoindex:error] [pid 22338:tid 22404] [client 31.171.130.141:57851] AH01276: Cannot serve directory /home/baldivis/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:45:45.760630 2025] [autoindex:error] [pid 22338:tid 22398] [client 31.171.130.141:57851] AH01276: Cannot serve directory /home/baldivis/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:45:55.801801 2025] [autoindex:error] [pid 22338:tid 22385] [client 31.171.130.141:57851] AH01276: Cannot serve directory /home/baldivis/public_html/wp-content/uploads/2021/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:45:58.284631 2025] [autoindex:error] [pid 22338:tid 22396] [client 31.171.130.141:57851] AH01276: Cannot serve directory /home/baldivis/public_html/wp-content/mu-plugins/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:47:15.467608 2025] [autoindex:error] [pid 22338:tid 22389] [client 31.171.130.141:57851] AH01276: Cannot serve directory /home/baldivis/public_html/wp-admin/css/colors/light/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:47:15.772134 2025] [autoindex:error] [pid 22338:tid 22392] [client 31.171.130.141:57851] AH01276: Cannot serve directory /home/baldivis/public_html/wp-admin/css/colors/midnight/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:47:16.363847 2025] [autoindex:error] [pid 22338:tid 22403] [client 31.171.130.141:57851] AH01276: Cannot serve directory /home/baldivis/public_html/wp-admin/css/colors/modern/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:47:16.664392 2025] [autoindex:error] [pid 22338:tid 22399] [client 31.171.130.141:57851] AH01276: Cannot serve directory /home/baldivis/public_html/wp-admin/css/colors/ocean/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:47:20.818328 2025] [autoindex:error] [pid 22338:tid 22406] [client 31.171.130.141:57851] AH01276: Cannot serve directory /home/baldivis/public_html/wp-content/uploads/2022/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:47:21.148190 2025] [autoindex:error] [pid 22338:tid 22392] [client 31.171.130.141:57851] AH01276: Cannot serve directory /home/baldivis/public_html/wp-content/uploads/2023/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:47:21.449096 2025] [autoindex:error] [pid 22338:tid 22395] [client 31.171.130.141:57851] AH01276: Cannot serve directory /home/baldivis/public_html/wp-content/uploads/2024/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:47:24.531458 2025] [autoindex:error] [pid 22338:tid 22391] [client 31.171.130.141:57851] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:47:27.686091 2025] [autoindex:error] [pid 22338:tid 22409] [client 31.171.130.141:57851] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/images/crystal/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:47:28.015044 2025] [autoindex:error] [pid 22338:tid 22401] [client 31.171.130.141:57851] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/images/media/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:47:28.320829 2025] [autoindex:error] [pid 22338:tid 22399] [client 31.171.130.141:57851] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/images/smilies/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:47:28.643208 2025] [autoindex:error] [pid 22338:tid 22388] [client 31.171.130.141:57851] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/images/wlw/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:47:28.985075 2025] [autoindex:error] [pid 22338:tid 22386] [client 31.171.130.141:57851] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/js/codemirror/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:47:29.301328 2025] [autoindex:error] [pid 22338:tid 22387] [client 31.171.130.141:57851] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/js/plupload/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:47:29.591374 2025] [autoindex:error] [pid 22338:tid 22409] [client 31.171.130.141:57851] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:47:29.920627 2025] [autoindex:error] [pid 22338:tid 22397] [client 31.171.130.141:57851] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/sitemaps/providers/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:48:32.601220 2025] [autoindex:error] [pid 22338:tid 22389] [client 31.171.130.141:57851] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/js/tinymce/plugins/fullscreen/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:48:59.957915 2025] [autoindex:error] [pid 22338:tid 22404] [client 31.171.130.141:57851] AH01276: Cannot serve directory /home/baldivis/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:49:11.296778 2025] [autoindex:error] [pid 22338:tid 22393] [client 31.171.130.141:57851] AH01276: Cannot serve directory /home/baldivis/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:49:11.602776 2025] [autoindex:error] [pid 22338:tid 22384] [client 31.171.130.141:57851] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:49:13.750680 2025] [autoindex:error] [pid 22338:tid 22400] [client 31.171.130.141:57851] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/SimplePie/XML/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:49:20.327335 2025] [autoindex:error] [pid 22338:tid 22392] [client 31.171.130.141:57851] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:49:20.625296 2025] [autoindex:error] [pid 22338:tid 22387] [client 31.171.130.141:57851] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:49:22.265564 2025] [autoindex:error] [pid 43680:tid 43685] [client 31.171.130.136:61869] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:49:22.608385 2025] [autoindex:error] [pid 43680:tid 43691] [client 31.171.130.136:61869] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/Text/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:49:22.904916 2025] [autoindex:error] [pid 43680:tid 43708] [client 31.171.130.136:61869] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/Text/Diff/Renderer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:49:23.220939 2025] [autoindex:error] [pid 43680:tid 43697] [client 31.171.130.136:61869] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/customize/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:49:23.552276 2025] [autoindex:error] [pid 43680:tid 43707] [client 31.171.130.136:61869] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:49:23.876024 2025] [autoindex:error] [pid 43680:tid 43688] [client 31.171.130.136:61869] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/pomo/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:49:24.228235 2025] [autoindex:error] [pid 43680:tid 43691] [client 31.171.130.136:61869] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:49:31.336002 2025] [:error] [pid 43680:tid 43699] [client 31.171.130.136:61869] [client 31.171.130.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/plugins/jquery.filer/uploads/"] [unique_id "aUbvu0DkAAJVjNqC6UXSfwAAAU8"]
[Sun Dec 21 02:49:31.992075 2025] [:error] [pid 8642:tid 8708] [client 31.171.130.136:54021] [client 31.171.130.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/plugins/jquery.filer/uploads/"] [unique_id "aUbvuyJkiik8k41igp1GMgAAAQU"]
[Sun Dec 21 02:50:18.664924 2025] [autoindex:error] [pid 44515:tid 44524] [client 31.171.130.110:60439] AH01276: Cannot serve directory /home/baldivis/public_html/wp-includes/js/jcrop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:50:24.033757 2025] [autoindex:error] [pid 44515:tid 44524] [client 31.171.130.110:60439] AH01276: Cannot serve directory /home/baldivis/public_html/wp-content/maintenance/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 02:50:42.362621 2025] [autoindex:error] [pid 44515:tid 44539] [client 31.171.130.110:60439] AH01276: Cannot serve directory /home/baldivis/public_html/.tmb/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Dec 21 03:46:20.863504 2025] [:error] [pid 38937:tid 38947] [client 151.80.24.32:49860] [client 151.80.24.32] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 151.80.24.32, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aUb9DIAZaGRoD619NTocewAAAAY"]
[Sun Dec 21 03:56:52.179213 2025] [autoindex:error] [pid 4235:tid 4294] [client 185.249.225.220:64308] AH01276: Cannot serve directory /home/baldivis/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sun Dec 21 03:57:02.170801 2025] [:error] [pid 4327:tid 4341] [client 216.24.210.64:60855] [client 216.24.210.64] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.210.64, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aUb_jhQRtObbdSDBjAqQUAAAAMw"]
[Sun Dec 21 04:53:05.681394 2025] [:error] [pid 20676:tid 20737] [client 34.124.147.91:54280] [client 34.124.147.91] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 34.124.147.91, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aUcMsapSa967F4pOO5yx_wAAAIQ"]
[Sun Dec 21 06:02:40.735593 2025] [:error] [pid 20676:tid 20734] [client 5.135.142.201:58532] [client 5.135.142.201] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.135.142.201, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aUcdAKpSa967F4pOO5zFPQAAAIE"]
[Sun Dec 21 06:43:35.461398 2025] [:error] [pid 12191:tid 12208] [client 103.65.236.149:58218] [client 103.65.236.149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paramountbaldivis.com"] [uri "/sftp-config.json"] [unique_id "aUcmlwM0m463UZmqdiAAoAAAAQ8"]
[Sun Dec 21 06:43:35.999511 2025] [:error] [pid 16016:tid 16018] [client 103.65.236.149:64483] [client 103.65.236.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/.vscode/sftp.json"] [unique_id "aUcml8HQ_KQh3iINaCOgawAAAUA"]
[Sun Dec 21 07:07:57.474975 2025] [:error] [pid 16016:tid 16020] [client 137.184.25.215:34242] [client 137.184.25.215] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 137.184.25.215, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aUcsTcHQ_KQh3iINaCOn1gAAAUI"]
[Sun Dec 21 08:13:16.669161 2025] [:error] [pid 20674:tid 20683] [client 51.210.190.32:46208] [client 51.210.190.32] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 51.210.190.32, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aUc7nNhSbhHOCK6TAw8zywAAAAU"]
[Sun Dec 21 09:20:12.759854 2025] [:error] [pid 20675:tid 20725] [client 5.135.142.201:60492] [client 5.135.142.201] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 5.135.142.201, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aUdLTLyUvZnd3bHSR3Y1vgAAAFM"]
[Sun Dec 21 09:35:31.372479 2025] [:error] [pid 20676:tid 20752] [client 98.159.37.249:35943] [client 98.159.37.249] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.37.249, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aUdO46pSa967F4pOO5z1WQAAAJM"]
[Sun Dec 21 10:06:38.248664 2025] [:error] [pid 12191:tid 12193] [client 24.74.212.250:57812] [client 24.74.212.250] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 24.74.212.250, incrementing ddos counter"] [hostname "paramountbaldivis.com"] [uri "/xmlrpc.php"] [unique_id "aUdWLgM0m463UZmqdiAy_AAAAQA"]
[Sun Dec 21 10:17:04.881941 2025] [:error] [pid 12191:tid 12205] [client 173.239.218.3:59443] [client 173.239.218.3] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.3, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aUdYoAM0m463UZmqdiA1cwAAAQw"]
[Sun Dec 21 10:17:04.885239 2025] [:error] [pid 12191:tid 12205] [client 173.239.218.3:59443] [client 173.239.218.3] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||paramountbaldivis.com|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /wp-login.php"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aUdYoAM0m463UZmqdiA1cwAAAQw"]
[Sun Dec 21 10:22:24.667388 2025] [:error] [pid 16016:tid 16023] [client 103.1.187.190:33084] [client 103.1.187.190] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.1.187.190, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aUdZ4MHQ_KQh3iINaCPj1AAAAUU"]
[Sun Dec 21 11:00:39.124717 2025] [:error] [pid 20674:tid 20684] [client 98.159.37.221:28685] [client 98.159.37.221] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.37.221, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aUdi19hSbhHOCK6TAw9P2QAAAAY"]
[Sun Dec 21 11:02:46.074082 2025] [:error] [pid 12191:tid 12206] [client 66.249.64.103:36611] [client 66.249.64.103] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "165.232.135.129_041223a463c7548505e91f17600a6794508aa066"): Internal error (specific information not available) [hostname "paramountbaldivis.com"] [uri "/index.php"] [unique_id "aUdjUwM0m463UZmqdiBAVQAAAQ0"]
[Sun Dec 21 11:27:59.441106 2025] [:error] [pid 12191:tid 12201] [client 45.146.172.26:57502] [client 45.146.172.26] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.172.26, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aUdpPwM0m463UZmqdiBHagAAAQg"]
[Sun Dec 21 11:44:53.099195 2025] [:error] [pid 12191:tid 12204] [client 98.159.37.210:63997] [client 98.159.37.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.37.210, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aUdtNQM0m463UZmqdiBNqAAAAQs"]
[Sun Dec 21 11:50:58.158960 2025] [:error] [pid 16016:tid 16027] [client 111.172.249.49:46964] [client 111.172.249.49] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.paramountbaldivis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.paramountbaldivis.com"] [uri "/"] [unique_id "aUduosHQ_KQh3iINaCMBuAAAAUk"]
[Sun Dec 21 12:28:17.313947 2025] [:error] [pid 20676:tid 20751] [client 98.159.37.208:41647] [client 98.159.37.208] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.37.208, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aUd3YapSa967F4pOO5wXRwAAAJI"]
[Sun Dec 21 12:28:17.316718 2025] [:error] [pid 20676:tid 20751] [client 98.159.37.208:41647] [client 98.159.37.208] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||paramountbaldivis.com|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /wp-login.php"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aUd3YapSa967F4pOO5wXRwAAAJI"]
[Sun Dec 21 12:31:49.972448 2025] [:error] [pid 20760:tid 20783] [client 85.214.238.168:42056] [client 85.214.238.168] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.214.238.168, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aUd4NeXEVvRTAtWo3gkKRgAAANQ"]
[Sun Dec 21 13:27:57.712780 2025] [:error] [pid 16016:tid 16032] [client 98.159.37.220:56137] [client 98.159.37.220] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.37.220, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aUeFXcHQ_KQh3iINaCMojQAAAU4"]
[Sun Dec 21 13:34:25.314037 2025] [:error] [pid 20676:tid 20757] [client 13.228.228.218:34648] [client 13.228.228.218] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 13.228.228.218, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aUeG4apSa967F4pOO5wk9wAAAJg"]
[Sun Dec 21 14:12:14.305472 2025] [:error] [pid 16016:tid 16033] [client 98.159.37.213:33353] [client 98.159.37.213] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.37.213, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aUePvsHQ_KQh3iINaCMyUwAAAU8"]
[Sun Dec 21 14:33:57.659490 2025] [:error] [pid 20674:tid 20694] [client 103.177.78.142:41740] [client 103.177.78.142] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.177.78.142, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aUeU1dhSbhHOCK6TAw-DTwAAABA"]
[Sun Dec 21 14:34:48.388700 2025] [:error] [pid 20676:tid 20736] [client 85.214.238.168:57832] [client 85.214.238.168] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.214.238.168, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aUeVCKpSa967F4pOO5w5iAAAAIM"]
[Sun Dec 21 14:56:30.911661 2025] [:error] [pid 20676:tid 20740] [client 98.159.37.223:44353] [client 98.159.37.223] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.37.223, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aUeaHqpSa967F4pOO5xCNAAAAIc"]
[Sun Dec 21 15:28:35.163351 2025] [:error] [pid 20760:tid 20782] [client 20.212.251.69:42658] [client 20.212.251.69] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.212.251.69, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aUeho-XEVvRTAtWo3gk27wAAANM"]
[Sun Dec 21 15:41:22.615039 2025] [:error] [pid 60191:tid 60195] [client 98.159.37.223:58581] [client 98.159.37.223] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.37.223, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aUekoqklhK29C3vVvLVdKQAAAYI"]
[Sun Dec 21 16:25:10.960377 2025] [:error] [pid 20674:tid 20700] [client 31.31.203.16:60432] [client 31.31.203.16] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.31.203.16, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aUeu5thSbhHOCK6TAw-xUAAAABY"]
[Sun Dec 21 16:26:05.334810 2025] [:error] [pid 12191:tid 12204] [client 173.239.218.3:41659] [client 173.239.218.3] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.3, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aUevHQM0m463UZmqdiChLAAAAQs"]
[Sun Dec 21 17:10:47.729979 2025] [:error] [pid 16016:tid 16042] [client 98.159.37.226:30183] [client 98.159.37.226] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.37.226, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aUe5l8HQ_KQh3iINaCNkAAAAAVg"]
[Sun Dec 21 17:55:51.614233 2025] [:error] [pid 59070:tid 59137] [client 98.159.37.214:49555] [client 98.159.37.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.37.214, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aUfEJ33dhXne9KX1kgLAdgAAAIk"]
[Sun Dec 21 18:07:53.894510 2025] [:error] [pid 59068:tid 59106] [client 164.92.235.215:52352] [client 164.92.235.215] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 164.92.235.215, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aUfG-RmLyLqWUlrjwycwYQAAAEU"]
[Sun Dec 21 18:40:46.149379 2025] [:error] [pid 59068:tid 59120] [client 98.159.37.242:62063] [client 98.159.37.242] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.37.242, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aUfOrhmLyLqWUlrjwydC0gAAAFM"]
[Sun Dec 21 19:26:03.474790 2025] [:error] [pid 59070:tid 59149] [client 98.159.37.224:37157] [client 98.159.37.224] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.37.224, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aUfZS33dhXne9KX1kgIGmgAAAJU"]
[Sun Dec 21 20:11:36.399219 2025] [:error] [pid 59068:tid 59116] [client 98.159.37.250:37363] [client 98.159.37.250] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.37.250, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aUfj-BmLyLqWUlrjwyd06QAAAE8"]
[Sun Dec 21 20:57:05.859078 2025] [:error] [pid 59158:tid 59166] [client 98.159.37.208:29431] [client 98.159.37.208] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.37.208, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aUfuoY7NvyNF8ab5VgU4iwAAAMY"]
[Sun Dec 21 21:42:25.814839 2025] [:error] [pid 30183:tid 30200] [client 98.159.37.251:32065] [client 98.159.37.251] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.37.251, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aUf5QeCmP2zCzk_WZcUV4wAAAQ8"]
[Sun Dec 21 22:23:43.388164 2025] [:error] [pid 59068:tid 59120] [client 98.159.37.210:49693] [client 98.159.37.210] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.37.210, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aUgC7xmLyLqWUlrjwyesUwAAAFM"]
[Sun Dec 21 23:09:37.964041 2025] [:error] [pid 42755:tid 42766] [client 98.159.37.219:33371] [client 98.159.37.219] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.37.219, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aUgNseW0XvxgXMTJJbsDcAAAAUk"]
[Sun Dec 21 23:55:10.430186 2025] [:error] [pid 59067:tid 59074] [client 98.159.37.245:54751] [client 98.159.37.245] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.37.245, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aUgYXstpsOP1NfIK_qKaoQAAAAA"]
[Mon Dec 22 00:39:55.529565 2025] [:error] [pid 45308:tid 45354] [client 98.159.37.244:22285] [client 98.159.37.244] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.37.244, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aUgi22QKrTzAeGeriX2-QwAAAIo"]
[Mon Dec 22 00:53:55.518403 2025] [:error] [pid 46374:tid 46376] [client 49.233.45.47:45534] [client 49.233.45.47] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.paramountbaldivis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.paramountbaldivis.com"] [uri "/"] [unique_id "aUgmIxLD7sK-wqrnXHUWeQAAAUA"]
[Mon Dec 22 01:23:13.219665 2025] [:error] [pid 46343:tid 46358] [client 140.245.125.37:59853] [client 140.245.125.37] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.245.125.37, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aUgtARzbW_u_EvstJwQnugAAAAw"]
[Mon Dec 22 01:23:26.011959 2025] [:error] [pid 46343:tid 46352] [client 140.245.125.37:59853] [client 140.245.125.37] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||paramountbaldivis.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "paramountbaldivis.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aUgtDhzbW_u_EvstJwQnzAAAAAY"], referer: https://www.facebook.com/
[Mon Dec 22 01:23:30.304891 2025] [:error] [pid 46343:tid 46361] [client 140.245.125.37:59853] [client 140.245.125.37] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.245.125.37, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aUgtEhzbW_u_EvstJwQn0wAAAA8"], referer: https://paramountbaldivis.com/wp-login.php
[Mon Dec 22 01:23:41.028098 2025] [:error] [pid 46403:tid 46422] [client 140.245.125.37:65461] [client 140.245.125.37] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.245.125.37, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aUgtHVuzQIlydmAwinpdYQAAAZE"], referer: https://paramountbaldivis.com/wp-login.php
[Mon Dec 22 01:23:42.569994 2025] [:error] [pid 45399:tid 45405] [client 140.245.125.37:63821] [client 140.245.125.37] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.245.125.37, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aUgtHjHbaarUHjCTA4uGqAAAAQQ"], referer: https://paramountbaldivis.com/wp-login.php
[Mon Dec 22 01:23:52.792982 2025] [:error] [pid 45399:tid 45407] [client 140.245.125.37:63821] [client 140.245.125.37] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.245.125.37, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aUgtKDHbaarUHjCTA4uGugAAAQY"], referer: https://paramountbaldivis.com/wp-login.php
[Mon Dec 22 01:23:59.137244 2025] [:error] [pid 46374:tid 46395] [client 140.245.125.37:64575] [client 140.245.125.37] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.245.125.37, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aUgtLxLD7sK-wqrnXHUcewAAAVM"], referer: https://paramountbaldivis.com/wp-login.php
[Mon Dec 22 01:24:31.720652 2025] [:error] [pid 46374:tid 46398] [client 216.24.210.65:34275] [client 216.24.210.65] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.210.65, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aUgtTxLD7sK-wqrnXHUcpAAAAVY"]
[Mon Dec 22 02:09:38.414426 2025] [:error] [pid 45308:tid 45349] [client 173.239.218.2:43611] [client 173.239.218.2] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.2, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aUg34mQKrTzAeGeriX3dqwAAAIU"]
[Mon Dec 22 02:54:45.971124 2025] [:error] [pid 46374:tid 46381] [client 98.159.37.213:27015] [client 98.159.37.213] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.37.213, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aUhCdRLD7sK-wqrnXHUuSwAAAUU"]
[Mon Dec 22 03:39:41.024600 2025] [:error] [pid 38256:tid 38278] [client 98.159.37.217:57631] [client 98.159.37.217] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.37.217, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aUhM_U-Ean7_bmDFZvKXXAAAANQ"]
[Mon Dec 22 04:24:43.263535 2025] [:error] [pid 58078:tid 58088] [client 98.159.37.216:54697] [client 98.159.37.216] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.37.216, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aUhXi5WKg9Bf8njHlB5UKQAAAAU"]
[Mon Dec 22 05:09:53.440690 2025] [:error] [pid 58078:tid 58106] [client 98.159.37.216:61723] [client 98.159.37.216] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.37.216, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aUhiIZWKg9Bf8njHlB5iQwAAABc"]
[Mon Dec 22 05:21:58.115544 2025] [:error] [pid 33643:tid 33654] [client 104.244.75.37:5420] [client 104.244.75.37] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.244.75.37, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aUhk9koNwyN4xVhAvNN3dwAAAog"]
[Mon Dec 22 05:24:21.506270 2025] [:error] [pid 33472:tid 33510] [client 104.244.75.37:52904] [client 104.244.75.37] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.244.75.37, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aUhlhZ5p2WQpPIK8HAkXcwAAAYk"]
[Mon Dec 22 05:55:00.264900 2025] [:error] [pid 33535:tid 33545] [client 98.159.37.240:54579] [client 98.159.37.240] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.37.240, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aUhstGOCI8D9Xtn-n7ThVAAAAcg"]
[Mon Dec 22 06:00:47.853043 2025] [:error] [pid 33472:tid 33520] [client 66.249.64.101:62703] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUhuD55p2WQpPIK8HAkdtwAAAZM"]
[Mon Dec 22 06:04:57.428136 2025] [:error] [pid 33565:tid 33612] [client 66.249.64.101:35865] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUhvCdOWX69q8T0m_yJ29wAAAlI"]
[Mon Dec 22 06:05:26.556393 2025] [:error] [pid 58079:tid 58135] [client 66.249.64.101:54087] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUhvJnxLB7WYaNS5A7jISQAAAFY"]
[Mon Dec 22 06:07:52.722875 2025] [:error] [pid 33535:tid 33538] [client 66.249.64.101:48316] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUhvuGOCI8D9Xtn-n7TjxAAAAcE"]
[Mon Dec 22 06:07:56.482271 2025] [:error] [pid 33471:tid 33485] [client 66.249.64.101:56972] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUhvvL5BeNE7regJ7iyBgwAAAUs"]
[Mon Dec 22 06:08:07.455984 2025] [:error] [pid 33472:tid 33503] [client 66.249.64.101:56453] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUhvx55p2WQpPIK8HAkfSgAAAYI"]
[Mon Dec 22 06:08:13.847856 2025] [:error] [pid 33565:tid 33616] [client 66.249.64.101:61967] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUhvzdOWX69q8T0m_yJ3lwAAAlY"]
[Mon Dec 22 06:08:19.039953 2025] [:error] [pid 58079:tid 58128] [client 66.249.64.101:63033] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUhv03xLB7WYaNS5A7jI_QAAAE8"]
[Mon Dec 22 06:08:34.465044 2025] [:error] [pid 33535:tid 33538] [client 66.249.64.101:63704] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUhv4mOCI8D9Xtn-n7Tj1AAAAcE"]
[Mon Dec 22 06:10:39.248959 2025] [:error] [pid 33472:tid 33512] [client 66.249.64.101:53546] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUhwX55p2WQpPIK8HAkflgAAAYs"]
[Mon Dec 22 06:10:46.956087 2025] [:error] [pid 33471:tid 33498] [client 66.249.64.101:61368] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUhwZr5BeNE7regJ7iyCPAAAAVg"]
[Mon Dec 22 06:10:48.989295 2025] [:error] [pid 33440:tid 33459] [client 66.249.64.101:55449] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUhwaJOsUWKqgxu6QTRoBQAAARE"]
[Mon Dec 22 06:12:26.388606 2025] [:error] [pid 33471:tid 33490] [client 66.249.64.101:44410] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUhwyr5BeNE7regJ7iyCmQAAAVA"]
[Mon Dec 22 06:12:34.986146 2025] [:error] [pid 33440:tid 33442] [client 66.249.64.101:61119] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUhw0pOsUWKqgxu6QTRoUwAAAQA"]
[Mon Dec 22 06:12:40.266230 2025] [:error] [pid 33564:tid 33582] [client 66.249.64.101:59795] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUhw2ASHeG6oLmMnKY6p2QAAAg8"]
[Mon Dec 22 06:12:50.214071 2025] [:error] [pid 58172:tid 58187] [client 66.249.64.101:45460] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUhw4uSVKDT5jWOcnSX6egAAAM0"]
[Mon Dec 22 06:12:57.648918 2025] [:error] [pid 33564:tid 33588] [client 66.249.64.101:54721] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUhw6QSHeG6oLmMnKY6p9AAAAhU"]
[Mon Dec 22 06:13:00.305631 2025] [:error] [pid 33564:tid 33578] [client 66.249.64.101:37036] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUhw7ASHeG6oLmMnKY6p9QAAAgs"]
[Mon Dec 22 06:13:02.937830 2025] [:error] [pid 33472:tid 33520] [client 66.249.64.101:62231] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUhw7p5p2WQpPIK8HAkgHwAAAZM"]
[Mon Dec 22 06:13:03.840888 2025] [:error] [pid 58079:tid 58129] [client 66.249.64.101:43013] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUhw73xLB7WYaNS5A7jJ0AAAAFA"]
[Mon Dec 22 06:13:12.074668 2025] [:error] [pid 33440:tid 33464] [client 66.249.64.101:39229] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUhw-JOsUWKqgxu6QTRodwAAARY"]
[Mon Dec 22 06:13:22.017167 2025] [:error] [pid 33472:tid 33502] [client 66.249.64.101:42454] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUhxAp5p2WQpPIK8HAkgMAAAAYE"]
[Mon Dec 22 06:14:50.327109 2025] [:error] [pid 33565:tid 33615] [client 66.249.64.101:36232] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUhxWtOWX69q8T0m_yJ4ywAAAlU"]
[Mon Dec 22 06:14:53.476922 2025] [:error] [pid 58079:tid 58114] [client 66.249.64.101:48274] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUhxXXxLB7WYaNS5A7jKJAAAAEE"]
[Mon Dec 22 06:15:25.496022 2025] [:error] [pid 33535:tid 33559] [client 66.249.64.101:43538] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUhxfWOCI8D9Xtn-n7TlQgAAAdY"]
[Mon Dec 22 06:15:30.934749 2025] [:error] [pid 33471:tid 33484] [client 66.249.64.101:42053] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUhxgr5BeNE7regJ7iyDVQAAAUo"]
[Mon Dec 22 06:15:33.506789 2025] [:error] [pid 58079:tid 58113] [client 66.249.64.101:45251] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUhxhXxLB7WYaNS5A7jKNwAAAEA"]
[Mon Dec 22 06:15:36.046602 2025] [:error] [pid 58079:tid 58135] [client 66.249.64.101:65326] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUhxiHxLB7WYaNS5A7jKPAAAAFY"]
[Mon Dec 22 06:17:25.050607 2025] [:error] [pid 33535:tid 33557] [client 66.249.64.101:64164] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUhx9WOCI8D9Xtn-n7TlpQAAAdQ"]
[Mon Dec 22 06:17:28.487511 2025] [:error] [pid 33471:tid 33494] [client 66.249.64.101:43731] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUhx-L5BeNE7regJ7iyDuAAAAVQ"]
[Mon Dec 22 06:17:35.863921 2025] [:error] [pid 33535:tid 33544] [client 66.249.64.101:49092] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUhx_2OCI8D9Xtn-n7TlsQAAAcc"]
[Mon Dec 22 06:17:38.505931 2025] [:error] [pid 33471:tid 33478] [client 66.249.64.101:44243] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUhyAr5BeNE7regJ7iyDxAAAAUQ"]
[Mon Dec 22 06:17:50.639199 2025] [:error] [pid 33471:tid 33481] [client 66.249.64.101:37859] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUhyDr5BeNE7regJ7iyD3wAAAUc"]
[Mon Dec 22 06:17:53.269356 2025] [:error] [pid 33643:tid 33646] [client 66.249.64.101:37418] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUhyEUoNwyN4xVhAvNOASAAAAoA"]
[Mon Dec 22 06:17:55.955600 2025] [:error] [pid 33535:tid 33558] [client 66.249.64.101:53214] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUhyE2OCI8D9Xtn-n7TlzgAAAdU"]
[Mon Dec 22 06:17:58.588754 2025] [:error] [pid 33535:tid 33551] [client 66.249.64.101:47031] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUhyFmOCI8D9Xtn-n7Tl0wAAAc4"]
[Mon Dec 22 06:18:04.054291 2025] [:error] [pid 33564:tid 33580] [client 66.249.64.101:54567] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUhyHASHeG6oLmMnKY6rJQAAAg0"]
[Mon Dec 22 06:18:18.724065 2025] [:error] [pid 58172:tid 58193] [client 66.249.64.101:41820] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUhyKuSVKDT5jWOcnSX7YAAAANM"]
[Mon Dec 22 06:19:20.907766 2025] [:error] [pid 33564:tid 33587] [client 66.249.64.101:50375] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUhyaASHeG6oLmMnKY6rcwAAAhQ"]
[Mon Dec 22 06:19:26.660328 2025] [:error] [pid 33472:tid 33508] [client 66.249.64.101:55767] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUhybp5p2WQpPIK8HAkhjAAAAYc"]
[Mon Dec 22 06:19:26.837142 2025] [:error] [pid 33471:tid 33496] [client 66.249.64.101:65350] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUhybr5BeNE7regJ7iyELQAAAVY"]
[Mon Dec 22 06:19:32.662929 2025] [:error] [pid 33472:tid 33522] [client 66.249.64.101:48141] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUhydJ5p2WQpPIK8HAkhkgAAAZU"]
[Mon Dec 22 06:19:38.589872 2025] [:error] [pid 33643:tid 33668] [client 66.249.64.101:40203] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUhyekoNwyN4xVhAvNOAiwAAApY"]
[Mon Dec 22 06:19:41.120116 2025] [:error] [pid 33471:tid 33491] [client 66.249.64.101:58279] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUhyfb5BeNE7regJ7iyELwAAAVE"]
[Mon Dec 22 06:19:56.796992 2025] [:error] [pid 33564:tid 33591] [client 66.249.64.101:45425] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUhyjASHeG6oLmMnKY6rmgAAAhg"]
[Mon Dec 22 06:20:00.381215 2025] [:error] [pid 33471:tid 33481] [client 66.249.64.101:40723] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUhykL5BeNE7regJ7iyENQAAAUc"]
[Mon Dec 22 06:20:05.658468 2025] [:error] [pid 58079:tid 58130] [client 66.249.64.101:41341] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUhylXxLB7WYaNS5A7jLIQAAAFE"]
[Mon Dec 22 06:21:52.099479 2025] [:error] [pid 33643:tid 33662] [client 66.249.64.101:62818] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUhzAEoNwyN4xVhAvNOAuwAAApA"]
[Mon Dec 22 06:21:55.598225 2025] [:error] [pid 33440:tid 33444] [client 66.249.64.101:62109] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUhzA5OsUWKqgxu6QTRp5QAAAQI"]
[Mon Dec 22 06:21:58.129770 2025] [:error] [pid 33472:tid 33501] [client 66.249.64.101:58311] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUhzBp5p2WQpPIK8HAkiCAAAAYA"]
[Mon Dec 22 06:22:01.637112 2025] [:error] [pid 58078:tid 58098] [client 66.249.64.101:50293] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUhzCZWKg9Bf8njHlB5xDAAAAA8"]
[Mon Dec 22 06:22:04.061920 2025] [:error] [pid 33440:tid 33444] [client 66.249.64.101:57837] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUhzDJOsUWKqgxu6QTRp8QAAAQI"]
[Mon Dec 22 06:22:11.740434 2025] [:error] [pid 33564:tid 33589] [client 66.249.64.101:34793] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUhzEwSHeG6oLmMnKY6sQgAAAhY"]
[Mon Dec 22 06:22:16.806488 2025] [:error] [pid 33472:tid 33503] [client 66.249.64.101:37746] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUhzGJ5p2WQpPIK8HAkiEQAAAYI"]
[Mon Dec 22 06:23:44.813667 2025] [:error] [pid 33643:tid 33655] [client 66.249.64.101:65312] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUhzcEoNwyN4xVhAvNOA7AAAAok"]
[Mon Dec 22 06:23:52.960400 2025] [:error] [pid 58079:tid 58126] [client 66.249.64.101:57973] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUhzeHxLB7WYaNS5A7jLtQAAAE0"]
[Mon Dec 22 06:23:55.744512 2025] [:error] [pid 33565:tid 33614] [client 66.249.64.101:57240] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUhze9OWX69q8T0m_yJ6EwAAAlQ"]
[Mon Dec 22 06:24:19.869686 2025] [:error] [pid 33535:tid 33558] [client 66.249.64.101:40659] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUhzk2OCI8D9Xtn-n7TnGwAAAdU"]
[Mon Dec 22 06:24:30.749456 2025] [:error] [pid 33472:tid 33505] [client 66.249.64.101:53720] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUhznp5p2WQpPIK8HAkiWAAAAYQ"]
[Mon Dec 22 06:24:33.048880 2025] [:error] [pid 33643:tid 33662] [client 66.249.64.101:38203] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUhzoUoNwyN4xVhAvNOBMwAAApA"]
[Mon Dec 22 06:25:38.404780 2025] [:error] [pid 33565:tid 33616] [client 66.249.64.101:39699] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUhz4tOWX69q8T0m_yJ6OwAAAlY"]
[Mon Dec 22 06:25:53.113631 2025] [:error] [pid 33471:tid 33477] [client 66.249.64.101:45651] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUhz8b5BeNE7regJ7iyGYQAAAUM"]
[Mon Dec 22 06:25:55.812751 2025] [:error] [pid 33564:tid 33568] [client 66.249.64.101:47228] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUhz8wSHeG6oLmMnKY6tMQAAAgE"]
[Mon Dec 22 06:25:58.495940 2025] [:error] [pid 33643:tid 33659] [client 66.249.64.101:61450] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUhz9koNwyN4xVhAvNOBgwAAAo0"]
[Mon Dec 22 06:26:17.450945 2025] [:error] [pid 33440:tid 33464] [client 66.249.64.101:65475] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUh0CZOsUWKqgxu6QTRqrAAAARY"]
[Mon Dec 22 06:26:20.101794 2025] [:error] [pid 33565:tid 33599] [client 66.249.64.101:38459] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUh0DNOWX69q8T0m_yJ6VQAAAkU"]
[Mon Dec 22 06:26:32.251080 2025] [:error] [pid 33643:tid 33662] [client 66.249.64.101:48409] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUh0GEoNwyN4xVhAvNOBkQAAApA"]
[Mon Dec 22 06:26:35.593859 2025] [:error] [pid 33472:tid 33504] [client 66.249.64.101:49609] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUh0G55p2WQpPIK8HAkinwAAAYM"]
[Mon Dec 22 06:27:53.828164 2025] [:error] [pid 33564:tid 33579] [client 66.249.64.101:61709] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUh0aQSHeG6oLmMnKY6tuwAAAgw"]
[Mon Dec 22 06:28:05.173290 2025] [:error] [pid 58079:tid 58126] [client 66.249.64.101:62493] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUh0dXxLB7WYaNS5A7jMygAAAE0"]
[Mon Dec 22 06:28:10.354901 2025] [:error] [pid 58078:tid 58101] [client 66.249.64.101:38567] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUh0epWKg9Bf8njHlB5yAgAAABI"]
[Mon Dec 22 06:28:22.032994 2025] [:error] [pid 33564:tid 33591] [client 66.249.64.101:41440] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUh0hgSHeG6oLmMnKY6t0gAAAhg"]
[Mon Dec 22 06:28:46.453771 2025] [:error] [pid 33471:tid 33478] [client 66.249.64.101:54929] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUh0nr5BeNE7regJ7iyHQAAAAUQ"]
[Mon Dec 22 06:31:12.290588 2025] [:error] [pid 33565:tid 33618] [client 66.249.64.101:45322] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUh1MNOWX69q8T0m_yJ7YQAAAlg"]
[Mon Dec 22 06:31:12.498066 2025] [:error] [pid 33440:tid 33449] [client 66.249.64.101:41995] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUh1MJOsUWKqgxu6QTRrywAAAQc"]
[Mon Dec 22 06:31:14.944673 2025] [:error] [pid 33471:tid 33475] [client 66.249.64.101:41964] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUh1Mr5BeNE7regJ7iyIHQAAAUE"]
[Mon Dec 22 06:31:20.339520 2025] [:error] [pid 33564:tid 33567] [client 66.249.64.101:43026] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUh1OASHeG6oLmMnKY6vGAAAAgA"]
[Mon Dec 22 06:31:25.422305 2025] [:error] [pid 33565:tid 33609] [client 66.249.64.101:36121] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUh1PdOWX69q8T0m_yJ7agAAAk8"]
[Mon Dec 22 06:31:32.840404 2025] [:error] [pid 33440:tid 33452] [client 66.249.64.101:60894] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUh1RJOsUWKqgxu6QTRr3QAAAQo"]
[Mon Dec 22 06:31:35.490663 2025] [:error] [pid 33535:tid 33550] [client 66.249.64.101:47582] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUh1R2OCI8D9Xtn-n7TpKgAAAc0"]
[Mon Dec 22 06:31:38.051251 2025] [:error] [pid 33565:tid 33611] [client 66.249.64.101:36380] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUh1StOWX69q8T0m_yJ7eQAAAlE"]
[Mon Dec 22 06:31:41.772413 2025] [:error] [pid 58078:tid 58098] [client 66.249.64.101:65263] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUh1TZWKg9Bf8njHlB5zAgAAAA8"]
[Mon Dec 22 06:31:51.793608 2025] [:error] [pid 33440:tid 33451] [client 66.249.64.101:48253] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUh1V5OsUWKqgxu6QTRr6AAAAQk"]
[Mon Dec 22 06:31:54.522946 2025] [:error] [pid 33440:tid 33443] [client 66.249.64.101:65459] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUh1WpOsUWKqgxu6QTRr7wAAAQE"]
[Mon Dec 22 06:31:57.652893 2025] [:error] [pid 33564:tid 33587] [client 66.249.64.101:58797] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUh1XQSHeG6oLmMnKY6vRgAAAhQ"]
[Mon Dec 22 06:34:48.298814 2025] [:error] [pid 58078:tid 58089] [client 66.249.64.101:38755] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUh2CJWKg9Bf8njHlB5z-AAAAAY"]
[Mon Dec 22 06:35:00.756192 2025] [:error] [pid 33564:tid 33568] [client 66.249.64.101:44018] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUh2FASHeG6oLmMnKY6w9gAAAgE"]
[Mon Dec 22 06:35:06.434968 2025] [:error] [pid 33643:tid 33663] [client 66.249.64.101:60899] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUh2GkoNwyN4xVhAvNODHwAAApE"]
[Mon Dec 22 06:35:06.602803 2025] [:error] [pid 33565:tid 33618] [client 66.249.64.101:38594] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUh2GtOWX69q8T0m_yJ8LgAAAlg"]
[Mon Dec 22 06:35:28.948421 2025] [:error] [pid 33471:tid 33474] [client 66.249.64.101:42729] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUh2ML5BeNE7regJ7iyJnAAAAUA"]
[Mon Dec 22 06:35:36.975699 2025] [:error] [pid 58172:tid 58194] [client 66.249.64.101:53528] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUh2OOSVKDT5jWOcnSX-ZgAAANQ"]
[Mon Dec 22 06:37:45.156966 2025] [:error] [pid 33535:tid 33558] [client 66.249.64.101:57248] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUh2uWOCI8D9Xtn-n7TqsQAAAdU"]
[Mon Dec 22 06:37:54.523304 2025] [:error] [pid 58078:tid 58102] [client 66.249.64.101:35077] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUh2wpWKg9Bf8njHlB50lgAAABM"]
[Mon Dec 22 06:38:21.966406 2025] [:error] [pid 33440:tid 33442] [client 66.249.64.101:51814] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUh23ZOsUWKqgxu6QTRs-QAAAQA"]
[Mon Dec 22 06:38:27.046899 2025] [:error] [pid 33472:tid 33517] [client 66.249.64.101:37526] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUh2455p2WQpPIK8HAklJAAAAZA"]
[Mon Dec 22 06:38:30.145901 2025] [:error] [pid 33472:tid 33508] [client 66.249.64.101:44523] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUh25p5p2WQpPIK8HAklJgAAAYc"]
[Mon Dec 22 06:39:46.957622 2025] [:error] [pid 33535:tid 33559] [client 98.159.37.228:51461] [client 98.159.37.228] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.37.228, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aUh3MmOCI8D9Xtn-n7TrSQAAAdY"]
[Mon Dec 22 06:40:27.697617 2025] [:error] [pid 33440:tid 33453] [client 66.249.64.101:38474] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUh3W5OsUWKqgxu6QTRtQwAAAQs"]
[Mon Dec 22 06:40:59.124739 2025] [:error] [pid 33564:tid 33569] [client 66.249.64.101:56412] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUh3ewSHeG6oLmMnKY6zQQAAAgI"]
[Mon Dec 22 06:41:01.826508 2025] [:error] [pid 33472:tid 33522] [client 66.249.64.101:62237] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUh3fZ5p2WQpPIK8HAklewAAAZU"]
[Mon Dec 22 06:41:17.980458 2025] [:error] [pid 58172:tid 58192] [client 66.249.64.101:39895] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUh3jeSVKDT5jWOcnSX_WgAAANI"]
[Mon Dec 22 06:41:18.942107 2025] [:error] [pid 33471:tid 33489] [client 66.249.64.101:53466] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUh3jr5BeNE7regJ7iyK8AAAAU8"]
[Mon Dec 22 06:43:25.924020 2025] [:error] [pid 58079:tid 58123] [client 66.249.64.101:64030] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUh4DXxLB7WYaNS5A7jQegAAAEo"]
[Mon Dec 22 06:43:39.424449 2025] [:error] [pid 58079:tid 58116] [client 66.249.64.101:53844] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUh4G3xLB7WYaNS5A7jQhwAAAEM"]
[Mon Dec 22 06:43:52.504795 2025] [:error] [pid 33535:tid 33545] [client 66.249.64.101:50633] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUh4KGOCI8D9Xtn-n7TsuQAAAcg"]
[Mon Dec 22 06:43:56.343442 2025] [:error] [pid 33565:tid 33598] [client 66.249.64.101:53542] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUh4LNOWX69q8T0m_yJ9kQAAAkQ"]
[Mon Dec 22 06:43:59.026913 2025] [:error] [pid 58079:tid 58132] [client 66.249.64.101:52276] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUh4L3xLB7WYaNS5A7jQlAAAAFM"]
[Mon Dec 22 06:46:08.951738 2025] [:error] [pid 33471:tid 33490] [client 66.249.64.101:64195] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUh4sL5BeNE7regJ7iyMagAAAVA"]
[Mon Dec 22 06:46:29.603955 2025] [:error] [pid 33440:tid 33466] [client 66.249.64.101:48067] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUh4xZOsUWKqgxu6QTRuUQAAARg"]
[Mon Dec 22 06:46:34.511621 2025] [:error] [pid 33564:tid 33584] [client 66.249.64.101:50825] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUh4ygSHeG6oLmMnKY61UgAAAhE"]
[Mon Dec 22 06:46:34.727493 2025] [:error] [pid 33564:tid 33577] [client 66.249.64.101:53341] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUh4ygSHeG6oLmMnKY61UwAAAgo"]
[Mon Dec 22 06:46:37.130420 2025] [:error] [pid 33471:tid 33482] [client 66.249.64.101:53500] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUh4zb5BeNE7regJ7iyMfAAAAUg"]
[Mon Dec 22 06:46:51.183813 2025] [:error] [pid 33564:tid 33573] [client 66.249.64.101:47251] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUh42wSHeG6oLmMnKY61aAAAAgY"]
[Mon Dec 22 06:46:51.840090 2025] [:error] [pid 58078:tid 58091] [client 66.249.64.101:36355] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUh425WKg9Bf8njHlB52yAAAAAg"]
[Mon Dec 22 06:46:52.048778 2025] [:error] [pid 33565:tid 33596] [client 66.249.64.101:59229] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUh43NOWX69q8T0m_yJ97QAAAkI"]
[Mon Dec 22 06:47:00.740533 2025] [:error] [pid 33564:tid 33587] [client 66.249.64.101:49558] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUh45ASHeG6oLmMnKY61dgAAAhQ"]
[Mon Dec 22 06:50:00.710702 2025] [:error] [pid 33565:tid 33606] [client 66.249.64.101:56172] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUh5mNOWX69q8T0m_yJ-awAAAkw"]
[Mon Dec 22 06:50:12.248489 2025] [:error] [pid 33535:tid 33556] [client 66.249.64.101:47721] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUh5pGOCI8D9Xtn-n7TuGwAAAdM"]
[Mon Dec 22 06:50:32.052284 2025] [:error] [pid 33472:tid 33502] [client 66.249.64.101:60821] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUh5uJ5p2WQpPIK8HAknQwAAAYE"]
[Mon Dec 22 06:52:47.384399 2025] [:error] [pid 33535:tid 33548] [client 66.249.64.101:42063] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUh6P2OCI8D9Xtn-n7Tu6AAAAcs"]
[Mon Dec 22 06:52:50.032724 2025] [:error] [pid 33565:tid 33604] [client 66.249.64.101:40784] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUh6QtOWX69q8T0m_yJ-4AAAAko"]
[Mon Dec 22 06:53:19.204040 2025] [:error] [pid 33564:tid 33576] [client 66.249.64.101:54401] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUh6XwSHeG6oLmMnKY63xAAAAgk"]
[Mon Dec 22 06:53:24.604174 2025] [:error] [pid 33472:tid 33509] [client 66.249.64.101:55380] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUh6ZJ5p2WQpPIK8HAkn3AAAAYg"]
[Mon Dec 22 06:53:26.667865 2025] [:error] [pid 33471:tid 33475] [client 66.249.64.101:62803] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUh6Zr5BeNE7regJ7iyOoAAAAUE"]
[Mon Dec 22 06:53:27.215667 2025] [:error] [pid 33472:tid 33507] [client 66.249.64.101:36540] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUh6Z55p2WQpPIK8HAkn3gAAAYY"]
[Mon Dec 22 06:53:29.815608 2025] [:error] [pid 33565:tid 33613] [client 66.249.64.101:55322] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUh6adOWX69q8T0m_yJ_EAAAAlM"]
[Mon Dec 22 06:53:32.415807 2025] [:error] [pid 33564:tid 33568] [client 66.249.64.101:57351] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUh6bASHeG6oLmMnKY636QAAAgE"]
[Mon Dec 22 06:56:51.503527 2025] [:error] [pid 33564:tid 33587] [client 66.249.64.101:47079] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUh7MwSHeG6oLmMnKY65WAAAAhQ"]
[Mon Dec 22 06:56:54.032382 2025] [:error] [pid 33643:tid 33661] [client 66.249.64.101:63356] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUh7NkoNwyN4xVhAvNOGpwAAAo8"]
[Mon Dec 22 06:57:03.239342 2025] [:error] [pid 58078:tid 58096] [client 66.249.64.101:64919] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUh7P5WKg9Bf8njHlB548gAAAA0"]
[Mon Dec 22 06:57:13.304395 2025] [:error] [pid 33471:tid 33476] [client 66.249.64.101:42462] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUh7Sb5BeNE7regJ7iyPswAAAUI"]
[Mon Dec 22 06:57:28.488825 2025] [:error] [pid 33643:tid 33659] [client 66.249.64.101:37301] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUh7WEoNwyN4xVhAvNOGtgAAAo0"]
[Mon Dec 22 06:58:34.649155 2025] [:error] [pid 33564:tid 33587] [client 66.249.64.101:37889] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUh7mgSHeG6oLmMnKY65xAAAAhQ"]
[Mon Dec 22 06:58:37.947121 2025] [:error] [pid 58172:tid 58191] [client 66.249.64.101:40883] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUh7neSVKDT5jWOcnSUCmAAAANE"]
[Mon Dec 22 06:58:40.595828 2025] [:error] [pid 33535:tid 33550] [client 66.249.64.101:38631] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUh7oGOCI8D9Xtn-n7TwXwAAAc0"]
[Mon Dec 22 06:58:52.791171 2025] [:error] [pid 33643:tid 33653] [client 66.249.64.101:34952] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUh7rEoNwyN4xVhAvNOG9QAAAoc"]
[Mon Dec 22 06:59:15.906867 2025] [:error] [pid 58078:tid 58088] [client 66.249.64.101:56930] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUh7w5WKg9Bf8njHlB551AAAAAU"]
[Mon Dec 22 06:59:19.971972 2025] [:error] [pid 33564:tid 33567] [client 66.249.64.101:42637] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUh7xwSHeG6oLmMnKY658gAAAgA"]
[Mon Dec 22 06:59:22.611986 2025] [:error] [pid 33440:tid 33461] [client 66.249.64.101:50628] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUh7ypOsUWKqgxu6QTRwrgAAARM"]
[Mon Dec 22 06:59:24.501929 2025] [:error] [pid 58172:tid 58181] [client 66.249.64.101:37429] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUh7zOSVKDT5jWOcnSUCqAAAAMc"]
[Mon Dec 22 06:59:25.249133 2025] [:error] [pid 58172:tid 58183] [client 66.249.64.101:65190] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUh7zeSVKDT5jWOcnSUCqgAAAMk"]
[Mon Dec 22 07:03:31.190642 2025] [:error] [pid 58078:tid 58092] [client 66.249.64.101:48202] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUh8w5WKg9Bf8njHlB56mAAAAAk"]
[Mon Dec 22 07:03:34.319926 2025] [:error] [pid 33643:tid 33659] [client 66.249.64.101:51481] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUh8xkoNwyN4xVhAvNOH4QAAAo0"]
[Mon Dec 22 07:03:41.322418 2025] [:error] [pid 58079:tid 58129] [client 66.249.64.101:57476] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUh8zXxLB7WYaNS5A7jUPQAAAFA"]
[Mon Dec 22 07:06:39.651285 2025] [:error] [pid 58078:tid 58096] [client 66.249.64.101:50366] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUh9f5WKg9Bf8njHlB57OAAAAA0"]
[Mon Dec 22 07:13:30.795923 2025] [:error] [pid 58078:tid 58097] [client 182.43.70.143:55009] [client 182.43.70.143] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||paramountbaldivis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUh_GpWKg9Bf8njHlB58cQAAAA4"]
[Mon Dec 22 07:20:40.069863 2025] [:error] [pid 33565:tid 33594] [client 66.249.64.101:36665] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUiAyNOWX69q8T0m_yKDjAAAAkA"]
[Mon Dec 22 07:21:26.874256 2025] [:error] [pid 33471:tid 33475] [client 66.249.64.101:53811] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUiA9r5BeNE7regJ7iyVvAAAAUE"]
[Mon Dec 22 07:21:32.543687 2025] [:error] [pid 33643:tid 33666] [client 66.249.64.101:53188] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUiA_EoNwyN4xVhAvNOKqwAAApQ"]
[Mon Dec 22 07:24:29.379619 2025] [:error] [pid 33565:tid 33618] [client 66.249.64.101:43380] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUiBrdOWX69q8T0m_yKEFAAAAlg"]
[Mon Dec 22 07:24:39.740817 2025] [:error] [pid 33440:tid 33459] [client 66.249.64.101:39500] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUiBt5OsUWKqgxu6QTR1GAAAARE"]
[Mon Dec 22 07:24:40.019411 2025] [:error] [pid 33643:tid 33669] [client 66.249.64.101:56832] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUiBuEoNwyN4xVhAvNOLJAAAApc"]
[Mon Dec 22 07:24:44.036423 2025] [:error] [pid 58078:tid 58090] [client 66.249.64.101:40578] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUiBvJWKg9Bf8njHlB5-tQAAAAc"]
[Mon Dec 22 07:24:55.314859 2025] [:error] [pid 33535:tid 33554] [client 98.159.37.216:28855] [client 98.159.37.216] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.37.216, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aUiBx2OCI8D9Xtn-n7T2NQAAAdE"]
[Mon Dec 22 07:25:18.646309 2025] [:error] [pid 58172:tid 58198] [client 66.249.64.101:41584] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUiB3uSVKDT5jWOcnSUGsgAAANg"]
[Mon Dec 22 07:25:19.138268 2025] [:error] [pid 33535:tid 33555] [client 66.249.64.101:60703] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUiB32OCI8D9Xtn-n7T2ZgAAAdI"]
[Mon Dec 22 07:28:29.247805 2025] [:error] [pid 33564:tid 33583] [client 66.249.64.101:63579] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUiCnQSHeG6oLmMnKY7C_wAAAhA"]
[Mon Dec 22 07:28:46.644521 2025] [:error] [pid 33471:tid 33493] [client 66.249.64.101:64371] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUiCrr5BeNE7regJ7iyXVgAAAVM"]
[Mon Dec 22 07:28:53.270182 2025] [:error] [pid 58172:tid 58198] [client 66.249.64.101:51944] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUiCteSVKDT5jWOcnSUHagAAANg"]
[Mon Dec 22 07:31:42.155130 2025] [:error] [pid 33471:tid 33496] [client 66.249.64.101:58992] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUiDXr5BeNE7regJ7iyYNQAAAVY"]
[Mon Dec 22 07:31:46.880873 2025] [:error] [pid 33440:tid 33465] [client 66.249.64.101:48374] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUiDYpOsUWKqgxu6QTR2XQAAARc"]
[Mon Dec 22 07:32:01.827202 2025] [:error] [pid 33564:tid 33590] [client 66.249.64.101:55173] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUiDcQSHeG6oLmMnKY7EOQAAAhc"]
[Mon Dec 22 07:32:09.200385 2025] [:error] [pid 58078:tid 58084] [client 66.249.64.101:56689] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUiDeZWKg9Bf8njHlB6AZgAAAAE"]
[Mon Dec 22 07:32:26.800874 2025] [:error] [pid 33564:tid 33590] [client 66.249.64.101:64840] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUiDigSHeG6oLmMnKY7EVQAAAhc"]
[Mon Dec 22 07:32:27.398909 2025] [:error] [pid 58078:tid 58102] [client 66.249.64.101:46686] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUiDi5WKg9Bf8njHlB6AdwAAABM"]
[Mon Dec 22 07:32:31.671225 2025] [:error] [pid 33535:tid 33542] [client 66.249.64.101:50125] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUiDj2OCI8D9Xtn-n7T3-gAAAcU"]
[Mon Dec 22 07:32:32.033294 2025] [:error] [pid 58079:tid 58135] [client 66.249.64.101:65323] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUiDkHxLB7WYaNS5A7jZAwAAAFY"]
[Mon Dec 22 07:34:02.046678 2025] [:error] [pid 33535:tid 33552] [client 66.249.64.101:60588] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUiD6mOCI8D9Xtn-n7T4UAAAAc8"]
[Mon Dec 22 07:34:17.055713 2025] [:error] [pid 33643:tid 33669] [client 66.249.64.101:38023] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUiD-UoNwyN4xVhAvNOMmgAAApc"]
[Mon Dec 22 07:34:34.387440 2025] [:error] [pid 33643:tid 33664] [client 66.249.64.101:64909] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUiECkoNwyN4xVhAvNOMoQAAApI"]
[Mon Dec 22 07:34:38.733960 2025] [:error] [pid 58079:tid 58114] [client 66.249.64.101:40324] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUiEDnxLB7WYaNS5A7jZeQAAAEE"]
[Mon Dec 22 07:34:48.173395 2025] [:error] [pid 33535:tid 33550] [client 66.249.64.101:38512] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUiEGGOCI8D9Xtn-n7T4jAAAAc0"]
[Mon Dec 22 07:37:29.379299 2025] [:error] [pid 33564:tid 33567] [client 52.13.171.147:49678] [client 52.13.171.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUiEuQSHeG6oLmMnKY7GBgAAAgA"]
[Mon Dec 22 07:37:29.770833 2025] [:error] [pid 33472:tid 33523] [client 52.13.171.147:57752] [client 52.13.171.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUiEuZ5p2WQpPIK8HAkwVAAAAZY"]
[Mon Dec 22 07:37:30.158838 2025] [:error] [pid 58172:tid 58188] [client 52.13.171.147:63344] [client 52.13.171.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aUiEuuSVKDT5jWOcnSUIyAAAAM4"]
[Mon Dec 22 08:05:54.661250 2025] [:error] [pid 58172:tid 58178] [client 66.249.64.101:43224] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUiLYuSVKDT5jWOcnSUNrgAAAMQ"]
[Mon Dec 22 08:06:28.827308 2025] [:error] [pid 33565:tid 33594] [client 66.249.64.101:46299] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUiLhNOWX69q8T0m_yKKtwAAAkA"]
[Mon Dec 22 08:06:32.633495 2025] [:error] [pid 58172:tid 58176] [client 66.249.64.101:58504] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUiLiOSVKDT5jWOcnSUNvgAAAMI"]
[Mon Dec 22 08:06:36.437457 2025] [:error] [pid 58079:tid 58115] [client 66.249.64.101:38061] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUiLjHxLB7WYaNS5A7jgXwAAAEI"]
[Mon Dec 22 08:08:45.189644 2025] [:error] [pid 33565:tid 33600] [client 66.249.64.101:57887] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUiMDdOWX69q8T0m_yKLFQAAAkY"]
[Mon Dec 22 08:08:52.806678 2025] [:error] [pid 33471:tid 33481] [client 66.249.64.101:52178] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUiMFL5BeNE7regJ7iyiywAAAUc"]
[Mon Dec 22 08:09:33.567340 2025] [:error] [pid 58078:tid 58106] [client 66.249.64.101:39765] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUiMPZWKg9Bf8njHlB6IXgAAABc"]
[Mon Dec 22 08:10:14.659672 2025] [:error] [pid 33535:tid 33554] [client 98.159.37.208:32365] [client 98.159.37.208] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.37.208, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aUiMZmOCI8D9Xtn-n7T_9wAAAdE"]
[Mon Dec 22 08:22:41.477163 2025] [:error] [pid 33565:tid 33596] [client 66.249.64.101:48659] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUiPUdOWX69q8T0m_yKMuAAAAkI"]
[Mon Dec 22 08:22:49.032458 2025] [:error] [pid 33565:tid 33598] [client 66.249.64.101:37179] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUiPWdOWX69q8T0m_yKMwAAAAkQ"]
[Mon Dec 22 08:22:56.639174 2025] [:error] [pid 58078:tid 58107] [client 66.249.64.101:58507] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUiPYJWKg9Bf8njHlB6K9wAAABg"]
[Mon Dec 22 08:30:29.911524 2025] [:error] [pid 58172:tid 58188] [client 66.249.64.101:45455] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUiRJeSVKDT5jWOcnSURkAAAAM4"]
[Mon Dec 22 08:30:37.520921 2025] [:error] [pid 33564:tid 33571] [client 66.249.64.101:46457] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUiRLQSHeG6oLmMnKY7c1gAAAgQ"]
[Mon Dec 22 08:30:52.443654 2025] [:error] [pid 33440:tid 33465] [client 66.249.64.101:62063] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUiRPJOsUWKqgxu6QTSBVQAAARc"]
[Mon Dec 22 08:31:14.866757 2025] [:error] [pid 33471:tid 33490] [client 66.249.64.101:38504] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUiRUr5BeNE7regJ7iypDQAAAVA"]
[Mon Dec 22 08:36:39.881011 2025] [:error] [pid 58078:tid 58088] [client 66.249.64.101:55018] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUiSl5WKg9Bf8njHlB6N2wAAAAU"]
[Mon Dec 22 08:40:36.801775 2025] [:error] [pid 33535:tid 33556] [client 66.249.64.101:44484] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUiThGOCI8D9Xtn-n7QGVgAAAdM"]
[Mon Dec 22 08:40:38.322981 2025] [:error] [pid 58078:tid 58086] [client 66.249.64.101:55052] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUiThpWKg9Bf8njHlB6OywAAAAM"]
[Mon Dec 22 08:40:57.653219 2025] [:error] [pid 33472:tid 33520] [client 66.249.64.101:46776] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUiTmZ5p2WQpPIK8HAk8tQAAAZM"]
[Mon Dec 22 08:41:25.350214 2025] [:error] [pid 33564:tid 33579] [client 66.249.64.101:64974] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUiTtQSHeG6oLmMnKY7hcgAAAgw"]
[Mon Dec 22 08:41:29.537002 2025] [:error] [pid 33564:tid 33587] [client 66.249.64.101:63022] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUiTuQSHeG6oLmMnKY7hdwAAAhQ"]
[Mon Dec 22 08:41:32.887369 2025] [:error] [pid 58172:tid 58177] [client 66.249.64.101:47886] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUiTvOSVKDT5jWOcnSUT7gAAAMM"]
[Mon Dec 22 08:45:36.548885 2025] [:error] [pid 33472:tid 33507] [client 66.249.64.101:52733] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUiUsJ5p2WQpPIK8HAk94QAAAYY"]
[Mon Dec 22 08:49:44.206152 2025] [:error] [pid 58079:tid 58134] [client 66.249.64.101:59612] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUiVqHxLB7WYaNS5A7jnJwAAAFU"]
[Mon Dec 22 08:50:26.430758 2025] [:error] [pid 33535:tid 33553] [client 66.249.64.101:43355] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUiV0mOCI8D9Xtn-n7QIMgAAAdA"]
[Mon Dec 22 08:50:36.418678 2025] [:error] [pid 33535:tid 33551] [client 66.249.64.101:36263] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUiV3GOCI8D9Xtn-n7QIOgAAAc4"]
[Mon Dec 22 08:55:10.670406 2025] [:error] [pid 33564:tid 33573] [client 98.159.37.231:45839] [client 98.159.37.231] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.37.231, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aUiW7gSHeG6oLmMnKY7mTgAAAgY"]
[Mon Dec 22 09:28:36.158442 2025] [:error] [pid 33472:tid 33503] [client 66.249.64.101:61857] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUiexJ5p2WQpPIK8HAlGxAAAAYI"]
[Mon Dec 22 09:28:47.005836 2025] [:error] [pid 58078:tid 58088] [client 66.249.64.101:49837] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUiez5WKg9Bf8njHlB6ZrwAAAAU"]
[Mon Dec 22 09:28:50.884498 2025] [:error] [pid 58079:tid 58126] [client 66.249.64.101:63895] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUie0nxLB7WYaNS5A7juogAAAE0"]
[Mon Dec 22 09:28:54.573913 2025] [:error] [pid 33565:tid 33605] [client 66.249.64.101:58241] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUie1tOWX69q8T0m_yKXRgAAAks"]
[Mon Dec 22 09:28:58.324687 2025] [:error] [pid 58079:tid 58113] [client 66.249.64.101:42665] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUie2nxLB7WYaNS5A7juqgAAAEA"]
[Mon Dec 22 09:29:26.139826 2025] [:error] [pid 33564:tid 33574] [client 66.249.64.101:38548] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUie9gSHeG6oLmMnKY7zywAAAgc"]
[Mon Dec 22 09:32:15.962531 2025] [:error] [pid 58172:tid 58176] [client 66.249.64.101:43755] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUifn-SVKDT5jWOcnSUc5QAAAMI"]
[Mon Dec 22 09:32:23.730260 2025] [:error] [pid 33535:tid 33537] [client 66.249.64.101:48510] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUifp2OCI8D9Xtn-n7QRiQAAAcA"]
[Mon Dec 22 09:32:43.689988 2025] [:error] [pid 33643:tid 33667] [client 66.249.64.101:54260] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUifu0oNwyN4xVhAvNOfeAAAApU"]
[Mon Dec 22 09:38:07.788103 2025] [:error] [pid 33564:tid 33578] [client 66.249.64.101:40349] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUig_wSHeG6oLmMnKY72ZQAAAgs"]
[Mon Dec 22 09:38:49.991775 2025] [:error] [pid 58172:tid 58195] [client 66.249.64.101:40496] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUihKeSVKDT5jWOcnSUdywAAANU"]
[Mon Dec 22 09:38:57.167890 2025] [:error] [pid 33535:tid 33559] [client 66.249.64.101:42434] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUihMWOCI8D9Xtn-n7QS3wAAAdY"]
[Mon Dec 22 09:40:11.757266 2025] [:error] [pid 33535:tid 33541] [client 98.159.37.226:46551] [client 98.159.37.226] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.37.226, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aUihe2OCI8D9Xtn-n7QTHAAAAcQ"]
[Mon Dec 22 10:20:17.944197 2025] [:error] [pid 33440:tid 33452] [client 2.58.56.27:53157] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aUiq4ZOsUWKqgxu6QTSVzQAAAQo"], referer: www.google.com
[Mon Dec 22 10:20:17.957421 2025] [:error] [pid 58078:tid 58083] [client 2.58.56.27:64431] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aUiq4ZWKg9Bf8njHlB6mGgAAAAA"], referer: www.google.com
[Mon Dec 22 10:20:17.958396 2025] [:error] [pid 58078:tid 58096] [client 2.58.56.27:64436] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUiq4ZWKg9Bf8njHlB6mGwAAAA0"]
[Mon Dec 22 10:20:18.073613 2025] [:error] [pid 33643:tid 33661] [client 2.58.56.27:49672] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-plain.php"] [unique_id "aUiq4koNwyN4xVhAvNOnSwAAAo8"], referer: www.google.com
[Mon Dec 22 10:20:18.073636 2025] [:error] [pid 33471:tid 33479] [client 2.58.56.27:49657] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "aUiq4r5BeNE7regJ7izF8AAAAUU"]
[Mon Dec 22 10:20:19.324200 2025] [:error] [pid 33535:tid 33545] [client 2.58.56.27:57086] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aUiq42OCI8D9Xtn-n7QcvwAAAcg"], referer: www.google.com
[Mon Dec 22 10:20:19.402576 2025] [:error] [pid 58078:tid 58097] [client 2.58.56.27:57090] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUiq45WKg9Bf8njHlB6mRAAAAA4"]
[Mon Dec 22 10:20:19.426096 2025] [:error] [pid 33535:tid 33553] [client 2.58.56.27:55020] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "aUiq42OCI8D9Xtn-n7QcwgAAAdA"]
[Mon Dec 22 10:20:19.442770 2025] [:error] [pid 33565:tid 33596] [client 2.58.56.27:56537] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-plain.php"] [unique_id "aUiq49OWX69q8T0m_yKfhwAAAkI"], referer: www.google.com
[Mon Dec 22 10:20:20.193164 2025] [:error] [pid 56044:tid 56054] [client 2.58.56.27:57328] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aUiq4-60uUaieriJqP3twgAAAIY"], referer: www.google.com
[Mon Dec 22 10:20:20.663068 2025] [:error] [pid 33535:tid 33543] [client 2.58.56.27:51344] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aUiq5GOCI8D9Xtn-n7Qc5QAAAcY"], referer: www.google.com
[Mon Dec 22 10:20:20.729869 2025] [:error] [pid 33564:tid 33581] [client 2.58.56.27:49763] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "aUiq5ASHeG6oLmMnKY4HDQAAAg4"]
[Mon Dec 22 10:20:20.734736 2025] [:error] [pid 56044:tid 56050] [client 2.58.56.27:58359] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUiq5O60uUaieriJqP3t3AAAAII"]
[Mon Dec 22 10:20:20.749510 2025] [:error] [pid 33440:tid 33458] [client 2.58.56.27:55746] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-plain.php"] [unique_id "aUiq5JOsUWKqgxu6QTSWIAAAARA"], referer: www.google.com
[Mon Dec 22 10:20:21.181706 2025] [:error] [pid 58079:tid 58133] [client 2.58.56.27:49306] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aUiq5XxLB7WYaNS5A7j4awAAAFQ"], referer: www.google.com
[Mon Dec 22 10:20:21.498854 2025] [:error] [pid 33471:tid 33482] [client 2.58.56.27:53638] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aUiq5b5BeNE7regJ7izGZwAAAUg"], referer: www.google.com
[Mon Dec 22 10:20:21.509488 2025] [:error] [pid 33440:tid 33459] [client 2.58.56.27:55786] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUiq5ZOsUWKqgxu6QTSWPgAAARE"]
[Mon Dec 22 10:20:21.543678 2025] [:error] [pid 58079:tid 58124] [client 2.58.56.27:57658] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "aUiq5XxLB7WYaNS5A7j4ewAAAEs"]
[Mon Dec 22 10:20:21.544625 2025] [:error] [pid 33472:tid 33501] [client 2.58.56.27:57044] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-plain.php"] [unique_id "aUiq5Z5p2WQpPIK8HAlSsgAAAYA"], referer: www.google.com
[Mon Dec 22 10:20:22.229374 2025] [:error] [pid 58079:tid 58134] [client 2.58.56.27:50609] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aUiq5nxLB7WYaNS5A7j4igAAAFU"], referer: www.google.com
[Mon Dec 22 10:20:22.240302 2025] [:error] [pid 58078:tid 58087] [client 2.58.56.27:55094] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUiq5pWKg9Bf8njHlB6mowAAAAQ"]
[Mon Dec 22 10:20:22.375251 2025] [:error] [pid 58079:tid 58115] [client 2.58.56.27:58640] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "aUiq5nxLB7WYaNS5A7j4jQAAAEI"]
[Mon Dec 22 10:20:22.488912 2025] [:error] [pid 56155:tid 56242] [client 2.58.56.27:56471] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-plain.php"] [unique_id "aUiq5mG8a3wQucsuN656xgAAA5Q"], referer: www.google.com
[Mon Dec 22 10:20:22.623655 2025] [:error] [pid 56153:tid 56175] [client 2.58.56.27:56283] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aUiq5USS5f47yfDofyQSoAAAA0s"], referer: www.google.com
[Mon Dec 22 10:20:23.341625 2025] [:error] [pid 33565:tid 33604] [client 2.58.56.27:55820] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aUiq59OWX69q8T0m_yKf6wAAAko"], referer: www.google.com
[Mon Dec 22 10:20:23.538257 2025] [:error] [pid 56156:tid 56214] [client 2.58.56.27:57778] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aUiq51t4V0DS5rs9y54e0QAAA9I"], referer: www.google.com
[Mon Dec 22 10:20:24.641163 2025] [:error] [pid 56044:tid 56050] [client 2.58.56.27:55010] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aUiq6O60uUaieriJqP3uLAAAAII"], referer: www.google.com
[Mon Dec 22 10:20:24.820461 2025] [:error] [pid 56044:tid 56061] [client 2.58.56.27:55922] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aUiq6O60uUaieriJqP3uLgAAAI0"], referer: www.google.com
[Mon Dec 22 10:20:25.857794 2025] [:error] [pid 58079:tid 58137] [client 2.58.56.27:61841] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aUiq6XxLB7WYaNS5A7j4swAAAFg"], referer: www.google.com
[Mon Dec 22 10:20:26.074956 2025] [:error] [pid 33440:tid 33466] [client 2.58.56.27:63522] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aUiq6pOsUWKqgxu6QTSWkAAAARg"], referer: www.google.com
[Mon Dec 22 10:20:26.909185 2025] [:error] [pid 33564:tid 33588] [client 2.58.56.27:57268] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aUiq6gSHeG6oLmMnKY4HawAAAhU"], referer: www.google.com
[Mon Dec 22 10:20:27.204679 2025] [:error] [pid 33472:tid 33511] [client 2.58.56.27:62225] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aUiq655p2WQpPIK8HAlTFgAAAYo"], referer: www.google.com
[Mon Dec 22 10:20:28.031712 2025] [:error] [pid 33472:tid 33505] [client 2.58.56.27:60443] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aUiq7J5p2WQpPIK8HAlTHgAAAYQ"], referer: www.google.com
[Mon Dec 22 10:20:28.330263 2025] [:error] [pid 33471:tid 33490] [client 2.58.56.27:50151] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aUiq7L5BeNE7regJ7izGswAAAVA"], referer: www.google.com
[Mon Dec 22 10:20:29.126660 2025] [:error] [pid 58079:tid 58137] [client 2.58.56.27:60628] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aUiq7XxLB7WYaNS5A7j4zQAAAFg"], referer: www.google.com
[Mon Dec 22 10:23:02.733288 2025] [:error] [pid 33564:tid 33578] [client 98.159.37.243:31645] [client 98.159.37.243] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.37.243, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aUirhgSHeG6oLmMnKY4IPQAAAgs"]
[Mon Dec 22 11:08:14.642836 2025] [:error] [pid 58078:tid 58092] [client 98.159.37.232:32231] [client 98.159.37.232] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.37.232, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aUi2HpWKg9Bf8njHlB6xwAAAAAk"]
[Mon Dec 22 11:40:20.639680 2025] [:error] [pid 33472:tid 33511] [client 66.249.64.101:48552] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUi9pJ5p2WQpPIK8HAl8bAAAAYo"]
[Mon Dec 22 11:40:40.583442 2025] [:error] [pid 58172:tid 58184] [client 66.249.64.101:45899] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUi9uOSVKDT5jWOcnSVGoQAAAMo"]
[Mon Dec 22 11:40:52.941651 2025] [:error] [pid 33440:tid 33461] [client 66.249.64.101:37314] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUi9xJOsUWKqgxu6QTSvDwAAARM"]
[Mon Dec 22 11:41:00.674733 2025] [:error] [pid 56155:tid 56244] [client 66.249.64.101:52958] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUi9zGG8a3wQucsuN66MtAAAA5Y"]
[Mon Dec 22 11:41:08.644278 2025] [:error] [pid 56044:tid 56051] [client 66.249.64.101:41761] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUi91O60uUaieriJqP3_3QAAAIM"]
[Mon Dec 22 11:44:51.632624 2025] [:error] [pid 33471:tid 33480] [client 66.249.64.101:49984] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUi-s75BeNE7regJ7izbdAAAAUY"]
[Mon Dec 22 11:44:56.617101 2025] [:error] [pid 33564:tid 33591] [client 66.249.64.101:52801] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUi-uASHeG6oLmMnKY4eYAAAAhg"]
[Mon Dec 22 11:47:46.495730 2025] [:error] [pid 58172:tid 58178] [client 66.249.64.101:61663] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUi_YuSVKDT5jWOcnSVJdQAAAMQ"]
[Mon Dec 22 11:47:54.269890 2025] [:error] [pid 33564:tid 33578] [client 66.249.64.101:42386] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUi_agSHeG6oLmMnKY4fMAAAAgs"]
[Mon Dec 22 11:47:59.279726 2025] [:error] [pid 56080:tid 56146] [client 66.249.64.101:44149] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUi_b5IHT3YJq9hjDc50hQAAAxY"]
[Mon Dec 22 11:48:27.209193 2025] [:error] [pid 33535:tid 33556] [client 66.249.64.101:51291] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUi_i2OCI8D9Xtn-n7Q5ywAAAdM"]
[Mon Dec 22 11:48:32.169476 2025] [:error] [pid 33440:tid 33459] [client 66.249.64.101:44636] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUi_kJOsUWKqgxu6QTSxrgAAARE"]
[Mon Dec 22 11:51:26.690741 2025] [:error] [pid 33472:tid 33523] [client 66.249.64.101:39866] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjAPp5p2WQpPIK8HAmBIgAAAZY"]
[Mon Dec 22 11:51:46.635815 2025] [:error] [pid 33535:tid 33553] [client 66.249.64.101:36898] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjAUmOCI8D9Xtn-n7Q6jAAAAdA"]
[Mon Dec 22 11:52:00.724781 2025] [:error] [pid 58172:tid 58192] [client 66.249.64.101:40320] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjAYOSVKDT5jWOcnSVKkgAAANI"]
[Mon Dec 22 11:52:06.583803 2025] [:error] [pid 33440:tid 33445] [client 66.249.64.101:38418] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjAZpOsUWKqgxu6QTSyOAAAAQM"]
[Mon Dec 22 11:53:41.841302 2025] [:error] [pid 33535:tid 33537] [client 98.159.37.240:28833] [client 98.159.37.240] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.37.240, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aUjAxWOCI8D9Xtn-n7Q61AAAAcA"]
[Mon Dec 22 11:54:53.810290 2025] [:error] [pid 56080:tid 56126] [client 66.249.64.101:52246] [client 66.249.64.101] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "45.128.199.107_42bb6353fb1a067bcfab69fef972c3a2a92067c2"): Internal error (specific information not available) [hostname "paramountbaldivis.com"] [uri "/index.php"] [unique_id "aUjBCZIHT3YJq9hjDc51hAAAAwI"]
[Mon Dec 22 11:55:39.720489 2025] [:error] [pid 56080:tid 56147] [client 66.249.64.101:49750] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjBO5IHT3YJq9hjDc51vgAAAxc"]
[Mon Dec 22 11:55:53.884227 2025] [:error] [pid 33564:tid 33569] [client 66.249.64.101:44642] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjBSQSHeG6oLmMnKY4g7wAAAgI"]
[Mon Dec 22 11:55:57.700630 2025] [:error] [pid 56044:tid 56054] [client 66.249.64.101:34881] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjBTe60uUaieriJqP0DJwAAAIY"]
[Mon Dec 22 11:55:58.940255 2025] [:error] [pid 56080:tid 56135] [client 66.249.64.101:60687] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjBTpIHT3YJq9hjDc51zgAAAws"]
[Mon Dec 22 11:56:12.856137 2025] [:error] [pid 33440:tid 33446] [client 66.249.64.101:46147] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjBXJOsUWKqgxu6QTSzFwAAAQQ"]
[Mon Dec 22 12:00:03.565389 2025] [:error] [pid 58172:tid 58183] [client 66.249.64.101:65033] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjCQ-SVKDT5jWOcnSVNGAAAAMk"]
[Mon Dec 22 12:00:23.206285 2025] [:error] [pid 33472:tid 33517] [client 66.249.64.101:47218] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjCV55p2WQpPIK8HAmEcwAAAZA"]
[Mon Dec 22 12:03:26.059291 2025] [:error] [pid 58172:tid 58197] [client 66.249.64.101:37325] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjDDuSVKDT5jWOcnSVOCAAAANc"]
[Mon Dec 22 12:03:37.770635 2025] [:error] [pid 56080:tid 56134] [client 66.249.64.101:40390] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjDGZIHT3YJq9hjDc53UwAAAwo"]
[Mon Dec 22 12:03:42.758350 2025] [:error] [pid 58078:tid 58094] [client 66.249.64.101:63857] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjDHpWKg9Bf8njHlB67pgAAAAs"]
[Mon Dec 22 12:03:47.738945 2025] [:error] [pid 58172:tid 58177] [client 66.249.64.101:48579] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjDI-SVKDT5jWOcnSVOFAAAAMM"]
[Mon Dec 22 12:03:59.618986 2025] [:error] [pid 33535:tid 33544] [client 66.249.64.101:36537] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjDL2OCI8D9Xtn-n7Q9SAAAAcc"]
[Mon Dec 22 12:09:04.168318 2025] [:error] [pid 56155:tid 56241] [client 66.249.64.101:64200] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjEYGG8a3wQucsuN66RTwAAA5M"]
[Mon Dec 22 12:09:09.871423 2025] [:error] [pid 33535:tid 33561] [client 66.249.64.101:56711] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjEZWOCI8D9Xtn-n7Q-hwAAAdg"]
[Mon Dec 22 12:09:14.422878 2025] [:error] [pid 33535:tid 33558] [client 66.249.64.101:46900] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjEamOCI8D9Xtn-n7Q-jQAAAdU"]
[Mon Dec 22 12:09:23.436943 2025] [:error] [pid 33472:tid 33502] [client 66.249.64.101:49783] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjEc55p2WQpPIK8HAmHqwAAAYE"]
[Mon Dec 22 12:09:45.116901 2025] [:error] [pid 33472:tid 33506] [client 66.249.64.101:53256] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjEiZ5p2WQpPIK8HAmH0wAAAYU"]
[Mon Dec 22 12:09:49.136520 2025] [:error] [pid 33564:tid 33584] [client 66.249.64.101:47480] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjEjQSHeG6oLmMnKY4jeAAAAhE"]
[Mon Dec 22 12:12:42.892338 2025] [:error] [pid 56044:tid 56059] [client 66.249.64.101:64956] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjFOu60uUaieriJqP0GJwAAAIs"]
[Mon Dec 22 12:12:42.993932 2025] [:error] [pid 56044:tid 56067] [client 66.249.64.101:37273] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjFOu60uUaieriJqP0GKQAAAJM"]
[Mon Dec 22 12:12:51.735329 2025] [:error] [pid 58078:tid 58099] [client 66.249.64.101:41705] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjFQ5WKg9Bf8njHlB69PQAAABA"]
[Mon Dec 22 12:12:52.819642 2025] [:error] [pid 33564:tid 33591] [client 66.249.64.101:48660] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjFRASHeG6oLmMnKY4kMAAAAhg"]
[Mon Dec 22 12:12:52.856038 2025] [:error] [pid 58172:tid 58187] [client 66.249.64.101:63054] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjFROSVKDT5jWOcnSVRQwAAAM0"]
[Mon Dec 22 12:13:04.386838 2025] [:error] [pid 33535:tid 33540] [client 66.249.64.101:59087] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjFUGOCI8D9Xtn-n7Q_bwAAAcM"]
[Mon Dec 22 12:13:16.149818 2025] [:error] [pid 33472:tid 33508] [client 66.249.64.101:54034] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjFXJ5p2WQpPIK8HAmJGAAAAYc"]
[Mon Dec 22 12:13:21.252386 2025] [:error] [pid 58172:tid 58175] [client 66.249.64.101:64652] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjFYeSVKDT5jWOcnSVRXgAAAME"]
[Mon Dec 22 12:16:02.810997 2025] [:error] [pid 33564:tid 33590] [client 66.249.64.101:56491] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjGAgSHeG6oLmMnKY4kzQAAAhc"]
[Mon Dec 22 12:16:15.699347 2025] [:error] [pid 33535:tid 33549] [client 66.249.64.101:40274] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjGD2OCI8D9Xtn-n7RACQAAAcw"]
[Mon Dec 22 12:16:19.655578 2025] [:error] [pid 56080:tid 56124] [client 66.249.64.101:41569] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjGE5IHT3YJq9hjDc55dwAAAwA"]
[Mon Dec 22 12:16:25.628635 2025] [:error] [pid 33471:tid 33491] [client 66.249.64.101:59285] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjGGb5BeNE7regJ7izgdwAAAVE"]
[Mon Dec 22 12:16:45.569639 2025] [:error] [pid 33564:tid 33573] [client 66.249.64.101:48131] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjGLQSHeG6oLmMnKY4k4wAAAgY"]
[Mon Dec 22 12:20:29.978701 2025] [:error] [pid 33440:tid 33461] [client 66.249.64.101:50274] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjHDZOsUWKqgxu6QTS4dgAAARM"]
[Mon Dec 22 12:20:30.078458 2025] [:error] [pid 33471:tid 33487] [client 66.249.64.101:58041] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjHDr5BeNE7regJ7izhJQAAAU0"]
[Mon Dec 22 12:20:34.960266 2025] [:error] [pid 33440:tid 33455] [client 66.249.64.101:54355] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjHEpOsUWKqgxu6QTS4fAAAAQ0"]
[Mon Dec 22 12:23:41.418400 2025] [:error] [pid 33535:tid 33560] [client 66.249.64.101:44235] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjHzWOCI8D9Xtn-n7RCJwAAAdc"]
[Mon Dec 22 12:23:56.386918 2025] [:error] [pid 58078:tid 58103] [client 66.249.64.101:39935] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjH3JWKg9Bf8njHlB6_KgAAABQ"]
[Mon Dec 22 12:34:57.552063 2025] [:error] [pid 58172:tid 58197] [client 66.249.64.101:63140] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjKceSVKDT5jWOcnSVYmAAAANc"]
[Mon Dec 22 12:35:05.612008 2025] [:error] [pid 58172:tid 58187] [client 66.249.64.101:56676] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjKeeSVKDT5jWOcnSVYuQAAAM0"]
[Mon Dec 22 12:35:35.680652 2025] [:error] [pid 33472:tid 33510] [client 66.249.64.101:63787] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjKl55p2WQpPIK8HAmRwwAAAYk"]
[Mon Dec 22 12:35:38.630342 2025] [:error] [pid 58078:tid 58106] [client 66.249.64.101:50562] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjKmpWKg9Bf8njHlB7BLwAAABc"]
[Mon Dec 22 12:38:46.497898 2025] [:error] [pid 33535:tid 33543] [client 66.249.64.101:44646] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjLVmOCI8D9Xtn-n7RGqAAAAcY"]
[Mon Dec 22 12:38:51.491640 2025] [:error] [pid 33535:tid 33554] [client 98.159.37.247:52337] [client 98.159.37.247] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.37.247, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aUjLW2OCI8D9Xtn-n7RGrAAAAdE"]
[Mon Dec 22 12:38:56.439771 2025] [:error] [pid 33535:tid 33555] [client 66.249.64.101:48539] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjLYGOCI8D9Xtn-n7RGrgAAAdI"]
[Mon Dec 22 12:38:57.426590 2025] [:error] [pid 56044:tid 56048] [client 66.249.64.101:42649] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjLYe60uUaieriJqP0KmgAAAIA"]
[Mon Dec 22 12:39:09.135723 2025] [:error] [pid 33472:tid 33517] [client 66.249.64.101:48287] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjLbZ5p2WQpPIK8HAmS8wAAAZA"]
[Mon Dec 22 12:39:16.837129 2025] [:error] [pid 33472:tid 33513] [client 66.249.64.101:52806] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjLdJ5p2WQpPIK8HAmS_QAAAYw"]
[Mon Dec 22 12:39:21.828496 2025] [:error] [pid 33440:tid 33464] [client 66.249.64.101:39023] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjLeZOsUWKqgxu6QTS8LQAAARY"]
[Mon Dec 22 12:41:54.961640 2025] [:error] [pid 33472:tid 33504] [client 66.249.64.101:52093] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjMEp5p2WQpPIK8HAmT8AAAAYM"]
[Mon Dec 22 12:42:07.357650 2025] [:error] [pid 33440:tid 33450] [client 66.249.64.101:60174] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjMH5OsUWKqgxu6QTS8zgAAAQg"]
[Mon Dec 22 12:45:25.715740 2025] [:error] [pid 33440:tid 33448] [client 66.249.64.101:43722] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjM5ZOsUWKqgxu6QTS9sAAAAQY"]
[Mon Dec 22 12:49:23.759289 2025] [:error] [pid 33564:tid 33575] [client 66.249.64.101:38018] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjN0wSHeG6oLmMnKY4sBAAAAgg"]
[Mon Dec 22 12:54:01.766025 2025] [:error] [pid 33564:tid 33591] [client 66.249.64.101:42805] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjO6QSHeG6oLmMnKY4tVgAAAhg"]
[Mon Dec 22 12:54:19.519215 2025] [:error] [pid 33471:tid 33487] [client 66.249.64.101:37800] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjO-75BeNE7regJ7iznDAAAAU0"]
[Mon Dec 22 12:54:30.608943 2025] [:error] [pid 58172:tid 58187] [client 66.249.64.101:38487] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjPBuSVKDT5jWOcnSVdgQAAAM0"]
[Mon Dec 22 13:10:06.044429 2025] [:error] [pid 33535:tid 33545] [client 66.249.64.101:52991] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjSrmOCI8D9Xtn-n7ROqAAAAcg"]
[Mon Dec 22 13:10:20.598283 2025] [:error] [pid 56155:tid 56243] [client 66.249.64.101:36613] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjSvGG8a3wQucsuN66bawAAA5U"]
[Mon Dec 22 13:10:27.152865 2025] [:error] [pid 33440:tid 33463] [client 66.249.64.101:37929] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjSw5OsUWKqgxu6QTTDmQAAARU"]
[Mon Dec 22 13:10:34.869265 2025] [:error] [pid 33564:tid 33575] [client 66.249.64.101:37741] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjSygSHeG6oLmMnKY4xiwAAAgg"]
[Mon Dec 22 13:10:36.232935 2025] [:error] [pid 58172:tid 58176] [client 66.249.64.101:60370] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjSzOSVKDT5jWOcnSVioQAAAMI"]
[Mon Dec 22 13:10:43.697639 2025] [:error] [pid 58172:tid 58176] [client 66.249.64.101:36896] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjS0-SVKDT5jWOcnSVirQAAAMI"]
[Mon Dec 22 13:15:19.675901 2025] [:error] [pid 56155:tid 56234] [client 66.249.64.101:60402] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjT52G8a3wQucsuN66cNwAAA4w"]
[Mon Dec 22 13:15:31.386686 2025] [:error] [pid 33472:tid 33503] [client 66.249.64.101:44762] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjT855p2WQpPIK8HAmf4wAAAYI"]
[Mon Dec 22 13:17:29.535159 2025] [:error] [pid 58172:tid 58198] [client 66.249.64.101:34784] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjUaeSVKDT5jWOcnSVkyAAAANg"]
[Mon Dec 22 13:17:43.210692 2025] [:error] [pid 33535:tid 33556] [client 66.249.64.101:51395] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjUd2OCI8D9Xtn-n7RRDQAAAdM"]
[Mon Dec 22 13:18:18.343580 2025] [:error] [pid 33472:tid 33516] [client 66.249.64.101:55074] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjUmp5p2WQpPIK8HAmguQAAAY8"]
[Mon Dec 22 13:18:19.264826 2025] [:error] [pid 56044:tid 56054] [client 66.249.64.101:63804] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjUm-60uUaieriJqP0SnwAAAIY"]
[Mon Dec 22 13:21:07.148877 2025] [:error] [pid 58172:tid 58194] [client 66.249.64.101:46792] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjVQ-SVKDT5jWOcnSVlnQAAANQ"]
[Mon Dec 22 13:21:17.135629 2025] [:error] [pid 58078:tid 58086] [client 66.249.64.101:43949] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjVTZWKg9Bf8njHlB7JKQAAAAM"]
[Mon Dec 22 13:21:32.283598 2025] [:error] [pid 33472:tid 33516] [client 66.249.64.101:37302] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjVXJ5p2WQpPIK8HAmhtQAAAY8"]
[Mon Dec 22 13:23:38.457494 2025] [:error] [pid 56155:tid 56221] [client 66.249.64.101:60641] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjV2mG8a3wQucsuN66dNwAAA4A"]
[Mon Dec 22 13:23:44.199108 2025] [:error] [pid 58172:tid 58193] [client 66.249.64.101:42719] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjV4OSVKDT5jWOcnSVmLAAAANM"]
[Mon Dec 22 13:23:49.175895 2025] [:error] [pid 33471:tid 33489] [client 66.249.64.101:51325] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjV5b5BeNE7regJ7iztTAAAAU8"]
[Mon Dec 22 13:23:54.259873 2025] [:error] [pid 56155:tid 56229] [client 66.249.64.101:36696] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjV6mG8a3wQucsuN66dRQAAA4c"]
[Mon Dec 22 13:24:12.007211 2025] [:error] [pid 33440:tid 33443] [client 66.249.64.101:34979] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjV_JOsUWKqgxu6QTTG0AAAAQE"]
[Mon Dec 22 13:24:13.381230 2025] [:error] [pid 56044:tid 56060] [client 66.249.64.101:44305] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjV_e60uUaieriJqP0TLAAAAIw"]
[Mon Dec 22 13:24:24.326427 2025] [:error] [pid 56044:tid 56062] [client 98.159.37.239:46485] [client 98.159.37.239] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.37.239, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aUjWCO60uUaieriJqP0TNgAAAI4"]
[Mon Dec 22 13:24:33.528241 2025] [:error] [pid 56080:tid 56146] [client 66.249.64.101:40996] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjWEZIHT3YJq9hjDc6GxwAAAxY"]
[Mon Dec 22 13:26:37.167350 2025] [:error] [pid 56155:tid 56224] [client 49.235.136.28:33344] [client 49.235.136.28] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.paramountbaldivis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.paramountbaldivis.com"] [uri "/"] [unique_id "aUjWjWG8a3wQucsuN66dxgAAA4I"]
[Mon Dec 22 13:28:47.038662 2025] [:error] [pid 33472:tid 33501] [client 66.249.64.101:57314] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjXD55p2WQpPIK8HAmkcAAAAYA"]
[Mon Dec 22 13:28:47.408027 2025] [:error] [pid 33472:tid 33508] [client 66.249.64.101:43203] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjXD55p2WQpPIK8HAmkcwAAAYc"]
[Mon Dec 22 13:29:07.551171 2025] [:error] [pid 58172:tid 58181] [client 66.249.64.101:57755] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjXI-SVKDT5jWOcnSVnlQAAAMc"]
[Mon Dec 22 13:34:19.977737 2025] [:error] [pid 33440:tid 33464] [client 66.249.64.101:49869] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjYW5OsUWKqgxu6QTTJMwAAARY"]
[Mon Dec 22 13:52:58.075730 2025] [:error] [pid 56155:tid 56221] [client 66.249.64.101:41944] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjcumG8a3wQucsuN66h2gAAA4A"]
[Mon Dec 22 13:56:33.377561 2025] [:error] [pid 56044:tid 56051] [client 66.249.64.101:45834] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjdke60uUaieriJqP0ZswAAAIM"]
[Mon Dec 22 13:56:36.998284 2025] [:error] [pid 33440:tid 33453] [client 66.249.64.101:62881] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjdlJOsUWKqgxu6QTTPAwAAAQs"]
[Mon Dec 22 13:56:53.581971 2025] [:error] [pid 56155:tid 56224] [client 66.249.64.101:63814] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjdpWG8a3wQucsuN66iUwAAA4I"]
[Mon Dec 22 13:56:57.729450 2025] [:error] [pid 33564:tid 33568] [client 66.249.64.101:52924] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjdqQSHeG6oLmMnKY46-AAAAgE"]
[Mon Dec 22 13:57:08.340767 2025] [:error] [pid 58172:tid 58180] [client 66.249.64.101:62389] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjdtOSVKDT5jWOcnSVw4QAAAMY"]
[Mon Dec 22 13:57:12.803092 2025] [:error] [pid 58078:tid 58100] [client 66.249.64.101:56038] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjduJWKg9Bf8njHlB7PmgAAABE"]
[Mon Dec 22 14:01:24.569589 2025] [:error] [pid 56080:tid 56133] [client 66.249.64.101:44817] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjetJIHT3YJq9hjDc6OwQAAAwk"]
[Mon Dec 22 14:01:31.837927 2025] [:error] [pid 33440:tid 33452] [client 66.249.64.101:63442] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjeu5OsUWKqgxu6QTTP_AAAAQo"]
[Mon Dec 22 14:01:43.818081 2025] [:error] [pid 33564:tid 33584] [client 66.249.64.101:50982] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjexwSHeG6oLmMnKY478gAAAhE"]
[Mon Dec 22 14:01:52.082372 2025] [:error] [pid 33535:tid 33542] [client 66.249.64.101:38103] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUje0GOCI8D9Xtn-n7RcKAAAAcU"]
[Mon Dec 22 14:01:59.765009 2025] [:error] [pid 58172:tid 58184] [client 66.249.64.101:62364] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUje1-SVKDT5jWOcnSVx2AAAAMo"]
[Mon Dec 22 14:02:04.222361 2025] [:error] [pid 33535:tid 33547] [client 66.249.64.101:58601] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUje3GOCI8D9Xtn-n7RcNwAAAco"]
[Mon Dec 22 14:02:17.116535 2025] [:error] [pid 58078:tid 58102] [client 66.249.64.101:51253] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUje6ZWKg9Bf8njHlB7QdQAAABM"]
[Mon Dec 22 14:04:30.925616 2025] [:error] [pid 33471:tid 33497] [client 66.249.64.101:45763] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjfbr5BeNE7regJ7iz2CQAAAVc"]
[Mon Dec 22 14:04:37.919618 2025] [:error] [pid 56080:tid 56126] [client 66.249.64.101:43619] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjfdZIHT3YJq9hjDc6PUAAAAwI"]
[Mon Dec 22 14:04:51.950819 2025] [:error] [pid 33440:tid 33447] [client 66.249.64.101:37190] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjfg5OsUWKqgxu6QTTQyQAAAQU"]
[Mon Dec 22 14:04:54.206407 2025] [:error] [pid 33440:tid 33466] [client 66.249.64.101:40094] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjfhpOsUWKqgxu6QTTQ0AAAARg"]
[Mon Dec 22 14:04:54.318516 2025] [:error] [pid 33471:tid 33478] [client 66.249.64.101:52784] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjfhr5BeNE7regJ7iz2FAAAAUQ"]
[Mon Dec 22 14:04:55.212712 2025] [:error] [pid 56080:tid 56128] [client 66.249.64.101:41717] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjfh5IHT3YJq9hjDc6PaAAAAwQ"]
[Mon Dec 22 14:04:55.319821 2025] [:error] [pid 56080:tid 56147] [client 66.249.64.101:59080] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjfh5IHT3YJq9hjDc6PaQAAAxc"]
[Mon Dec 22 14:05:19.628546 2025] [:error] [pid 33535:tid 33544] [client 66.249.64.101:60703] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjfn2OCI8D9Xtn-n7Rc7wAAAcc"]
[Mon Dec 22 14:07:18.963029 2025] [:error] [pid 58172:tid 58180] [client 66.249.64.101:56400] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjgFuSVKDT5jWOcnSV0JwAAAMY"]
[Mon Dec 22 14:07:23.182204 2025] [:error] [pid 33471:tid 33491] [client 66.249.64.101:40594] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjgG75BeNE7regJ7iz2lAAAAVE"]
[Mon Dec 22 14:07:33.249745 2025] [:error] [pid 33472:tid 33519] [client 66.249.64.101:38485] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjgJZ5p2WQpPIK8HAm2AgAAAZI"]
[Mon Dec 22 14:07:43.831530 2025] [:error] [pid 33472:tid 33513] [client 66.249.64.101:41829] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjgL55p2WQpPIK8HAm2DgAAAYw"]
[Mon Dec 22 14:07:45.904725 2025] [:error] [pid 33535:tid 33557] [client 66.249.64.101:40299] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjgMWOCI8D9Xtn-n7RdjQAAAdQ"]
[Mon Dec 22 14:07:53.528917 2025] [:error] [pid 33471:tid 33485] [client 66.249.64.101:53260] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjgOb5BeNE7regJ7iz2twAAAUs"]
[Mon Dec 22 14:09:29.254166 2025] [:error] [pid 33535:tid 33553] [client 66.249.64.101:40131] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjgmWOCI8D9Xtn-n7Rd4gAAAdA"]
[Mon Dec 22 14:09:38.227172 2025] [:error] [pid 33440:tid 33447] [client 66.249.64.101:63525] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjgopOsUWKqgxu6QTTSJgAAAQU"]
[Mon Dec 22 14:09:41.683001 2025] [:error] [pid 58078:tid 58090] [client 66.249.64.101:56551] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjgpZWKg9Bf8njHlB7RbAAAAAc"]
[Mon Dec 22 14:09:56.946260 2025] [:error] [pid 33471:tid 33498] [client 66.249.64.101:52857] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjgtL5BeNE7regJ7iz2_gAAAVg"]
[Mon Dec 22 14:10:15.394336 2025] [:error] [pid 33472:tid 33519] [client 98.159.37.246:33691] [client 98.159.37.246] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.37.246, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aUjgx55p2WQpPIK8HAm3KwAAAZI"]
[Mon Dec 22 14:10:17.149797 2025] [:error] [pid 33564:tid 33575] [client 66.249.64.101:50459] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjgyQSHeG6oLmMnKY4-KgAAAgg"]
[Mon Dec 22 14:12:13.427706 2025] [:error] [pid 33535:tid 33551] [client 66.249.64.101:52514] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjhPWOCI8D9Xtn-n7ReUAAAAc4"]
[Mon Dec 22 14:12:17.652110 2025] [:error] [pid 58172:tid 58185] [client 66.249.64.101:43126] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjhQeSVKDT5jWOcnSV1gwAAAMs"]
[Mon Dec 22 14:12:22.778778 2025] [:error] [pid 56155:tid 56236] [client 66.249.64.101:58147] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjhRmG8a3wQucsuN66lWQAAA44"]
[Mon Dec 22 14:12:31.065397 2025] [:error] [pid 58078:tid 58103] [client 66.249.64.101:50150] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjhT5WKg9Bf8njHlB7R1AAAABQ"]
[Mon Dec 22 14:12:40.195291 2025] [:error] [pid 58172:tid 58184] [client 66.249.64.101:44924] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjhWOSVKDT5jWOcnSV1kQAAAMo"]
[Mon Dec 22 14:12:47.042622 2025] [:error] [pid 56155:tid 56227] [client 66.249.64.101:47018] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjhX2G8a3wQucsuN66lZgAAA4U"]
[Mon Dec 22 14:15:20.887728 2025] [:error] [pid 33564:tid 33571] [client 66.249.64.101:44891] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjh-ASHeG6oLmMnKY4_VgAAAgQ"]
[Mon Dec 22 14:15:33.350931 2025] [:error] [pid 33535:tid 33561] [client 66.249.64.101:60017] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjiBWOCI8D9Xtn-n7RfFAAAAdg"]
[Mon Dec 22 14:15:38.910144 2025] [:error] [pid 33535:tid 33553] [client 66.249.64.101:39522] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjiCmOCI8D9Xtn-n7RfHwAAAdA"]
[Mon Dec 22 14:15:49.994919 2025] [:error] [pid 33471:tid 33486] [client 66.249.64.101:40654] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjiFb5BeNE7regJ7iz3wwAAAUw"]
[Mon Dec 22 14:15:52.054336 2025] [:error] [pid 56155:tid 56246] [client 66.249.64.101:58338] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjiGGG8a3wQucsuN66lwwAAA5g"]
[Mon Dec 22 14:16:14.943455 2025] [:error] [pid 33535:tid 33557] [client 43.135.182.43:55758] [client 43.135.182.43] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||paramountbaldivis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjiLmOCI8D9Xtn-n7RfPAAAAdQ"]
[Mon Dec 22 14:16:59.879804 2025] [:error] [pid 33471:tid 33497] [client 66.249.64.101:56121] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjiW75BeNE7regJ7iz35QAAAVc"]
[Mon Dec 22 14:17:16.065621 2025] [:error] [pid 56080:tid 56143] [client 66.249.64.101:60891] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjibJIHT3YJq9hjDc6R8gAAAxM"]
[Mon Dec 22 14:17:27.496792 2025] [:error] [pid 58172:tid 58196] [client 66.249.64.101:53922] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjid-SVKDT5jWOcnSV3OwAAANY"]
[Mon Dec 22 14:17:31.945631 2025] [:error] [pid 33564:tid 33590] [client 66.249.64.101:49136] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjiewSHeG6oLmMnKY4_-gAAAhc"]
[Mon Dec 22 14:17:36.560452 2025] [:error] [pid 33440:tid 33463] [client 66.249.64.101:58300] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjigJOsUWKqgxu6QTTTlgAAARU"]
[Mon Dec 22 14:17:42.136155 2025] [:error] [pid 56080:tid 56148] [client 66.249.64.101:51976] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjihpIHT3YJq9hjDc6SBgAAAxg"]
[Mon Dec 22 14:17:47.670605 2025] [:error] [pid 33471:tid 33475] [client 66.249.64.101:39100] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjii75BeNE7regJ7iz4AAAAAUE"]
[Mon Dec 22 14:17:55.275233 2025] [:error] [pid 33471:tid 33485] [client 66.249.64.101:36309] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjik75BeNE7regJ7iz4AQAAAUs"]
[Mon Dec 22 14:19:36.959925 2025] [:error] [pid 33472:tid 33518] [client 66.249.64.101:39278] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUji-J5p2WQpPIK8HAm6HAAAAZE"]
[Mon Dec 22 14:19:45.926841 2025] [:error] [pid 33471:tid 33493] [client 66.249.64.101:40145] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjjAb5BeNE7regJ7iz4ZwAAAVM"]
[Mon Dec 22 14:19:54.369180 2025] [:error] [pid 33471:tid 33498] [client 66.249.64.101:60396] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjjCr5BeNE7regJ7iz4bAAAAVg"]
[Mon Dec 22 14:19:59.692732 2025] [:error] [pid 33472:tid 33507] [client 66.249.64.101:40862] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjjD55p2WQpPIK8HAm6ZAAAAYY"]
[Mon Dec 22 14:20:02.687506 2025] [:error] [pid 33472:tid 33518] [client 66.249.64.101:36731] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjjEp5p2WQpPIK8HAm6aAAAAZE"]
[Mon Dec 22 14:20:30.436269 2025] [:error] [pid 33535:tid 33552] [client 66.249.64.101:60825] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjjLmOCI8D9Xtn-n7RgRQAAAc8"]
[Mon Dec 22 14:20:32.495249 2025] [:error] [pid 33471:tid 33488] [client 66.249.64.101:46158] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjjML5BeNE7regJ7iz4hAAAAU4"]
[Mon Dec 22 14:22:00.217434 2025] [:error] [pid 33471:tid 33496] [client 66.249.64.101:40980] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjjiL5BeNE7regJ7iz4twAAAVY"]
[Mon Dec 22 14:22:02.283196 2025] [:error] [pid 56044:tid 56060] [client 66.249.64.101:52910] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjjiu60uUaieriJqP0dfAAAAIw"]
[Mon Dec 22 14:22:22.264149 2025] [:error] [pid 33472:tid 33504] [client 66.249.64.101:36959] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjjnp5p2WQpPIK8HAm7EwAAAYM"]
[Mon Dec 22 14:22:22.279750 2025] [:error] [pid 33472:tid 33515] [client 66.249.64.101:38113] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjjnp5p2WQpPIK8HAm7FAAAAY4"]
[Mon Dec 22 14:22:22.518976 2025] [:error] [pid 33472:tid 33511] [client 66.249.64.101:47168] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjjnp5p2WQpPIK8HAm7FQAAAYo"]
[Mon Dec 22 14:22:31.179402 2025] [:error] [pid 33440:tid 33451] [client 66.249.64.101:64123] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjjp5OsUWKqgxu6QTTUgQAAAQk"]
[Mon Dec 22 14:22:33.246357 2025] [:error] [pid 33472:tid 33516] [client 66.249.64.101:47326] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjjqZ5p2WQpPIK8HAm7JQAAAY8"]
[Mon Dec 22 14:22:41.549942 2025] [:error] [pid 56044:tid 56069] [client 66.249.64.101:44608] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjjse60uUaieriJqP0djQAAAJU"]
[Mon Dec 22 14:22:47.773338 2025] [:error] [pid 33440:tid 33450] [client 66.249.64.101:37235] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjjt5OsUWKqgxu6QTTUigAAAQg"]
[Mon Dec 22 14:25:11.437263 2025] [:error] [pid 56155:tid 56224] [client 66.249.64.101:37135] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjkR2G8a3wQucsuN66mswAAA4I"]
[Mon Dec 22 14:25:21.790750 2025] [:error] [pid 56080:tid 56139] [client 66.249.64.101:59328] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjkUZIHT3YJq9hjDc6TFAAAAw8"]
[Mon Dec 22 14:25:26.047387 2025] [:error] [pid 33472:tid 33511] [client 66.249.64.101:52397] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjkVp5p2WQpPIK8HAm8DwAAAYo"]
[Mon Dec 22 14:25:31.521057 2025] [:error] [pid 33472:tid 33516] [client 66.249.64.101:64488] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjkW55p2WQpPIK8HAm8FAAAAY8"]
[Mon Dec 22 14:25:42.018715 2025] [:error] [pid 33472:tid 33522] [client 66.249.64.101:54867] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjkZp5p2WQpPIK8HAm8HwAAAZU"]
[Mon Dec 22 14:25:44.183594 2025] [:error] [pid 58172:tid 58177] [client 66.249.64.101:56449] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjkaOSVKDT5jWOcnSV40QAAAMM"]
[Mon Dec 22 14:25:53.548779 2025] [:error] [pid 33440:tid 33453] [client 66.249.64.101:50587] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjkcZOsUWKqgxu6QTTU4gAAAQs"]
[Mon Dec 22 14:25:59.887269 2025] [:error] [pid 58078:tid 58106] [client 66.249.64.101:36801] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjkd5WKg9Bf8njHlB7TmwAAABc"]
[Mon Dec 22 14:26:01.845814 2025] [:error] [pid 33535:tid 33544] [client 66.249.64.101:45423] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjkeWOCI8D9Xtn-n7RhTQAAAcc"]
[Mon Dec 22 14:26:08.491453 2025] [:error] [pid 56080:tid 56134] [client 66.249.64.101:62634] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjkgJIHT3YJq9hjDc6TLgAAAwo"]
[Mon Dec 22 14:27:23.453288 2025] [:error] [pid 33472:tid 33519] [client 66.249.64.101:53714] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjky55p2WQpPIK8HAm9EQAAAZI"]
[Mon Dec 22 14:27:32.051377 2025] [:error] [pid 56080:tid 56135] [client 66.249.64.101:39643] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjk1JIHT3YJq9hjDc6TewAAAws"]
[Mon Dec 22 14:27:46.314011 2025] [:error] [pid 33564:tid 33574] [client 66.249.64.101:64241] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjk4gSHeG6oLmMnKY5BzQAAAgc"]
[Mon Dec 22 14:27:50.461165 2025] [:error] [pid 33471:tid 33494] [client 66.249.64.101:42141] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjk5r5BeNE7regJ7iz5agAAAVQ"]
[Mon Dec 22 14:27:54.433316 2025] [:error] [pid 33472:tid 33503] [client 66.249.64.101:57068] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjk6p5p2WQpPIK8HAm9JgAAAYI"]
[Mon Dec 22 14:28:00.539520 2025] [:error] [pid 58172:tid 58185] [client 66.249.64.101:36367] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjk8OSVKDT5jWOcnSV5YQAAAMs"]
[Mon Dec 22 14:28:03.959204 2025] [:error] [pid 33471:tid 33498] [client 66.249.64.101:37925] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjk875BeNE7regJ7iz5tgAAAVg"]
[Mon Dec 22 14:28:05.633589 2025] [:error] [pid 58172:tid 58177] [client 66.249.64.101:47440] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjk9eSVKDT5jWOcnSV5aAAAAMM"]
[Mon Dec 22 14:32:09.143193 2025] [:error] [pid 56155:tid 56230] [client 66.249.64.101:57589] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjl6WG8a3wQucsuN66oRQAAA4g"]
[Mon Dec 22 14:32:18.235628 2025] [:error] [pid 58172:tid 58198] [client 66.249.64.101:40061] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjl8uSVKDT5jWOcnSV7HgAAANg"]
[Mon Dec 22 14:32:26.501746 2025] [:error] [pid 33440:tid 33460] [client 66.249.64.101:47798] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjl-pOsUWKqgxu6QTTWSwAAARI"]
[Mon Dec 22 14:32:34.876765 2025] [:error] [pid 56155:tid 56224] [client 66.249.64.101:36779] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjmAmG8a3wQucsuN66oVAAAA4I"]
[Mon Dec 22 14:32:39.116304 2025] [:error] [pid 33471:tid 33495] [client 66.249.64.101:52172] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjmB75BeNE7regJ7iz6iwAAAVU"]
[Mon Dec 22 14:32:47.221513 2025] [:error] [pid 33564:tid 33589] [client 66.249.64.101:63885] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjmDwSHeG6oLmMnKY5CdQAAAhY"]
[Mon Dec 22 14:32:55.572400 2025] [:error] [pid 56080:tid 56144] [client 66.249.64.101:52077] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjmF5IHT3YJq9hjDc6UaQAAAxQ"]
[Mon Dec 22 14:32:59.555584 2025] [:error] [pid 56080:tid 56137] [client 66.249.64.101:48103] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjmG5IHT3YJq9hjDc6UbgAAAw0"]
[Mon Dec 22 14:34:37.733246 2025] [:error] [pid 56044:tid 56067] [client 66.249.64.101:39177] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjmfe60uUaieriJqP0fLQAAAJM"]
[Mon Dec 22 14:34:40.633062 2025] [:error] [pid 58078:tid 58097] [client 66.249.64.101:35115] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjmgJWKg9Bf8njHlB7VNgAAAA4"]
[Mon Dec 22 14:34:42.563825 2025] [:error] [pid 33535:tid 33556] [client 66.249.64.101:62095] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjmgmOCI8D9Xtn-n7RjLAAAAdM"]
[Mon Dec 22 14:34:44.637795 2025] [:error] [pid 58172:tid 58193] [client 66.249.64.101:63537] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjmhOSVKDT5jWOcnSV7rQAAANM"]
[Mon Dec 22 14:34:46.817394 2025] [:error] [pid 33472:tid 33510] [client 66.249.64.101:52935] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjmhp5p2WQpPIK8HAm_VwAAAYk"]
[Mon Dec 22 14:34:54.343043 2025] [:error] [pid 33440:tid 33462] [client 66.249.64.101:58352] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjmjpOsUWKqgxu6QTTWpQAAARQ"]
[Mon Dec 22 14:35:31.405699 2025] [:error] [pid 58172:tid 58185] [client 66.249.64.101:53395] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjms-SVKDT5jWOcnSV79gAAAMs"]
[Mon Dec 22 14:37:09.720771 2025] [:error] [pid 56080:tid 56124] [client 66.249.64.101:39691] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjnFZIHT3YJq9hjDc6VhQAAAwA"]
[Mon Dec 22 14:37:12.442596 2025] [:error] [pid 33535:tid 33554] [client 66.249.64.101:65097] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjnGGOCI8D9Xtn-n7Rj2wAAAdE"]
[Mon Dec 22 14:37:23.906806 2025] [:error] [pid 56044:tid 56055] [client 66.249.64.101:56279] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjnI-60uUaieriJqP0gHwAAAIc"]
[Mon Dec 22 14:37:26.122921 2025] [:error] [pid 56044:tid 56068] [client 66.249.64.101:54266] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjnJu60uUaieriJqP0gJAAAAJQ"]
[Mon Dec 22 14:37:31.087462 2025] [:error] [pid 33440:tid 33455] [client 66.249.64.101:59019] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjnK5OsUWKqgxu6QTTXdgAAAQ0"]
[Mon Dec 22 14:37:38.712283 2025] [:error] [pid 33472:tid 33509] [client 66.249.64.101:41944] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjnMp5p2WQpPIK8HAnBKgAAAYg"]
[Mon Dec 22 14:37:48.407291 2025] [:error] [pid 58078:tid 58106] [client 66.249.64.101:44611] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjnPJWKg9Bf8njHlB7V1QAAABc"]
[Mon Dec 22 14:38:02.607765 2025] [:error] [pid 33535:tid 33542] [client 66.249.64.101:53572] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjnSmOCI8D9Xtn-n7Rj8AAAAcU"]
[Mon Dec 22 14:38:06.685973 2025] [:error] [pid 58078:tid 58091] [client 66.249.64.101:58335] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjnTpWKg9Bf8njHlB7V6AAAAAg"]
[Mon Dec 22 14:39:18.999258 2025] [:error] [pid 33472:tid 33504] [client 66.249.64.101:64602] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjnlp5p2WQpPIK8HAnBnAAAAYM"]
[Mon Dec 22 14:39:28.567541 2025] [:error] [pid 56044:tid 56069] [client 66.249.64.101:64331] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjnoO60uUaieriJqP0gYAAAAJU"]
[Mon Dec 22 14:39:30.602009 2025] [:error] [pid 33472:tid 33523] [client 66.249.64.101:37697] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjnop5p2WQpPIK8HAnBqwAAAZY"]
[Mon Dec 22 14:39:37.481532 2025] [:error] [pid 33535:tid 33554] [client 66.249.64.101:46587] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjnqWOCI8D9Xtn-n7RkTAAAAdE"]
[Mon Dec 22 14:39:45.184474 2025] [:error] [pid 56080:tid 56124] [client 66.249.64.101:59384] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjnsZIHT3YJq9hjDc6V1AAAAwA"]
[Mon Dec 22 14:39:58.278420 2025] [:error] [pid 56080:tid 56147] [client 66.249.64.101:59247] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjnvpIHT3YJq9hjDc6V3QAAAxc"]
[Mon Dec 22 14:41:43.522709 2025] [:error] [pid 56155:tid 56238] [client 66.249.64.101:62674] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjoJ2G8a3wQucsuN66pUAAAA5A"]
[Mon Dec 22 14:41:53.670856 2025] [:error] [pid 56155:tid 56223] [client 66.249.64.101:48192] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjoMWG8a3wQucsuN66pUgAAA4E"]
[Mon Dec 22 14:42:24.671091 2025] [:error] [pid 58172:tid 58184] [client 66.249.64.101:41847] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjoUOSVKDT5jWOcnSV9vgAAAMo"]
[Mon Dec 22 14:42:33.688196 2025] [:error] [pid 33535:tid 33556] [client 66.249.64.101:42121] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjoWWOCI8D9Xtn-n7Rk7gAAAdM"]
[Mon Dec 22 14:42:35.767806 2025] [:error] [pid 58172:tid 58185] [client 66.249.64.101:61004] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjoW-SVKDT5jWOcnSV9wgAAAMs"]
[Mon Dec 22 14:43:44.271776 2025] [:error] [pid 33535:tid 33550] [client 66.249.64.101:59346] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjooGOCI8D9Xtn-n7RlNwAAAc0"]
[Mon Dec 22 14:43:47.243941 2025] [:error] [pid 33440:tid 33445] [client 66.249.64.101:37045] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjoo5OsUWKqgxu6QTTYfAAAAQM"]
[Mon Dec 22 14:43:55.254103 2025] [:error] [pid 33535:tid 33543] [client 66.249.64.101:57596] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjoq2OCI8D9Xtn-n7RlbQAAAcY"]
[Mon Dec 22 14:43:59.520454 2025] [:error] [pid 33472:tid 33517] [client 66.249.64.101:37238] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjor55p2WQpPIK8HAnDCwAAAZA"]
[Mon Dec 22 14:44:11.262172 2025] [:error] [pid 58172:tid 58177] [client 66.249.64.101:40323] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjou-SVKDT5jWOcnSV99wAAAMM"]
[Mon Dec 22 14:44:13.241251 2025] [:error] [pid 33535:tid 33561] [client 66.249.64.101:44489] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjovWOCI8D9Xtn-n7RleAAAAdg"]
[Mon Dec 22 14:44:29.306524 2025] [:error] [pid 56080:tid 56131] [client 66.249.64.101:43951] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjozZIHT3YJq9hjDc6WewAAAwc"]
[Mon Dec 22 14:45:46.829279 2025] [:error] [pid 33564:tid 33585] [client 66.249.64.101:50730] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjpGgSHeG6oLmMnKY5E1AAAAhI"]
[Mon Dec 22 14:45:48.899836 2025] [:error] [pid 56080:tid 56147] [client 66.249.64.101:47300] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjpHJIHT3YJq9hjDc6WmAAAAxc"]
[Mon Dec 22 14:45:50.978122 2025] [:error] [pid 56155:tid 56223] [client 66.249.64.101:54167] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjpHmG8a3wQucsuN66pqgAAA4E"]
[Mon Dec 22 14:45:59.619747 2025] [:error] [pid 33440:tid 33443] [client 66.249.64.101:55210] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjpJ5OsUWKqgxu6QTTYsgAAAQE"]
[Mon Dec 22 14:46:01.695428 2025] [:error] [pid 33472:tid 33519] [client 66.249.64.101:60451] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjpKZ5p2WQpPIK8HAnDkAAAAZI"]
[Mon Dec 22 14:46:07.805824 2025] [:error] [pid 33472:tid 33520] [client 66.249.64.101:40570] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjpL55p2WQpPIK8HAnDnAAAAZM"]
[Mon Dec 22 14:46:10.502821 2025] [:error] [pid 58078:tid 58107] [client 66.249.64.101:36676] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjpMpWKg9Bf8njHlB7W7QAAABg"]
[Mon Dec 22 14:46:19.384658 2025] [:error] [pid 33472:tid 33501] [client 66.249.64.101:39432] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjpO55p2WQpPIK8HAnDqAAAAYA"]
[Mon Dec 22 14:46:23.531693 2025] [:error] [pid 58172:tid 58190] [client 66.249.64.101:65197] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjpP-SVKDT5jWOcnSV-gAAAANA"]
[Mon Dec 22 14:48:00.970307 2025] [:error] [pid 56155:tid 56236] [client 66.249.64.101:56147] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjpoGG8a3wQucsuN66p5gAAA44"]
[Mon Dec 22 14:48:03.874700 2025] [:error] [pid 56044:tid 56064] [client 66.249.64.101:54821] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjpo-60uUaieriJqP0h9QAAAJA"]
[Mon Dec 22 14:48:08.805523 2025] [:error] [pid 33535:tid 33537] [client 66.249.64.101:58135] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjpqGOCI8D9Xtn-n7RmGwAAAcA"]
[Mon Dec 22 14:48:10.796794 2025] [:error] [pid 56044:tid 56054] [client 66.249.64.101:37088] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjpqu60uUaieriJqP0h-wAAAIY"]
[Mon Dec 22 14:48:16.439705 2025] [:error] [pid 58172:tid 58185] [client 66.249.64.101:38525] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjpsOSVKDT5jWOcnSV_BwAAAMs"]
[Mon Dec 22 14:48:25.410945 2025] [:error] [pid 33535:tid 33539] [client 66.249.64.101:47062] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjpuWOCI8D9Xtn-n7RmMwAAAcI"]
[Mon Dec 22 14:48:25.522870 2025] [:error] [pid 58078:tid 58098] [client 66.249.64.101:58993] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjpuZWKg9Bf8njHlB7XPwAAAA8"]
[Mon Dec 22 14:48:29.562485 2025] [:error] [pid 33472:tid 33504] [client 66.249.64.101:49728] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjpvZ5p2WQpPIK8HAnEjgAAAYM"]
[Mon Dec 22 14:48:31.650251 2025] [:error] [pid 58172:tid 58193] [client 66.249.64.101:53856] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjpv-SVKDT5jWOcnSV_FgAAANM"]
[Mon Dec 22 14:48:49.627340 2025] [:error] [pid 33440:tid 33451] [client 66.249.64.101:60717] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjp0ZOsUWKqgxu6QTTZKQAAAQk"]
[Mon Dec 22 14:48:57.918442 2025] [:error] [pid 56155:tid 56236] [client 66.249.64.101:59662] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjp2WG8a3wQucsuN66qJAAAA44"]
[Mon Dec 22 14:50:09.872756 2025] [:error] [pid 33535:tid 33557] [client 66.249.64.101:37032] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjqIWOCI8D9Xtn-n7RmdAAAAdQ"]
[Mon Dec 22 14:50:22.110676 2025] [:error] [pid 33564:tid 33574] [client 66.249.64.101:62040] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjqLgSHeG6oLmMnKY5FUgAAAgc"]
[Mon Dec 22 14:50:24.176163 2025] [:error] [pid 58172:tid 58189] [client 66.249.64.101:41979] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjqMOSVKDT5jWOcnSV_WgAAAM8"]
[Mon Dec 22 14:50:29.130592 2025] [:error] [pid 33535:tid 33556] [client 66.249.64.101:42334] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjqNWOCI8D9Xtn-n7RmdwAAAdM"]
[Mon Dec 22 14:50:37.431939 2025] [:error] [pid 56044:tid 56070] [client 66.249.64.101:46344] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjqPe60uUaieriJqP0iSwAAAJY"]
[Mon Dec 22 14:50:41.501745 2025] [:error] [pid 33471:tid 33474] [client 66.249.64.101:47631] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjqQb5BeNE7regJ7iz91AAAAUA"]
[Mon Dec 22 14:50:52.571660 2025] [:error] [pid 56080:tid 56141] [client 66.249.64.101:35255] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjqTJIHT3YJq9hjDc6XVAAAAxE"]
[Mon Dec 22 14:50:58.155137 2025] [:error] [pid 33535:tid 33540] [client 66.249.64.101:50710] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjqUmOCI8D9Xtn-n7RmkAAAAcM"]
[Mon Dec 22 14:52:52.610635 2025] [:error] [pid 33472:tid 33522] [client 66.249.64.101:47148] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjqxJ5p2WQpPIK8HAnGCwAAAZU"]
[Mon Dec 22 14:52:54.680269 2025] [:error] [pid 33472:tid 33502] [client 66.249.64.101:44510] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjqxp5p2WQpPIK8HAnGFQAAAYE"]
[Mon Dec 22 14:52:56.675353 2025] [:error] [pid 33564:tid 33580] [client 66.249.64.101:54910] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjqyASHeG6oLmMnKY5GQQAAAg0"]
[Mon Dec 22 14:52:58.868456 2025] [:error] [pid 33471:tid 33490] [client 66.249.64.101:52257] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjqyr5BeNE7regJ7iz-MgAAAVA"]
[Mon Dec 22 14:53:25.409448 2025] [:error] [pid 33440:tid 33450] [client 66.249.64.101:59018] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjq5ZOsUWKqgxu6QTTZ7AAAAQg"]
[Mon Dec 22 14:53:27.441272 2025] [:error] [pid 33564:tid 33579] [client 66.249.64.101:37875] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjq5wSHeG6oLmMnKY5GWgAAAgw"]
[Mon Dec 22 14:54:52.078413 2025] [:error] [pid 33472:tid 33523] [client 66.249.64.101:60699] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjrPJ5p2WQpPIK8HAnHRQAAAZY"]
[Mon Dec 22 14:55:32.480442 2025] [:error] [pid 33564:tid 33586] [client 66.249.64.101:61341] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjrZASHeG6oLmMnKY5G-QAAAhM"]
[Mon Dec 22 14:55:34.523473 2025] [:error] [pid 33471:tid 33482] [client 66.249.64.101:40620] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjrZr5BeNE7regJ7iz-hgAAAUg"]
[Mon Dec 22 14:55:40.064721 2025] [:error] [pid 58172:tid 58187] [client 66.249.64.101:62585] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjrbOSVKDT5jWOcnSWBCwAAAM0"]
[Mon Dec 22 14:55:42.145939 2025] [:error] [pid 56044:tid 56053] [client 66.249.64.101:40524] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjrbu60uUaieriJqP0jPAAAAIU"]
[Mon Dec 22 14:56:20.840674 2025] [:error] [pid 33440:tid 33462] [client 98.159.37.249:26631] [client 98.159.37.249] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.37.249, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aUjrlJOsUWKqgxu6QTTa1QAAARQ"]
[Mon Dec 22 14:56:48.306721 2025] [:error] [pid 56044:tid 56060] [client 66.249.64.101:39995] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjrsO60uUaieriJqP0jVgAAAIw"]
[Mon Dec 22 14:56:53.242640 2025] [:error] [pid 56080:tid 56145] [client 66.249.64.101:38445] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjrtZIHT3YJq9hjDc6YVwAAAxU"]
[Mon Dec 22 14:57:01.801701 2025] [:error] [pid 33472:tid 33502] [client 66.249.64.101:56425] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjrvZ5p2WQpPIK8HAnH7QAAAYE"]
[Mon Dec 22 14:57:13.866436 2025] [:error] [pid 33535:tid 33538] [client 66.249.64.101:44740] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjryWOCI8D9Xtn-n7Rn6wAAAcE"]
[Mon Dec 22 14:57:24.931100 2025] [:error] [pid 33471:tid 33484] [client 66.249.64.101:40129] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjr1L5BeNE7regJ7iz-1gAAAUo"]
[Mon Dec 22 14:57:32.466805 2025] [:error] [pid 58078:tid 58093] [client 66.249.64.101:52287] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjr3JWKg9Bf8njHlB7YQQAAAAo"]
[Mon Dec 22 14:57:34.647059 2025] [:error] [pid 56080:tid 56125] [client 66.249.64.101:53487] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjr3pIHT3YJq9hjDc6YoQAAAwE"]
[Mon Dec 22 14:57:38.835987 2025] [:error] [pid 56044:tid 56055] [client 66.249.64.101:63851] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjr4u60uUaieriJqP0jfQAAAIc"]
[Mon Dec 22 14:59:16.683426 2025] [:error] [pid 33472:tid 33521] [client 66.249.64.101:49869] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjsRJ5p2WQpPIK8HAnIlQAAAZQ"]
[Mon Dec 22 14:59:22.393514 2025] [:error] [pid 56044:tid 56051] [client 66.249.64.101:64932] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjsSu60uUaieriJqP0jtAAAAIM"]
[Mon Dec 22 14:59:30.282597 2025] [:error] [pid 58172:tid 58196] [client 66.249.64.101:59999] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjsUuSVKDT5jWOcnSWCRQAAANY"]
[Mon Dec 22 14:59:32.240291 2025] [:error] [pid 33472:tid 33513] [client 66.249.64.101:44291] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjsVJ5p2WQpPIK8HAnIowAAAYw"]
[Mon Dec 22 14:59:45.200385 2025] [:error] [pid 58078:tid 58089] [client 66.249.64.101:51942] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjsYZWKg9Bf8njHlB7YngAAAAY"]
[Mon Dec 22 14:59:50.334807 2025] [:error] [pid 33471:tid 33496] [client 66.249.64.101:41548] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjsZr5BeNE7regJ7iz_ggAAAVY"]
[Mon Dec 22 14:59:52.371762 2025] [:error] [pid 58172:tid 58190] [client 66.249.64.101:45885] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjsaOSVKDT5jWOcnSWCXAAAANA"]
[Mon Dec 22 15:01:25.519284 2025] [:error] [pid 56080:tid 56128] [client 66.249.64.101:45409] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjsxZIHT3YJq9hjDc6ZLQAAAwQ"]
[Mon Dec 22 15:01:27.591175 2025] [:error] [pid 58172:tid 58179] [client 66.249.64.101:46715] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjsx-SVKDT5jWOcnSWCtgAAAMU"]
[Mon Dec 22 15:01:29.769825 2025] [:error] [pid 33471:tid 33478] [client 66.249.64.101:40119] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjsyb5BeNE7regJ7iz_pgAAAUQ"]
[Mon Dec 22 15:01:34.506626 2025] [:error] [pid 33472:tid 33513] [client 66.249.64.101:57366] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjszp5p2WQpPIK8HAnJKAAAAYw"]
[Mon Dec 22 15:01:43.898275 2025] [:error] [pid 58172:tid 58183] [client 66.249.64.101:41466] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjs1-SVKDT5jWOcnSWDIAAAAMk"]
[Mon Dec 22 15:01:47.406254 2025] [:error] [pid 58172:tid 58174] [client 66.249.64.101:42421] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjs2-SVKDT5jWOcnSWDOwAAAMA"]
[Mon Dec 22 15:02:10.731968 2025] [:error] [pid 33471:tid 33493] [client 66.249.64.101:41115] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjs8r5BeNE7regJ7iz_vgAAAVM"]
[Mon Dec 22 15:02:14.758654 2025] [:error] [pid 33564:tid 33568] [client 66.249.64.101:58558] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjs9gSHeG6oLmMnKY5H2gAAAgE"]
[Mon Dec 22 15:03:35.764318 2025] [:error] [pid 56155:tid 56238] [client 66.249.64.101:54517] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjtR2G8a3wQucsuN66rvgAAA5A"]
[Mon Dec 22 15:03:41.302589 2025] [:error] [pid 33564:tid 33575] [client 66.249.64.101:51771] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjtTQSHeG6oLmMnKY5IPAAAAgg"]
[Mon Dec 22 15:03:43.400447 2025] [:error] [pid 58078:tid 58100] [client 66.249.64.101:48462] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjtT5WKg9Bf8njHlB7ZMgAAABE"]
[Mon Dec 22 15:03:48.576650 2025] [:error] [pid 56155:tid 56227] [client 66.249.64.101:62964] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjtVGG8a3wQucsuN66rxQAAA4U"]
[Mon Dec 22 15:04:05.326369 2025] [:error] [pid 33440:tid 33447] [client 66.249.64.101:61862] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjtZZOsUWKqgxu6QTTcawAAAQU"]
[Mon Dec 22 15:04:29.573909 2025] [:error] [pid 56155:tid 56231] [client 66.249.64.101:48826] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjtfWG8a3wQucsuN66r0wAAA4k"]
[Mon Dec 22 15:04:30.414610 2025] [:error] [pid 58172:tid 58179] [client 66.249.64.101:46664] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjtfuSVKDT5jWOcnSWEFAAAAMU"]
[Mon Dec 22 15:05:36.558935 2025] [:error] [pid 56080:tid 56124] [client 66.249.64.101:37372] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjtwJIHT3YJq9hjDc6aFQAAAwA"]
[Mon Dec 22 15:05:43.272732 2025] [:error] [pid 56044:tid 56070] [client 66.249.64.101:43676] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjtx-60uUaieriJqP0ksQAAAJY"]
[Mon Dec 22 15:05:46.019733 2025] [:error] [pid 56080:tid 56137] [client 66.249.64.101:56451] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjtypIHT3YJq9hjDc6aGQAAAw0"]
[Mon Dec 22 15:05:48.052615 2025] [:error] [pid 33471:tid 33481] [client 66.249.64.101:61901] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjtzL5BeNE7regJ7iwAkQAAAUc"]
[Mon Dec 22 15:06:24.789163 2025] [:error] [pid 58078:tid 58087] [client 66.249.64.101:43764] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjt8JWKg9Bf8njHlB7aGwAAAAQ"]
[Mon Dec 22 15:07:35.631584 2025] [:error] [pid 33440:tid 33450] [client 66.249.64.101:41237] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjuN5OsUWKqgxu6QTTdCwAAAQg"]
[Mon Dec 22 15:07:43.195216 2025] [:error] [pid 33564:tid 33587] [client 66.249.64.101:57289] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjuPwSHeG6oLmMnKY5JCgAAAhQ"]
[Mon Dec 22 15:07:50.803967 2025] [:error] [pid 33564:tid 33567] [client 66.249.64.101:43593] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjuRgSHeG6oLmMnKY5JFAAAAgA"]
[Mon Dec 22 15:07:52.908579 2025] [:error] [pid 58078:tid 58094] [client 66.249.64.101:50348] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjuSJWKg9Bf8njHlB7aXQAAAAs"]
[Mon Dec 22 15:07:58.367606 2025] [:error] [pid 33440:tid 33465] [client 66.249.64.101:63792] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjuTpOsUWKqgxu6QTTdJQAAARc"]
[Mon Dec 22 15:08:02.080916 2025] [:error] [pid 56080:tid 56143] [client 66.249.64.101:35080] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjuUpIHT3YJq9hjDc6aeAAAAxM"]
[Mon Dec 22 15:08:14.795164 2025] [:error] [pid 58172:tid 58195] [client 66.249.64.101:43343] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjuXuSVKDT5jWOcnSWExQAAANU"]
[Mon Dec 22 15:09:51.578255 2025] [:error] [pid 33564:tid 33585] [client 66.249.64.101:48398] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjuvwSHeG6oLmMnKY5JzgAAAhI"]
[Mon Dec 22 15:10:21.866793 2025] [:error] [pid 33535:tid 33545] [client 66.249.64.101:58729] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUju3WOCI8D9Xtn-n7RrPgAAAcg"]
[Mon Dec 22 15:10:27.428750 2025] [:error] [pid 33564:tid 33591] [client 66.249.64.101:48710] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUju4wSHeG6oLmMnKY5J8QAAAhg"]
[Mon Dec 22 15:10:36.978874 2025] [:error] [pid 33471:tid 33494] [client 66.249.64.101:63489] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUju7L5BeNE7regJ7iwBiQAAAVQ"]
[Mon Dec 22 15:10:38.508701 2025] [:error] [pid 33472:tid 33515] [client 66.249.64.101:64483] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUju7p5p2WQpPIK8HAnMowAAAY4"]
[Mon Dec 22 15:10:44.053688 2025] [:error] [pid 33440:tid 33458] [client 66.249.64.101:51630] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUju9JOsUWKqgxu6QTTd5wAAARA"]
[Mon Dec 22 15:11:51.091620 2025] [:error] [pid 33440:tid 33454] [client 66.249.64.101:46047] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjvN5OsUWKqgxu6QTTeUgAAAQw"]
[Mon Dec 22 15:12:00.092118 2025] [:error] [pid 33535:tid 33544] [client 66.249.64.101:59305] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjvQGOCI8D9Xtn-n7RrkQAAAcc"]
[Mon Dec 22 15:12:14.639865 2025] [:error] [pid 33472:tid 33518] [client 66.249.64.101:55109] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjvTp5p2WQpPIK8HAnNQQAAAZE"]
[Mon Dec 22 15:12:20.921480 2025] [:error] [pid 33440:tid 33460] [client 66.249.64.101:53203] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjvVJOsUWKqgxu6QTTebQAAARI"]
[Mon Dec 22 15:12:26.642119 2025] [:error] [pid 33564:tid 33569] [client 66.249.64.101:51049] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjvWgSHeG6oLmMnKY5KmwAAAgI"]
[Mon Dec 22 15:12:29.282247 2025] [:error] [pid 56080:tid 56126] [client 66.249.64.101:46255] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjvXZIHT3YJq9hjDc6bsgAAAwI"]
[Mon Dec 22 15:12:37.391425 2025] [:error] [pid 33564:tid 33569] [client 66.249.64.101:42365] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjvZQSHeG6oLmMnKY5KrQAAAgI"]
[Mon Dec 22 15:12:45.100941 2025] [:error] [pid 33472:tid 33523] [client 66.249.64.101:38849] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjvbZ5p2WQpPIK8HAnNUgAAAZY"]
[Mon Dec 22 15:13:55.616266 2025] [:error] [pid 33471:tid 33476] [client 66.249.64.101:56100] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjvs75BeNE7regJ7iwCeAAAAUI"]
[Mon Dec 22 15:13:58.455845 2025] [:error] [pid 33472:tid 33504] [client 66.249.64.101:64262] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjvtp5p2WQpPIK8HAnNnAAAAYM"]
[Mon Dec 22 15:14:09.398017 2025] [:error] [pid 33471:tid 33484] [client 66.249.64.101:59078] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjvwb5BeNE7regJ7iwCfgAAAUo"]
[Mon Dec 22 15:14:18.515187 2025] [:error] [pid 58078:tid 58089] [client 66.249.64.101:49047] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjvypWKg9Bf8njHlB7bpQAAAAY"]
[Mon Dec 22 15:14:24.639597 2025] [:error] [pid 33472:tid 33521] [client 66.249.64.101:51416] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjv0J5p2WQpPIK8HAnN1QAAAZQ"]
[Mon Dec 22 15:14:26.721175 2025] [:error] [pid 58172:tid 58183] [client 66.249.64.101:36503] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjv0uSVKDT5jWOcnSWGkQAAAMk"]
[Mon Dec 22 15:14:35.564692 2025] [:error] [pid 33440:tid 33455] [client 66.249.64.101:41075] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjv25OsUWKqgxu6QTTezwAAAQ0"]
[Mon Dec 22 15:14:41.211295 2025] [:error] [pid 33472:tid 33503] [client 66.249.64.101:63526] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjv4Z5p2WQpPIK8HAnN7QAAAYI"]
[Mon Dec 22 15:14:49.499865 2025] [:error] [pid 33472:tid 33511] [client 66.249.64.101:63964] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjv6Z5p2WQpPIK8HAnN9QAAAYo"]
[Mon Dec 22 15:15:55.898666 2025] [:error] [pid 33564:tid 33578] [client 66.249.64.101:39415] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjwKwSHeG6oLmMnKY5LfQAAAgs"]
[Mon Dec 22 15:16:01.683313 2025] [:error] [pid 33564:tid 33579] [client 66.249.64.101:50705] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjwMQSHeG6oLmMnKY5LgwAAAgw"]
[Mon Dec 22 15:16:03.493563 2025] [:error] [pid 56080:tid 56144] [client 66.249.64.101:36894] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjwM5IHT3YJq9hjDc6cWAAAAxQ"]
[Mon Dec 22 15:16:12.100411 2025] [:error] [pid 33564:tid 33583] [client 66.249.64.101:61916] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjwPASHeG6oLmMnKY5LjwAAAhA"]
[Mon Dec 22 15:16:17.787009 2025] [:error] [pid 58172:tid 58174] [client 66.249.64.101:52431] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjwQeSVKDT5jWOcnSWHAAAAAMA"]
[Mon Dec 22 15:16:25.718763 2025] [:error] [pid 56080:tid 56145] [client 66.249.64.101:44625] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjwSZIHT3YJq9hjDc6cZQAAAxU"]
[Mon Dec 22 15:16:31.253642 2025] [:error] [pid 56044:tid 56060] [client 66.249.64.101:59270] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjwT-60uUaieriJqP0mtAAAAIw"]
[Mon Dec 22 15:16:33.351313 2025] [:error] [pid 33535:tid 33547] [client 66.249.64.101:56509] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjwUWOCI8D9Xtn-n7RspgAAAco"]
[Mon Dec 22 15:16:37.534627 2025] [:error] [pid 58078:tid 58099] [client 66.249.64.101:46876] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjwVZWKg9Bf8njHlB7b-QAAABA"]
[Mon Dec 22 15:17:53.754511 2025] [:error] [pid 33440:tid 33451] [client 66.249.64.101:58338] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjwoZOsUWKqgxu6QTTfnwAAAQk"]
[Mon Dec 22 15:18:07.315030 2025] [:error] [pid 58078:tid 58101] [client 66.249.64.101:35406] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjwr5WKg9Bf8njHlB7ciwAAABI"]
[Mon Dec 22 15:18:16.232548 2025] [:error] [pid 58172:tid 58195] [client 66.249.64.101:41807] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjwuOSVKDT5jWOcnSWHawAAANU"]
[Mon Dec 22 15:18:18.425940 2025] [:error] [pid 56155:tid 56240] [client 66.249.64.101:42502] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjwumG8a3wQucsuN66uiwAAA5I"]
[Mon Dec 22 15:18:22.523597 2025] [:error] [pid 56080:tid 56144] [client 66.249.64.101:60990] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjwvpIHT3YJq9hjDc6c-QAAAxQ"]
[Mon Dec 22 15:18:29.066020 2025] [:error] [pid 56155:tid 56246] [client 66.249.64.101:37309] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjwxWG8a3wQucsuN66ukgAAA5g"]
[Mon Dec 22 15:18:31.484899 2025] [:error] [pid 33472:tid 33507] [client 66.249.64.101:54176] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjwx55p2WQpPIK8HAnPnQAAAYY"]
[Mon Dec 22 15:18:39.015789 2025] [:error] [pid 58078:tid 58090] [client 66.249.64.101:60548] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjwz5WKg9Bf8njHlB7cqAAAAAc"]
[Mon Dec 22 15:18:43.844340 2025] [:error] [pid 56155:tid 56240] [client 66.249.64.101:54049] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjw02G8a3wQucsuN66uoAAAA5I"]
[Mon Dec 22 15:20:11.272927 2025] [:error] [pid 58078:tid 58092] [client 66.249.64.101:60912] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjxK5WKg9Bf8njHlB7c6AAAAAk"]
[Mon Dec 22 15:20:16.800215 2025] [:error] [pid 56044:tid 56057] [client 66.249.64.101:42757] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjxMO60uUaieriJqP0nvgAAAIk"]
[Mon Dec 22 15:20:18.950785 2025] [:error] [pid 56155:tid 56232] [client 66.249.64.101:35255] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjxMmG8a3wQucsuN66u7wAAA4o"]
[Mon Dec 22 15:20:27.998648 2025] [:error] [pid 56044:tid 56070] [client 66.249.64.101:54814] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjxO-60uUaieriJqP0n1gAAAJY"]
[Mon Dec 22 15:20:39.185452 2025] [:error] [pid 58078:tid 58103] [client 66.249.64.101:55916] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjxR5WKg9Bf8njHlB7dAwAAABQ"]
[Mon Dec 22 15:20:41.311291 2025] [:error] [pid 58078:tid 58098] [client 66.249.64.101:36343] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjxSZWKg9Bf8njHlB7dBwAAAA8"]
[Mon Dec 22 15:20:43.391475 2025] [:error] [pid 58078:tid 58088] [client 66.249.64.101:50308] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjxS5WKg9Bf8njHlB7dDwAAAAU"]
[Mon Dec 22 15:20:52.691527 2025] [:error] [pid 33564:tid 33573] [client 66.249.64.101:40991] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjxVASHeG6oLmMnKY5NsQAAAgY"]
[Mon Dec 22 15:20:54.748316 2025] [:error] [pid 56155:tid 56245] [client 66.249.64.101:60942] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjxVmG8a3wQucsuN66vLgAAA5c"]
[Mon Dec 22 15:20:56.818676 2025] [:error] [pid 33471:tid 33492] [client 66.249.64.101:60830] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjxWL5BeNE7regJ7iwEFgAAAVI"]
[Mon Dec 22 15:21:05.614882 2025] [:error] [pid 33535:tid 33561] [client 66.249.64.101:60964] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjxYWOCI8D9Xtn-n7RtigAAAdg"]
[Mon Dec 22 15:22:21.796835 2025] [:error] [pid 56080:tid 56132] [client 66.249.64.101:36017] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjxrZIHT3YJq9hjDc6eMQAAAwg"]
[Mon Dec 22 15:22:28.154172 2025] [:error] [pid 33440:tid 33460] [client 66.249.64.101:41460] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjxtJOsUWKqgxu6QTThkwAAARI"]
[Mon Dec 22 15:22:30.229275 2025] [:error] [pid 33440:tid 33462] [client 66.249.64.101:56495] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjxtpOsUWKqgxu6QTThlgAAARQ"]
[Mon Dec 22 15:22:35.404164 2025] [:error] [pid 33564:tid 33582] [client 66.249.64.101:56482] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjxuwSHeG6oLmMnKY5OuAAAAg8"]
[Mon Dec 22 15:22:43.670955 2025] [:error] [pid 33564:tid 33584] [client 66.249.64.101:44340] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjxwwSHeG6oLmMnKY5OygAAAhE"]
[Mon Dec 22 15:22:49.117045 2025] [:error] [pid 33564:tid 33585] [client 66.249.64.101:63324] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjxyQSHeG6oLmMnKY5O5AAAAhI"]
[Mon Dec 22 15:22:52.023349 2025] [:error] [pid 56155:tid 56244] [client 66.249.64.101:65477] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjxzGG8a3wQucsuN66v0QAAA5Y"]
[Mon Dec 22 15:22:53.686380 2025] [:error] [pid 33472:tid 33508] [client 66.249.64.101:60057] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjxzZ5p2WQpPIK8HAnRdwAAAYc"]
[Mon Dec 22 15:24:13.046006 2025] [:error] [pid 58172:tid 58185] [client 66.249.64.101:58168] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjyHeSVKDT5jWOcnSWKDwAAAMs"]
[Mon Dec 22 15:24:27.407344 2025] [:error] [pid 58078:tid 58093] [client 66.249.64.101:62871] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjyK5WKg9Bf8njHlB7eWQAAAAo"]
[Mon Dec 22 15:24:29.488466 2025] [:error] [pid 33564:tid 33575] [client 66.249.64.101:63056] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjyLQSHeG6oLmMnKY5PpAAAAgg"]
[Mon Dec 22 15:24:31.579820 2025] [:error] [pid 58078:tid 58084] [client 66.249.64.101:52329] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjyL5WKg9Bf8njHlB7eWwAAAAE"]
[Mon Dec 22 15:24:36.243558 2025] [:error] [pid 56155:tid 56221] [client 66.249.64.101:60276] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjyNGG8a3wQucsuN66wHAAAA4A"]
[Mon Dec 22 15:24:41.299477 2025] [:error] [pid 33472:tid 33522] [client 66.249.64.101:39757] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjyOZ5p2WQpPIK8HAnR_wAAAZU"]
[Mon Dec 22 15:24:58.418984 2025] [:error] [pid 33564:tid 33584] [client 66.249.64.101:36652] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjySgSHeG6oLmMnKY5QAQAAAhE"]
[Mon Dec 22 15:25:05.463045 2025] [:error] [pid 56044:tid 56065] [client 66.249.64.101:34809] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjyUe60uUaieriJqP0oygAAAJE"]
[Mon Dec 22 15:26:24.052855 2025] [:error] [pid 33535:tid 33554] [client 66.249.64.101:50502] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjyoGOCI8D9Xtn-n7RvPgAAAdE"]
[Mon Dec 22 15:26:25.991930 2025] [:error] [pid 33535:tid 33550] [client 66.249.64.101:41592] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjyoWOCI8D9Xtn-n7RvQQAAAc0"]
[Mon Dec 22 15:26:28.244836 2025] [:error] [pid 33440:tid 33458] [client 66.249.64.101:51081] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjypJOsUWKqgxu6QTTiiQAAARA"]
[Mon Dec 22 15:26:32.160839 2025] [:error] [pid 56155:tid 56236] [client 66.249.64.101:37806] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjyqGG8a3wQucsuN66wgQAAA44"]
[Mon Dec 22 15:26:35.936740 2025] [:error] [pid 33472:tid 33518] [client 66.249.64.101:46412] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjyq55p2WQpPIK8HAnT_AAAAZE"]
[Mon Dec 22 15:26:41.217422 2025] [:error] [pid 33564:tid 33579] [client 66.249.64.101:35336] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjysQSHeG6oLmMnKY5RLQAAAgw"]
[Mon Dec 22 15:26:48.826950 2025] [:error] [pid 33564:tid 33591] [client 66.249.64.101:57232] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjyuASHeG6oLmMnKY5ROAAAAhg"]
[Mon Dec 22 15:27:00.531586 2025] [:error] [pid 56080:tid 56137] [client 66.249.64.101:59703] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjyxJIHT3YJq9hjDc6fsQAAAw0"]
[Mon Dec 22 15:27:06.565795 2025] [:error] [pid 33564:tid 33583] [client 66.249.64.101:36477] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjyygSHeG6oLmMnKY5RUwAAAhA"]
[Mon Dec 22 15:28:17.612809 2025] [:error] [pid 33535:tid 33559] [client 66.249.64.101:38852] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjzEWOCI8D9Xtn-n7RwDwAAAdY"]
[Mon Dec 22 15:28:25.754037 2025] [:error] [pid 33535:tid 33548] [client 66.249.64.101:51983] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjzGWOCI8D9Xtn-n7RwIQAAAcs"]
[Mon Dec 22 15:28:27.833693 2025] [:error] [pid 56044:tid 56049] [client 66.249.64.101:35544] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjzG-60uUaieriJqP0pnAAAAIE"]
[Mon Dec 22 15:28:29.902189 2025] [:error] [pid 33535:tid 33561] [client 66.249.64.101:55811] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjzHWOCI8D9Xtn-n7RwKgAAAdg"]
[Mon Dec 22 15:28:31.962780 2025] [:error] [pid 33535:tid 33544] [client 66.249.64.101:49366] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjzH2OCI8D9Xtn-n7RwPgAAAcc"]
[Mon Dec 22 15:28:41.907546 2025] [:error] [pid 56155:tid 56223] [client 66.249.64.101:50801] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjzKWG8a3wQucsuN66xBQAAA4E"]
[Mon Dec 22 15:28:43.985073 2025] [:error] [pid 33471:tid 33497] [client 66.249.64.101:44328] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjzK75BeNE7regJ7iwGBAAAAVc"]
[Mon Dec 22 15:28:49.160737 2025] [:error] [pid 33472:tid 33504] [client 66.249.64.101:53357] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjzMZ5p2WQpPIK8HAnU0QAAAYM"]
[Mon Dec 22 15:28:52.372684 2025] [:error] [pid 56044:tid 56058] [client 66.249.64.101:64625] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjzNO60uUaieriJqP0pqwAAAIo"]
[Mon Dec 22 15:28:56.421728 2025] [:error] [pid 56080:tid 56137] [client 66.249.64.101:55009] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjzOJIHT3YJq9hjDc6gLgAAAw0"]
[Mon Dec 22 15:29:00.567759 2025] [:error] [pid 33472:tid 33518] [client 66.249.64.101:40579] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjzPJ5p2WQpPIK8HAnU4gAAAZE"]
[Mon Dec 22 15:29:11.674721 2025] [:error] [pid 58172:tid 58176] [client 66.249.64.101:37587] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjzR-SVKDT5jWOcnSWLmAAAAMI"]
[Mon Dec 22 15:30:19.928145 2025] [:error] [pid 58172:tid 58188] [client 66.249.64.101:35923] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjzi-SVKDT5jWOcnSWMDgAAAM4"]
[Mon Dec 22 15:30:32.165854 2025] [:error] [pid 33471:tid 33490] [client 66.249.64.101:42293] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjzmL5BeNE7regJ7iwGXwAAAVA"]
[Mon Dec 22 15:30:34.267096 2025] [:error] [pid 33564:tid 33576] [client 66.249.64.101:63818] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjzmgSHeG6oLmMnKY5SrQAAAgk"]
[Mon Dec 22 15:30:36.509746 2025] [:error] [pid 56155:tid 56228] [client 66.249.64.101:55550] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjznGG8a3wQucsuN66xjQAAA4Y"]
[Mon Dec 22 15:30:44.805343 2025] [:error] [pid 33471:tid 33478] [client 66.249.64.101:58564] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjzpL5BeNE7regJ7iwGagAAAUQ"]
[Mon Dec 22 15:30:53.089444 2025] [:error] [pid 56080:tid 56138] [client 66.249.64.101:35144] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUjzrZIHT3YJq9hjDc6g8gAAAw4"]
[Mon Dec 22 15:32:30.019761 2025] [:error] [pid 58172:tid 58180] [client 66.249.64.101:48713] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUj0DuSVKDT5jWOcnSWNCAAAAMY"]
[Mon Dec 22 15:32:32.691232 2025] [:error] [pid 33535:tid 33554] [client 66.249.64.101:58684] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUj0EGOCI8D9Xtn-n7RyEwAAAdE"]
[Mon Dec 22 15:32:37.603112 2025] [:error] [pid 56044:tid 56072] [client 66.249.64.101:59376] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUj0Fe60uUaieriJqP0qYAAAAJg"]
[Mon Dec 22 15:32:45.028520 2025] [:error] [pid 33440:tid 33445] [client 66.249.64.101:55459] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUj0HZOsUWKqgxu6QTTlBQAAAQM"]
[Mon Dec 22 15:32:54.584366 2025] [:error] [pid 58078:tid 58102] [client 66.249.64.101:45856] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUj0JpWKg9Bf8njHlB7gdwAAABM"]
[Mon Dec 22 15:32:55.590650 2025] [:error] [pid 58078:tid 58103] [client 66.249.64.101:39732] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUj0J5WKg9Bf8njHlB7geAAAABQ"]
[Mon Dec 22 15:33:10.912755 2025] [:error] [pid 56080:tid 56137] [client 66.249.64.101:55329] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUj0NpIHT3YJq9hjDc6hgQAAAw0"]
[Mon Dec 22 15:33:19.111083 2025] [:error] [pid 58078:tid 58083] [client 66.249.64.101:34906] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUj0P5WKg9Bf8njHlB7giAAAAAA"]
[Mon Dec 22 15:33:26.508343 2025] [:error] [pid 58078:tid 58104] [client 66.249.64.101:49425] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUj0RpWKg9Bf8njHlB7gigAAABU"]
[Mon Dec 22 15:35:44.697688 2025] [:error] [pid 33440:tid 33453] [client 66.249.64.101:64238] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUj00JOsUWKqgxu6QTTleQAAAQs"]
[Mon Dec 22 15:35:57.522447 2025] [:error] [pid 33472:tid 33504] [client 66.249.64.101:51560] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUj03Z5p2WQpPIK8HAnXBgAAAYM"]
[Mon Dec 22 15:35:59.586634 2025] [:error] [pid 56080:tid 56126] [client 66.249.64.101:49510] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUj035IHT3YJq9hjDc6iLwAAAwI"]
[Mon Dec 22 15:36:15.640616 2025] [:error] [pid 33535:tid 33546] [client 66.249.64.101:50087] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUj072OCI8D9Xtn-n7RyugAAAck"]
[Mon Dec 22 15:36:20.499419 2025] [:error] [pid 33535:tid 33543] [client 66.249.64.101:41314] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUj09GOCI8D9Xtn-n7RyvAAAAcY"]
[Mon Dec 22 15:36:26.760137 2025] [:error] [pid 56044:tid 56049] [client 66.249.64.101:38944] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUj0-u60uUaieriJqP0q4wAAAIE"]
[Mon Dec 22 15:39:27.628109 2025] [:error] [pid 33535:tid 33557] [client 66.249.64.101:60659] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUj1r2OCI8D9Xtn-n7RzOAAAAdQ"]
[Mon Dec 22 15:39:58.636376 2025] [:error] [pid 56155:tid 56229] [client 66.249.64.101:59482] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUj1zmG8a3wQucsuN66zBAAAA4c"]
[Mon Dec 22 15:41:50.214005 2025] [:error] [pid 33472:tid 33509] [client 98.159.37.223:31569] [client 98.159.37.223] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.37.223, incrementing brute counter"] [hostname "paramountbaldivis.com"] [uri "/wp-login.php"] [unique_id "aUj2Pp5p2WQpPIK8HAnYugAAAYg"]
[Mon Dec 22 15:42:53.068639 2025] [:error] [pid 56080:tid 56133] [client 66.249.64.101:53017] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUj2fZIHT3YJq9hjDc6jbwAAAwk"]
[Mon Dec 22 15:43:39.797813 2025] [:error] [pid 33472:tid 33525] [client 66.249.64.101:48679] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUj2q55p2WQpPIK8HAnZmQAAAZg"]
[Mon Dec 22 15:43:43.898567 2025] [:error] [pid 33564:tid 33576] [client 66.249.64.101:53122] [client 66.249.64.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/"] [unique_id "aUj2rwSHeG6oLmMnKY5X4AAAAgk"]
[Mon Dec 22 15:50:31.660906 2025] [:error] [pid 33472:tid 33506] [client 4.197.88.147:56298] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ws29.php"] [unique_id "aUj4R55p2WQpPIK8HAnbxgAAAYU"]
[Mon Dec 22 15:50:31.700068 2025] [:error] [pid 33471:tid 33475] [client 4.197.88.147:39527] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ws29.php"] [unique_id "aUj4R75BeNE7regJ7iwKjQAAAUE"]
[Mon Dec 22 15:50:31.731238 2025] [:error] [pid 58078:tid 58101] [client 4.197.88.147:33630] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ws29.php"] [unique_id "aUj4R5WKg9Bf8njHlB7kTgAAABI"]
[Mon Dec 22 15:50:31.972214 2025] [:error] [pid 33471:tid 33478] [client 4.197.88.147:32026] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ws29.php"] [unique_id "aUj4R75BeNE7regJ7iwKjwAAAUQ"]
[Mon Dec 22 15:50:32.070230 2025] [:error] [pid 56155:tid 56234] [client 4.197.88.147:32742] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/oo.php"] [unique_id "aUj4SGG8a3wQucsuN661KQAAA4w"]
[Mon Dec 22 15:50:32.106358 2025] [:error] [pid 58078:tid 58107] [client 4.197.88.147:33652] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/oo.php"] [unique_id "aUj4SJWKg9Bf8njHlB7kUAAAABg"]
[Mon Dec 22 15:50:32.137868 2025] [:error] [pid 56044:tid 56065] [client 4.197.88.147:32054] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/oo.php"] [unique_id "aUj4SO60uUaieriJqP0uSwAAAJE"]
[Mon Dec 22 15:50:32.170615 2025] [:error] [pid 33535:tid 33540] [client 4.197.88.147:33191] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/oo.php"] [unique_id "aUj4SGOCI8D9Xtn-n7R2JAAAAcM"]
[Mon Dec 22 15:50:32.207251 2025] [:error] [pid 58172:tid 58179] [client 4.197.88.147:39498] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/s11.php"] [unique_id "aUj4SOSVKDT5jWOcnSWRtQAAAMU"]
[Mon Dec 22 15:50:32.246589 2025] [:error] [pid 56155:tid 56237] [client 4.197.88.147:50060] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/s11.php"] [unique_id "aUj4SGG8a3wQucsuN661KgAAA48"]
[Mon Dec 22 15:50:32.287844 2025] [:error] [pid 56080:tid 56124] [client 4.197.88.147:12622] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/s11.php"] [unique_id "aUj4SJIHT3YJq9hjDc6krAAAAwA"]
[Mon Dec 22 15:50:32.329604 2025] [:error] [pid 56080:tid 56145] [client 4.197.88.147:12613] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/s11.php"] [unique_id "aUj4SJIHT3YJq9hjDc6krQAAAxU"]
[Mon Dec 22 15:50:32.370960 2025] [:error] [pid 56080:tid 56136] [client 4.197.88.147:12620] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/dir.php"] [unique_id "aUj4SJIHT3YJq9hjDc6krgAAAww"]
[Mon Dec 22 15:50:32.403406 2025] [:error] [pid 56155:tid 56231] [client 4.197.88.147:33192] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/dir.php"] [unique_id "aUj4SGG8a3wQucsuN661KwAAA4k"]
[Mon Dec 22 15:50:32.458361 2025] [:error] [pid 33440:tid 33442] [client 4.197.88.147:12650] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/dir.php"] [unique_id "aUj4SJOsUWKqgxu6QTTo2QAAAQA"]
[Mon Dec 22 15:50:32.549455 2025] [:error] [pid 56155:tid 56241] [client 4.197.88.147:12339] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/dir.php"] [unique_id "aUj4SGG8a3wQucsuN661LAAAA5M"]
[Mon Dec 22 15:50:32.595398 2025] [:error] [pid 33472:tid 33519] [client 4.197.88.147:39525] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/aqw.php"] [unique_id "aUj4SJ5p2WQpPIK8HAnbxwAAAZI"]
[Mon Dec 22 15:50:32.644690 2025] [:error] [pid 33440:tid 33458] [client 4.197.88.147:33175] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/aqw.php"] [unique_id "aUj4SJOsUWKqgxu6QTTo2gAAARA"]
[Mon Dec 22 15:50:32.707440 2025] [:error] [pid 33471:tid 33493] [client 4.197.88.147:32763] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/aqw.php"] [unique_id "aUj4SL5BeNE7regJ7iwKkQAAAVM"]
[Mon Dec 22 15:50:32.754047 2025] [:error] [pid 56155:tid 56245] [client 4.197.88.147:12614] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/aqw.php"] [unique_id "aUj4SGG8a3wQucsuN661LQAAA5c"]
[Mon Dec 22 15:50:32.800191 2025] [:error] [pid 33472:tid 33520] [client 4.197.88.147:32022] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ca1.php"] [unique_id "aUj4SJ5p2WQpPIK8HAnbyAAAAZM"]
[Mon Dec 22 15:50:32.853232 2025] [:error] [pid 33440:tid 33464] [client 4.197.88.147:32727] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ca1.php"] [unique_id "aUj4SJOsUWKqgxu6QTTo2wAAARY"]
[Mon Dec 22 15:50:32.887888 2025] [:error] [pid 58078:tid 58094] [client 4.197.88.147:33207] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ca1.php"] [unique_id "aUj4SJWKg9Bf8njHlB7kUQAAAAs"]
[Mon Dec 22 15:50:32.917994 2025] [:error] [pid 58172:tid 58189] [client 4.197.88.147:12653] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ca1.php"] [unique_id "aUj4SOSVKDT5jWOcnSWRtwAAAM8"]
[Mon Dec 22 15:50:32.954629 2025] [:error] [pid 33564:tid 33570] [client 4.197.88.147:12665] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/file51.php"] [unique_id "aUj4SASHeG6oLmMnKY5aOwAAAgM"]
[Mon Dec 22 15:50:32.995217 2025] [:error] [pid 33440:tid 33449] [client 4.197.88.147:33178] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/file51.php"] [unique_id "aUj4SJOsUWKqgxu6QTTo3AAAAQc"]
[Mon Dec 22 15:50:33.035702 2025] [:error] [pid 33471:tid 33497] [client 4.197.88.147:12624] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/file51.php"] [unique_id "aUj4Sb5BeNE7regJ7iwKkgAAAVc"]
[Mon Dec 22 15:50:33.091217 2025] [:error] [pid 33564:tid 33582] [client 4.197.88.147:39543] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/file51.php"] [unique_id "aUj4SQSHeG6oLmMnKY5aPQAAAg8"]
[Mon Dec 22 15:50:33.132861 2025] [:error] [pid 33564:tid 33589] [client 4.197.88.147:33648] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/abouta.php"] [unique_id "aUj4SQSHeG6oLmMnKY5aPgAAAhY"]
[Mon Dec 22 15:50:33.165984 2025] [:error] [pid 56080:tid 56132] [client 4.197.88.147:12670] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/abouta.php"] [unique_id "aUj4SZIHT3YJq9hjDc6krwAAAwg"]
[Mon Dec 22 15:50:33.206640 2025] [:error] [pid 33564:tid 33576] [client 4.197.88.147:32051] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/abouta.php"] [unique_id "aUj4SQSHeG6oLmMnKY5aPwAAAgk"]
[Mon Dec 22 15:50:33.240488 2025] [:error] [pid 33440:tid 33444] [client 4.197.88.147:39512] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/abouta.php"] [unique_id "aUj4SZOsUWKqgxu6QTTo3QAAAQI"]
[Mon Dec 22 15:50:33.275768 2025] [:error] [pid 33564:tid 33573] [client 4.197.88.147:32057] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/fclas.php"] [unique_id "aUj4SQSHeG6oLmMnKY5aQQAAAgY"]
[Mon Dec 22 15:50:33.316636 2025] [:error] [pid 56044:tid 56048] [client 4.197.88.147:50090] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/fclas.php"] [unique_id "aUj4Se60uUaieriJqP0uTgAAAIA"]
[Mon Dec 22 15:50:33.364960 2025] [:error] [pid 56155:tid 56223] [client 4.197.88.147:33601] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/fclas.php"] [unique_id "aUj4SWG8a3wQucsuN661LwAAA4E"]
[Mon Dec 22 15:50:33.399996 2025] [:error] [pid 33472:tid 33511] [client 4.197.88.147:33647] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/fclas.php"] [unique_id "aUj4SZ5p2WQpPIK8HAnbygAAAYo"]
[Mon Dec 22 15:50:33.434568 2025] [:error] [pid 33564:tid 33591] [client 4.197.88.147:39545] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/File.php"] [unique_id "aUj4SQSHeG6oLmMnKY5aQwAAAhg"]
[Mon Dec 22 15:50:33.468510 2025] [:error] [pid 33471:tid 33488] [client 4.197.88.147:12623] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/File.php"] [unique_id "aUj4Sb5BeNE7regJ7iwKkwAAAU4"]
[Mon Dec 22 15:50:33.510294 2025] [:error] [pid 33440:tid 33454] [client 4.197.88.147:32001] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/File.php"] [unique_id "aUj4SZOsUWKqgxu6QTTo3wAAAQw"]
[Mon Dec 22 15:50:33.593992 2025] [:error] [pid 56155:tid 56233] [client 4.197.88.147:39541] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/File.php"] [unique_id "aUj4SWG8a3wQucsuN661MAAAA4s"]
[Mon Dec 22 15:50:33.668488 2025] [:error] [pid 58078:tid 58095] [client 4.197.88.147:33212] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/all.php"] [unique_id "aUj4SZWKg9Bf8njHlB7kUgAAAAw"]
[Mon Dec 22 15:50:33.737737 2025] [:error] [pid 56155:tid 56232] [client 4.197.88.147:33183] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/all.php"] [unique_id "aUj4SWG8a3wQucsuN661MQAAA4o"]
[Mon Dec 22 15:50:33.781904 2025] [:error] [pid 56155:tid 56225] [client 4.197.88.147:39513] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/all.php"] [unique_id "aUj4SWG8a3wQucsuN661MgAAA4M"]
[Mon Dec 22 15:50:33.818960 2025] [:error] [pid 56080:tid 56147] [client 4.197.88.147:12615] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/all.php"] [unique_id "aUj4SZIHT3YJq9hjDc6ksAAAAxc"]
[Mon Dec 22 15:50:33.884478 2025] [:error] [pid 56080:tid 56131] [client 4.197.88.147:32004] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/bbn.php"] [unique_id "aUj4SZIHT3YJq9hjDc6ksQAAAwc"]
[Mon Dec 22 15:50:33.954029 2025] [:error] [pid 56044:tid 56060] [client 4.197.88.147:32059] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/bbn.php"] [unique_id "aUj4Se60uUaieriJqP0uTwAAAIw"]
[Mon Dec 22 15:50:34.012185 2025] [:error] [pid 56155:tid 56221] [client 4.197.88.147:33629] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/bbn.php"] [unique_id "aUj4SmG8a3wQucsuN661NAAAA4A"]
[Mon Dec 22 15:50:34.082706 2025] [:error] [pid 33440:tid 33452] [client 4.197.88.147:39531] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/bbn.php"] [unique_id "aUj4SpOsUWKqgxu6QTTo4AAAAQo"]
[Mon Dec 22 15:50:34.123462 2025] [:error] [pid 33535:tid 33538] [client 4.197.88.147:32034] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/berlin.php"] [unique_id "aUj4SmOCI8D9Xtn-n7R2MgAAAcE"]
[Mon Dec 22 15:50:34.204716 2025] [:error] [pid 33535:tid 33546] [client 4.197.88.147:32739] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/berlin.php"] [unique_id "aUj4SmOCI8D9Xtn-n7R2MwAAAck"]
[Mon Dec 22 15:50:34.253505 2025] [:error] [pid 56044:tid 56067] [client 4.197.88.147:32765] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/berlin.php"] [unique_id "aUj4Su60uUaieriJqP0uUAAAAJM"]
[Mon Dec 22 15:50:34.295395 2025] [:error] [pid 33471:tid 33474] [client 4.197.88.147:12663] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/berlin.php"] [unique_id "aUj4Sr5BeNE7regJ7iwKlwAAAUA"]
[Mon Dec 22 15:50:34.351918 2025] [:error] [pid 56155:tid 56236] [client 4.197.88.147:33163] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/class-t.api.php"] [unique_id "aUj4SmG8a3wQucsuN661NQAAA44"]
[Mon Dec 22 15:50:34.432839 2025] [:error] [pid 56155:tid 56240] [client 4.197.88.147:33208] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/class-t.api.php"] [unique_id "aUj4SmG8a3wQucsuN661NgAAA5I"]
[Mon Dec 22 15:50:34.496886 2025] [:error] [pid 33472:tid 33518] [client 4.197.88.147:50086] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/class-t.api.php"] [unique_id "aUj4Sp5p2WQpPIK8HAnbzAAAAZE"]
[Mon Dec 22 15:50:34.575772 2025] [:error] [pid 58172:tid 58196] [client 4.197.88.147:32009] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/class-t.api.php"] [unique_id "aUj4SuSVKDT5jWOcnSWRuQAAANY"]
[Mon Dec 22 15:50:34.612102 2025] [:error] [pid 58078:tid 58088] [client 4.197.88.147:12336] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/xz89.php"] [unique_id "aUj4SpWKg9Bf8njHlB7kVAAAAAU"]
[Mon Dec 22 15:50:34.646690 2025] [:error] [pid 56155:tid 56230] [client 4.197.88.147:50079] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/xz89.php"] [unique_id "aUj4SmG8a3wQucsuN661NwAAA4g"]
[Mon Dec 22 15:50:34.684788 2025] [:error] [pid 56155:tid 56227] [client 4.197.88.147:50066] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/xz89.php"] [unique_id "aUj4SmG8a3wQucsuN661OAAAA4U"]
[Mon Dec 22 15:50:34.717653 2025] [:error] [pid 56155:tid 56224] [client 4.197.88.147:50082] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/xz89.php"] [unique_id "aUj4SmG8a3wQucsuN661OQAAA4I"]
[Mon Dec 22 15:50:34.758675 2025] [:error] [pid 56155:tid 56234] [client 4.197.88.147:32729] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/thai.php"] [unique_id "aUj4SmG8a3wQucsuN661OgAAA4w"]
[Mon Dec 22 15:50:34.790593 2025] [:error] [pid 56155:tid 56237] [client 4.197.88.147:32704] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/thai.php"] [unique_id "aUj4SmG8a3wQucsuN661OwAAA48"]
[Mon Dec 22 15:50:34.830976 2025] [:error] [pid 56155:tid 56245] [client 4.197.88.147:32014] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/thai.php"] [unique_id "aUj4SmG8a3wQucsuN661PAAAA5c"]
[Mon Dec 22 15:50:34.889010 2025] [:error] [pid 56155:tid 56246] [client 4.197.88.147:33631] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/thai.php"] [unique_id "aUj4SmG8a3wQucsuN661PQAAA5g"]
[Mon Dec 22 15:50:34.937967 2025] [:error] [pid 56155:tid 56244] [client 4.197.88.147:32725] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/lopst.php"] [unique_id "aUj4SmG8a3wQucsuN661PwAAA5Y"]
[Mon Dec 22 15:50:34.986823 2025] [:error] [pid 33564:tid 33589] [client 4.197.88.147:32759] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/lopst.php"] [unique_id "aUj4SgSHeG6oLmMnKY5aSQAAAhY"]
[Mon Dec 22 15:50:35.018660 2025] [:error] [pid 33564:tid 33576] [client 4.197.88.147:12634] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/lopst.php"] [unique_id "aUj4SwSHeG6oLmMnKY5aSgAAAgk"]
[Mon Dec 22 15:50:35.093302 2025] [:error] [pid 56044:tid 56066] [client 4.197.88.147:32735] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/lopst.php"] [unique_id "aUj4S-60uUaieriJqP0uUQAAAJI"]
[Mon Dec 22 15:50:35.133825 2025] [:error] [pid 58078:tid 58083] [client 4.197.88.147:32746] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wft.php"] [unique_id "aUj4S5WKg9Bf8njHlB7kVQAAAAA"]
[Mon Dec 22 15:50:35.174271 2025] [:error] [pid 33440:tid 33462] [client 4.197.88.147:12617] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wft.php"] [unique_id "aUj4S5OsUWKqgxu6QTTo4gAAARQ"]
[Mon Dec 22 15:50:35.217989 2025] [:error] [pid 56080:tid 56141] [client 4.197.88.147:50048] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wft.php"] [unique_id "aUj4S5IHT3YJq9hjDc6ksgAAAxE"]
[Mon Dec 22 15:50:35.263774 2025] [:error] [pid 58172:tid 58195] [client 4.197.88.147:12618] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wft.php"] [unique_id "aUj4S-SVKDT5jWOcnSWRugAAANU"]
[Mon Dec 22 15:50:35.306027 2025] [:error] [pid 33472:tid 33503] [client 4.197.88.147:56306] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ws28.php"] [unique_id "aUj4S55p2WQpPIK8HAnbzQAAAYI"]
[Mon Dec 22 15:50:35.343963 2025] [:error] [pid 33440:tid 33455] [client 4.197.88.147:50059] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ws28.php"] [unique_id "aUj4S5OsUWKqgxu6QTTo4wAAAQ0"]
[Mon Dec 22 15:50:35.377522 2025] [:error] [pid 56080:tid 56138] [client 4.197.88.147:32044] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ws28.php"] [unique_id "aUj4S5IHT3YJq9hjDc6kswAAAw4"]
[Mon Dec 22 15:50:35.406974 2025] [:error] [pid 33471:tid 33490] [client 4.197.88.147:32021] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/ws28.php"] [unique_id "aUj4S75BeNE7regJ7iwKngAAAVA"]
[Mon Dec 22 15:50:35.437481 2025] [:error] [pid 33564:tid 33581] [client 4.197.88.147:33626] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wsvvs.php"] [unique_id "aUj4SwSHeG6oLmMnKY5aSwAAAg4"]
[Mon Dec 22 15:50:35.479455 2025] [:error] [pid 56044:tid 56055] [client 4.197.88.147:33173] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wsvvs.php"] [unique_id "aUj4S-60uUaieriJqP0uXAAAAIc"]
[Mon Dec 22 15:50:35.509371 2025] [:error] [pid 58078:tid 58085] [client 4.197.88.147:33165] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wsvvs.php"] [unique_id "aUj4S5WKg9Bf8njHlB7kXQAAAAI"]
[Mon Dec 22 15:50:35.570669 2025] [:error] [pid 56155:tid 56230] [client 4.197.88.147:39551] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wsvvs.php"] [unique_id "aUj4S2G8a3wQucsuN661TgAAA4g"]
[Mon Dec 22 15:50:35.620408 2025] [:error] [pid 58172:tid 58174] [client 4.197.88.147:33632] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/vbbn.php"] [unique_id "aUj4S-SVKDT5jWOcnSWRxQAAAMA"]
[Mon Dec 22 15:50:35.655651 2025] [:error] [pid 33535:tid 33545] [client 4.197.88.147:50089] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/vbbn.php"] [unique_id "aUj4S2OCI8D9Xtn-n7R2NAAAAcg"]
[Mon Dec 22 15:50:35.700831 2025] [:error] [pid 33472:tid 33509] [client 4.197.88.147:12660] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/vbbn.php"] [unique_id "aUj4S55p2WQpPIK8HAnbzgAAAYg"]
[Mon Dec 22 15:50:35.738562 2025] [:error] [pid 33535:tid 33548] [client 4.197.88.147:50067] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/vbbn.php"] [unique_id "aUj4S2OCI8D9Xtn-n7R2NQAAAcs"]
[Mon Dec 22 15:50:35.777816 2025] [:error] [pid 33472:tid 33514] [client 4.197.88.147:50073] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/pn.php"] [unique_id "aUj4S55p2WQpPIK8HAnbzwAAAY0"]
[Mon Dec 22 15:50:35.813463 2025] [:error] [pid 58172:tid 58198] [client 4.197.88.147:39496] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/pn.php"] [unique_id "aUj4S-SVKDT5jWOcnSWRzAAAANg"]
[Mon Dec 22 15:50:35.846401 2025] [:error] [pid 33472:tid 33523] [client 4.197.88.147:12642] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/pn.php"] [unique_id "aUj4S55p2WQpPIK8HAnb0AAAAZY"]
[Mon Dec 22 15:50:35.882228 2025] [:error] [pid 33564:tid 33579] [client 4.197.88.147:39522] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/pn.php"] [unique_id "aUj4SwSHeG6oLmMnKY5aTAAAAgw"]
[Mon Dec 22 15:50:35.912053 2025] [:error] [pid 33440:tid 33461] [client 4.197.88.147:32730] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/fz.php"] [unique_id "aUj4S5OsUWKqgxu6QTTo5AAAARM"]
[Mon Dec 22 15:50:35.952109 2025] [:error] [pid 33471:tid 33495] [client 4.197.88.147:33658] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/fz.php"] [unique_id "aUj4S75BeNE7regJ7iwKrwAAAVU"]
[Mon Dec 22 15:50:36.010191 2025] [:error] [pid 56044:tid 56053] [client 4.197.88.147:12629] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/fz.php"] [unique_id "aUj4TO60uUaieriJqP0ufgAAAIU"]
[Mon Dec 22 15:50:36.049925 2025] [:error] [pid 33564:tid 33583] [client 4.197.88.147:33659] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/fz.php"] [unique_id "aUj4TASHeG6oLmMnKY5aTQAAAhA"]
[Mon Dec 22 15:50:36.085719 2025] [:error] [pid 33472:tid 33504] [client 4.197.88.147:33609] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/sang.php"] [unique_id "aUj4TJ5p2WQpPIK8HAnb0QAAAYM"]
[Mon Dec 22 15:50:36.119269 2025] [:error] [pid 56044:tid 56063] [client 4.197.88.147:50056] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/sang.php"] [unique_id "aUj4TO60uUaieriJqP0uhQAAAI8"]
[Mon Dec 22 15:50:36.198219 2025] [:error] [pid 56044:tid 56051] [client 4.197.88.147:32756] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/sang.php"] [unique_id "aUj4TO60uUaieriJqP0ujAAAAIM"]
[Mon Dec 22 15:50:36.266503 2025] [:error] [pid 33472:tid 33515] [client 4.197.88.147:34440] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/sang.php"] [unique_id "aUj4TJ5p2WQpPIK8HAnb0gAAAY4"]
[Mon Dec 22 15:50:36.323765 2025] [:error] [pid 56155:tid 56224] [client 4.197.88.147:12902] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/0o0.php"] [unique_id "aUj4TGG8a3wQucsuN661ZQAAA4I"]
[Mon Dec 22 15:50:36.355936 2025] [:error] [pid 58078:tid 58104] [client 4.197.88.147:32003] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/0o0.php"] [unique_id "aUj4TJWKg9Bf8njHlB7kdQAAABU"]
[Mon Dec 22 15:50:36.417547 2025] [:error] [pid 33440:tid 33460] [client 4.197.88.147:39510] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/0o0.php"] [unique_id "aUj4TJOsUWKqgxu6QTTo5gAAARI"]
[Mon Dec 22 15:50:36.467969 2025] [:error] [pid 58172:tid 58183] [client 4.197.88.147:12669] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/0o0.php"] [unique_id "aUj4TOSVKDT5jWOcnSWR2gAAAMk"]
[Mon Dec 22 15:50:36.520282 2025] [:error] [pid 58172:tid 58188] [client 4.197.88.147:12625] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/zxl.php"] [unique_id "aUj4TOSVKDT5jWOcnSWR2wAAAM4"]
[Mon Dec 22 15:50:36.561701 2025] [:error] [pid 56044:tid 56052] [client 4.197.88.147:12396] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/zxl.php"] [unique_id "aUj4TO60uUaieriJqP0ukgAAAIQ"]
[Mon Dec 22 15:50:36.605004 2025] [:error] [pid 56080:tid 56146] [client 4.197.88.147:39494] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/zxl.php"] [unique_id "aUj4TJIHT3YJq9hjDc6ktQAAAxY"]
[Mon Dec 22 15:50:36.640770 2025] [:error] [pid 58078:tid 58089] [client 4.197.88.147:33644] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/zxl.php"] [unique_id "aUj4TJWKg9Bf8njHlB7keQAAAAY"]
[Mon Dec 22 15:50:36.675569 2025] [:error] [pid 33564:tid 33586] [client 4.197.88.147:12627] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/zwso.php"] [unique_id "aUj4TASHeG6oLmMnKY5aUAAAAhM"]
[Mon Dec 22 15:50:36.707117 2025] [:error] [pid 33564:tid 33587] [client 4.197.88.147:33167] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/zwso.php"] [unique_id "aUj4TASHeG6oLmMnKY5aUQAAAhQ"]
[Mon Dec 22 15:50:36.765017 2025] [:error] [pid 56044:tid 56059] [client 4.197.88.147:39519] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/zwso.php"] [unique_id "aUj4TO60uUaieriJqP0ulQAAAIs"]
[Mon Dec 22 15:50:36.816978 2025] [:error] [pid 33564:tid 33570] [client 4.197.88.147:12865] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/zwso.php"] [unique_id "aUj4TASHeG6oLmMnKY5aUgAAAgM"]
[Mon Dec 22 15:50:36.880423 2025] [:error] [pid 33535:tid 33561] [client 4.197.88.147:12927] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aUj4TGOCI8D9Xtn-n7R2NgAAAdg"]
[Mon Dec 22 15:50:36.913709 2025] [:error] [pid 33535:tid 33537] [client 4.197.88.147:50076] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aUj4TGOCI8D9Xtn-n7R2NwAAAcA"]
[Mon Dec 22 15:50:36.944744 2025] [:error] [pid 33535:tid 33540] [client 4.197.88.147:32724] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aUj4TGOCI8D9Xtn-n7R2OAAAAcM"]
[Mon Dec 22 15:50:36.979969 2025] [:error] [pid 58078:tid 58097] [client 4.197.88.147:32000] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aUj4TJWKg9Bf8njHlB7kewAAAA4"]
[Mon Dec 22 15:50:37.010967 2025] [:error] [pid 56155:tid 56245] [client 4.197.88.147:32719] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/class19.php"] [unique_id "aUj4TWG8a3wQucsuN661aAAAA5c"]
[Mon Dec 22 15:50:37.045870 2025] [:error] [pid 33440:tid 33445] [client 4.197.88.147:39517] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/class19.php"] [unique_id "aUj4TZOsUWKqgxu6QTTo5wAAAQM"]
[Mon Dec 22 15:50:37.088466 2025] [:error] [pid 56044:tid 56053] [client 4.197.88.147:32760] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/class19.php"] [unique_id "aUj4Te60uUaieriJqP0ulgAAAIU"]
[Mon Dec 22 15:50:37.119638 2025] [:error] [pid 33535:tid 33555] [client 4.197.88.147:12415] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/class19.php"] [unique_id "aUj4TWOCI8D9Xtn-n7R2OQAAAdI"]
[Mon Dec 22 15:50:37.153568 2025] [:error] [pid 33440:tid 33442] [client 4.197.88.147:33213] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/class20.php"] [unique_id "aUj4TZOsUWKqgxu6QTTo6AAAAQA"]
[Mon Dec 22 15:50:37.185758 2025] [:error] [pid 56155:tid 56246] [client 4.197.88.147:32011] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/class20.php"] [unique_id "aUj4TWG8a3wQucsuN661aQAAA5g"]
[Mon Dec 22 15:50:37.241642 2025] [:error] [pid 58078:tid 58105] [client 4.197.88.147:12926] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/class20.php"] [unique_id "aUj4TZWKg9Bf8njHlB7kfAAAABY"]
[Mon Dec 22 15:50:37.280732 2025] [:error] [pid 33564:tid 33580] [client 4.197.88.147:12903] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/class20.php"] [unique_id "aUj4TQSHeG6oLmMnKY5aVAAAAg0"]
[Mon Dec 22 15:50:37.323799 2025] [:error] [pid 56044:tid 56048] [client 4.197.88.147:12633] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/admin.php"] [unique_id "aUj4Te60uUaieriJqP0umAAAAIA"]
[Mon Dec 22 15:50:37.367112 2025] [:error] [pid 33535:tid 33547] [client 4.197.88.147:32041] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/admin.php"] [unique_id "aUj4TWOCI8D9Xtn-n7R2OgAAAco"]
[Mon Dec 22 15:50:37.405043 2025] [:error] [pid 56155:tid 56244] [client 4.197.88.147:39540] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/admin.php"] [unique_id "aUj4TWG8a3wQucsuN661agAAA5Y"]
[Mon Dec 22 15:50:37.443782 2025] [:error] [pid 33472:tid 33501] [client 4.197.88.147:32063] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/admin.php"] [unique_id "aUj4TZ5p2WQpPIK8HAnb1QAAAYA"]
[Mon Dec 22 15:50:37.491512 2025] [:error] [pid 56155:tid 56223] [client 4.197.88.147:12631] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/randkeyword.php"] [unique_id "aUj4TWG8a3wQucsuN661awAAA4E"]
[Mon Dec 22 15:50:37.528759 2025] [:error] [pid 33564:tid 33589] [client 4.197.88.147:12313] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/randkeyword.php"] [unique_id "aUj4TQSHeG6oLmMnKY5aVQAAAhY"]
[Mon Dec 22 15:50:37.562339 2025] [:error] [pid 56080:tid 56140] [client 4.197.88.147:12875] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/randkeyword.php"] [unique_id "aUj4TZIHT3YJq9hjDc6ktgAAAxA"]
[Mon Dec 22 15:50:37.599130 2025] [:error] [pid 33440:tid 33449] [client 4.197.88.147:39550] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/randkeyword.php"] [unique_id "aUj4TZOsUWKqgxu6QTTo6gAAAQc"]
[Mon Dec 22 15:50:37.636685 2025] [:error] [pid 58078:tid 58095] [client 4.197.88.147:12359] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/fwe.php"] [unique_id "aUj4TZWKg9Bf8njHlB7kfQAAAAw"]
[Mon Dec 22 15:50:37.670019 2025] [:error] [pid 56155:tid 56232] [client 4.197.88.147:12907] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/fwe.php"] [unique_id "aUj4TWG8a3wQucsuN661bAAAA4o"]
[Mon Dec 22 15:50:37.708710 2025] [:error] [pid 33440:tid 33444] [client 4.197.88.147:12353] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/fwe.php"] [unique_id "aUj4TZOsUWKqgxu6QTTo6wAAAQI"]
[Mon Dec 22 15:50:37.752214 2025] [:error] [pid 33472:tid 33505] [client 4.197.88.147:12333] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/fwe.php"] [unique_id "aUj4TZ5p2WQpPIK8HAnb1gAAAYQ"]
[Mon Dec 22 15:50:37.797193 2025] [:error] [pid 58172:tid 58189] [client 4.197.88.147:39526] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/g.php"] [unique_id "aUj4TeSVKDT5jWOcnSWR3wAAAM8"]
[Mon Dec 22 15:50:37.829715 2025] [:error] [pid 58078:tid 58088] [client 4.197.88.147:12869] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/g.php"] [unique_id "aUj4TZWKg9Bf8njHlB7kfgAAAAU"]
[Mon Dec 22 15:50:37.874652 2025] [:error] [pid 33471:tid 33494] [client 4.197.88.147:12398] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/g.php"] [unique_id "aUj4Tb5BeNE7regJ7iwKvAAAAVQ"]
[Mon Dec 22 15:50:37.915162 2025] [:error] [pid 33440:tid 33454] [client 4.197.88.147:33188] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/g.php"] [unique_id "aUj4TZOsUWKqgxu6QTTo7AAAAQw"]
[Mon Dec 22 15:50:37.946401 2025] [:error] [pid 58172:tid 58176] [client 4.197.88.147:50094] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/tx1.php"] [unique_id "aUj4TeSVKDT5jWOcnSWR4AAAAMI"]
[Mon Dec 22 15:50:37.982286 2025] [:error] [pid 56080:tid 56130] [client 4.197.88.147:12920] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/tx1.php"] [unique_id "aUj4TZIHT3YJq9hjDc6ktwAAAwY"]
[Mon Dec 22 15:50:38.019385 2025] [:error] [pid 58078:tid 58093] [client 4.197.88.147:12355] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/tx1.php"] [unique_id "aUj4TpWKg9Bf8njHlB7kfwAAAAo"]
[Mon Dec 22 15:50:38.054827 2025] [:error] [pid 56155:tid 56239] [client 4.197.88.147:12351] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/tx1.php"] [unique_id "aUj4TmG8a3wQucsuN661bQAAA5E"]
[Mon Dec 22 15:50:38.096973 2025] [:error] [pid 33472:tid 33513] [client 4.197.88.147:12645] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/xv.php"] [unique_id "aUj4Tp5p2WQpPIK8HAnb1wAAAYw"]
[Mon Dec 22 15:50:38.138307 2025] [:error] [pid 56155:tid 56233] [client 4.197.88.147:12318] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "paramountbaldivis.com"] [uri "/xv.php"] [unique_id "aUj4TmG8a3wQucsuN661bgAAA4s"]
[Mon Dec 22 15:50:38.178594 2025] [:error] [pid 56044:tid 56057] [client 4.197.88.147:39504] [client 4.197.88.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "